last executing test programs: 4.989077255s ago: executing program 2 (id=8436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000001032020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.747309959s ago: executing program 2 (id=8440): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x4, 0x1, 0x27) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x4}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1000, 0x8}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x7}}]}}}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 4.254738827s ago: executing program 0 (id=8445): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}, 0x1, 0x0, 0x0, 0x6000000}, 0x10) 4.032807902s ago: executing program 0 (id=8447): r0 = socket$inet(0x2, 0x4, 0x7fffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200), 0x0) shutdown(r1, 0x1) unshare(0x68040200) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0xffe, 0x7}, 0x3, 0x6, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x1000008, 0x1003, 0x0, 0x8ba, 0xa3, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb97, 0x7, 0x0, 0xffffffff, 0x200, 0x23, 0x3, 0x7c, 0xffffeffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0x5, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x9e, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x203, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x6, 0x5, 0x6cdf13a3, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x2, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x7ffffffc, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x5, 0x7, 0x1, 0x2, 0x8, 0x6, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0x3, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x3d, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0xfffd, 0xcbf, 0x4, 0x101, 0x9, 0xfffffffd, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0x4, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0x11, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0x2, 0x8dc3, 0x20000005, 0x5, 0x7, 0x2, 0xfffff801, 0x0, 0x5, 0x2, 0x7, 0x7, 0x7f, 0x7, 0x2, 0xffffffff, 0xffffffff, 0xdfed, 0xb, 0x77, 0x105, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x7, 0x400, 0xffffffff, 0x1, 0x800, 0x6000, 0xfe000000, 0x7]}]}}]}, 0x45c}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x1, 'syz_tun\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b95bec00c600000000001b0000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4001) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, 0x0, &(0x7f00000001c0)=r9}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "09cabb20fd22eff403dd5b"}}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) 3.385990932s ago: executing program 1 (id=8450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x1, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0xd, 0x0, 0xf, 0x10, 0x2, 0x82, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x0, 0x5000, 0xff05, 0x2, 0xb, 0x3, 0x90, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x6, 0x0, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x9300, 0xc, 0x40, 0x3, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r4, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00 ', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 3.103233021s ago: executing program 2 (id=8452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1"], 0x68}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2.999837694s ago: executing program 1 (id=8453): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x3000008, 0x10, r0, 0x4a9b6000) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c"], 0x28}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c74657200000000000000ee2b000000643b02000000000000000000000002000000"], 0x48) socket$netlink(0x10, 0x3, 0x12) r1 = socket$inet(0xa, 0x6, 0x200085) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3030, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}]}, 0x108) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010000050001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xffe}, @NFULA_CFG_MODE={0xa, 0x2, {0x100, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c844}, 0x22000004) socket(0x2b, 0x1, 0x1) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000300110800450000380000000000019078e0000002ac1414aa03049078120002282500000000000000000600007f000001ac1414bb00ec2469e0ff0000"], 0x0) 2.858335356s ago: executing program 0 (id=8454): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0), 0x0, 0x200000000000000}}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.326773865s ago: executing program 2 (id=8457): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xdd, &(0x7f0000000440)=""/221, 0x0, 0x40}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x2, 0x2, 0x9, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x6a, 0x2, 0x20000002, 0x4) socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ff9d, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}]}, 0x50}}, 0xc080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 2.254662136s ago: executing program 0 (id=8458): r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040810}, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r7, &(0x7f0000000500)={@val={0x0, 0x2}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x8, 0x66, 0x68, 0x0, 0x40, 0x2, 0x0, @broadcast, @loopback}, {0x1e, 0x7d, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, "960cd900d04e191dc3cd37bf2e577993710f3ed06cac7cf7ded233c8ebe546f333f7b6d6f74e569eee56708770d6aaf7f83de63a04a518c960761f6b96e51e72bb96d0046faf46345643"}}}}}}, 0x7c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.063559942s ago: executing program 3 (id=8460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x200006b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000404}, 0x20000000) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0, 0x568}, 0x8) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (rerun: 32) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) r5 = socket$rds(0x15, 0x5, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="03f0000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000080)={r8}, 0x8) (async) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x210080, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = socket$kcm(0xa, 0x2, 0x0) r11 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e1e, 0x2, 0xcd}}, 0x44) sendmsg$sock(r10, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x6, 0x64001, r11}, 0x50) 1.921125727s ago: executing program 4 (id=8461): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0xa, 0x8e, 0x80, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x41}, 0x10, 0x1, 0x9, 0xec21}}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0xb, 0x1, 0x8000, 0x1, 0x6, 0x2, 0xfe, 0x10, 0x5, 0x4af, 0x200, 0x7e4, 0x1, 0x1, 0x45, [0x8, 0x10000002]}}) 1.920649932s ago: executing program 2 (id=8462): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x4, 0x1, 0x27) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x4}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1000, 0x8}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x7}}]}}}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 1.919274947s ago: executing program 0 (id=8463): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x13, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001700010027bd7000fedbdf25fc000000000000000000000000000004000004d4ff000000b40000010000000000000000000000e0000002000000000000000000000000fe8800000000000000000000000001014e210100202000030200e0203b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000201fe8800000000000000000000000000014e2100094e2200830a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000000000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000000000000700000000000000a00000000000000009000000002000000000000000000002ba00000000000000020000030000000003000000010000000002000029bd70000c0008"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.83117751s ago: executing program 1 (id=8464): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800000000000008000e"], 0x20}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x35}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) r4 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000340)=r0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000100)='\x00', 0x339c01, &(0x7f0000000140)={@align=0xc, {0x9, 0x4, 0x0, 0xa}}, 0x10001, &(0x7f00000001c0), &(0x7f0000000200)=0x1}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff00000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x28, r8, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}]}]}, 0x28}}, 0xc044) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x7, 0x7fffffffffffffff}, &(0x7f00000002c0)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000300)={r12, 0xfffffff7}, 0x8) (async) r13 = syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/time\x00') ioctl$BTRFS_IOC_RM_DEV(r13, 0x5000940b, &(0x7f0000001900)={{}, "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"}) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='erspan0\x00', 0x10) 1.754345421s ago: executing program 0 (id=8465): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001080), 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.658499509s ago: executing program 1 (id=8466): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.50281337s ago: executing program 4 (id=8467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.502684729s ago: executing program 3 (id=8468): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x24044014) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000100003052abd70000c00000000000000", @ANYRES32=0x0, @ANYBLOB="3a000000a8010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x3c}}, 0x800) 1.437888377s ago: executing program 1 (id=8469): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0), 0x0, 0x200000000000000}}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.321424983s ago: executing program 4 (id=8470): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x14}}, 0x44010) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.053177488s ago: executing program 3 (id=8471): r0 = socket$kcm(0x29, 0xa, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000000)=@hci={0x1f, 0x3}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000080)="b1dfba66831e4e01333870e32453b03ebcd1bae63df7d613f1b0f8", 0x1b}, {&(0x7f00000000c0)="90d1aa52f9c65396f1f5fca55081881f39405181a2606c8e7e26c588930e3185d70494ad037f74fe3cdc393eeec13ea267a05e192c8501af240c9044e8072b5ac044dc1f4b2d9d2e9a844f713a5373d51ec8635016a523df990e2aa7d107ce40ece57ac75d04282f7b31fa7d19dfee1360998a8519", 0x75}, {&(0x7f00000006c0)="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", 0x100}, {&(0x7f00000003c0)="9a3ed035c4775056ea70c15a5785720b3797fb448f4d1c70ff5e576dd2f15b5fd64066b3204250ad53f3f5c55f7217ef17f08676679dd8fc55c626f142fd4ff50e569d713d9714", 0x47}, {&(0x7f0000000440)="3651ad4f9f8a73c17cfac894f9a1785488c3707609d66431aba0fbdfb75107529a8dc22fff1757a2bd9dbd4128931269629821c362af5826109d024f4b042f61e7ec2a1b0bc7b3af6611c03efb7584afa7340591d9d7faadf1c640fcea2c43c47c44f96f3d3964c39db0eef1711356dd96cb012847dbc42bde0fcb060ce7f6e916d711697e3f10f52c11d72914cd3670839b4ba870aefcb1d48766a4a232439bbdb194a175d3fee4e71bd468bfadf2f9664f9bc345e757c886732abc0a82a16004e9ff8d7b62036bf8b773", 0xcb}, {&(0x7f0000000980)="d69bb1a9a4c57f59d4fbc36a561bd5e11f8133b90e2ae805e0046303338b8bf94d7c8ab208b2d0c07d3ef832668ccc64171646521a6e38624ef6a19638a0f6d8d78c3ea4f21e130c5f74b607fbab9d066bd3241ff42ff2998adc3c1eee620d4dcebc62c30f4c4e24a162d42b32628569191279e45e2a565432bac906f104696b0651ca05e265486ac65562013e184c7852bf28b3e40f01ff1a78013edc9a2c688709014b0d85", 0xa6}, {&(0x7f0000000a40)="4ea9896e421922690aed49d1e81618a53301b6cfde9f8798c3d8112bb08874a5340bb54238bcb4b6b3202b53edeb2252a14019de00d7820dc8f89de11a2715750bfb8ff6a80fd1e20910ad7076b1933667abc96c19055d1436812ef38f77075c5de0eba03b9c5e16c54d06d4a3f3a4b71b9687affdabe4462c4423ce55a54add7dfb166b6168d350af491d5874c57128e6d20dba34453ed89a29b9454e4350f7b5563f804ac1ab599ccb14ce2370eb5cdc0eb18dd316e0bc1cd16ca067034d6597e049b9fe21aea13a2f43591b823b58f94f9a7ce956fa536810038ba2", 0xdd}, {&(0x7f0000000b40)="db350e6e3959b4237520ecdf1185b93b043f6e91e08070f47ab445c8ac566e293fcef9349b6cebf38c71", 0x2a}, {&(0x7f0000000b80)="6b347ace5e10bd7c6b28e73096c5d6ee2f361a97e49273ce44f9623b44161c001ec52a8da2cb1b83992639a44c271144b82ff0880b132440e553e60befe780b075e06eb6187e852975e18bd91b604f163db9b3d7e5101aeed3d9d68be60beaadacd9159dea8485437bbd040e1a81881e7fae3b40a560dc051e579826b16d4d4031db62e4f5f49d02414bae36badaafff2799b4de86b444038648bb470d6e77828f93a0f098460b456fda4d7d45e6204765cc63b53661f0d6df97886de351c89a14d445f86e2bed38f629dcff79502cb626", 0xd1}], 0x9, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x38}, 0x4000) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000600"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x2) 908.188876ms ago: executing program 4 (id=8472): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1d, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x20000, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000007c0)={0xe4, 0x2d, 0x1, 0x0, 0x0, "", [@generic="f280a1e552bfd625c7851ff5801ee7a5426038fdece29267d418673114a9ff5e9943d77b4cbae34864e7a400c34add5317d8e1c01e1f5fe8d69e3e178172364f9c9877d4dd619e690769848c2d1b9bf81773679677bbe5b5eca61ec53551b467d5c6f636c2e87b34cb7a4f07eda520412bbc122b4bba298644be699d8c0e80eda10c04bd3b576a4c16ca345e5a9321b93785da1f06fe9a675f1c46a144303352071a29bc93d2ce410df4a5992f785e84344bcd674d2d04a18c0e2bbe9568", @nested={0xb, 0x0, 0x0, 0x1, [@generic="01004948ef82d4"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0xe4}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012000c0000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r11, r10, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) recvmsg$unix(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) r12 = getuid() sendmsg$nl_generic(r3, &(0x7f0000001c00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000940)={0x1260, 0x16, 0x400, 0x70bd26, 0x25dfdbfe, {0x19}, [@generic="09617f2c05d7ee747cb9c6fb31dcc0e702c0428ae18145c60073aa52ace3190323e3fb5b23af7ef3b77c6ba7a27a1629d06069384e14634ea99e68f236eaf7f281af1c72844a76c13243dd01af568913", @nested={0x103c, 0x9d, 0x0, 0x1, [@generic="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", @typed={0x29, 0x22, 0x0, 0x0, @binary="d2971b302d50948f4617ce4dd97f59acaef6b92b8629c068ef2b088d6a0b395c1077f049ab"}, @typed={0x8, 0xd1, 0x0, 0x0, @uid=r6}, @nested={0x4, 0xfd}]}, @nested={0xc, 0x77, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x8, 0xff, 0x0, 0x0, @ipv4=@local}, @nested={0x10a, 0x92, 0x0, 0x1, [@typed={0x14, 0x169, 0x0, 0x0, @ipv6=@mcast1}, @generic="7c90aa719137dc210636a4de21f78a80312a83f48e031e0d24ced4d06807722b9045e47a0525c4dd0a5176cf1ea0f8578b018d8a106213e505523b96daa53ceea9935d06ff270897c62416a43beaedad9743db4e7f3ff2bdb25d0a82fa273153fe82cda2ed3d597292158b1323f48f037ff5b3fa306b4a84eb45675413aac64e0968d350c8f52fc5c942d9187addf4e75fe9318d2978f94397425380098e1df68f3c6e6fb8f9d851fdf426872e8074c1793265fb01df3b3e0189201706bdad107b22e273d5d0832050095f20087aa550ae83f57759a67808ca337234fd6e2cb88c57824d74fd04f6ec51d529f5073565999a"]}, @generic="f33b178a2461d70227e0c9adb392bc945e2a9e429b5b8a031c60066257277565c76a49880d394f58050f898cf88db45e8ce9feab76113c2418306791305e638cc1958e00942c001c7b0cb7047463b58f158123bc680d46ba33e286a1049e18e8ba0ab5a6b3964f47b35b0e9559c7b992ca999f6111609dd5b67d124da3b96c6a6fe5cd06256ea94f26ddc464e351bd", @typed={0x8, 0xb1, 0x0, 0x0, @uid=r12}, @typed={0x8, 0xce, 0x0, 0x0, @u32}]}, 0x1260}}, 0x45) r13 = socket$inet(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000100)={0x81, {0xc, 0x4, 0x401, 0xfff, 0x9}}) setsockopt$inet_opts(r13, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r13, 0x0, 0x4, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x20) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000240)={0x0, 'bridge_slave_1\x00', {0x4}, 0x3ff8}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) 893.666016ms ago: executing program 3 (id=8473): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000fe8000290000000400000084026004000000000402000304"], 0x30}, 0x0) 775.028921ms ago: executing program 1 (id=8474): setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=0x4, 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8010, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050002000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b400000000024000480200001800d00010073796e70726f7879000000000c00028008000340000000050900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20020014}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x5, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0xfec9}}, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000980)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}}, 0x4800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x80, 0x80}]}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x44014}, 0x20040810) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2, @ANYRES8=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000036090100000001ff95000000000000007d0afeff00000000bf91000000000000b702000002000000850000002a0000e6b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000000cc0)=""/4096, 0x0, 0x5}, 0xffffffffffffff0f) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0xd, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x33f}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 765.328408ms ago: executing program 3 (id=8475): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x195be}]}]}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x2}, 0x10) write(r7, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000100003040007057007c78d9292cb0000", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r8, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f00000009c0)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x2, 0x6, {{0x12, 0x4, 0x1, 0x3, 0x48, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @local, {[@lsrr={0x83, 0x17, 0x94, [@dev={0xac, 0x14, 0x14, 0xa}, @remote, @rand_addr=0x64010101, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0x13, 0x20, [@multicast2, @multicast1, @empty, @broadcast]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYRES16=r9], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x7, 0x72}, 0x2c) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r10, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) 598.987432ms ago: executing program 4 (id=8476): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000810) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0xf1ff}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 171.251962ms ago: executing program 3 (id=8477): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xf, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe14, 0x10, 0x0, 0x42}, 0x21) 89.075432ms ago: executing program 4 (id=8478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002600000002000000ffff000005"], 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x40, 0x700, 0x0, 0x8b, {{0xc, 0x4, 0x2, 0x15, 0x30, 0x65, 0x0, 0xe, 0x2f, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0x1c, 0x15, 0x0, 0x7, [0x80, 0x3, 0x7f, 0x8, 0x9, 0xc432]}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x327}}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x2}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0xf, 0x9b5}, {0x6}, {0xd, 0x3}]}, @typedef={0x10}]}, {0x0, [0x71, 0x5f, 0x30, 0x61, 0x30]}}, &(0x7f0000000880)=""/4096, 0x7f, 0x1000, 0x0, 0x5}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002a00)={0xffffffffffffffff, 0x20, &(0x7f00000029c0)={&(0x7f0000001940)=""/4096, 0x1000, 0x0, &(0x7f0000002940)=""/121, 0x79}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002a40)={0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ifreq(r7, 0x8932, &(0x7f0000004d40)={'veth1_to_bond\x00', @ifru_ivalue=0xfffffffe}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002b00)={{r0}, &(0x7f0000002a80), &(0x7f0000002ac0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x4, 0x12, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x1, 0xc, 0x3, 0x6, 0x8, 0x4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x30}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xb4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x80000000}, @ldst={0x1, 0x3, 0x3, 0x9, 0xa, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x9a, &(0x7f0000000200)=""/154, 0x41000, 0x45, '\x00', r1, @fallback=0x3, r2, 0x8, &(0x7f00000018c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001900)={0x0, 0x8, 0x0, 0x3f}, 0x10, r3, r4, 0x0, &(0x7f0000002b40), 0x0, 0x10, 0x6}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x9, r0}, 0x38) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x1, 0x100000001, 0x7, 0x8001}, {0x2, 0x5, 0x7fff, 0x7}, {0x9, 0x4b6, 0x6370, 0x8}, {0x6, 0x7ff, 0x80, 0x5}, {0x4, 0x8, 0x81, 0x7}, {0x5, 0x5, 0x8ce, 0x7a7cc152}], 0x6, 0x20, 0x6, 0x252e}) bpf$MAP_CREATE(0x4000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="003601005f"], 0x50) 0s ago: executing program 2 (id=8479): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0xa1ffffff}, 0x0) kernel console output (not intermixed with test programs): unnel: ip6tnl1 xmit: Local address not yet configured! [ 854.135862][T29002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6940'. [ 854.449418][T29015] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6945'. [ 854.824748][T29033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6951'. [ 854.935166][T29041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6951'. [ 855.163234][T29053] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 855.193350][T29053] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 855.638483][T29079] SET target dimension over the limit! [ 855.670015][T29078] syz_tun: entered allmulticast mode [ 855.688712][T29076] syz_tun: left allmulticast mode [ 855.742639][T29082] macvtap0: mtu less than device minimum [ 855.769625][T29082] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 856.053770][T29099] netlink: 'syz.4.6970': attribute type 28 has an invalid length. [ 856.387639][T29126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6974'. [ 856.462448][T29109] ip6gre3: entered promiscuous mode [ 856.504495][T29109] ip6gre3: entered allmulticast mode [ 856.561034][ T35] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 856.591840][T29132] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 856.611233][ T35] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 856.620258][T22055] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 857.014607][T22055] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 857.055020][T22055] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 857.073406][T29144] syzkaller0: entered promiscuous mode [ 857.084000][T29144] syzkaller0: entered allmulticast mode [ 857.104280][T29044] Bluetooth: hci2: command 0x0406 tx timeout [ 857.194202][T29154] netlink: 203 bytes leftover after parsing attributes in process `syz.1.6985'. [ 857.485048][T29164] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 857.580056][T29168] gretap0: entered promiscuous mode [ 857.604335][T29168] vlan3: entered promiscuous mode [ 857.660023][T29171] bond0: entered promiscuous mode [ 857.672430][T29171] bond_slave_0: entered promiscuous mode [ 857.695765][T29171] bond_slave_1: entered promiscuous mode [ 857.730602][T29171] batadv0: entered promiscuous mode [ 857.755897][T29171] debugfs: 'hsr1' already exists in 'hsr' [ 857.771854][T29171] Cannot create hsr debugfs directory [ 857.778929][T29171] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 857.790437][T29171] bond0: left promiscuous mode [ 857.802964][T29171] bond_slave_0: left promiscuous mode [ 857.814673][T29171] bond_slave_1: left promiscuous mode [ 857.825254][T29171] batadv0: left promiscuous mode [ 858.041068][T29182] netlink: 'syz.0.6996': attribute type 6 has an invalid length. [ 858.104806][T29183] netlink: 'syz.3.6997': attribute type 3 has an invalid length. [ 858.126848][T29183] netlink: 'syz.3.6997': attribute type 3 has an invalid length. [ 858.225739][T29188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6998'. [ 858.432422][T29190] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 859.125729][T29214] wg2 speed is unknown, defaulting to 1000 [ 859.138064][T29219] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7011'. [ 859.138823][T29223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7012'. [ 859.209637][T29224] netlink: 'syz.2.7010': attribute type 25 has an invalid length. [ 859.574272][T29234] tls_set_device_offload_rx: netdev not found [ 859.611850][T29234] x_tables: unsorted entry at hook 2 [ 861.024398][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 861.630275][T29256] netlink: 'syz.3.7022': attribute type 4 has an invalid length. [ 861.657249][T29256] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7022'. [ 862.161471][T29278] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 862.571160][T29290] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7032'. [ 862.921126][T29301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7035'. [ 863.204739][ T29] audit: type=1804 audit(1784929174.314:12): pid=29315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7040" name="/newroot/181/cgroup.controllers" dev="tmpfs" ino=934 res=1 errno=0 [ 863.242234][T29313] netlink: 'syz.1.7039': attribute type 1 has an invalid length. [ 863.242911][ T29] audit: type=1800 audit(1784929174.354:13): pid=29315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7040" name="cgroup.controllers" dev="tmpfs" ino=934 res=0 errno=0 [ 863.290067][T29313] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7039'. [ 863.351694][ T29] audit: type=1800 audit(1784929174.394:14): pid=29317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7040" name="cgroup.controllers" dev="tmpfs" ino=934 res=0 errno=0 [ 863.414917][ T29] audit: type=1800 audit(1784929174.394:15): pid=29317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7040" name="cgroup.controllers" dev="tmpfs" ino=934 res=0 errno=0 [ 863.499821][ T29] audit: type=1800 audit(1784929174.394:16): pid=29317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7040" name="cgroup.controllers" dev="tmpfs" ino=934 res=0 errno=0 [ 863.582971][ T29] audit: type=1800 audit(1784929174.394:17): pid=29317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7040" name="cgroup.controllers" dev="tmpfs" ino=934 res=0 errno=0 [ 863.713882][T29328] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7045'. [ 863.741728][ T29] audit: type=1800 audit(1784929174.394:18): pid=29317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7040" name="cgroup.controllers" dev="tmpfs" ino=934 res=0 errno=0 [ 863.886451][ T29] audit: type=1800 audit(1784929174.394:19): pid=29317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7040" name="cgroup.controllers" dev="tmpfs" ino=934 res=0 errno=0 [ 863.994147][ T29] audit: type=1800 audit(1784929174.394:20): pid=29317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7040" name="cgroup.controllers" dev="tmpfs" ino=934 res=0 errno=0 [ 864.130482][T29334] netlink: 'syz.3.7044': attribute type 1 has an invalid length. [ 864.156076][ T29] audit: type=1800 audit(1784929174.394:21): pid=29317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7040" name="cgroup.controllers" dev="tmpfs" ino=934 res=0 errno=0 [ 864.198019][T29334] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 864.658671][T29346] vlan3: entered promiscuous mode [ 864.813561][T29349] syzkaller0: entered promiscuous mode [ 864.837042][T29349] syzkaller0: entered allmulticast mode [ 864.982095][T29359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7056'. [ 865.007914][T29363] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7057'. [ 865.318814][T29361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7056'. [ 865.426395][T29373] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 865.467635][T29373] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 866.411944][T29406] IPVS: fo: FWM 3 0x00000003 - no destination available [ 866.442828][T29407] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7070'. [ 866.454541][T29411] tipc: Enabling of bearer rejected, failed to enable media [ 866.457209][T29406] IPVS: fo: FWM 3 0x00000003 - no destination available [ 866.725243][T29422] bridge2: entered promiscuous mode [ 866.753908][T29422] bridge2: entered allmulticast mode [ 866.793770][T29422] team0: Port device bridge2 added [ 867.158401][T29447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7082'. [ 867.203421][T29447] netlink: set zone limit has 4 unknown bytes [ 867.410015][T29455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7085'. [ 867.530141][T29459] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 867.575922][T29459] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 867.713099][T29464] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7088'. [ 867.742141][T29464] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.749727][T29464] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.812540][T29468] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7088'. [ 868.167239][T29473] bridge1: entered promiscuous mode [ 868.188141][T29473] bridge1: entered allmulticast mode [ 868.226007][T29473] team0: Port device bridge1 added [ 868.483210][T29494] tipc: Enabled bearer , priority 0 [ 868.510333][T29500] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7102'. [ 868.523662][T29494] syzkaller0: entered promiscuous mode [ 868.538788][T29494] syzkaller0: entered allmulticast mode [ 868.557717][T29500] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7102'. [ 868.638463][T29494] tipc: Resetting bearer [ 868.696841][T29493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.730784][T29493] tipc: Resetting bearer [ 868.826697][T29493] tipc: Disabling bearer [ 869.240394][T29523] bridge1: entered promiscuous mode [ 869.259748][T29523] bridge1: entered allmulticast mode [ 869.271581][T29523] team0: Port device bridge1 added [ 869.473960][T29537] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7115'. [ 869.529313][T29544] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7115'. [ 869.561603][T29545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7116'. [ 869.561641][T29535] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 869.744544][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 870.205830][T29570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7126'. [ 870.361798][T29571] bridge2: entered promiscuous mode [ 870.375849][T29571] bridge2: entered allmulticast mode [ 870.418983][T29571] team0: Port device bridge2 added [ 870.576889][T29583] netlink: 'syz.4.7131': attribute type 1 has an invalid length. [ 870.669593][T29583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 870.726870][T29589] bond2: (slave veth5): Enslaving as an active interface with a down link [ 870.822398][T29583] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 870.845974][T29583] bond2: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 871.034303][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 871.145158][T29598] wg2 speed is unknown, defaulting to 1000 [ 871.302685][T29611] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.310224][T29611] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.638547][T29624] bridge2: entered promiscuous mode [ 871.663235][T29624] bridge2: entered allmulticast mode [ 871.729568][T29624] team0: Port device bridge2 added [ 871.842741][T29615] bridge3: entered promiscuous mode [ 871.851268][T29615] bridge3: entered allmulticast mode [ 871.863197][T29615] team0: Port device bridge3 added [ 872.010574][T29598] dvmrp0: entered allmulticast mode [ 872.464197][T29044] Bluetooth: hci0: command 0x0406 tx timeout [ 872.594625][T29667] FAULT_INJECTION: forcing a failure. [ 872.594625][T29667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.610047][T29667] CPU: 1 UID: 0 PID: 29667 Comm: syz.1.7157 Not tainted syzkaller #0 PREEMPT(full) [ 872.610076][T29667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 872.610090][T29667] Call Trace: [ 872.610099][T29667] [ 872.610108][T29667] dump_stack_lvl+0xe8/0x150 [ 872.610147][T29667] should_fail_ex+0x40c/0x560 [ 872.610210][T29667] _copy_from_user+0x2d/0xb0 [ 872.610233][T29667] generic_map_update_batch+0x6a3/0x9a0 [ 872.610265][T29667] ? __pfx_generic_map_update_batch+0x10/0x10 [ 872.610287][T29667] ? __fget_files+0x2a/0x420 [ 872.610318][T29667] ? __pfx_generic_map_update_batch+0x10/0x10 [ 872.610336][T29667] bpf_map_do_batch+0x391/0x630 [ 872.610363][T29667] __sys_bpf+0xbe5/0xd90 [ 872.610391][T29667] ? __pfx___sys_bpf+0x10/0x10 [ 872.610421][T29667] ? __fget_files+0x2a/0x420 [ 872.610463][T29667] ? ksys_write+0x242/0x270 [ 872.610480][T29667] ? __pfx_ksys_write+0x10/0x10 [ 872.610500][T29667] __x64_sys_bpf+0xba/0xd0 [ 872.610520][T29667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.610539][T29667] do_syscall_64+0x174/0x580 [ 872.610558][T29667] ? trace_irq_disable+0x3b/0x140 [ 872.610578][T29667] ? clear_bhb_loop+0x40/0x90 [ 872.610598][T29667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.610614][T29667] RIP: 0033:0x7f6c97f9de99 [ 872.610630][T29667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.610649][T29667] RSP: 002b:00007f6c98ecb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 872.610667][T29667] RAX: ffffffffffffffda RBX: 00007f6c98225fa0 RCX: 00007f6c97f9de99 [ 872.610679][T29667] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 872.610689][T29667] RBP: 00007f6c98ecb090 R08: 0000000000000000 R09: 0000000000000000 [ 872.610699][T29667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 872.610709][T29667] R13: 00007f6c98226038 R14: 00007f6c98225fa0 R15: 00007ffde5cb00f8 [ 872.610734][T29667] [ 872.961278][T29669] __nla_validate_parse: 7 callbacks suppressed [ 872.961302][T29669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7160'. [ 873.290504][T29685] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7164'. [ 873.310226][ T1011] tipc: Subscription rejected, illegal request [ 873.473218][T29693] vlan2: entered promiscuous mode [ 873.595243][T29697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7169'. [ 873.984774][T29716] syzkaller0: entered promiscuous mode [ 874.013324][T29716] syzkaller0: entered allmulticast mode [ 874.108074][T29723] FAULT_INJECTION: forcing a failure. [ 874.108074][T29723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.121184][T29723] CPU: 1 UID: 0 PID: 29723 Comm: syz.2.7173 Not tainted syzkaller #0 PREEMPT(full) [ 874.121212][T29723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 874.121225][T29723] Call Trace: [ 874.121234][T29723] [ 874.121242][T29723] dump_stack_lvl+0xe8/0x150 [ 874.121276][T29723] should_fail_ex+0x40c/0x560 [ 874.121307][T29723] _copy_from_user+0x2d/0xb0 [ 874.121327][T29723] generic_map_update_batch+0x651/0x9a0 [ 874.121357][T29723] ? __pfx_generic_map_update_batch+0x10/0x10 [ 874.121381][T29723] ? __fget_files+0x2a/0x420 [ 874.121415][T29723] ? __pfx_generic_map_update_batch+0x10/0x10 [ 874.121435][T29723] bpf_map_do_batch+0x391/0x630 [ 874.121466][T29723] __sys_bpf+0xbe5/0xd90 [ 874.121500][T29723] ? __pfx___sys_bpf+0x10/0x10 [ 874.121534][T29723] ? __fget_files+0x2a/0x420 [ 874.121602][T29723] ? ksys_write+0x242/0x270 [ 874.121639][T29723] ? __pfx_ksys_write+0x10/0x10 [ 874.121666][T29723] __x64_sys_bpf+0xba/0xd0 [ 874.121691][T29723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.121713][T29723] do_syscall_64+0x174/0x580 [ 874.121737][T29723] ? trace_irq_disable+0x3b/0x140 [ 874.121764][T29723] ? clear_bhb_loop+0x40/0x90 [ 874.121789][T29723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.121810][T29723] RIP: 0033:0x7f221a79de99 [ 874.121832][T29723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.121850][T29723] RSP: 002b:00007f22189f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 874.121883][T29723] RAX: ffffffffffffffda RBX: 00007f221aa25fa0 RCX: 00007f221a79de99 [ 874.121897][T29723] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 874.121911][T29723] RBP: 00007f22189f6090 R08: 0000000000000000 R09: 0000000000000000 [ 874.121923][T29723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 874.121936][T29723] R13: 00007f221aa26038 R14: 00007f221aa25fa0 R15: 00007ffcd927c658 [ 874.121968][T29723] [ 875.202025][T29745] IPv6: addrconf: prefix option has invalid lifetime [ 875.223387][T29745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7183'. [ 875.432096][T29751] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7184'. [ 875.457687][T29754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7185'. [ 875.470965][T29751] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7184'. [ 875.544359][T29758] vlan3: entered promiscuous mode [ 876.012971][T29779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7197'. [ 876.121462][T29781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7198'. [ 876.182897][T29784] netlink: 192 bytes leftover after parsing attributes in process `syz.0.7199'. [ 876.757564][T29787] wg2 speed is unknown, defaulting to 1000 [ 876.903804][T29801] bond0: entered promiscuous mode [ 876.909264][T29801] bond_slave_0: entered promiscuous mode [ 876.915202][T29801] bond_slave_1: entered promiscuous mode [ 877.014361][T29801] batadv0: entered promiscuous mode [ 877.020623][T29801] debugfs: 'hsr1' already exists in 'hsr' [ 877.026668][T29801] Cannot create hsr debugfs directory [ 877.046647][T29801] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 877.106641][T29801] bond0: left promiscuous mode [ 877.111495][T29801] bond_slave_0: left promiscuous mode [ 877.124212][T29801] bond_slave_1: left promiscuous mode [ 877.133017][T29801] batadv0: left promiscuous mode [ 877.495817][T29824] FAULT_INJECTION: forcing a failure. [ 877.495817][T29824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.548584][T29824] CPU: 1 UID: 0 PID: 29824 Comm: syz.1.7210 Not tainted syzkaller #0 PREEMPT(full) [ 877.548615][T29824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 877.548628][T29824] Call Trace: [ 877.548636][T29824] [ 877.548645][T29824] dump_stack_lvl+0xe8/0x150 [ 877.548683][T29824] should_fail_ex+0x40c/0x560 [ 877.548718][T29824] _copy_from_user+0x2d/0xb0 [ 877.548742][T29824] generic_map_update_batch+0x651/0x9a0 [ 877.548776][T29824] ? __pfx_generic_map_update_batch+0x10/0x10 [ 877.548799][T29824] ? __fget_files+0x2a/0x420 [ 877.548835][T29824] ? __pfx_generic_map_update_batch+0x10/0x10 [ 877.548868][T29824] bpf_map_do_batch+0x391/0x630 [ 877.548905][T29824] __sys_bpf+0xbe5/0xd90 [ 877.548942][T29824] ? __pfx___sys_bpf+0x10/0x10 [ 877.548981][T29824] ? __fget_files+0x2a/0x420 [ 877.549027][T29824] ? ksys_write+0x242/0x270 [ 877.549051][T29824] ? __pfx_ksys_write+0x10/0x10 [ 877.549078][T29824] __x64_sys_bpf+0xba/0xd0 [ 877.549105][T29824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.549128][T29824] do_syscall_64+0x174/0x580 [ 877.549154][T29824] ? trace_irq_disable+0x3b/0x140 [ 877.549180][T29824] ? clear_bhb_loop+0x40/0x90 [ 877.549206][T29824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.549226][T29824] RIP: 0033:0x7f6c97f9de99 [ 877.549247][T29824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.549266][T29824] RSP: 002b:00007f6c98ecb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 877.549290][T29824] RAX: ffffffffffffffda RBX: 00007f6c98225fa0 RCX: 00007f6c97f9de99 [ 877.549305][T29824] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 877.549319][T29824] RBP: 00007f6c98ecb090 R08: 0000000000000000 R09: 0000000000000000 [ 877.549332][T29824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 877.549344][T29824] R13: 00007f6c98226038 R14: 00007f6c98225fa0 R15: 00007ffde5cb00f8 [ 877.549383][T29824] [ 878.645801][T29851] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7218'. [ 879.008510][T29859] wg2 speed is unknown, defaulting to 1000 [ 879.560664][T29864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7222'. [ 879.843394][T29859] dvmrp0: entered allmulticast mode [ 879.864360][T29859] netlink: 'syz.1.7221': attribute type 13 has an invalid length. [ 879.916929][T29876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7226'. [ 880.166772][T29887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7231'. [ 880.823126][T29906] FAULT_INJECTION: forcing a failure. [ 880.823126][T29906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.842532][T29906] CPU: 0 UID: 0 PID: 29906 Comm: syz.2.7238 Not tainted syzkaller #0 PREEMPT(full) [ 880.842562][T29906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 880.842575][T29906] Call Trace: [ 880.842584][T29906] [ 880.842593][T29906] dump_stack_lvl+0xe8/0x150 [ 880.842631][T29906] should_fail_ex+0x40c/0x560 [ 880.842664][T29906] _copy_from_iter+0x1d3/0x1660 [ 880.842692][T29906] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 880.842720][T29906] ? rcu_is_watching+0x15/0xb0 [ 880.842743][T29906] ? trace_kmem_cache_alloc+0x29/0xe0 [ 880.842771][T29906] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 880.842797][T29906] ? __pfx__copy_from_iter+0x10/0x10 [ 880.842825][T29906] ? __alloc_skb+0x276/0x7a0 [ 880.842845][T29906] ? __alloc_skb+0x276/0x7a0 [ 880.842872][T29906] ? netlink_sendmsg+0x650/0xb40 [ 880.842897][T29906] ? skb_put+0x112/0x210 [ 880.842920][T29906] netlink_sendmsg+0x6c0/0xb40 [ 880.842956][T29906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 880.842985][T29906] ? aa_sock_msg_perm+0xf1/0x1b0 [ 880.843015][T29906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 880.843039][T29906] sock_sendmsg_nosec+0x13a/0x180 [ 880.843074][T29906] ____sys_sendmsg+0x54e/0x850 [ 880.843105][T29906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 880.843138][T29906] ? import_iovec+0x73/0xa0 [ 880.843174][T29906] ___sys_sendmsg+0x2a5/0x360 [ 880.843196][T29906] ? __lock_acquire+0x683/0x2cf0 [ 880.843230][T29906] ? __pfx____sys_sendmsg+0x10/0x10 [ 880.843291][T29906] ? __fget_files+0x2a/0x420 [ 880.843319][T29906] ? __fget_files+0x3a2/0x420 [ 880.843358][T29906] __x64_sys_sendmsg+0x1b1/0x290 [ 880.843384][T29906] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 880.843436][T29906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.843457][T29906] do_syscall_64+0x174/0x580 [ 880.843481][T29906] ? trace_irq_disable+0x3b/0x140 [ 880.843508][T29906] ? clear_bhb_loop+0x40/0x90 [ 880.843531][T29906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.843551][T29906] RIP: 0033:0x7f221a79de99 [ 880.843571][T29906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.843589][T29906] RSP: 002b:00007f22189f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 880.843613][T29906] RAX: ffffffffffffffda RBX: 00007f221aa25fa0 RCX: 00007f221a79de99 [ 880.843628][T29906] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 880.843640][T29906] RBP: 00007f22189f6090 R08: 0000000000000000 R09: 0000000000000000 [ 880.843651][T29906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.843663][T29906] R13: 00007f221aa26038 R14: 00007f221aa25fa0 R15: 00007ffcd927c658 [ 880.843693][T29906] [ 881.299455][T29915] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7242'. [ 881.323033][T20511] IPVS: starting estimator thread 0... [ 881.331279][T29917] syzkaller1: entered promiscuous mode [ 881.336972][T29917] syzkaller1: entered allmulticast mode [ 881.397445][T29920] tipc: Enabled bearer , priority 10 [ 881.525963][T12215] dvmrp0: left allmulticast mode [ 881.690457][T29916] IPVS: using max 31 ests per chain, 74400 per kthread [ 881.944586][T29941] FAULT_INJECTION: forcing a failure. [ 881.944586][T29941] name failslab, interval 1, probability 0, space 0, times 0 [ 881.957281][T29941] CPU: 1 UID: 0 PID: 29941 Comm: syz.1.7253 Not tainted syzkaller #0 PREEMPT(full) [ 881.957312][T29941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 881.957325][T29941] Call Trace: [ 881.957336][T29941] [ 881.957346][T29941] dump_stack_lvl+0xe8/0x150 [ 881.957385][T29941] should_fail_ex+0x40c/0x560 [ 881.957418][T29941] should_failslab+0xa8/0x100 [ 881.957451][T29941] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 881.957477][T29941] ? skb_clone+0x212/0x3a0 [ 881.957499][T29941] ? skb_clone+0x212/0x3a0 [ 881.957526][T29941] skb_clone+0x212/0x3a0 [ 881.957548][T29941] ? nfnetlink_rcv+0x4b0/0x28c0 [ 881.957651][T29941] nfnetlink_rcv+0x4de/0x28c0 [ 881.957677][T29941] ? __dev_queue_xmit+0x29b/0x3820 [ 881.957707][T29941] ? __local_bh_enable_ip+0xd0/0x130 [ 881.957734][T29941] ? lockdep_hardirqs_on+0x7a/0x110 [ 881.957767][T29941] ? __dev_queue_xmit+0x29b/0x3820 [ 881.957789][T29941] ? __local_bh_enable_ip+0xd0/0x130 [ 881.957810][T29941] ? __dev_queue_xmit+0x29b/0x3820 [ 881.957833][T29941] ? __dev_queue_xmit+0x1edc/0x3820 [ 881.957855][T29941] ? do_syscall_64+0x174/0x580 [ 881.957879][T29941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.957915][T29941] ? __dev_queue_xmit+0x29b/0x3820 [ 881.957943][T29941] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 881.957983][T29941] ? ref_tracker_free+0x689/0x830 [ 881.958015][T29941] ? __pfx_ref_tracker_free+0x10/0x10 [ 881.958053][T29941] ? __skb_clone+0x449/0x6c0 [ 881.958084][T29941] ? skb_clone+0x246/0x3a0 [ 881.958112][T29941] ? __netlink_deliver_tap+0x811/0x860 [ 881.958136][T29941] ? netlink_deliver_tap+0x2e/0x1b0 [ 881.958167][T29941] ? netlink_deliver_tap+0x2e/0x1b0 [ 881.958188][T29941] ? netlink_deliver_tap+0x2e/0x1b0 [ 881.958215][T29941] netlink_unicast+0x7bb/0x940 [ 881.958254][T29941] netlink_sendmsg+0x813/0xb40 [ 881.958290][T29941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 881.958319][T29941] ? aa_sock_msg_perm+0xf1/0x1b0 [ 881.958349][T29941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 881.958372][T29941] sock_sendmsg_nosec+0x13a/0x180 [ 881.958405][T29941] ____sys_sendmsg+0x54e/0x850 [ 881.958437][T29941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 881.958470][T29941] ? import_iovec+0x73/0xa0 [ 881.958506][T29941] ___sys_sendmsg+0x2a5/0x360 [ 881.958529][T29941] ? __lock_acquire+0x683/0x2cf0 [ 881.958563][T29941] ? __pfx____sys_sendmsg+0x10/0x10 [ 881.958624][T29941] ? __fget_files+0x2a/0x420 [ 881.958651][T29941] ? __fget_files+0x3a2/0x420 [ 881.958690][T29941] __x64_sys_sendmsg+0x1b1/0x290 [ 881.958717][T29941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 881.958759][T29941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.958782][T29941] do_syscall_64+0x174/0x580 [ 881.958807][T29941] ? trace_irq_disable+0x3b/0x140 [ 881.958833][T29941] ? clear_bhb_loop+0x40/0x90 [ 881.958858][T29941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.958880][T29941] RIP: 0033:0x7f6c97f9de99 [ 881.958901][T29941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.958916][T29941] RSP: 002b:00007f6c98ecb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 881.958939][T29941] RAX: ffffffffffffffda RBX: 00007f6c98225fa0 RCX: 00007f6c97f9de99 [ 881.958953][T29941] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 881.958965][T29941] RBP: 00007f6c98ecb090 R08: 0000000000000000 R09: 0000000000000000 [ 881.958977][T29941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.958990][T29941] R13: 00007f6c98226038 R14: 00007f6c98225fa0 R15: 00007ffde5cb00f8 [ 881.959023][T29941] [ 882.015111][T29944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7255'. [ 882.067003][T29947] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7256'. [ 882.292500][T29952] vlan3: entered promiscuous mode [ 882.551507][ T8392] tipc: Node number set to 1223792953 [ 883.515050][ T4938] Bluetooth: hci0: command 0x0406 tx timeout [ 883.816373][T29974] syzkaller0: entered promiscuous mode [ 883.821922][T29974] syzkaller0: entered allmulticast mode [ 883.978637][T29996] wg2 speed is unknown, defaulting to 1000 [ 884.139238][T30002] bridge_slave_1: default FDB implementation only supports local addresses [ 884.158252][T30002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7273'. [ 884.191447][T30002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7273'. [ 884.567407][T30010] vlan2: entered promiscuous mode [ 884.649940][T30015] netlink: 'syz.2.7277': attribute type 3 has an invalid length. [ 884.795564][T29998] netlink: 'syz.3.7272': attribute type 1 has an invalid length. [ 884.847114][T29998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 885.221876][T30035] FAULT_INJECTION: forcing a failure. [ 885.221876][T30035] name failslab, interval 1, probability 0, space 0, times 0 [ 885.235962][T30035] CPU: 1 UID: 0 PID: 30035 Comm: syz.2.7282 Not tainted syzkaller #0 PREEMPT(full) [ 885.235991][T30035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 885.236003][T30035] Call Trace: [ 885.236012][T30035] [ 885.236021][T30035] dump_stack_lvl+0xe8/0x150 [ 885.236060][T30035] should_fail_ex+0x40c/0x560 [ 885.236092][T30035] should_failslab+0xa8/0x100 [ 885.236127][T30035] __kmalloc_noprof+0xfe/0x720 [ 885.236155][T30035] ? nft_pernet+0x23/0x240 [ 885.236267][T30035] ? nf_tables_newrule+0x1524/0x28a0 [ 885.236359][T30035] ? nf_tables_newrule+0x1524/0x28a0 [ 885.236399][T30035] nf_tables_newrule+0x1524/0x28a0 [ 885.236449][T30035] ? __pfx_nf_tables_newrule+0x10/0x10 [ 885.236478][T30035] ? nfnl_pernet+0x23/0x240 [ 885.236500][T30035] ? nfnl_pernet+0x23/0x240 [ 885.236533][T30035] ? __nla_parse+0x40/0x60 [ 885.236568][T30035] nfnetlink_rcv+0x1288/0x28c0 [ 885.236628][T30035] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 885.236669][T30035] ? ref_tracker_free+0x689/0x830 [ 885.236723][T30035] ? skb_clone+0x246/0x3a0 [ 885.236753][T30035] ? __netlink_deliver_tap+0x811/0x860 [ 885.236787][T30035] ? netlink_deliver_tap+0x2e/0x1b0 [ 885.236811][T30035] ? netlink_deliver_tap+0x2e/0x1b0 [ 885.236842][T30035] netlink_unicast+0x7bb/0x940 [ 885.236877][T30035] netlink_sendmsg+0x813/0xb40 [ 885.236913][T30035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.236944][T30035] ? aa_sock_msg_perm+0xf1/0x1b0 [ 885.236974][T30035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.236998][T30035] sock_sendmsg_nosec+0x13a/0x180 [ 885.237031][T30035] ____sys_sendmsg+0x54e/0x850 [ 885.237062][T30035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 885.237097][T30035] ? import_iovec+0x73/0xa0 [ 885.237133][T30035] ___sys_sendmsg+0x2a5/0x360 [ 885.237156][T30035] ? __lock_acquire+0x683/0x2cf0 [ 885.237191][T30035] ? __pfx____sys_sendmsg+0x10/0x10 [ 885.237252][T30035] ? __fget_files+0x2a/0x420 [ 885.237289][T30035] ? __fget_files+0x3a2/0x420 [ 885.237329][T30035] __x64_sys_sendmsg+0x1b1/0x290 [ 885.237356][T30035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 885.237401][T30035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.237424][T30035] do_syscall_64+0x174/0x580 [ 885.237449][T30035] ? trace_irq_disable+0x3b/0x140 [ 885.237476][T30035] ? clear_bhb_loop+0x40/0x90 [ 885.237501][T30035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.237520][T30035] RIP: 0033:0x7f221a79de99 [ 885.237541][T30035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.237557][T30035] RSP: 002b:00007f22189f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.237579][T30035] RAX: ffffffffffffffda RBX: 00007f221aa25fa0 RCX: 00007f221a79de99 [ 885.237593][T30035] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 885.237604][T30035] RBP: 00007f22189f6090 R08: 0000000000000000 R09: 0000000000000000 [ 885.237614][T30035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.237625][T30035] R13: 00007f221aa26038 R14: 00007f221aa25fa0 R15: 00007ffcd927c658 [ 885.237656][T30035] [ 885.689610][T30036] wg2 speed is unknown, defaulting to 1000 [ 885.705351][T30041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7286'. [ 885.826450][T30046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7288'. [ 885.919496][T30048] xt_hashlimit: size too large, truncated to 1048576 [ 886.009850][T30050] syzkaller0: entered promiscuous mode [ 886.038040][T30050] syzkaller0: entered allmulticast mode [ 886.617375][T30064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7292'. [ 886.731219][T30064] netlink: 71 bytes leftover after parsing attributes in process `syz.0.7292'. [ 886.792618][T30077] netlink: 'syz.3.7295': attribute type 11 has an invalid length. [ 886.919692][T30079] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7295'. [ 887.034932][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 887.517536][T30098] FAULT_INJECTION: forcing a failure. [ 887.517536][T30098] name failslab, interval 1, probability 0, space 0, times 0 [ 887.530218][T30098] CPU: 1 UID: 0 PID: 30098 Comm: syz.1.7300 Not tainted syzkaller #0 PREEMPT(full) [ 887.530243][T30098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 887.530255][T30098] Call Trace: [ 887.530262][T30098] [ 887.530270][T30098] dump_stack_lvl+0xe8/0x150 [ 887.530302][T30098] should_fail_ex+0x40c/0x560 [ 887.530329][T30098] should_failslab+0xa8/0x100 [ 887.530356][T30098] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 887.530378][T30098] ? skb_clone+0x212/0x3a0 [ 887.530397][T30098] ? skb_clone+0x212/0x3a0 [ 887.530422][T30098] skb_clone+0x212/0x3a0 [ 887.530445][T30098] __netlink_deliver_tap+0x413/0x860 [ 887.530477][T30098] ? netlink_deliver_tap+0x2e/0x1b0 [ 887.530499][T30098] netlink_deliver_tap+0x19c/0x1b0 [ 887.530519][T30098] netlink_sendskb+0x68/0x140 [ 887.530540][T30098] nfnetlink_rcv+0x260c/0x28c0 [ 887.530591][T30098] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 887.530626][T30098] ? ref_tracker_free+0x689/0x830 [ 887.530680][T30098] ? skb_clone+0x246/0x3a0 [ 887.530702][T30098] ? __netlink_deliver_tap+0x811/0x860 [ 887.530729][T30098] ? netlink_deliver_tap+0x2e/0x1b0 [ 887.530749][T30098] ? netlink_deliver_tap+0x2e/0x1b0 [ 887.530774][T30098] netlink_unicast+0x7bb/0x940 [ 887.530802][T30098] netlink_sendmsg+0x813/0xb40 [ 887.530832][T30098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.530857][T30098] ? aa_sock_msg_perm+0xf1/0x1b0 [ 887.530883][T30098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.530902][T30098] sock_sendmsg_nosec+0x13a/0x180 [ 887.530928][T30098] ____sys_sendmsg+0x54e/0x850 [ 887.530954][T30098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 887.530982][T30098] ? import_iovec+0x73/0xa0 [ 887.531011][T30098] ___sys_sendmsg+0x2a5/0x360 [ 887.531029][T30098] ? __lock_acquire+0x683/0x2cf0 [ 887.531057][T30098] ? __pfx____sys_sendmsg+0x10/0x10 [ 887.531110][T30098] ? __fget_files+0x2a/0x420 [ 887.531133][T30098] ? __fget_files+0x3a2/0x420 [ 887.531165][T30098] __x64_sys_sendmsg+0x1b1/0x290 [ 887.531189][T30098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 887.531225][T30098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.531244][T30098] do_syscall_64+0x174/0x580 [ 887.531265][T30098] ? trace_irq_disable+0x3b/0x140 [ 887.531288][T30098] ? clear_bhb_loop+0x40/0x90 [ 887.531313][T30098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.531333][T30098] RIP: 0033:0x7f6c97f9de99 [ 887.531354][T30098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.531370][T30098] RSP: 002b:00007f6c98ecb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.531390][T30098] RAX: ffffffffffffffda RBX: 00007f6c98225fa0 RCX: 00007f6c97f9de99 [ 887.531403][T30098] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 887.531413][T30098] RBP: 00007f6c98ecb090 R08: 0000000000000000 R09: 0000000000000000 [ 887.531423][T30098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 887.531432][T30098] R13: 00007f6c98226038 R14: 00007f6c98225fa0 R15: 00007ffde5cb00f8 [ 887.531462][T30098] [ 888.098702][T30099] tipc: Enabled bearer , priority 30 [ 888.742057][T30125] syzkaller0: entered promiscuous mode [ 888.747610][T30125] syzkaller0: entered allmulticast mode [ 889.272314][T20533] tipc: Node number set to 63294456 [ 889.351643][T30147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7313'. [ 889.444799][T30147] bond0: entered promiscuous mode [ 889.472959][T30154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7313'. [ 889.543295][T30147] bond_slave_0: entered promiscuous mode [ 889.587038][T30147] bond_slave_1: entered promiscuous mode [ 889.611280][T30147] debugfs: 'hsr1' already exists in 'hsr' [ 889.617171][T30147] Cannot create hsr debugfs directory [ 889.622594][T30147] hsr1: entered promiscuous mode [ 889.823037][T30163] netlink: 766 bytes leftover after parsing attributes in process `syz.2.7318'. [ 890.018521][T30175] ÿ: renamed from bond_slave_0 (while UP) [ 890.323842][T30186] ipvlan2: entered promiscuous mode [ 890.380364][T30186] bridge0: port 3(ipvlan2) entered blocking state [ 890.387441][T30186] bridge0: port 3(ipvlan2) entered disabled state [ 890.394250][T30186] ipvlan2: entered allmulticast mode [ 890.424180][T30186] bridge0: entered allmulticast mode [ 890.434506][T30186] ipvlan2: left allmulticast mode [ 890.439660][T30186] bridge0: left allmulticast mode [ 890.610342][T30199] syzkaller0: entered promiscuous mode [ 890.615889][T30199] syzkaller0: entered allmulticast mode [ 890.689125][T30206] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7330'. [ 890.712823][T30187] tipc: Enabling of bearer rejected, failed to enable media [ 891.980643][T30239] wg2 speed is unknown, defaulting to 1000 [ 892.108633][T30247] bridge0: port 3(ip6gretap0) entered blocking state [ 892.124244][T30247] bridge0: port 3(ip6gretap0) entered disabled state [ 892.131435][T30247] ip6gretap0: entered allmulticast mode [ 892.197897][T30247] ip6gretap0: entered promiscuous mode [ 892.825132][T30239] sctp: [Deprecated]: syz.0.7337 (pid 30239) Use of int in max_burst socket option. [ 892.825132][T30239] Use struct sctp_assoc_value instead [ 893.197240][T30275] tipc: New replicast peer: 172.20.20.187 [ 893.204581][T30275] tipc: Enabled bearer , priority 10 [ 893.239006][T30273] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7349'. [ 893.360077][T30277] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 894.371103][T20511] tipc: Node number set to 3913854486 [ 894.611900][T30297] bond2: invalid NS target :: specified for addition [ 894.618764][T30297] bond2: option ns_ip6_target: invalid value (18446744073709551615) [ 894.619384][T30309] netlink: 'syz.1.7360': attribute type 10 has an invalid length. [ 894.676648][T30297] bond2 (unregistering): Released all slaves [ 894.730700][T30309] team0: Port device vlan0 added [ 894.796004][T30304] bridge3: entered promiscuous mode [ 894.808342][T30304] bridge3: entered allmulticast mode [ 894.816764][T30304] team0: Port device bridge3 added [ 894.823797][T30316] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 894.847689][T30314] wg2 speed is unknown, defaulting to 1000 [ 895.819367][T30357] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR [ 896.221581][T30381] netlink: 'syz.3.7381': attribute type 2 has an invalid length. [ 896.272386][T30385] netlink: 'syz.3.7381': attribute type 4 has an invalid length. [ 896.313451][T30385] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7381'. [ 896.360061][T30385] .`: renamed from bond0 (while UP) [ 896.448611][T30391] netlink: 'syz.1.7384': attribute type 61 has an invalid length. [ 896.544232][T11525] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 896.642085][T30397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7385'. [ 896.906702][T30406] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7390'. [ 896.916631][T30406] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7390'. [ 897.034644][T30413] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7392'. [ 897.133428][T30413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 897.218845][T30419] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7392'. [ 897.228209][T30419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7392'. [ 897.237464][T30419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7392'. [ 897.290302][T30391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 897.532257][T30427] netlink: 'syz.4.7398': attribute type 1 has an invalid length. [ 897.647489][T30427] 8021q: adding VLAN 0 to HW filter on device bond3 [ 897.677814][T30438] netlink: 'syz.2.7400': attribute type 142 has an invalid length. [ 897.717353][T30439] bond3: (slave veth9): Enslaving as an active interface with a down link [ 897.885715][T30427] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 897.944987][T30427] bond3: (slave batadv2): making interface the new active one [ 897.989672][T30427] batadv2: entered promiscuous mode [ 898.035743][T30427] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 898.154224][T30439] bond3 (unregistering): (slave veth9): Releasing active interface [ 898.212530][T30439] bond3 (unregistering): (slave batadv2): Releasing active interface [ 898.226796][T30439] bond3 (unregistering): Released all slaves [ 898.260478][T30448] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7403'. [ 898.359125][T30456] veth3: entered allmulticast mode [ 898.611932][T30468] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7410'. [ 898.789260][T30481] vlan4: entered promiscuous mode [ 899.110775][T30490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.144844][T30490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.370421][T30508] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 899.491329][T30495] ip6erspan0: entered allmulticast mode [ 899.762034][T30521] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 899.879550][T30521] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 900.362668][T30531] syzkaller0: entered promiscuous mode [ 900.385242][T30531] syzkaller0: entered allmulticast mode [ 900.492925][T30535] vlan3: entered promiscuous mode [ 900.522475][T30531] tipc: Enabling of bearer rejected, failed to enable media [ 904.669113][T30590] __nla_validate_parse: 8 callbacks suppressed [ 904.669135][T30590] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7452'. [ 904.692448][T30598] netlink: 'syz.3.7453': attribute type 1 has an invalid length. [ 904.854360][T30604] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7452'. [ 904.864323][T30598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.885252][T30600] bond0: (slave geneve2): making interface the new active one [ 904.895000][T30600] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 904.912850][T30603] syzkaller0: entered promiscuous mode [ 904.918648][T30603] syzkaller0: entered allmulticast mode [ 905.042545][T30603] tipc: Enabling of bearer rejected, failed to enable media [ 905.110765][T30611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7457'. [ 905.251801][T30618] wg2 speed is unknown, defaulting to 1000 [ 906.171719][T30650] netlink: 'syz.4.7464': attribute type 46 has an invalid length. [ 906.261620][T30653] netlink: 279 bytes leftover after parsing attributes in process `syz.0.7465'. [ 906.271077][T30653] veth0_to_bond: default FDB implementation only supports local addresses [ 906.599471][T30667] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7468'. [ 906.686471][T30670] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7468'. [ 906.767462][T30672] syzkaller0: entered promiscuous mode [ 906.801549][T30672] syzkaller0: entered allmulticast mode [ 906.843282][T30667] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.850272][T30677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7470'. [ 906.851110][T30667] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.949987][T30672] tipc: Enabling of bearer rejected, failed to enable media [ 907.117404][T30686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7472'. [ 907.145013][T30683] syzkaller0: entered promiscuous mode [ 907.165994][T30683] syzkaller0: entered allmulticast mode [ 907.226093][T30681] wg2 speed is unknown, defaulting to 1000 [ 907.253789][T30683] tipc: Enabled bearer , priority 0 [ 907.286859][T30692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7476'. [ 907.351595][T30682] tipc: Resetting bearer [ 907.421045][T30682] tipc: Disabling bearer [ 907.482873][T30699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7479'. [ 907.508042][T30699] openvswitch: netlink: Actions may not be safe on all matching packets [ 907.718799][T30705] vlan2: entered promiscuous mode [ 908.925254][T30736] syzkaller0: entered promiscuous mode [ 908.930973][T30736] syzkaller0: entered allmulticast mode [ 908.957565][T30738] bridge4: entered promiscuous mode [ 908.962837][T30738] bridge4: entered allmulticast mode [ 908.971232][T30738] team0: Port device bridge4 added [ 908.976497][T30734] tipc: Enabling of bearer rejected, failed to enable media [ 910.653995][T30788] __nla_validate_parse: 6 callbacks suppressed [ 910.654017][T30788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7505'. [ 910.798327][T30793] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7507'. [ 910.865531][T30789] syzkaller0: entered promiscuous mode [ 910.880341][T30789] syzkaller0: entered allmulticast mode [ 911.082746][T30789] tipc: Enabling of bearer rejected, failed to enable media [ 911.369862][T30804] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 911.451318][T30804] bond1 (unregistering): Released all slaves [ 911.796792][T30821] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7515'. [ 912.030819][T30828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7517'. [ 912.203937][T30832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7519'. [ 912.213294][T30832] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7519'. [ 912.583789][T30840] netlink: 'syz.1.7523': attribute type 6 has an invalid length. [ 913.087913][T30872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7531'. [ 913.548155][T30888] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7540'. [ 913.602209][T30889] netlink: 'syz.0.7537': attribute type 7 has an invalid length. [ 913.628708][T30891] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7539'. [ 913.643215][T30889] netlink: 'syz.0.7537': attribute type 3 has an invalid length. [ 913.665228][T30889] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7537'. [ 914.260295][T30899] bond1: option ad_user_port_key: invalid value (65535) [ 914.267338][T30899] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 914.333081][T30899] bond1 (unregistering): Released all slaves [ 914.564441][T30900] bridge4: entered promiscuous mode [ 914.570185][T30900] bridge4: entered allmulticast mode [ 914.657497][T30900] team0: Port device bridge4 added [ 915.228263][T30933] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 916.071577][T30961] __nla_validate_parse: 3 callbacks suppressed [ 916.071599][T30961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7558'. [ 916.111391][T30961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7558'. [ 916.422881][T30973] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7564'. [ 916.575560][T30963] bridge6: entered promiscuous mode [ 916.580847][T30963] bridge6: entered allmulticast mode [ 916.622184][T30963] team0: Port device bridge6 added [ 916.779683][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803470a000: rx timeout, send abort [ 916.883164][T30982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7567'. [ 917.042078][T30985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7565'. [ 917.122197][ T4938] Bluetooth: hci0: command 0x0406 tx timeout [ 917.194837][T30988] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7569'. [ 917.230601][T30988] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7569'. [ 917.343301][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803470a000: abort rx timeout. Force session deactivation [ 917.653644][T30998] netlink: 192 bytes leftover after parsing attributes in process `syz.0.7575'. [ 917.707124][T30996] syzkaller0: entered promiscuous mode [ 917.713678][T30996] syzkaller0: entered allmulticast mode [ 917.768602][T31000] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 917.824666][T31000] syzkaller1: linktype set to 1 [ 918.067626][T31005] bridge3: entered promiscuous mode [ 918.073136][T31005] bridge3: entered allmulticast mode [ 918.107774][T31005] team0: Port device bridge3 added [ 918.455751][T31018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7580'. [ 918.508755][T31018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7580'. [ 918.522774][T31018] netlink: 'syz.3.7580': attribute type 18 has an invalid length. [ 918.555768][T11525] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 13056 - 0 [ 918.557208][T31018] netlink: 'syz.3.7580': attribute type 18 has an invalid length. [ 918.582892][T11525] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 13056 - 0 [ 918.662388][ T61] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 13056 - 0 [ 918.692650][ T61] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 13056 - 0 [ 918.798834][T31029] netlink: 'syz.2.7586': attribute type 1 has an invalid length. [ 918.834680][T31031] netlink: 'syz.3.7587': attribute type 11 has an invalid length. [ 918.952334][T31029] 8021q: adding VLAN 0 to HW filter on device bond2 [ 919.176578][T31045] vlan2: entered promiscuous mode [ 919.572386][T31041] bridge5: entered promiscuous mode [ 919.577679][T31041] bridge5: entered allmulticast mode [ 919.622749][T31041] team0: Port device bridge5 added [ 919.817698][T31059] wg2 speed is unknown, defaulting to 1000 [ 919.841631][T31063] netlink: 'syz.3.7599': attribute type 1 has an invalid length. [ 919.965078][T31063] 8021q: adding VLAN 0 to HW filter on device bond2 [ 920.256249][T31076] vlan2: entered promiscuous mode [ 920.322061][T31071] netlink: 'syz.3.7602': attribute type 2 has an invalid length. [ 920.361141][T31071] : entered promiscuous mode [ 920.890585][T31084] batman_adv: batadv0: Adding interface: gretap1 [ 920.904129][T31084] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.961392][T31084] batman_adv: batadv0: Interface activated: gretap1 [ 921.028116][T31088] syzkaller0: entered promiscuous mode [ 921.033669][T31088] syzkaller0: entered allmulticast mode [ 921.115301][T31088] 0: reclassify loop, rule prio 0, protocol 800 [ 921.464061][T31090] bridge3: entered promiscuous mode [ 921.469343][T31090] bridge3: entered allmulticast mode [ 921.486110][T31090] team0: Port device bridge3 added [ 921.586814][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 921.653434][T31105] netlink: 'syz.4.7612': attribute type 1 has an invalid length. [ 921.731701][T31105] 8021q: adding VLAN 0 to HW filter on device bond3 [ 921.761851][T31109] bond3: (slave geneve3): making interface the new active one [ 921.771776][T31109] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 921.808749][T31110] __nla_validate_parse: 4 callbacks suppressed [ 921.808771][T31110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7611'. [ 922.010903][T31115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7614'. [ 922.187213][T31120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7617'. [ 922.272215][T31122] wg2 speed is unknown, defaulting to 1000 [ 922.276526][T31125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7619'. [ 922.971243][T31150] netlink: 'syz.2.7626': attribute type 1 has an invalid length. [ 923.061476][T31156] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 923.385432][T31150] 8021q: adding VLAN 0 to HW filter on device bond3 [ 923.406619][T31158] bridge4: entered promiscuous mode [ 923.412308][T31158] bridge4: entered allmulticast mode [ 923.422845][T31158] team0: Port device bridge4 added [ 923.887753][T31167] syzkaller0: entered promiscuous mode [ 923.934874][T31167] syzkaller0: entered allmulticast mode [ 924.123635][T31183] netlink: 'syz.3.7637': attribute type 1 has an invalid length. [ 924.207377][T31183] 8021q: adding VLAN 0 to HW filter on device bond3 [ 924.309200][T31181] syzkaller0: entered promiscuous mode [ 924.314758][T31181] syzkaller0: entered allmulticast mode [ 924.523716][T31197] netlink: 'syz.4.7639': attribute type 1 has an invalid length. [ 924.564433][T31197] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7639'. [ 924.573839][T31201] No such timeout policy "syz1" [ 924.867690][T31216] netlink: 'syz.1.7644': attribute type 3 has an invalid length. [ 924.875705][T31216] netlink: 'syz.1.7644': attribute type 3 has an invalid length. [ 924.884192][T31216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7644'. [ 926.705668][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 929.170339][T31212] bridge5: entered promiscuous mode [ 929.176730][T31212] bridge5: entered allmulticast mode [ 929.185918][T31212] team0: Port device bridge5 added [ 929.355254][T31237] netlink: 'syz.3.7648': attribute type 1 has an invalid length. [ 929.394300][T31237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 929.484537][T31239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7647'. [ 929.966517][T31262] FAULT_INJECTION: forcing a failure. [ 929.966517][T31262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.015300][T31262] CPU: 0 UID: 0 PID: 31262 Comm: syz.1.7657 Not tainted syzkaller #0 PREEMPT(full) [ 930.015331][T31262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 930.015344][T31262] Call Trace: [ 930.015352][T31262] [ 930.015361][T31262] dump_stack_lvl+0xe8/0x150 [ 930.015401][T31262] should_fail_ex+0x40c/0x560 [ 930.015437][T31262] _copy_from_iter+0x1d3/0x1660 [ 930.015465][T31262] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 930.015496][T31262] ? rcu_is_watching+0x15/0xb0 [ 930.015521][T31262] ? trace_kmem_cache_alloc+0x29/0xe0 [ 930.015549][T31262] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 930.015576][T31262] ? __pfx__copy_from_iter+0x10/0x10 [ 930.015604][T31262] ? __alloc_skb+0x276/0x7a0 [ 930.015626][T31262] ? __alloc_skb+0x276/0x7a0 [ 930.015653][T31262] ? netlink_sendmsg+0x650/0xb40 [ 930.015680][T31262] ? skb_put+0x112/0x210 [ 930.015705][T31262] netlink_sendmsg+0x6c0/0xb40 [ 930.015740][T31262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.015768][T31262] ? aa_sock_msg_perm+0xf1/0x1b0 [ 930.015800][T31262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.015824][T31262] sock_sendmsg_nosec+0x13a/0x180 [ 930.015857][T31262] ____sys_sendmsg+0x54e/0x850 [ 930.015887][T31262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 930.015922][T31262] ? import_iovec+0x73/0xa0 [ 930.015961][T31262] ___sys_sendmsg+0x2a5/0x360 [ 930.015984][T31262] ? __lock_acquire+0x683/0x2cf0 [ 930.016017][T31262] ? __pfx____sys_sendmsg+0x10/0x10 [ 930.016077][T31262] ? __fget_files+0x2a/0x420 [ 930.016104][T31262] ? __fget_files+0x3a2/0x420 [ 930.016141][T31262] __x64_sys_sendmsg+0x1b1/0x290 [ 930.016169][T31262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 930.016211][T31262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.016236][T31262] do_syscall_64+0x174/0x580 [ 930.016273][T31262] ? trace_irq_disable+0x3b/0x140 [ 930.016301][T31262] ? clear_bhb_loop+0x40/0x90 [ 930.016328][T31262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.016348][T31262] RIP: 0033:0x7f6c97f9de99 [ 930.016369][T31262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.016387][T31262] RSP: 002b:00007f6c98ecb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.016411][T31262] RAX: ffffffffffffffda RBX: 00007f6c98225fa0 RCX: 00007f6c97f9de99 [ 930.016427][T31262] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 930.016441][T31262] RBP: 00007f6c98ecb090 R08: 0000000000000000 R09: 0000000000000000 [ 930.016454][T31262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.016468][T31262] R13: 00007f6c98226038 R14: 00007f6c98225fa0 R15: 00007ffde5cb00f8 [ 930.016500][T31262] [ 930.503747][T31270] syzkaller0: entered promiscuous mode [ 930.509575][T31270] syzkaller0: entered allmulticast mode [ 930.568136][T31272] netlink: 'syz.2.7661': attribute type 1 has an invalid length. [ 930.665211][T31272] 8021q: adding VLAN 0 to HW filter on device bond4 [ 930.686679][T31275] bridge6: entered promiscuous mode [ 930.693795][T31275] bridge6: entered allmulticast mode [ 930.704252][T31275] team0: Port device bridge6 added [ 931.572628][T31316] netlink: 'syz.0.7675': attribute type 1 has an invalid length. [ 931.661856][T31316] 8021q: adding VLAN 0 to HW filter on device bond4 [ 931.695656][T31322] bond4: (slave geneve2): making interface the new active one [ 931.713297][T31322] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 932.000025][T31318] bridge3: entered promiscuous mode [ 932.030996][T31318] bridge3: entered allmulticast mode [ 932.065779][T31318] team0: Port device bridge3 added [ 932.256084][T31341] gtp0: entered promiscuous mode [ 932.265324][T31341] gtp0: entered allmulticast mode [ 932.273374][T31341] team0: Device gtp0 is of different type [ 932.359946][T31343] vlan2: entered promiscuous mode [ 932.384503][T31350] bond0: entered promiscuous mode [ 932.389708][T31350] bond_slave_0: entered promiscuous mode [ 932.395659][T31350] bond_slave_1: entered promiscuous mode [ 932.403724][T31350] batadv0: entered promiscuous mode [ 932.432615][T31350] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 932.593436][T31354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7688'. [ 932.607508][T31354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7688'. [ 932.616788][T31354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7688'. [ 932.628035][T31354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7688'. [ 932.647512][T31354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7688'. [ 932.795643][T31364] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7691'. [ 933.058641][T31373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7694'. [ 933.448235][T31381] bridge7: entered promiscuous mode [ 933.468524][T31381] bridge7: entered allmulticast mode [ 933.521886][T31381] team0: Port device bridge7 added [ 933.773480][T31396] xt_hashlimit: size too large, truncated to 1048576 [ 933.882359][T31404] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7699'. [ 935.394977][T31446] vlan2: entered promiscuous mode [ 935.431474][T31436] bridge4: entered promiscuous mode [ 935.436860][T31436] bridge4: entered allmulticast mode [ 935.495557][T31436] team0: Port device bridge4 added [ 935.977903][T31473] netlink: 'syz.1.7721': attribute type 1 has an invalid length. [ 936.097781][T31480] nbd: must specify a device to reconfigure [ 936.121073][T31473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 936.201504][T31477] bond1: (slave geneve2): making interface the new active one [ 936.211572][T31477] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 936.214633][T31483] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7724'. [ 936.267913][T31481] vlan2: entered promiscuous mode [ 937.175784][T31516] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7737'. [ 937.261717][T31525] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 937.295446][T31525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7738'. [ 937.305016][T31523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7739'. [ 937.475486][T31529] FAULT_INJECTION: forcing a failure. [ 937.475486][T31529] name failslab, interval 1, probability 0, space 0, times 0 [ 937.516064][T31529] CPU: 1 UID: 0 PID: 31529 Comm: syz.4.7741 Not tainted syzkaller #0 PREEMPT(full) [ 937.516094][T31529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 937.516107][T31529] Call Trace: [ 937.516115][T31529] [ 937.516124][T31529] dump_stack_lvl+0xe8/0x150 [ 937.516164][T31529] should_fail_ex+0x40c/0x560 [ 937.516198][T31529] should_failslab+0xa8/0x100 [ 937.516233][T31529] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 937.516261][T31529] ? security_inode_alloc+0x39/0x310 [ 937.516286][T31529] ? security_inode_alloc+0x39/0x310 [ 937.516317][T31529] security_inode_alloc+0x39/0x310 [ 937.516345][T31529] inode_init_always_gfp+0x97e/0xd30 [ 937.516378][T31529] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 937.516510][T31529] alloc_inode+0x82/0x1b0 [ 937.516539][T31529] new_inode+0x1f/0x170 [ 937.516571][T31529] __debugfs_create_file+0xb8/0x400 [ 937.516600][T31529] debugfs_create_file_full+0x3f/0x60 [ 937.516626][T31529] ref_tracker_dir_debugfs+0x197/0x360 [ 937.516664][T31529] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 937.516718][T31529] ? __kvmalloc_node_noprof+0x55a/0x860 [ 937.516752][T31529] ? __kvmalloc_node_noprof+0x35c/0x860 [ 937.516784][T31529] ? __raw_spin_lock_init+0x45/0x100 [ 937.516812][T31529] alloc_netdev_mqs+0x275/0x12b0 [ 937.516840][T31529] ? __pfx_snprintf+0x10/0x10 [ 937.516860][T31529] ? __pfx_hsr_dev_setup+0x10/0x10 [ 937.516931][T31529] rtnl_create_link+0x321/0xd70 [ 937.516971][T31529] rtnl_newlink_create+0x258/0x7b0 [ 937.517004][T31529] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 937.517035][T31529] ? __pfx___mutex_lock+0x10/0x10 [ 937.517073][T31529] ? ns_capable+0x89/0xe0 [ 937.517105][T31529] rtnl_newlink+0x166d/0x1c30 [ 937.517145][T31529] ? __pfx_rtnl_newlink+0x10/0x10 [ 937.517165][T31529] ? do_syscall_64+0x174/0x580 [ 937.517190][T31529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.517254][T31529] ? kasan_quarantine_put+0xbb/0x1f0 [ 937.517283][T31529] ? lockdep_hardirqs_on+0x7a/0x110 [ 937.517312][T31529] ? nlmon_xmit+0xb0/0x100 [ 937.517419][T31529] ? kmem_cache_free+0x182/0x650 [ 937.517462][T31529] ? __lock_acquire+0x683/0x2cf0 [ 937.517497][T31529] ? __dev_queue_xmit+0x29b/0x3820 [ 937.517528][T31529] ? __local_bh_enable_ip+0xd0/0x130 [ 937.517556][T31529] ? lockdep_hardirqs_on+0x7a/0x110 [ 937.517581][T31529] ? __dev_queue_xmit+0x29b/0x3820 [ 937.517606][T31529] ? __local_bh_enable_ip+0xd0/0x130 [ 937.517629][T31529] ? __dev_queue_xmit+0x29b/0x3820 [ 937.517674][T31529] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 937.517716][T31529] ? __pfx_rtnl_newlink+0x10/0x10 [ 937.517738][T31529] rtnetlink_rcv_msg+0x802/0xc00 [ 937.517765][T31529] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 937.517788][T31529] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 937.517809][T31529] ? ref_tracker_free+0x689/0x830 [ 937.517841][T31529] ? __pfx_ref_tracker_free+0x10/0x10 [ 937.517882][T31529] netlink_rcv_skb+0x226/0x4a0 [ 937.517911][T31529] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 937.517936][T31529] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 937.517978][T31529] ? netlink_deliver_tap+0x2e/0x1b0 [ 937.518003][T31529] ? netlink_deliver_tap+0x2e/0x1b0 [ 937.518035][T31529] netlink_unicast+0x7bb/0x940 [ 937.518071][T31529] netlink_sendmsg+0x813/0xb40 [ 937.518111][T31529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.518141][T31529] ? aa_sock_msg_perm+0xf1/0x1b0 [ 937.518173][T31529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.518197][T31529] sock_sendmsg_nosec+0x13a/0x180 [ 937.518231][T31529] ____sys_sendmsg+0x54e/0x850 [ 937.518262][T31529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 937.518299][T31529] ? import_iovec+0x73/0xa0 [ 937.518336][T31529] ___sys_sendmsg+0x2a5/0x360 [ 937.518361][T31529] ? __lock_acquire+0x683/0x2cf0 [ 937.518396][T31529] ? __pfx____sys_sendmsg+0x10/0x10 [ 937.518461][T31529] ? __fget_files+0x2a/0x420 [ 937.518490][T31529] ? __fget_files+0x3a2/0x420 [ 937.518532][T31529] __x64_sys_sendmsg+0x1b1/0x290 [ 937.518561][T31529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 937.518607][T31529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.518631][T31529] do_syscall_64+0x174/0x580 [ 937.518663][T31529] ? trace_irq_disable+0x3b/0x140 [ 937.518692][T31529] ? clear_bhb_loop+0x40/0x90 [ 937.518720][T31529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.518742][T31529] RIP: 0033:0x7f43a2b9de99 [ 937.518765][T31529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.518782][T31529] RSP: 002b:00007f43a39be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 937.518807][T31529] RAX: ffffffffffffffda RBX: 00007f43a2e25fa0 RCX: 00007f43a2b9de99 [ 937.518823][T31529] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 937.518838][T31529] RBP: 00007f43a39be090 R08: 0000000000000000 R09: 0000000000000000 [ 937.518851][T31529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 937.518865][T31529] R13: 00007f43a2e26038 R14: 00007f43a2e25fa0 R15: 00007ffe51ef7858 [ 937.518903][T31529] [ 937.518947][T31529] debugfs: out of free dentries, can not create file 'netdev@ffff888037e28700' [ 938.099698][T31529] bond0: entered promiscuous mode [ 938.104781][T31529] bond_slave_0: entered promiscuous mode [ 938.110801][T31529] bond_slave_1: entered promiscuous mode [ 938.119459][T31529] batadv0: entered promiscuous mode [ 938.125587][T31529] debugfs: 'hsr1' already exists in 'hsr' [ 938.131364][T31529] Cannot create hsr debugfs directory [ 938.137429][T31529] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 938.227560][T31541] bridge5: entered promiscuous mode [ 938.232857][T31541] bridge5: entered allmulticast mode [ 938.241560][T31541] team0: Port device bridge5 added [ 938.387783][T31549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7747'. [ 938.555997][T31556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7747'. [ 938.603075][T31549] hsr_slave_1 (unregistering): left promiscuous mode [ 938.683987][T31563] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7750'. [ 938.780656][T31566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7752'. [ 938.789687][T31566] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 938.863973][T31568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7753'. [ 938.912771][T31570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7754'. [ 939.067354][T31575] netlink: 'syz.1.7755': attribute type 1 has an invalid length. [ 939.146228][T31575] tc action pedit offset must be on 32 bit boundaries [ 939.154757][T31575] tc action pedit offset must be on 32 bit boundaries [ 939.161654][T31575] tc action pedit offset must be on 32 bit boundaries [ 939.168548][T31575] tc action pedit offset must be on 32 bit boundaries [ 939.175598][T31575] tc action pedit offset must be on 32 bit boundaries [ 939.182402][T31575] tc action pedit offset must be on 32 bit boundaries [ 939.189392][T31575] tc action pedit offset must be on 32 bit boundaries [ 939.196245][T31575] tc action pedit offset must be on 32 bit boundaries [ 939.203091][T31575] tc action pedit offset must be on 32 bit boundaries [ 939.210055][T31575] tc action pedit offset must be on 32 bit boundaries [ 939.216937][T31575] TC_ACT_REPEAT abuse ? [ 939.470655][T31587] syzkaller0: entered promiscuous mode [ 939.493582][T31587] syzkaller0: entered allmulticast mode [ 939.575258][T31587] FAULT_INJECTION: forcing a failure. [ 939.575258][T31587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.588462][T31587] CPU: 1 UID: 0 PID: 31587 Comm: syz.4.7762 Not tainted syzkaller #0 PREEMPT(full) [ 939.588489][T31587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 939.588501][T31587] Call Trace: [ 939.588510][T31587] [ 939.588518][T31587] dump_stack_lvl+0xe8/0x150 [ 939.588555][T31587] should_fail_ex+0x40c/0x560 [ 939.588585][T31587] _copy_from_iter+0x1d3/0x1660 [ 939.588613][T31587] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 939.588641][T31587] ? rcu_is_watching+0x15/0xb0 [ 939.588663][T31587] ? trace_kmem_cache_alloc+0x29/0xe0 [ 939.588690][T31587] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 939.588717][T31587] ? __pfx__copy_from_iter+0x10/0x10 [ 939.588744][T31587] ? __alloc_skb+0x276/0x7a0 [ 939.588764][T31587] ? __alloc_skb+0x276/0x7a0 [ 939.588790][T31587] ? netlink_sendmsg+0x650/0xb40 [ 939.588815][T31587] ? skb_put+0x112/0x210 [ 939.588840][T31587] netlink_sendmsg+0x6c0/0xb40 [ 939.588873][T31587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.588903][T31587] ? aa_sock_msg_perm+0xf1/0x1b0 [ 939.588933][T31587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.588955][T31587] sock_sendmsg_nosec+0x13a/0x180 [ 939.588988][T31587] ____sys_sendmsg+0x54e/0x850 [ 939.589019][T31587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.589053][T31587] ? import_iovec+0x73/0xa0 [ 939.589088][T31587] ___sys_sendmsg+0x2a5/0x360 [ 939.589111][T31587] ? __lock_acquire+0x683/0x2cf0 [ 939.589145][T31587] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.589205][T31587] ? __fget_files+0x2a/0x420 [ 939.589233][T31587] ? __fget_files+0x3a2/0x420 [ 939.589272][T31587] __x64_sys_sendmsg+0x1b1/0x290 [ 939.589300][T31587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 939.589344][T31587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.589366][T31587] do_syscall_64+0x174/0x580 [ 939.589391][T31587] ? trace_irq_disable+0x3b/0x140 [ 939.589418][T31587] ? clear_bhb_loop+0x40/0x90 [ 939.589444][T31587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.589473][T31587] RIP: 0033:0x7f43a2b9de99 [ 939.589493][T31587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.589510][T31587] RSP: 002b:00007f43a39be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.589533][T31587] RAX: ffffffffffffffda RBX: 00007f43a2e25fa0 RCX: 00007f43a2b9de99 [ 939.589548][T31587] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 000000000000000a [ 939.589562][T31587] RBP: 00007f43a39be090 R08: 0000000000000000 R09: 0000000000000000 [ 939.589576][T31587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.589587][T31587] R13: 00007f43a2e26038 R14: 00007f43a2e25fa0 R15: 00007ffe51ef7858 [ 939.589620][T31587] [ 940.169660][T31606] bond5: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 940.178718][T31606] bond5: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 940.188111][T31606] bond5: entered allmulticast mode [ 940.965363][T31624] udevd[31624]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 940.983793][T31643] netlink: 'syz.4.7783': attribute type 1 has an invalid length. [ 940.984736][T31624] udevd[31624]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 940.994434][T31641] syzkaller0: entered promiscuous mode [ 941.030875][T31641] syzkaller0: entered allmulticast mode [ 941.224718][T31654] vlan3: entered promiscuous mode [ 941.237141][T31641] tipc: Enabled bearer , priority 0 [ 941.245643][T31640] tipc: Resetting bearer [ 941.285144][T31655] __nla_validate_parse: 5 callbacks suppressed [ 941.285167][T31655] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7784'. [ 941.304121][T31655] unsupported nlmsg_type 40 [ 941.405958][T31640] tipc: Disabling bearer [ 941.472202][ T61] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 941.968215][T31675] FAULT_INJECTION: forcing a failure. [ 941.968215][T31675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 941.990853][T31675] CPU: 0 UID: 0 PID: 31675 Comm: syz.0.7792 Not tainted syzkaller #0 PREEMPT(full) [ 941.990884][T31675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 941.990896][T31675] Call Trace: [ 941.990904][T31675] [ 941.990913][T31675] dump_stack_lvl+0xe8/0x150 [ 941.990960][T31675] should_fail_ex+0x40c/0x560 [ 941.990993][T31675] _copy_from_iter+0x1d3/0x1660 [ 941.991022][T31675] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 941.991061][T31675] ? __pfx_policy_nodemask+0x10/0x10 [ 941.991095][T31675] ? unwind_next_frame+0x8f/0x2550 [ 941.991120][T31675] ? __pfx__copy_from_iter+0x10/0x10 [ 941.991153][T31675] ? alloc_pages_mpol+0x24a/0x380 [ 941.991196][T31675] copy_page_from_iter+0x219/0x2d0 [ 941.991232][T31675] tun_get_user+0x1bf1/0x4370 [ 941.991268][T31675] ? tun_get_user+0x6e7/0x4370 [ 941.991316][T31675] ? aa_file_perm+0x4ed/0x15f0 [ 941.991342][T31675] ? __pfx_tun_get_user+0x10/0x10 [ 941.991373][T31675] ? __lock_acquire+0x683/0x2cf0 [ 941.991417][T31675] ? ref_tracker_alloc+0x341/0x4b0 [ 941.991444][T31675] ? get_pid_task+0x20/0x1f0 [ 941.991475][T31675] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 941.991505][T31675] ? tun_get+0x1c/0x2f0 [ 941.991534][T31675] ? tun_get+0x1c/0x2f0 [ 941.991569][T31675] ? tun_get+0x1c/0x2f0 [ 941.991597][T31675] ? tun_get+0x1c/0x2f0 [ 941.991628][T31675] tun_chr_write_iter+0x113/0x200 [ 941.991662][T31675] vfs_write+0x612/0xba0 [ 941.991690][T31675] ? __pfx_vfs_write+0x10/0x10 [ 941.991722][T31675] ? __fget_files+0x2a/0x420 [ 941.991760][T31675] ksys_write+0x150/0x270 [ 941.991783][T31675] ? __pfx_ksys_write+0x10/0x10 [ 941.991812][T31675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.991835][T31675] do_syscall_64+0x174/0x580 [ 941.991864][T31675] ? trace_irq_disable+0x3b/0x140 [ 941.991890][T31675] ? clear_bhb_loop+0x40/0x90 [ 941.991916][T31675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.991937][T31675] RIP: 0033:0x7fa25995e6ce [ 941.991968][T31675] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 941.991986][T31675] RSP: 002b:00007fa25a8b6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 941.992009][T31675] RAX: ffffffffffffffda RBX: 00007fa25a8b76c0 RCX: 00007fa25995e6ce [ 941.992024][T31675] RDX: 0000000000000011 RSI: 0000200000000680 RDI: 00000000000000c8 [ 941.992038][T31675] RBP: 00007fa25a8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 941.992051][T31675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.992063][T31675] R13: 00007fa259c26038 R14: 00007fa259c25fa0 R15: 00007ffef4e8dcf8 [ 941.992097][T31675] [ 942.330664][T31680] netlink: 196 bytes leftover after parsing attributes in process `syz.3.7794'. [ 942.340148][T31680] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7794'. [ 942.352902][T31680] syzkaller0: entered promiscuous mode [ 942.358518][T31680] syzkaller0: entered allmulticast mode [ 944.393551][T31658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 944.996414][T31702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7802'. [ 945.048217][T31705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.128954][T31707] vlan2: entered promiscuous mode [ 945.415304][T31721] netlink: 'syz.2.7812': attribute type 12 has an invalid length. [ 945.669043][T31728] netlink: 'syz.3.7813': attribute type 4 has an invalid length. [ 945.956045][T31746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7819'. [ 946.272486][T31756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7823'. [ 946.300844][T31756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7823'. [ 946.810066][T31774] netlink: 'syz.1.7829': attribute type 1 has an invalid length. [ 946.931428][T31774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 947.023359][T31784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7835'. [ 947.036067][T31784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7835'. [ 947.045401][T31784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7835'. [ 947.164379][T31780] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 947.312796][T31780] bond6 (unregistering): Released all slaves [ 947.512334][T31799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7839'. [ 947.732708][T31799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7839'. [ 947.781224][T31806] netlink: 'syz.3.7841': attribute type 10 has an invalid length. [ 947.884698][T31806] veth0_to_bond: entered allmulticast mode [ 948.371844][T31822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7847'. [ 948.393484][T31822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7847'. [ 948.922052][T31838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7852'. [ 949.019736][T31840] FAULT_INJECTION: forcing a failure. [ 949.019736][T31840] name failslab, interval 1, probability 0, space 0, times 0 [ 949.033508][T31840] CPU: 0 UID: 0 PID: 31840 Comm: syz.3.7853 Not tainted syzkaller #0 PREEMPT(full) [ 949.033537][T31840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 949.033550][T31840] Call Trace: [ 949.033559][T31840] [ 949.033569][T31840] dump_stack_lvl+0xe8/0x150 [ 949.033608][T31840] should_fail_ex+0x40c/0x560 [ 949.033641][T31840] should_failslab+0xa8/0x100 [ 949.033674][T31840] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 949.033702][T31840] ? dst_alloc+0x105/0x170 [ 949.033727][T31840] ? dst_alloc+0x105/0x170 [ 949.033757][T31840] dst_alloc+0x105/0x170 [ 949.033785][T31840] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 949.033821][T31840] ? ip_route_output_key_hash+0xd8/0x2a0 [ 949.033845][T31840] ip_route_output_key_hash+0x18d/0x2a0 [ 949.033866][T31840] ? ns_capable+0x89/0xe0 [ 949.033892][T31840] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 949.033942][T31840] ip_route_output_flow+0x2a/0x150 [ 949.034057][T31840] ? security_sk_classify_flow+0x6d/0x150 [ 949.034088][T31840] udp_sendmsg+0x144a/0x2140 [ 949.034131][T31840] ? __pfx_udp_sendmsg+0x10/0x10 [ 949.034163][T31840] ? tomoyo_supervisor+0x4d2/0x1560 [ 949.034241][T31840] ? get_random_u32+0x497/0x8b0 [ 949.034314][T31840] ? lockdep_hardirqs_on+0x7a/0x110 [ 949.034337][T31840] ? get_random_u32+0x13a/0x8b0 [ 949.034359][T31840] ? get_random_u32+0x4ce/0x8b0 [ 949.034390][T31840] udpv6_sendmsg+0x915/0x2610 [ 949.034437][T31840] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 949.034463][T31840] ? udp_lib_get_port+0x177b/0x1c60 [ 949.034484][T31840] ? udp_lib_get_port+0x177b/0x1c60 [ 949.034536][T31840] ? inet_send_prepare+0x1b4/0x260 [ 949.034564][T31840] ? lockdep_hardirqs_on+0x7a/0x110 [ 949.034586][T31840] ? inet_send_prepare+0x1b4/0x260 [ 949.034604][T31840] ? __local_bh_enable_ip+0xd0/0x130 [ 949.034630][T31840] ? inet_send_prepare+0x1b4/0x260 [ 949.034653][T31840] ? inet6_sendmsg+0xe4/0x120 [ 949.034682][T31840] ? __pfx_inet6_sendmsg+0x10/0x10 [ 949.034706][T31840] sock_sendmsg_nosec+0x90/0x180 [ 949.034739][T31840] ____sys_sendmsg+0x54e/0x850 [ 949.034771][T31840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 949.034806][T31840] ? import_iovec+0x73/0xa0 [ 949.034841][T31840] ___sys_sendmsg+0x2a5/0x360 [ 949.034864][T31840] ? __lock_acquire+0x683/0x2cf0 [ 949.034898][T31840] ? __pfx____sys_sendmsg+0x10/0x10 [ 949.034971][T31840] ? __fget_files+0x2a/0x420 [ 949.034999][T31840] ? __fget_files+0x3a2/0x420 [ 949.035036][T31840] __x64_sys_sendmsg+0x1b1/0x290 [ 949.035062][T31840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 949.035105][T31840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.035129][T31840] do_syscall_64+0x174/0x580 [ 949.035152][T31840] ? trace_irq_disable+0x3b/0x140 [ 949.035178][T31840] ? clear_bhb_loop+0x40/0x90 [ 949.035203][T31840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.035223][T31840] RIP: 0033:0x7f103699de99 [ 949.035243][T31840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.035261][T31840] RSP: 002b:00007f1034bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.035283][T31840] RAX: ffffffffffffffda RBX: 00007f1036c25fa0 RCX: 00007f103699de99 [ 949.035297][T31840] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 949.035309][T31840] RBP: 00007f1034bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 949.035320][T31840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.035331][T31840] R13: 00007f1036c26038 R14: 00007f1036c25fa0 R15: 00007ffff7380c48 [ 949.035365][T31840] [ 949.137498][T31842] netlink: 'syz.0.7854': attribute type 21 has an invalid length. [ 949.439164][T31842] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7854'. [ 949.466521][T31842] netlink: 'syz.0.7854': attribute type 5 has an invalid length. [ 949.474500][T31842] netlink: 'syz.0.7854': attribute type 6 has an invalid length. [ 949.667847][T31854] bridge8: entered promiscuous mode [ 949.683502][T31854] bridge8: entered allmulticast mode [ 949.718208][T31854] team0: Port device bridge8 added [ 950.293728][T31887] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 951.025981][T31908] tipc: Enabled bearer , priority 10 [ 951.053995][T31908] tipc: Enabling of bearer rejected, already enabled [ 951.354294][T31919] syzkaller0: entered promiscuous mode [ 951.366603][T31919] syzkaller0: entered allmulticast mode [ 951.414771][T31896] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 951.504008][T31919] tipc: Enabled bearer , priority 0 [ 951.569439][T31918] tipc: Resetting bearer [ 951.714682][T31918] tipc: Disabling bearer [ 951.876204][T31930] wg2 speed is unknown, defaulting to 1000 [ 952.845973][T31930] dvmrp0: entered allmulticast mode [ 952.849718][T31972] FAULT_INJECTION: forcing a failure. [ 952.849718][T31972] name failslab, interval 1, probability 0, space 0, times 0 [ 952.928128][T31972] CPU: 1 UID: 0 PID: 31972 Comm: syz.3.7903 Not tainted syzkaller #0 PREEMPT(full) [ 952.928158][T31972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 952.928170][T31972] Call Trace: [ 952.928178][T31972] [ 952.928187][T31972] dump_stack_lvl+0xe8/0x150 [ 952.928223][T31972] should_fail_ex+0x40c/0x560 [ 952.928253][T31972] should_failslab+0xa8/0x100 [ 952.928282][T31972] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 952.928308][T31972] ? ip_vs_conn_new+0x20e/0x2590 [ 952.928403][T31972] ? ip_vs_conn_new+0x20e/0x2590 [ 952.928431][T31972] ip_vs_conn_new+0x20e/0x2590 [ 952.928465][T31972] ? ip_vs_ct_in_get+0xab/0x1340 [ 952.928487][T31972] ? __pfx_ip_vs_conn_new+0x10/0x10 [ 952.928506][T31972] ? ip_vs_ct_in_get+0x12b0/0x1340 [ 952.928533][T31972] ? ip_vs_ct_in_get+0xab/0x1340 [ 952.928557][T31972] ? rcu_is_watching+0x15/0xb0 [ 952.928578][T31972] ? kfree+0x4d/0x640 [ 952.928604][T31972] ip_vs_schedule+0x139a/0x1d80 [ 952.928648][T31972] ? __pfx_ip_vs_schedule+0x10/0x10 [ 952.928688][T31972] ? __ip_vs_svc_fwm_find+0x621/0x6b0 [ 952.928723][T31972] ? ip_vs_service_find+0xbc/0x3c0 [ 952.928754][T31972] udp_conn_schedule+0x391/0x7a0 [ 952.928781][T31972] ? __pfx_udp_conn_schedule+0x10/0x10 [ 952.928802][T31972] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 952.928853][T31972] ? ipt_do_table+0x137f/0x15d0 [ 952.928933][T31972] ip_vs_in_hook+0xcaf/0x1c70 [ 952.928967][T31972] ? ip_vs_out_hook+0x997/0x1030 [ 952.928990][T31972] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 952.929036][T31972] ? nf_nat_ipv4_local_fn+0x321/0x570 [ 952.929082][T31972] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 952.929108][T31972] nf_hook_slow+0xc5/0x220 [ 952.929156][T31972] ? __pfx_dst_output+0x10/0x10 [ 952.929185][T31972] nf_hook+0x22a/0x3a0 [ 952.929217][T31972] ? nf_hook+0xa1/0x3a0 [ 952.929242][T31972] ? __pfx_nf_hook+0x10/0x10 [ 952.929272][T31972] ? __pfx_dst_output+0x10/0x10 [ 952.929304][T31972] ? __ip_local_out+0x152/0x6a0 [ 952.929335][T31972] __ip_local_out+0x558/0x6a0 [ 952.929362][T31972] ? __pfx_dst_output+0x10/0x10 [ 952.929393][T31972] ip_local_out+0x2a/0x190 [ 952.929424][T31972] ip_send_skb+0x45/0xc0 [ 952.929444][T31972] udp_send_skb+0x7ed/0xf70 [ 952.929477][T31972] udp_sendmsg+0x1971/0x2140 [ 952.929519][T31972] ? __pfx_udp_sendmsg+0x10/0x10 [ 952.929552][T31972] ? tomoyo_supervisor+0x4d2/0x1560 [ 952.929604][T31972] ? lockdep_hardirqs_on+0x7a/0x110 [ 952.929625][T31972] ? get_random_u32+0x13a/0x8b0 [ 952.929647][T31972] ? get_random_u32+0x4ce/0x8b0 [ 952.929676][T31972] udpv6_sendmsg+0x915/0x2610 [ 952.929718][T31972] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 952.929742][T31972] ? udp_lib_get_port+0x177b/0x1c60 [ 952.929763][T31972] ? udp_lib_get_port+0x177b/0x1c60 [ 952.929813][T31972] ? inet_send_prepare+0x1b4/0x260 [ 952.929847][T31972] ? lockdep_hardirqs_on+0x7a/0x110 [ 952.929868][T31972] ? inet_send_prepare+0x1b4/0x260 [ 952.929884][T31972] ? __local_bh_enable_ip+0xd0/0x130 [ 952.929906][T31972] ? inet_send_prepare+0x1b4/0x260 [ 952.929927][T31972] ? inet6_sendmsg+0xe4/0x120 [ 952.929953][T31972] ? __pfx_inet6_sendmsg+0x10/0x10 [ 952.929976][T31972] sock_sendmsg_nosec+0x90/0x180 [ 952.930008][T31972] ____sys_sendmsg+0x54e/0x850 [ 952.930038][T31972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 952.930072][T31972] ? import_iovec+0x73/0xa0 [ 952.930110][T31972] ___sys_sendmsg+0x2a5/0x360 [ 952.930129][T31972] ? __lock_acquire+0x683/0x2cf0 [ 952.930159][T31972] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.930216][T31972] ? __fget_files+0x2a/0x420 [ 952.930242][T31972] ? __fget_files+0x3a2/0x420 [ 952.930282][T31972] __x64_sys_sendmsg+0x1b1/0x290 [ 952.930309][T31972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 952.930348][T31972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.930367][T31972] do_syscall_64+0x174/0x580 [ 952.930386][T31972] ? trace_irq_disable+0x3b/0x140 [ 952.930407][T31972] ? clear_bhb_loop+0x40/0x90 [ 952.930427][T31972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.930443][T31972] RIP: 0033:0x7f103699de99 [ 952.930460][T31972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.930474][T31972] RSP: 002b:00007f1034bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.930494][T31972] RAX: ffffffffffffffda RBX: 00007f1036c26090 RCX: 00007f103699de99 [ 952.930506][T31972] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 952.930516][T31972] RBP: 00007f1034bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 952.930526][T31972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.930536][T31972] R13: 00007f1036c26128 R14: 00007f1036c26090 R15: 00007ffff7380c48 [ 952.930563][T31972] [ 952.930580][T31972] IPVS: ip_vs_conn_new(): no memory [ 953.181552][T31978] __nla_validate_parse: 3 callbacks suppressed [ 953.181572][T31978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7905'. [ 953.899765][T11525] dvmrp0: left allmulticast mode [ 954.546374][T32014] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 954.555786][T32014] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 955.250338][T32034] geneve1: entered promiscuous mode [ 955.256601][T32034] macsec0: entered promiscuous mode [ 955.262522][T32034] macsec0: entered allmulticast mode [ 955.267918][T32034] geneve1: entered allmulticast mode [ 955.277069][T32034] geneve1: left allmulticast mode [ 955.282489][T32034] geneve1: left promiscuous mode [ 955.744365][T32049] Cannot find add_set index 2 as target [ 956.024060][T32059] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7930'. [ 956.041983][T32059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7930'. [ 956.193497][T32067] bridge4: entered promiscuous mode [ 956.198934][T32067] bridge4: entered allmulticast mode [ 956.221499][T32067] team0: Port device bridge4 added [ 956.353618][T32073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.390861][T32073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.522051][T32076] erspan0: entered promiscuous mode [ 956.576646][T32076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7938'. [ 956.730268][T32085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7943'. [ 956.848651][T32089] syzkaller0: entered promiscuous mode [ 956.855424][T32089] syzkaller0: entered allmulticast mode [ 956.922441][T32094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7947'. [ 956.932962][T32094] netlink: 'syz.1.7947': attribute type 14 has an invalid length. [ 956.940863][T32094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7947'. [ 957.528658][T32112] netlink: 'syz.3.7954': attribute type 11 has an invalid length. [ 957.927867][T32123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7957'. [ 957.936891][T32123] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 958.615082][T32141] syzkaller0: entered promiscuous mode [ 958.620635][T32141] syzkaller0: entered allmulticast mode [ 958.889837][T32148] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7969'. [ 959.389615][T32160] tipc: Enabled bearer , priority 0 [ 959.397410][T32160] syzkaller0: entered promiscuous mode [ 959.402924][T32160] syzkaller0: entered allmulticast mode [ 959.637047][T32160] tipc: Resetting bearer [ 959.898640][T32149] tipc: Resetting bearer [ 959.978756][T32149] tipc: Disabling bearer [ 960.057600][T32174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7979'. [ 960.155654][T32182] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7982'. [ 960.260493][T32184] syzkaller0: entered promiscuous mode [ 960.290430][T32184] syzkaller0: entered allmulticast mode [ 960.571929][T32197] tipc: Enabled bearer , priority 0 [ 960.617321][T32202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7988'. [ 960.631600][T32200] IPVS: length: 35 != 24 [ 960.637716][T32183] tipc: Resetting bearer [ 960.770880][T32183] tipc: Disabling bearer [ 961.267637][T32226] netlink: 'syz.3.7997': attribute type 1 has an invalid length. [ 961.417318][T32226] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 961.567960][T32223] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7996'. [ 961.582185][T32228] sctp: [Deprecated]: syz.0.7998 (pid 32228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 961.582185][T32228] Use struct sctp_sack_info instead [ 961.950431][T32237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.113820][T32245] netlink: 'syz.3.8004': attribute type 8 has an invalid length. [ 962.122073][T32245] netlink: 'syz.3.8004': attribute type 8 has an invalid length. [ 962.130286][T32245] netlink: 'syz.3.8004': attribute type 8 has an invalid length. [ 962.138345][T32245] netlink: 'syz.3.8004': attribute type 8 has an invalid length. [ 962.152224][T32237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.182588][T32245] netlink: 'syz.3.8004': attribute type 8 has an invalid length. [ 962.238822][T32251] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8003'. [ 962.255119][T32252] netlink: 'syz.2.8005': attribute type 4 has an invalid length. [ 962.277664][T32242] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8001'. [ 962.290905][T32242] erspan0: entered promiscuous mode [ 962.343679][T32242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8001'. [ 962.522614][T32261] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8009'. [ 962.563648][T32261] bridge0: port 3(ip6gretap0) entered disabled state [ 962.570716][T32261] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.578253][T32261] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.841382][T32271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8013'. [ 962.858201][T32274] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 963.641332][T32310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 963.649546][T32310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 963.657699][T32310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 963.665843][T32310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 963.673829][T32310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 963.681982][T32310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 963.690130][T32310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 963.698244][T32310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 963.706256][T32310] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 964.056920][T32318] __nla_validate_parse: 15 callbacks suppressed [ 964.056943][T32318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8029'. [ 964.409279][T32328] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8037'. [ 964.445966][T32328] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8037'. [ 964.738514][T32334] netlink: 'syz.0.8038': attribute type 1 has an invalid length. [ 964.799279][T32334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8038'. [ 964.921517][T32339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8040'. [ 965.080021][T32346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8042'. [ 965.800035][T32362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8050'. [ 966.055250][T32379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8055'. [ 966.121888][T32382] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8057'. [ 966.225642][T32382] FAULT_INJECTION: forcing a failure. [ 966.225642][T32382] name failslab, interval 1, probability 0, space 0, times 0 [ 966.264749][T32382] CPU: 0 UID: 0 PID: 32382 Comm: syz.2.8057 Not tainted syzkaller #0 PREEMPT(full) [ 966.264780][T32382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 966.264793][T32382] Call Trace: [ 966.264802][T32382] [ 966.264813][T32382] dump_stack_lvl+0xe8/0x150 [ 966.264851][T32382] should_fail_ex+0x40c/0x560 [ 966.264883][T32382] should_failslab+0xa8/0x100 [ 966.264917][T32382] __kmalloc_noprof+0xfe/0x720 [ 966.264946][T32382] ? iovec_from_user+0x87/0x250 [ 966.264975][T32382] ? iovec_from_user+0x87/0x250 [ 966.265013][T32382] iovec_from_user+0x87/0x250 [ 966.265048][T32382] __import_iovec+0x15e/0x7e0 [ 966.265091][T32382] import_iovec+0x73/0xa0 [ 966.265126][T32382] ___sys_sendmsg+0x255/0x360 [ 966.265152][T32382] ? __lock_acquire+0x683/0x2cf0 [ 966.265187][T32382] ? __pfx____sys_sendmsg+0x10/0x10 [ 966.265266][T32382] ? __fget_files+0x2a/0x420 [ 966.265295][T32382] ? __fget_files+0x3a2/0x420 [ 966.265332][T32382] __x64_sys_sendmsg+0x1b1/0x290 [ 966.265359][T32382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 966.265403][T32382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.265427][T32382] do_syscall_64+0x174/0x580 [ 966.265453][T32382] ? trace_irq_disable+0x3b/0x140 [ 966.265480][T32382] ? clear_bhb_loop+0x40/0x90 [ 966.265506][T32382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.265527][T32382] RIP: 0033:0x7f221a79de99 [ 966.265547][T32382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.265566][T32382] RSP: 002b:00007f22189f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 966.265590][T32382] RAX: ffffffffffffffda RBX: 00007f221aa25fa0 RCX: 00007f221a79de99 [ 966.265605][T32382] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 966.265619][T32382] RBP: 00007f22189f6090 R08: 0000000000000000 R09: 0000000000000000 [ 966.265632][T32382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.265645][T32382] R13: 00007f221aa26038 R14: 00007f221aa25fa0 R15: 00007ffcd927c658 [ 966.265678][T32382] [ 966.709180][T32396] syzkaller0: entered promiscuous mode [ 966.740412][T32396] syzkaller0: entered allmulticast mode [ 966.899758][T32408] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 967.150911][T32421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8071'. [ 967.240460][T32418] wg2 speed is unknown, defaulting to 1000 [ 967.356985][T32428] FAULT_INJECTION: forcing a failure. [ 967.356985][T32428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.406323][T32428] CPU: 1 UID: 0 PID: 32428 Comm: syz.3.8072 Not tainted syzkaller #0 PREEMPT(full) [ 967.406353][T32428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 967.406364][T32428] Call Trace: [ 967.406372][T32428] [ 967.406381][T32428] dump_stack_lvl+0xe8/0x150 [ 967.406417][T32428] should_fail_ex+0x40c/0x560 [ 967.406449][T32428] _copy_to_user+0x31/0xb0 [ 967.406473][T32428] simple_read_from_buffer+0xe1/0x170 [ 967.406509][T32428] proc_fail_nth_read+0x1bb/0x230 [ 967.406543][T32428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 967.406570][T32428] ? rw_verify_area+0x24a/0x4c0 [ 967.406596][T32428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 967.406618][T32428] vfs_read+0x213/0xa80 [ 967.406638][T32428] ? __pfx___mutex_lock+0x10/0x10 [ 967.406658][T32428] ? __pfx_vfs_read+0x10/0x10 [ 967.406675][T32428] ? __fget_files+0x2a/0x420 [ 967.406709][T32428] ? __fget_files+0x3a2/0x420 [ 967.406730][T32428] ? __fget_files+0x2a/0x420 [ 967.406759][T32428] ksys_read+0x150/0x270 [ 967.406777][T32428] ? __pfx_ksys_read+0x10/0x10 [ 967.406799][T32428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.406817][T32428] do_syscall_64+0x174/0x580 [ 967.406835][T32428] ? trace_irq_disable+0x3b/0x140 [ 967.406857][T32428] ? clear_bhb_loop+0x40/0x90 [ 967.406877][T32428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.406893][T32428] RIP: 0033:0x7f103695e6ce [ 967.406910][T32428] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 967.406924][T32428] RSP: 002b:00007f1034bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 967.406943][T32428] RAX: ffffffffffffffda RBX: 00007f1034bf66c0 RCX: 00007f103695e6ce [ 967.406955][T32428] RDX: 000000000000000f RSI: 00007f1034bf60a0 RDI: 0000000000000005 [ 967.406965][T32428] RBP: 00007f1034bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 967.406975][T32428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.406985][T32428] R13: 00007f1036c26038 R14: 00007f1036c25fa0 R15: 00007ffff7380c48 [ 967.407012][T32428] [ 968.317942][T32447] x_tables: duplicate underflow at hook 3 [ 968.344289][T32454] netlink: 'syz.2.8082': attribute type 4 has an invalid length. [ 968.391593][T32454] netlink: 'syz.2.8082': attribute type 4 has an invalid length. [ 968.570142][T32463] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 968.583202][T32466] netlink: 'syz.0.8087': attribute type 83 has an invalid length. [ 968.593538][T32454] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 969.725668][T32476] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 969.865138][T32497] __nla_validate_parse: 1 callbacks suppressed [ 969.865162][T32497] netlink: 192 bytes leftover after parsing attributes in process `syz.2.8096'. [ 970.526733][T32513] vcan0: entered promiscuous mode [ 970.555156][T32513] vcan0: entered allmulticast mode [ 970.847201][T32521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8103'. [ 971.513595][T32535] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8110'. [ 971.906466][T32545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8113'. [ 972.611881][T32577] netlink: 192 bytes leftover after parsing attributes in process `syz.4.8125'. [ 972.711193][T32578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8124'. [ 973.719607][T32511] udevd[32511]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 973.764722][T32599] udevd[32599]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 973.783138][T32613] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8135'. [ 974.610308][T32638] netlink: 'syz.0.8143': attribute type 4 has an invalid length. [ 974.619235][T32638] netlink: 'syz.0.8143': attribute type 4 has an invalid length. [ 974.640793][T32639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8143'. [ 974.649716][T32639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8143'. [ 974.658694][T32639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8143'. [ 974.919520][T32638] netlink: 'syz.0.8143': attribute type 4 has an invalid length. [ 974.973145][T32638] netlink: 'syz.0.8143': attribute type 4 has an invalid length. [ 974.981867][T32638] netlink: 'syz.0.8143': attribute type 4 has an invalid length. [ 974.990763][T32638] netlink: 'syz.0.8143': attribute type 4 has an invalid length. [ 975.001040][T32638] netlink: 'syz.0.8143': attribute type 4 has an invalid length. [ 975.009345][T32638] netlink: 'syz.0.8143': attribute type 4 has an invalid length. [ 975.017620][T32638] netlink: 'syz.0.8143': attribute type 4 has an invalid length. [ 975.025687][T32638] netlink: 'syz.0.8143': attribute type 4 has an invalid length. [ 975.181389][T32639] __nla_validate_parse: 1 callbacks suppressed [ 975.181412][T32639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8143'. [ 975.246793][T32639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8143'. [ 975.256867][T32639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8143'. [ 975.309367][T32663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8150'. [ 975.336262][T32664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8149'. [ 975.436854][T32669] syzkaller0: entered promiscuous mode [ 975.443358][T32669] syzkaller0: entered allmulticast mode [ 975.745462][T32673] ip6gre2: entered allmulticast mode [ 975.754074][ T48] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 975.809986][T32677] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8155'. [ 975.905207][T32678] syzkaller0: entered promiscuous mode [ 975.915426][T32678] syzkaller0: entered allmulticast mode [ 976.899827][T32715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8167'. [ 977.160228][T32721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8169'. [ 977.706118][T32730] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8172'. [ 977.763642][T32730] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8172'. [ 977.916181][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 978.350030][T32751] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 978.423633][T32751] bond5 (unregistering): Released all slaves [ 979.088297][ T301] xfrm1: entered allmulticast mode [ 979.534620][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 980.010127][T32767] wg2 speed is unknown, defaulting to 1000 [ 980.159730][ T341] Bluetooth: MGMT ver 1.23 [ 980.168751][ T341] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 980.178015][ T341] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 981.290346][ T379] __nla_validate_parse: 3 callbacks suppressed [ 981.290369][ T379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8209'. [ 981.338024][ T385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8209'. [ 981.487282][ T379] hsr_slave_1 (unregistering): left promiscuous mode [ 981.999654][ T404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8220'. [ 982.059642][ T404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8220'. [ 982.070368][ T409] syzkaller0: entered promiscuous mode [ 982.106154][ T409] syzkaller0: entered allmulticast mode [ 982.218337][ T404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8220'. [ 982.233922][ T404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8220'. [ 982.329489][ T404] geneve3: entered promiscuous mode [ 982.416122][ T404] sctp: [Deprecated]: syz.1.8220 (pid 404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 982.416122][ T404] Use struct sctp_sack_info instead [ 982.443950][ T424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8225'. [ 982.612441][ T427] sctp: [Deprecated]: syz.1.8220 (pid 427) Use of int in max_burst socket option deprecated. [ 982.612441][ T427] Use struct sctp_assoc_value instead [ 982.653596][ T427] bond4: option primary_reselect: invalid value (6) [ 982.669774][ T427] bond4 (unregistering): Released all slaves [ 982.895599][ T439] vlan4: entered promiscuous mode [ 983.876547][ T463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8236'. [ 984.010367][ T469] syz.4.8237: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 984.025410][ T469] CPU: 1 UID: 0 PID: 469 Comm: syz.4.8237 Not tainted syzkaller #0 PREEMPT(full) [ 984.025438][ T469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 984.025451][ T469] Call Trace: [ 984.025460][ T469] [ 984.025471][ T469] dump_stack_lvl+0xe8/0x150 [ 984.025521][ T469] warn_alloc+0x24c/0x270 [ 984.025570][ T469] ? stack_depot_save_flags+0x33/0x800 [ 984.025603][ T469] ? __pfx_warn_alloc+0x10/0x10 [ 984.025632][ T469] ? kasan_save_track+0x3e/0x80 [ 984.025660][ T469] ? __kasan_kmalloc+0x93/0xb0 [ 984.025687][ T469] ? xsk_setsockopt+0x52a/0x960 [ 984.025708][ T469] ? do_sock_setsockopt+0x17c/0x1b0 [ 984.025729][ T469] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 984.025751][ T469] ? do_syscall_64+0x174/0x580 [ 984.025772][ T469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.025801][ T469] __vmalloc_node_range_noprof+0x12c/0x1730 [ 984.025855][ T469] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 984.025887][ T469] ? __kasan_kmalloc+0x93/0xb0 [ 984.025915][ T469] ? __kmalloc_cache_noprof+0x32d/0x660 [ 984.025942][ T469] ? __kmalloc_cache_noprof+0x150/0x660 [ 984.025971][ T469] vmalloc_user_noprof+0xad/0xe0 [ 984.025995][ T469] ? xskq_create+0xbf/0x170 [ 984.026019][ T469] xskq_create+0xbf/0x170 [ 984.026044][ T469] xsk_init_queue+0x8a/0xe0 [ 984.026070][ T469] xsk_setsockopt+0x52a/0x960 [ 984.026094][ T469] ? __pfx_xsk_setsockopt+0x10/0x10 [ 984.026117][ T469] ? __pfx_aa_sk_perm+0x10/0x10 [ 984.026144][ T469] ? aa_sock_opt_perm+0xff/0x1a0 [ 984.026171][ T469] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 984.026195][ T469] ? __pfx_xsk_setsockopt+0x10/0x10 [ 984.026218][ T469] do_sock_setsockopt+0x17c/0x1b0 [ 984.026246][ T469] __x64_sys_setsockopt+0x13d/0x1b0 [ 984.026272][ T469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.026295][ T469] do_syscall_64+0x174/0x580 [ 984.026319][ T469] ? trace_irq_disable+0x3b/0x140 [ 984.026347][ T469] ? clear_bhb_loop+0x40/0x90 [ 984.026374][ T469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.026394][ T469] RIP: 0033:0x7f43a2b9de99 [ 984.026416][ T469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.026435][ T469] RSP: 002b:00007f43a399d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 984.026459][ T469] RAX: ffffffffffffffda RBX: 00007f43a2e26090 RCX: 00007f43a2b9de99 [ 984.026484][ T469] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 984.026497][ T469] RBP: 00007f43a2c33eaf R08: 0000000000000004 R09: 0000000000000000 [ 984.026511][ T469] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.026524][ T469] R13: 00007f43a2e26128 R14: 00007f43a2e26090 R15: 00007ffe51ef7858 [ 984.026558][ T469] [ 984.026568][ T469] Mem-Info: [ 984.219185][ T479] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8237'. [ 984.225973][ T469] active_anon:9363 inactive_anon:0 isolated_anon:0 [ 984.225973][ T469] active_file:0 inactive_file:44055 isolated_file:0 [ 984.225973][ T469] unevictable:768 dirty:105 writeback:0 [ 984.225973][ T469] slab_reclaimable:11725 slab_unreclaimable:158834 [ 984.225973][ T469] mapped:35227 shmem:4571 pagetables:1675 [ 984.225973][ T469] sec_pagetables:0 bounce:0 [ 984.225973][ T469] kernel_misc_reclaimable:0 [ 984.225973][ T469] free:1253040 free_pcp:10308 free_cma:0 [ 984.421424][ T469] Node 0 active_anon:40752kB inactive_anon:0kB active_file:0kB inactive_file:176016kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144308kB dirty:420kB writeback:0kB shmem:20148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14976kB pagetables:6256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 984.456042][ T469] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 984.512314][ T469] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.571878][ T483] validate_nla: 55 callbacks suppressed [ 984.571973][ T483] netlink: 'syz.1.8242': attribute type 4 has an invalid length. [ 984.626801][ T483] netlink: 'syz.1.8242': attribute type 4 has an invalid length. [ 984.636264][ T469] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 984.642108][ T469] Node 0 DMA32 free:1055700kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44152kB inactive_anon:0kB active_file:0kB inactive_file:176016kB unevictable:1536kB writepending:420kB zspages:0kB present:3129332kB managed:2548616kB mlocked:0kB bounce:0kB free_pcp:36472kB local_pcp:24792kB free_cma:0kB [ 984.753399][ T483] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8242'. [ 984.773294][ T469] lowmem_reserve[]: 0 0 0 0 0 [ 984.778110][ T469] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.862972][ T469] lowmem_reserve[]: 0 0 0 0 0 [ 984.867975][ T469] Node 1 Normal free:3939400kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.940463][ T469] lowmem_reserve[]: 0 0 0 0 0 [ 984.945286][ T469] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 984.958019][ T469] Node 0 DMA32: 1692*4kB (UME) 806*8kB (UM) 329*16kB (UE) 1169*32kB (UME) 114*64kB (UME) 58*128kB (UME) 41*256kB (UME) 14*512kB (UM) 15*1024kB (UM) 9*2048kB (UM) 227*4096kB (UM) = 1051856kB [ 984.977003][ T469] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 984.989155][ T469] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 5*16kB (UM) 11*32kB (UM) 8*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3939400kB [ 985.022198][ T469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 985.037722][ T494] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.045027][ T494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.054949][ T469] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 985.064557][ T469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 985.074275][ T469] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 985.083603][ T469] 50847 total pagecache pages [ 985.088305][ T469] 0 pages in swap cache [ 985.092610][ T469] Free swap = 124996kB [ 985.104685][ T469] Total swap = 124996kB [ 985.109129][ T469] 2097051 pages RAM [ 985.112967][ T469] 0 pages HighMem/MovableOnly [ 985.117678][ T469] 428217 pages reserved [ 985.121864][ T469] 0 pages cma reserved [ 985.144514][ T494] dummy0: left promiscuous mode [ 985.318951][ T494] net_ratelimit: 45 callbacks suppressed [ 985.318977][ T494] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 985.361936][ T496] vlan3: entered promiscuous mode [ 985.990592][ T518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 986.553299][ T548] sctp: [Deprecated]: syz.2.8264 (pid 548) Use of int in max_burst socket option deprecated. [ 986.553299][ T548] Use struct sctp_assoc_value instead [ 986.573346][ T546] vlan5: entered promiscuous mode [ 987.459020][ T570] __nla_validate_parse: 4 callbacks suppressed [ 987.459043][ T570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8272'. [ 987.474235][ T570] netlink: 'syz.0.8272': attribute type 1 has an invalid length. [ 987.481994][ T570] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8272'. [ 987.500250][ T570] syzkaller0: entered promiscuous mode [ 987.504667][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 987.535473][ T570] syzkaller0: entered allmulticast mode [ 987.717767][ T570] tc action pedit unable to extract header offset for header type (0x5) [ 987.728299][ T570] tc action pedit unable to extract header offset for header type (0x5) [ 987.736778][ T570] tc action pedit unable to extract header offset for header type (0x5) [ 987.745273][ T570] tc action pedit unable to extract header offset for header type (0x5) [ 987.753715][ T570] tc action pedit unable to extract header offset for header type (0x5) [ 987.762223][ T570] tc action pedit unable to extract header offset for header type (0x5) [ 987.770654][ T570] tc action pedit unable to extract header offset for header type (0x5) [ 987.779128][ T570] tc action pedit unable to extract header offset for header type (0x5) [ 987.787516][ T570] tc action pedit unable to extract header offset for header type (0x5) [ 987.795918][ T570] tc action pedit unable to extract header offset for header type (0x5) [ 987.804334][ T570] 0: reclassify loop, rule prio 0, protocol 800 [ 988.034378][ T588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8278'. [ 988.137226][ T580] bridge7: entered promiscuous mode [ 988.142513][ T580] bridge7: entered allmulticast mode [ 988.144878][ T592] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8280'. [ 988.159687][ T580] team0: Port device bridge7 added [ 988.169805][ T592] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8280'. [ 988.458253][ T603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8285'. [ 988.826358][ T626] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 989.169908][ T633] netlink: 'syz.2.8296': attribute type 1 has an invalid length. [ 989.887725][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 990.027637][ T671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8307'. [ 990.365022][ T678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8311'. [ 990.638831][ T697] netlink: 'syz.3.8315': attribute type 210 has an invalid length. [ 992.116671][ T749] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8325'. [ 992.149410][ T749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8325'. [ 992.418458][ T749] bridge_slave_1 (unregistering): left allmulticast mode [ 992.463514][ T749] bridge_slave_1 (unregistering): left promiscuous mode [ 992.504566][ T749] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.627693][ T761] netlink: 'syz.1.8329': attribute type 1 has an invalid length. [ 992.811651][ T761] bond4: entered promiscuous mode [ 992.817192][ T761] bond4: entered allmulticast mode [ 992.823059][ T761] 8021q: adding VLAN 0 to HW filter on device bond4 [ 993.004189][ T771] __nla_validate_parse: 1 callbacks suppressed [ 993.004211][ T771] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8332'. [ 993.072040][ T780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8334'. [ 993.276133][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 993.361770][T11525] tipc: Subscription rejected, illegal request [ 993.387944][ T791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8339'. [ 993.416148][ T801] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8340'. [ 993.490461][ T796] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8340'. [ 993.574038][ T796] syzkaller0: entered promiscuous mode [ 993.592397][ T796] syzkaller0: entered allmulticast mode [ 993.700631][ T812] vlan3: entered promiscuous mode [ 994.222019][ T835] netlink: 'syz.2.8348': attribute type 1 has an invalid length. [ 994.242563][ T835] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8348'. [ 995.139846][ T868] bridge8: entered promiscuous mode [ 995.154104][ T868] bridge8: entered allmulticast mode [ 995.169370][ T868] team0: Port device bridge8 added [ 995.514903][ T872] bridge0: port 3(ip6gretap0) entered blocking state [ 995.535614][ T872] bridge0: port 3(ip6gretap0) entered forwarding state [ 995.542891][ T872] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.550187][ T872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.658398][ T872] 8021q: adding VLAN 0 to HW filter on device .` [ 995.841991][ T887] netlink: 'syz.1.8361': attribute type 32 has an invalid length. [ 995.946130][ T872] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 996.545559][ T901] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8363'. [ 996.569306][ T901] x_tables: duplicate underflow at hook 3 [ 996.588032][ T901] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8363'. [ 996.896515][ T925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8368'. [ 997.015953][ T937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8373'. [ 997.052068][ T931] bond5: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 997.070498][ T931] bond5: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 997.083941][ T931] bond5: entered allmulticast mode [ 997.160396][ T937] bond5: option broadcast_neighbor: invalid value (4) [ 997.173437][ T937] bond5 (unregistering): Released all slaves [ 997.309952][ T916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 998.779029][ T1019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8385'. [ 998.788909][ T1019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8385'. [ 998.914589][ T1026] netlink: 192 bytes leftover after parsing attributes in process `syz.4.8389'. [ 999.407711][ T1037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8393'. [ 999.419106][ T1038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8393'. [ 999.608363][ T1052] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 999.614969][ T1044] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 999.665642][ T1058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8397'. [ 1000.225163][T12215] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1000.305011][ T1082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1000.332026][ T1082] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8400'. [ 1000.354123][ T1082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8400'. [ 1000.600202][ T1106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8403'. [ 1000.762481][ T1115] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1000.948161][ T1126] netlink: 'syz.2.8407': attribute type 12 has an invalid length. [ 1000.970783][ T1126] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8407'. [ 1001.464732][ T1145] bridge0: port 3(ip6gretap0) entered disabled state [ 1001.471797][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.000452][ T1162] wg2 speed is unknown, defaulting to 1000 [ 1002.277574][ T1170] 8021q: VLANs not supported on gre0 [ 1002.663681][ T1187] openvswitch: netlink: Actions may not be safe on all matching packets [ 1002.874255][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1004.025769][ T1197] ±ÿ: renamed from lo (while UP) [ 1004.065698][ T1225] __nla_validate_parse: 9 callbacks suppressed [ 1004.065731][ T1225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8431'. [ 1004.206414][ T1225] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 1004.217841][ T1225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8431'. [ 1004.294680][ T1225] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8431'. [ 1004.304968][ T1225] bond6: entered promiscuous mode [ 1004.310062][ T1225] bridge7: entered promiscuous mode [ 1004.320287][ T1225] bond6: entered allmulticast mode [ 1004.325483][ T1225] bridge7: entered allmulticast mode [ 1004.332359][ T1225] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1004.644811][ T1243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8439'. [ 1004.657111][ T1241] netlink: 192 bytes leftover after parsing attributes in process `syz.0.8437'. [ 1004.758720][ T1245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8440'. [ 1005.048526][ T1256] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8443'. [ 1005.063279][ T1258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8444'. [ 1005.085242][ T1256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.646892][ T1280] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 1005.737974][ T1277] wg2 speed is unknown, defaulting to 1000 [ 1006.618674][ T1305] syzkaller0: entered promiscuous mode [ 1006.624231][ T1305] syzkaller0: entered allmulticast mode [ 1006.693022][ T1320] vlan5: entered promiscuous mode [ 1007.327508][ T1334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8459'. [ 1007.339689][ T1330] xfrm0: entered allmulticast mode [ 1007.353746][ T1334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8459'. [ 1007.764693][ T1342] IPv6: sit1: Disabled Multicast RS [ 1008.168315][ T1370] vlan4: entered promiscuous mode [ 1008.808908][ T1386] wg2 speed is unknown, defaulting to 1000 [ 1009.023353][ T1389] bridge10: entered promiscuous mode [ 1009.028723][ T1389] bridge10: entered allmulticast mode [ 1009.057806][ T1389] team0: Port device bridge10 added [ 1009.153388][ T1394] mac80211_hwsim hwsim44 syzkaller0: left promiscuous mode [ 1009.160676][ T1394] mac80211_hwsim hwsim44 syzkaller0: left allmulticast mode [ 1009.564438][ T1411] check_preemption_disabled: 57 callbacks suppressed [ 1009.564488][ T1411] BUG: using smp_processor_id() in preemptible [00000000] code: syz.4.8478/1411 [ 1009.580437][ T1411] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 1009.586554][ T1411] CPU: 1 UID: 0 PID: 1411 Comm: syz.4.8478 Not tainted syzkaller #0 PREEMPT(full) [ 1009.586581][ T1411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1009.586594][ T1411] Call Trace: [ 1009.586606][ T1411] [ 1009.586617][ T1411] dump_stack_lvl+0xe8/0x150 [ 1009.586654][ T1411] check_preemption_disabled+0xd3/0xe0 [ 1009.586688][ T1411] bpf_mem_cache_free_rcu+0x48/0xc0 [ 1009.586721][ T1411] rhtab_delete_elem+0x185a/0x1b30 [ 1009.586751][ T1411] ? rhtab_delete_elem+0x15c/0x1b30 [ 1009.586781][ T1411] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 1009.586826][ T1411] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 1009.586862][ T1411] bpf_map_do_batch+0x445/0x630 [ 1009.586902][ T1411] __sys_bpf+0x906/0xd90 [ 1009.586941][ T1411] ? __pfx___sys_bpf+0x10/0x10 [ 1009.586968][ T1411] ? sock_do_ioctl+0x254/0x320 [ 1009.587003][ T1411] ? do_futex+0x458/0x4e0 [ 1009.587080][ T1411] ? rcu_is_watching+0x15/0xb0 [ 1009.587110][ T1411] __x64_sys_bpf+0xba/0xd0 [ 1009.587138][ T1411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.587163][ T1411] do_syscall_64+0x174/0x580 [ 1009.587193][ T1411] ? clear_bhb_loop+0x40/0x90 [ 1009.587227][ T1411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.587250][ T1411] RIP: 0033:0x7f43a2b9de99 [ 1009.587270][ T1411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.587289][ T1411] RSP: 002b:00007f43a39be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1009.587312][ T1411] RAX: ffffffffffffffda RBX: 00007f43a2e25fa0 RCX: 00007f43a2b9de99 [ 1009.587328][ T1411] RDX: 0000000000000038 RSI: 0000200000000540 RDI: 0000000000000019 [ 1009.587342][ T1411] RBP: 00007f43a2c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1009.587356][ T1411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1009.587369][ T1411] R13: 00007f43a2e26038 R14: 00007f43a2e25fa0 R15: 00007ffe51ef7858 [ 1009.587404][ T1411] [ 1010.063076][ T1414] __nla_validate_parse: 4 callbacks suppressed [ 1010.063101][ T1414] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8479'.