last executing test programs: 2.355685434s ago: executing program 4 (id=1584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xd}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x3, 0x6, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x9, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc0, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0xfffffffb, 0xa, 0x6407, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x0, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xeb, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x81, 0x1, 0x8, 0xa, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1ff, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0x0, 0x9, 0x4, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x9, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x3, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0x5, 0x10, 0x100, 0x40, 0xc, 0x400, 0x9151, 0x9, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0x64, 0x9, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8, 0x7fff, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x1, 0x1, 0x5c, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x1007ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x6c8, 0x8, 0x4, 0x4, 0x4, 0x81, 0xdf, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67a, 0x5, 0xaa, 0x2, 0x8000, 0x4, 0x5, 0x2, 0xfff, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0xd99b, 0x55aa77c9, 0x56a, 0x9, 0x8, 0x200, 0x10001, 0x5, 0x6, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x1ff, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x4, 0x4, 0x1ff, 0x101, 0xffff, 0x12, 0x5, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x6, 0x5, 0x401, 0x8, 0x4, 0x80000000, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0xea, 0x44081}, 0x0) 2.076575002s ago: executing program 4 (id=1589): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="00000000c8b02518200012800b00010065727370616e00001000028004001200050016000519000048da2798380bd7c9fd0bca485e4e8e4c5c9bd4459e387f131b6609a736047e9bf0b5361319709bd777f59e61fb21666a5341c0c58dd1b0ee925446c0867592a854ede8150a5988cbcc373793c79c0e36fdcca7121d8d24ae7ee67b7999826b7de9a3c58e9978ab70547cf5d160f7746f46eb276deaa6ee8bda19aad133c1605e32f31109271a59ed3d3256e91d3ae88de2524de00e025a11dc394ea364c250771fca48862f64503e16625e31fa77d31d6fe1c91722ee6419e1e0ce1c5e85af49b62c13c9477d17d01e3e5849017611621fa9ec0374638871f91a7c1424c649ed00818c88fddf5a42d56525eb"], 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x4014014) r1 = socket$xdp(0x2c, 0x3, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="050000000500000002c8f6000900000000e6725daae028e11c2a1185ae083215e697d302d0ef2394a32a05ac957640e81c8731b998019b043eb287bdc099669ee10c3511b798c9230cd5beb610c0b5aafed509246dbe0ff46c7ad89973475008c87a244508bb0c81da40702c396bf5651631f68f70eb1b51656a1642abe5b9d38dff2b5959cbc46ef66639f928b0ed6c17a9d9", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r1, 0x80000000) socket$inet6(0xa, 0x3, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x4020600) unshare(0x800) socket$inet_smc(0x2b, 0x1, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f00000005c0)={@empty, @empty}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES64=r1, @ANYBLOB="0000000000000000000000000400000000f8ffffff00000000000000", @ANYBLOB="acb62aa3e8a77d03406212ecdfa8eaffcdcfdee688f62691025835937570f7f557ff89a4cd87d17309fcb50cd03061df08446907daa32004c81768b380f1212c9899d89d6f1ef0c33277106a350ef64fe4c9746d0f77989e840b0e5312f1b387917e755ad348992b5b1376e941678155d762f5b86aa586237d502364a52f4eacaae7920c30acc63e02b0082aa8"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000048500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000240)=r6, 0x4) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000906010800000000000000210200ffec0900020073797a3100000000050001000700000004000880"], 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd700000100000010000000c0002000400000000000000100007800c00018008000100", @ANYRES16, @ANYBLOB="0c0005001e"], 0x3c}}, 0x4000004) bind$packet(r2, &(0x7f0000000000)={0x11, 0x1b, 0x0, 0x1, 0x40, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0100000044090000efffffff00000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000000000602f030000f1b68c3e70a5d4bb02ab9dd1826faf62d4bcfd6c350a928a417ccf61f72b6378965ff4776ad1e8e0b6d8bc529caeb5e8ff90381a02e9b1826bd45bc45cb236d7", @ANYRES32, @ANYBLOB="3add33be810193cdb42c44372ce616f7151231bb204735d7e16a85d053e26578dae588ae93d5c6aa440658471b28a72e35f5cc2e674e459803809bfc7cfab831926242ce2f853b86", @ANYBLOB="6c2edde160ee03f3d313f61a2cc4fbae79efa90ce8815f4038bb98e2804a8687e07bf6043effdd873ca07c1bbf3f230b1ac9c9ca5028cb32a46a9b6af10cde649277ccd49a8d5b72ea4b2ab7c31e82c7d5159fc3f94b02f693f2a89cfa1454a87c337630116ab7108ef87f77cec1e015f55d5309348f75ff41629176a819e1a554b20a07c7298b1051c68f983e027729d6b1abcde19ff172192713a344c35ca785ddc8beb057366fb3094e783b1c7524e29f0e7882435845cb544fb1ea537158069a97ada1af5ab22c04e3957dda2265b352c5cc"], 0x80}, 0x1, 0x0, 0x0, 0x20008000}, 0x8050) 1.889196244s ago: executing program 0 (id=1591): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0xc00, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1.82821781s ago: executing program 4 (id=1593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x68, 0x41, 0x1, 0x70bd29, 0x4, {0x3}, [@nested={0x4, 0x47}, @nested={0x50, 0x1, 0x0, 0x1, [@nested={0x4c, 0x10, 0x0, 0x1, [@nested={0x46, 0x8, 0x0, 0x1, [@generic="7155e263fb868f191e02ccbdbbf28f29e0b716477cb244bc30e3ef3e444a5ced1d6fbb0e5c05b8767c7f01b8124e8d5f07e0e1cf3f1551cfbf8cf54285bf321992a2"]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0xe, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 1.720313009s ago: executing program 0 (id=1595): unshare(0x20000400) r0 = socket(0x1e, 0x4, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000140)=0x1, 0x4) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket(0x27, 0xa, 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000000)={0x1}) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={0x0, 0x8}, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="cfc6f751f4718daa0d12ffeb37ba2a71021312b2bfce37503cddf14c02d5c85e9385da4014c9e13975"], 0x50) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x40000002) socket(0x28, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.662207403s ago: executing program 2 (id=1596): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="1000a204080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f00000000c0), 0x0}, 0x20) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000040009000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, r5, 0x7, 0x1000002, 0x1, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x7}]}, 0x34}}, 0x40800) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000203010200000000000000369ce290948e52000a000010090002000000000700000000"], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x14, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@generic="0254"]}, 0x14}], 0x1, 0x0, 0x0, 0x48000}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x9}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg(r10, &(0x7f0000001d40)={&(0x7f0000000340)=@nfc={0x27, r11, 0x0, 0x3}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)="b39cfa8cf321678998e3ba118abf95d9a1ac29a86c4dd3adca3b7afebf7bdf16cac7ed14fdd52f587d522bc5f8269a382dc3f2ff7dbcb303a9bbad6d27adabf2e44cfeab2414eb3b31eb4e699977ea89ad8add310bbf9bab40387d72807d16fe12d1284f1de4622dbbb4cb4e4940e197fb304eb9ec11300220772d1391d93c5094107553a1a754ed05a59c4877d329211a5c9b192eea8d47151e302dc1045d7ac3292d8f6acd57991970ca59da523e2530a796535ee72462da", 0xb9}, {&(0x7f0000000480)="3ab7eb3f96031826cbd7db6d847356620ef67185596dfd958028f083b754904e3ef932624e5163ebab3877120d6807f8a4666f943ba1faa35746e650cad656521acae6ca3307eb149988ce28b5ab4b5c9dc94ea4c4439271b4b55c4fd411b5af547d7166322027a0d8b6f6817615e97291a003e405513170bff0448628f6d4de84439c287cbb7d17e6d6aa0b756f6847dd2340f79ed3dfe6a76f84e3784324ff6a8cadfa695e87cfcea27231bb25e8bc22162f349442719ef1a447dd8a23331cbc86adc0f804bf71e6e9dc21466b2f98c517dde50d35fde7a46e88c75d", 0xdd}], 0x2, &(0x7f0000001a40)=[{0xd0, 0x115, 0x5, "d7e6106c802658da29d5044cf0ea1b2957623ad89a2f81f0aa4404102b1365404c160e0195882a4f62b1fea79aadd4adb63527228728fe34d22ce42e560dcbb920291f243aaad2d8665051ca7462103447104af7daac64ef2c1fd575531a490ec61e981b01aa55dd6d5a9fda401dc651a52b128c40c5d74540b59b756b60839197a5b65fb881c4caebe1eb4d71436b565a7a516a883814d6497e2e76ad7b9aa54866fb6beccb902961d170b5758b8f2f733fed3e3d0adcbfddf4949960d2080e"}, {0x110, 0x81, 0x3, "fc81566e7420fdc52fb6e92c4257bfdb83eb033d2d9aed85ddf3d95745710ac1310ce122fc8fa9b9b3acb4a425995a6c90cc966a79986b181e8ddf01a36fd83ba72c9b0dce7e5713160626e36f6387a57453c9182596426d8d3c152662669ff7c273fb3b55289abbdbc36afefc2856ec88804884f8590035484f51fcaf3052297a7e5ade2f67cd60811451b4ffa2155dc76bc8b1026e70a07408f93b61401c035db8000cf4a2be299e68ef4fbc48cb9922980bec8974144efa47adf67af72d3a324f381d7be26868e258622c9e836b851f291a04c281f6123d52bd079577f494d85cca0e145e5729eb389adbd32b63a138260a1588655ecc2e"}, {0xd8, 0x12f9d2e25ef7a008, 0xa, "aa1323c65256a7b6483be6324b2df1165eb8a726bb04946d6fdf7f3c960102e914d8a563f5453bb67a8669a99510f38991807321fdd7ab1f30d394c4ca179b650debc9263e074a0118d3a36c7e18cb8cb2155be1374a22e36a1d237fa934c4b00101b888d8bdd4db3e3f4bad2dc05ba0aaddf0f806e6711ad0bb2e4452e7394545cf3f10a2c976aad6d80556766a68750887ca08391b44d2a4a9e6196ef27e2ef14f847ea20a90248bc3f21aabf766d4baaad8e54c2591ee848e75afc878a6d6a5a99d"}], 0x2b8}, 0x8000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000050c0)={0x262c, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x260c, 0x1, 0x0, 0x1, [@nested={0x2608, 0x10, 0x0, 0x1, [@nested={0x2604, 0xb, 0x0, 0x1, [@nested={0x25fd, 0xa0, 0x0, 0x1, [@nested={0x106b, 0x57, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @pid}, @generic="2cd882e7635b2a5a73131a", @generic="e2d69d5c9741ff50162b8292cdf098ff0e9b2a97e323f2945aa65a98fe0ac2b9b08072c87644bb720876abf048f087f76037f1a8d10a1a911a5282b225b3d55fb6318daf", @generic="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", @typed={0x4, 0x58}, @typed={0x4, 0xce}, @typed={0x8, 0x78, 0x0, 0x0, @u32=0x1}]}, @generic="2b597872139d88c8810d3c6f37c40ed347dc7d009069cc6b53f3c334e285314b03474de18fb1c7e61c3e1162289c51391993b61ca12e02e5f8d5dfb31ca32fdd051abad1ec67628f617eecde6d6c111d9d92a66e22b561145d5bd2185916dee7845dfb8f3c04a3aae1f6cf524b706520e9e1037bc4cb54ecbce6dcfcf763467a9740c61ea95ae0bc85c482e685ac0ef1bb89671b7dff96c477a5241f203e667c0909acb97e2f93bbcd0209eee7a0196be1f58ceabf5911e9dfc4f2238812091d9b990a84c9f3799ac1b95758defd4376960a529f6bcfb6bcd08f64cf4d4d6b35b8dad80aa15ef493568d1a4fe28f64590a", @nested={0x1167, 0xc7, 0x0, 0x1, [@generic="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", @typed={0x8, 0x11f, 0x0, 0x0, @pid}, @nested={0x4, 0x7e}, @generic="bcb32901cc2f5af6ae91ca91197264aee82a89b24c8852408eea7108573accbd12486eef11676f034ae89fbd0bc10757c723e20c0bb626521d98eee8c541f6733a7ca2a5b78f0bf2d4a5405b18e97efb3979c69419361c8a2e35f8fa0b9fc6fc5f1780365e4061ed91577442734b06caf08c3c955ce24513c687025f319115157aed784ac3890e9b16552fb2ac67b125", @typed={0x7, 0xa0, 0x0, 0x0, @str='fq\x00'}, @generic="445bf0ef10a85b586185cd", @generic="97b413876b88fd8c76090b6ac4e1d2c7ab", @typed={0x4, 0x13a}, @generic="c8cc7c060818be7702bad6cdad1fa8e4137b2200cd5d802033ba52b4c26593797d761a63fdbc8ed8d402104c9e73abe52bef61030bcb0948d721e8bb9e4bc2f47d5cfb7b2aa1dd78be64542423f30fc06fbd12b8edd5d45f33490c80fff2357371e165929b75e2e14044b0b2ef4e33c700afc7a21d459b603cf62b290fbd0572b54425322345cceefef3598de4461e06cdceb81bed2968058e38186d2db937"]}, @typed={0x8, 0xa0, 0x0, 0x0, @uid}, @nested={0x1ce, 0xf9, 0x0, 0x1, [@generic="6228467bcdc2a15ae94493c3ba8f59249d64ff53e66f760b3201880d0844d3f5b71732cda09f72fc43982e46f45dafc10aa871b72c2cdaaa4543eecc8d8b401ef18ce1e8b65217eff959fe5b0ae503d3ecdee1a327c21e0957ba3b28e4d9cf6338769061cc9042bdb7f127d0356ffe9f2115115319ea17a80ba900b39e5d4ff8774ec125df46f2617e3b7a80c98573ff48f40630568105a43f69f7efff4070a8fa7649261b87d7b865c1cf3ac974d8f8d28425caa74a958e55789c5642bdd0af3a9c82", @nested={0x4, 0xad}, @generic="d254607dee2e1496786f8303ba5ea82bfe7bcce4ba05bca36ee3c27115be322f4d8f463ee6961fccb709dd2334edba3a7982bc730b12eae1c090fc592bdc6f0074881afdd78f3d2152d01968113a37f03ca9a85a44d67f1f678a630edbe174e48d6b2bb939299cff734ca4980ad630766dd234816f7e4b5515d98fab1e3c4d", @nested={0x84, 0x76, 0x0, 0x1, [@generic="3cee9ec0a8f173832a6953efd16344dc75d2310dd08fd2b20b37178928d22a05a40a78b03baf5ba7f56dfefc8cd087d8ac0343eb82c3603af7fbd6", @generic="5ce4b3befbd05c4d19bee7cc9f6fff526b7f036dd6771f0698962ed1d89cd641031d88f59fe20ccc6492f9224cdcaeca71322aed9f7e744a515812f1429dfeee77c8817dfc"]}]}, @generic="d1f15dc5288f7b8977eef57b999c34f6b1f4067b2f8dff4b8fc52ae0810d714b064100b51cf6e2b15381219b59fb9bba6ccb1e215a70943ef7fadfd4eda9660f0963c4430f6eda799f9c40fc804062de6ee82a8bae224d9a460113eb7b64262b9a85d5914968da2ab5b592816bcd8eb4ac52c7dd2d547690b74e04", @generic="109ed9212e350a1b3dfe7dfebb1c288c6262dc2863aa0bfb7928c00d7a3d4c895f8df45385c7bfc4454b755db22ea231e281b5db46ed41cf461d76949f0bc130c82778b0b4f836eb22751f927d059e72b75d09e478b8a6e3754f802cdfccbe29393b3e152b7c239b92160f7e3221b33a9db8f265fba7c630413c18d5b86fb7ffb005a941227006184574413516488cfc30877b24d8cc3b33c17d1185f6394f8e534b287f95a5ee2cd09779d5ba889043171abcbe6d2c8fc73b26a01f0facdc78ed279b54827138496aed3d5205c4d8c19544f1ac8a866118c695b4c88119cbe478"]}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r7}]}, 0x262c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRESOCT, @ANYRES32=r2, @ANYRES32=r1, @ANYRESDEC=r6, @ANYRESHEX=r1, @ANYRES16=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r13}, &(0x7f0000000780), &(0x7f0000000740)}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r13, &(0x7f0000000540), 0x0}, 0x20) r14 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r14, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x1, 0x0, @empty}, 0x0, {[0x0, 0xbd2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_FLUSH(r14, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r14, 0x84, 0x16, &(0x7f0000000600)={0x6, [0x4, 0x4, 0x3ff, 0x3, 0x5, 0x0]}, &(0x7f0000000640)=0x10) 1.654598849s ago: executing program 3 (id=1597): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) accept(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e6900850000001900000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000791838000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.575614515s ago: executing program 3 (id=1598): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000018c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x830, 0x258, 0x328, 0x0, 0x530, 0x530, 0x760, 0x760, 0x760, 0x760, 0x760, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0xffffff00, 0x0, 0xffffffff], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x230, 0x258, 0x0, {0x7a00000010000000}, [@common=@rt={{0x138}, {0x2, [0x7f, 0x621c], 0x3, 0x30, 0x0, [@loopback, @remote, @remote, @local, @empty, @remote, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xf}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private2, @empty, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xb}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe], 0xfd}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [0xffffffff], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xff, 0x9}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xff, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}, 0x2c}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [0xfffff51f], 0x0, 0x30, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x62}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x890) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0xac}}, 0x0) recvmmsg(r2, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x40010021, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmmsg$sock(r4, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x51, 0x2}}], 0x18}}], 0x1, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f00005d4000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0xfffff000) 1.510134174s ago: executing program 3 (id=1600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x13, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xffaf}, 0x94) 1.483708808s ago: executing program 4 (id=1601): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028014000180080001803e0000000800010000000000040003"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x8000) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="200029bd7000fedbdf250a0000001100070075bc0a062a55c80d0fb41dd9ed00000008000900f3ab0f0005000800000000001100070092c9244167ec6271c3d99396b100000011000700f9f57d17c761706f58c84a7c1600000009000700c96adbf1460000000800090001ac0f000a000600ffffffffffff0000"], 0x80}, 0x1, 0x0, 0x0, 0x20004800}, 0x24044000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x12, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x12, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYRES64=r9], 0x0) sendmsg$nl_generic(r9, &(0x7f00000001c0)={0x0, 0x3b, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x200c4040) 1.410653528s ago: executing program 3 (id=1602): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001002dbd7040ffdbdf2500000000000000003000ffffac1414bbac1414bb0000000000000000000000004e20000bf7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x40015}, 0x800) 1.375575044s ago: executing program 3 (id=1603): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000340)={0x40000013}) recvmsg$unix(r1, &(0x7f00000037c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000003700)=[{&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/107, 0x6b}, {&(0x7f0000003640)=""/23, 0x17}, {&(0x7f0000003680)=""/119, 0x77}], 0x4, &(0x7f0000003740)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x161) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000101a010000000000000000000500000a34000000060a010400000000000000000a0000060900010073797a31000000000900020073797a32000000000500074090000000140000001100010000000000000000000000000a"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c1) 1.358160069s ago: executing program 2 (id=1604): syz_emit_ethernet(0xd1, &(0x7f0000000880)={@link_local, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xbf, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @multicast2, @multicast1}, {0x2001, 0x880b, 0xab, 0x0, @opaque="fddc606e6597bced93fa56f4865efb45a2e3a231b7e0565cf59718074c479f86eb89c02913feb3360f30ab79286dbd80d65c736315f3154426ed17adc0f1754bebac9f4248a4df5ad7aee3c0368f8bcfdb7f824c4fec2454e7699dcf6ec0fe5ecbb2b25cf3746f5977f86d6e09768e64762226417b61c8679b6a02e027e66273b3ebb36533acbb9bbbcb836c179a6989849bcb1c0747218fac98bcf1579b0429e25a82"}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) unshare(0x24060400) getsockopt$inet_IP_XFRM_POLICY(r0, 0x3a, 0x11, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@loopback, 0x4d5, 0x33}, @in=@multicast1, {0x3, 0x0, 0x0, 0x8}, {}, {0x0, 0x22}, 0x70bd27, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0xf0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40) shutdown(r0, 0x56660e91fa37aa0c) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) 1.147909404s ago: executing program 2 (id=1605): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) close(0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) recvmmsg$unix(r0, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 1.147756218s ago: executing program 1 (id=1606): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001002dbd7040ffdbdf2500000000010000000000ffffac1414bbac1414bb0000000000000000000000004e20000bf7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000060000000000000080000000000000000000000000000000fcffffff00000000000000000000000084010500fc000000000000000000000000000004000000053c000000000000000000000000000000000000000000000002350000000200000000000000000000fc7f0000fe8000000000000000000000000000bb000000003c0000000200000000000000000000000000000000000001fdffffff0403000000080000000800000000000000000000000000000000000000000001000000003200000000000000000000000000000000000000000000000335000001000400080000000000000000000000e0000002000000000000000000000000000100003300000000000000ff020000000000000000000000000001043500000002040000000000bb0a00000000000000000000000000000000000000000000000004d43200"], 0x23c}, 0x1, 0x0, 0x0, 0x40015}, 0x800) 1.071689287s ago: executing program 4 (id=1607): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000020000100000002"], 0x0, 0x53}, 0x28) 944.775106ms ago: executing program 1 (id=1608): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x400, 0xc00, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0x96, 0xb}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_PROBES={0x8, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 882.06219ms ago: executing program 4 (id=1609): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'nr0\x00'}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010426bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000400000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}}, 0x200040cc) (rerun: 64) 851.898351ms ago: executing program 2 (id=1610): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000c000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 752.315311ms ago: executing program 1 (id=1611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001040)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000ff80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffcffffffffffff000000000000000000000000000000000000000000000100400000000000000000000000000000008401050000000000000000000000000000000001000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000003c00000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000006c00000000000000ac1414bb0000000000000000000000000000000001000000000000000000000000000000fe8000000000000000000000000000aa000000003300000000000000fc02000000000000000000000000000100008f863b"], 0x23c}}, 0x0) 666.647464ms ago: executing program 0 (id=1612): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000300000000000001000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000af00000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 616.699863ms ago: executing program 2 (id=1613): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a00", @ANYRES32], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000880) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f00000000c0)="98eebeb53da4e63345d04c7fcbd871e901024ed1fa8b70507b3884151445998f0064286f02477f6a542608a535307b3a40cb3e54220363a5b6ca767d60fb6b34a8b1e74c42ac29c948944c817b76a0c22c26b73b4e0facbb1c4853cb59d2601bb9845720686aa70665033b0a51e7e0e650f9babcf8d7d415c55c5f9f6dbd69187101e2dd859dc19688b772c5519858c2e6d4e90905e2cbe200595b6e66562429be5fd96beb817d5c94e717dcbe288121ee7825be6851412964bcaa") sendmmsg(r0, &(0x7f0000000000), 0x0, 0x81) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp-reno', 0xa) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e22, @remote}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000180)={0x8, 'dvmrp1\x00', {'veth0_vlan\x00'}, 0x9}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000001c0)={'ip6gre0\x00', {0x2, 0x0, @private}}) 592.731979ms ago: executing program 1 (id=1614): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="1000a204080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f00000000c0), 0x0}, 0x20) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000040009000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, r5, 0x7, 0x1000002, 0x1, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x7}]}, 0x34}}, 0x40800) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000203010200000000000000369ce290948e52000a000010090002000000000700000000"], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x14, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@generic="0254"]}, 0x14}], 0x1, 0x0, 0x0, 0x48000}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x9}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg(r10, &(0x7f0000001d40)={&(0x7f0000000340)=@nfc={0x27, r11, 0x0, 0x3}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)="b39cfa8cf321678998e3ba118abf95d9a1ac29a86c4dd3adca3b7afebf7bdf16cac7ed14fdd52f587d522bc5f8269a382dc3f2ff7dbcb303a9bbad6d27adabf2e44cfeab2414eb3b31eb4e699977ea89ad8add310bbf9bab40387d72807d16fe12d1284f1de4622dbbb4cb4e4940e197fb304eb9ec11300220772d1391d93c5094107553a1a754ed05a59c4877d329211a5c9b192eea8d47151e302dc1045d7ac3292d8f6acd57991970ca59da523e2530a796535ee72462da", 0xb9}, {&(0x7f0000000480)="3ab7eb3f96031826cbd7db6d847356620ef67185596dfd958028f083b754904e3ef932624e5163ebab3877120d6807f8a4666f943ba1faa35746e650cad656521acae6ca3307eb149988ce28b5ab4b5c9dc94ea4c4439271b4b55c4fd411b5af547d7166322027a0d8b6f6817615e97291a003e405513170bff0448628f6d4de84439c287cbb7d17e6d6aa0b756f6847dd2340f79ed3dfe6a76f84e3784324ff6a8cadfa695e87cfcea27231bb25e8bc22162f349442719ef1a447dd8a23331cbc86adc0f804bf71e6e9dc21466b2f98c517dde50d35fde7a46e88c75d", 0xdd}], 0x2, &(0x7f0000001a40)=[{0xd0, 0x115, 0x5, "d7e6106c802658da29d5044cf0ea1b2957623ad89a2f81f0aa4404102b1365404c160e0195882a4f62b1fea79aadd4adb63527228728fe34d22ce42e560dcbb920291f243aaad2d8665051ca7462103447104af7daac64ef2c1fd575531a490ec61e981b01aa55dd6d5a9fda401dc651a52b128c40c5d74540b59b756b60839197a5b65fb881c4caebe1eb4d71436b565a7a516a883814d6497e2e76ad7b9aa54866fb6beccb902961d170b5758b8f2f733fed3e3d0adcbfddf4949960d2080e"}, {0x110, 0x81, 0x3, "fc81566e7420fdc52fb6e92c4257bfdb83eb033d2d9aed85ddf3d95745710ac1310ce122fc8fa9b9b3acb4a425995a6c90cc966a79986b181e8ddf01a36fd83ba72c9b0dce7e5713160626e36f6387a57453c9182596426d8d3c152662669ff7c273fb3b55289abbdbc36afefc2856ec88804884f8590035484f51fcaf3052297a7e5ade2f67cd60811451b4ffa2155dc76bc8b1026e70a07408f93b61401c035db8000cf4a2be299e68ef4fbc48cb9922980bec8974144efa47adf67af72d3a324f381d7be26868e258622c9e836b851f291a04c281f6123d52bd079577f494d85cca0e145e5729eb389adbd32b63a138260a1588655ecc2e"}, {0xd8, 0x12f9d2e25ef7a008, 0xa, "aa1323c65256a7b6483be6324b2df1165eb8a726bb04946d6fdf7f3c960102e914d8a563f5453bb67a8669a99510f38991807321fdd7ab1f30d394c4ca179b650debc9263e074a0118d3a36c7e18cb8cb2155be1374a22e36a1d237fa934c4b00101b888d8bdd4db3e3f4bad2dc05ba0aaddf0f806e6711ad0bb2e4452e7394545cf3f10a2c976aad6d80556766a68750887ca08391b44d2a4a9e6196ef27e2ef14f847ea20a90248bc3f21aabf766d4baaad8e54c2591ee848e75afc878a6d6a5a99d"}], 0x2b8}, 0x8000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000050c0)={0x2648, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x2628, 0x1, 0x0, 0x1, [@nested={0x2624, 0x10, 0x0, 0x1, [@nested={0x2620, 0xb, 0x0, 0x1, [@nested={0x2619, 0xa0, 0x0, 0x1, [@nested={0x106b, 0x57, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @pid}, @generic="2cd882e7635b2a5a73131a", @generic="e2d69d5c9741ff50162b8292cdf098ff0e9b2a97e323f2945aa65a98fe0ac2b9b08072c87644bb720876abf048f087f76037f1a8d10a1a911a5282b225b3d55fb6318daf", @generic="8c4f5ecaa12a649ea96cc63084b9bd14468cb167fe05380aabb97bbf3cfaeac7962085d51bba67f839641e6e16cfb3a666058e2f14159cc490c45b162e7e778a3c43287eb1e7a8bb939b578c46c2c4dba23059e69301a4d5be408c3c74517ac60715795f930e8104fe3fc63ed4981639d86875a56f6ad40fff55e385b1fa057d5ad65a60e67e99c5ee61ca512749087ae962bdcd9b87ecb7a468158e80aab4185198ee09a4312609bf90a99bd5dadbf4ceed2b395b3cd244b6a69ceeeee95154558c43aea6ae30b7d03ede08a2bf723644b545b1ff3dd6476955041620891d341bcd7c5840f161203a8e9795183043ecac04f7c07910015028ec74f505bb06f88b6e44858946a9897637674d81638413f93b66cfc6e0086ad3cecc75d10c7182e40db4bf4c576c7faffa9f4ed01a3d63d92775cb57dc7c12dd5a0e0baeb6a33900be34079dc962e4f0655137a31384f23e12add550ca294512c7eee07eaf5864b59ea8ad6047b7f3335a85b3d1d6ad0344f9969a7078c515ada28fa2cb13c299687b17300e12bb86ef6724d5007d97989a619bd19f62b3eb715030cc2164ac18a65282130723ef29765163976b42e85fe670d475982b3a64cd13a62a77842e6cff21b94b4e52ef4d612177770239aaa47f85b74268e150f3752110baae3192c38d70c06fec8dd0aff54e1cacc9ed43660341b521c50cc271fd64d8b175e9b62e5ee3b2fc6696997bbb33184d77ec1e6123e5e157a0a5c2ed6b4dd5c3e4c362d52a25bef89db67908796ff86458f5fe06dd8a674dbe561a25302f6c67c415d6b06c50d3651448647472144cb7ddb9d135545341e62d519ec19b22f2019e1eea10419cdd4f00b569d3b1d8f7739a3bc39ff06605a7b2985163adaf1ac1adbb9e4323c9ceb254d770fe7acb10a6727eba289ef7ab2b46abd74c4b4a7d52537708d4dcc2df4db8481e4787c8dc778ee63f4e4900381515abf9ad6a038ed8e9e609ef745fcf6884192f39a493527bc28dbe07d474c728b52261eea244a7297108b7057ad9e59ec101a63e553f733704b7ab7c254a3e5cf7d84575170adc9c577e0595fef24b5953ec158101a700ad8b51de851c8a1c0e3938db4f2157210736c94173ed67948805d05d922c4955778357faa78a6fd6bd3674fde25d7d8619ed76291ad459e2a83f207654b4c7c48498080282b463104c7615998c60e7095172e3b15da398d8cb2dd6da15f9037074652332e44ca76ca330091f3ca17e4ec97f0bbea7aca52652ff1f17005d4cfdeadbeb1e776b9895268ed1e94e5989d7be5d16b8bbe7d2ff49f5a88fc8b19d812065d76946e68a983017e28e310e75a95b27e74af4ecf1ad985ccc9f2d08efb65fae96e94de80bf940e0492fdddb33361d8f85272683eba5d63b70a95155c619a7a609a0516716ab840075ec178e860b949bb0d051cea75d4580e602bbc77ba248de3fddec05d367e4858d50e295a8d17732babddda7d5d56b6028863c7099cf2440e16dc1f8a5a9fc6955c4d2b43c0404a8161b87184adfc34b0623f2307a29500730dc2d5c897ba7b4019174b98c793a6e4e376165676076e30f9054bf7934813e9144d54285ef7971efc44662cec75538c7f85c090aa00a59a91298ac9ae3a6be7d129b3214f3e4a819444730c9b4c200b29b8ac73efea96ff2455c62a541b4772e4b0c0e29b92c9a936a2beaa49e203f50e8abe3c4d999e580b53f0905e84396ea863b5bf2996031ae2f4ddc22b1641b4dda0d16b7bd4e185148aaa8ebd9a89c4aadc61e2e17eb8113bcf49bd2196d1eafdd7d14476364cd1fbc74e06bfe9a7bdbfe195107bc73f079946cbf56538b2ee82e524bd53bebfdb4c7f476e7249405f0c291526efe8a8dc216298117c2402cf7e6e89bde436afe0f941912277308bb549341d156a6d79c907b3bfd0d1680ce0cc5db1fa8e3cf93ca82931bba39048b4cd453eb827699afbf5eb2ace1806b4b8005323cd70df549ce82f08fb8454aad326f83cce0c8d67f578c6f1632b3d01de898e6f514bd32051f6ef80ff54e4ccb02344feed78b74bf087ea6436cf7b498298cefa4e7f4e70375a8632e5b1803447134345350680aa205bd57be58cf674e559233e08245987f49af8d9ada0c8d4f39c445a6abdd4b1f02a0a13480aa37be550695991d770c9411db6e911cf37f4488f6c407ac777b465b50cae989c62582c5d0eb0bff9f193f90a79c5b76b502221735165d45151c342d92a228ac05b3192c16457cf7453afb36136bef9bbf694acd484efe466344e0eb2723a01ebb0fb88ba661e82f9b27bd9e4c43b7a055f5bfacf9cbae868c685de3ad183cec316bbf482a7b28c0edd7c136fbcf4b7b05c04db941fdd7e5d4774b0ea1362c94bcee61c8b987cdaca314dda34abdea4082ba01fa15f47071bb723397932885882fbc9b02639ab74e4e6f84505d3d1f78ee3545ddfecf74946165d7c7bb0b31f5b051cb3cce3e3ff35bc1b3b49e6af1a1ff8ee561f0c448d467edb1c490e0564e9d0d3feac48b84a4554d3d655e0346753522650a6214be524912a0fe3cc512303d33cf2d33da89e0465dfbfc9b5ad0d1cc5d0f08002cdea45fd0c86fdd84be0ddad04ffc254bce1a932e6d7dd83b8e0254a1fec7f2357494e3c64db82baf3e0908dd18274a5c9561aa30639c5f078f9eb937eab7a4f869a5a28ca0510a0b990b2b84ddeefe44a0e9718a1d24d823006080375b81d97dea274b7b9ad85f7de70ebc32b833a1dcdc1b50d286e028b35e9f9c7843f4098bdd748340a458df48cb00c151c7c7d5359c53404f3cb62aaee2be8dbb0970554f1c2de7fe2ee202091fa0e33ab54a0f3aa6828aab3359b84bc4773f5d833bbf9b1e08cada194024b59da4721c767e47e6d905066c0d1fbda0d5a59b6810733ab2630f191455bb0ca26f3d29cd4cf2f907fcb2394d8848626a212b3481a50362862af1ebe863b95359b29f391bb2a23ce1ae233cdf1977fc785ecb9a290a1442cbf7ac66b3300d1e0cbb383913f7045c8b52eca078d72826bccc32884d650fec51090cdcf18bb367489156c33bfcbba2b0f708bfe21c48ee66814e0d4d9b12055c8ab605a6b8afc601d005149a6372c756752f6146b2ad444f18a67706ff0182a0233f5f31bdae04c8d21aaf5503ea56f2bb799b41def19c96e820f681fdc09284bb29bc9e33eacf669b142a4d0333ec7e100a04a9342ab14e85256130f3f748e7207af9d5b9d490e4df8166a1263dc28d48c21ca77e64fd0ef5205f73168c72b75795773a03a14742290561376a740ef100b17f9d65b2f92c1a5e736fab4ac16d9b5d1811154454935fd17d00bd7341a27a86b39e9d022445fbb12d1f7ca36784b51511eea3aa5753c6fbd8d914ce9fc6704cf9a3198f106582f15b9f1d59191ade9cfe417614ee39ed0965587a99e97532506ad8ed270e381a5db3d344fde7815457d98752faccac735c1f5d4ac15ed3761de4732390ea550325a7126156a73cea58f6affede5d83582084902e495d1701ce6fc2cd1db693668b519a0ca8e2bf985e053c93e8fc35a114a4d36ffc05326d2db3d9c20b0ecfc71c4b86ceddb1d6a55b869e8193a7985d4257196495d32402714d80b6e188ef847cf9aa952fc9a002cb02c1005dacc80fb671263aecc10f0b98e4b4f02d4f2a00b6c06aa7bfc32a1ee7afad8067bc18ccfe9829b9ba8567f025094b6bcd90180b9f2f003b7d0f60aa4461ccdfc2b7c1e96dcda49dc4894089bc821e0d604b2df86264e94d4e8003d68a614f5f253180a3abbfa791166016cd18e98789d87e0f65218a0a5bdc2013661d39ce924180c0d75479667580df96a49036f3ff4e722b780e852a718c8c567fddd11481429da68e3c399f16bee2fa288bd1ced7259b29b5e16de99f1a9b6723debffb76346647e929c74e55af58dac857402284814f7e84af6240e674588fe873d36b89890dded5dbb6aff99633260607a1394cc6e2c03fd448561ae635f76462a20b2ebaa95b0933d1fc94ec2184199e0ce0b29cf395e905386ee6cc707d38c736179ebf94eb3e2b03c49e933ed3352391e3d732b6413d2d2f8c2002a2a6e2eafbc220fbb270997240553efd0b5722c6ebdf31dcd1ade149e1e431107be0d600f685bf55a274325a9ace5d5b4080b45528c60159514cdf161a6af25284fc73e529ffcbde6cdee1e221487e9d7f9a9a19bcd6d0b6867c710573f509dd0494abb57ed99d57a2392751e89af91153fda37980eaa392a71f98e9db56f82fd9c09627cc48e2c65f88321b39e7838890cdb78eb7ac22846c81a49dfc0b4b3d30ac32a1df921d512dc3daa40dac024548cfadcde7f7fc74de10047ded1806a1d21e7ffdb6a017a9493ae0c365769f78fe37c5d3257028e44d0fe75acddda576abbae21fda9fc9afd194a98ed9a76becffdeaaeca1f823ac8f5b078ab1d2a14f6ae42fbcc113777fcb138395469421f326a5172f6ab1a3a8eb36ec931cd684079e0d232587ec3cdda5e164526f1cd1f21f8778bab4e6b30f80a32af3c4428e20865e686403a82ebd721e4a7740d42578ba75227c3194cd5bf7787d10e35dc68efd29dffbe69b99877870ea3faa11ba931e8d512ed38c3ae8849a9c8b3a35e979152a8704c8e010d5134bcb57916c6d5945a6d980ae562060d5c4aabd2694c4a39cf6ebf15c4aeda34544d51e03728b2bd3d43d6895dee1907ca6d160ce7f398e9bc7ac7ee1683a991b6c4c3d1c04d6e89bfbaa50cb8ec6b2d2ff1b4dad05913be0211584cf9ba58f2c3739aea8238dfd51731122425f21192d55440bcec01cc37be8527e582b81308b6536bd3aaa69d57671ebd1f50dd9593f0ae8cceb617b56ea8a07ba3b996b4d04f46abd90b0c2a68bb7ac30063a882f728ee69cc156e8416f584fafd253a648fabece2eb763d6ccf4bc81fa48dadbe5ffb04b7a0460d6c71e9c5f1d3f51907fcb91eabe66215ad1e520f0cada17786b3459b9cc24db213674f48e47b393e2dc5db7f53659979129fac980afcbc9396221f262e5c183bef255b98c027f7a358d3eb7a6cc05a532433d3710a8c72c017420b74a49130d4f8fc07f89bc42323683caa3f7b9fac7918d8c3e412d6985fae2b8b35527941534afa931227798ad54253b051a5435308e210898b0cd31f2201110d0d435baf460bdaa8315f0b560b14fdc07f951b8d005649228b53976549f604090e224d6404b3bf4f56ea2710db722941fcd4e438bd9798db05e2c2a637eb95ceb4f389b35276d606ed787d0d0e959c41c1dc0442c42e8201a44f0a7f50036a30149800059b340b02378430dbf5aa6f98345920e2554fd6c35ccc9cfe2fa7bb6b7240794eb29f8df084677b716f51e4c98ac28e8f5ce40bdedaf432d66a2627f87abb979e7b71888632e8358fa87ab806c6aa2bae6fb79677736be974dd52c06bcc88929cb332f6d1c32f64361b479e40bf6f55acea06e1d11ad5d487c1bba1e662f31efe441a6b71443090d7a5b0d2d830ae794016e7a5682b1d1ceb90e2ae9e5c241e9fad32b18f4890d171e956556e5eed7a8451f3392e7ecaacf96f02df5ae68c8d0f15fa02c3fa797a2b0edbacc8dcdff28ac29e7379f46393037c08a21af6d7a53d4c6ba9ba3342ec8cff2aaf0969af75b283278e172911ae6f1ea16af0927eb8060f0bdd072989d1b29268b9bdabf832b6a2f29b19bf46e51e61899b0e14f30f3897b3e8873ef07633b2ffe702175b4b85691b5b08b384db23f4668ac33356d7fd1373e990c9c8196d4ae9d214eb6621d4fb4acd40a", @typed={0x4, 0x58}, @typed={0x4, 0xce}, @typed={0x8, 0x78, 0x0, 0x0, @u32=0x1}]}, @generic="2b597872139d88c8810d3c6f37c40ed347dc7d009069cc6b53f3c334e285314b03474de18fb1c7e61c3e1162289c51391993b61ca12e02e5f8d5dfb31ca32fdd051abad1ec67628f617eecde6d6c111d9d92a66e22b561145d5bd2185916dee7845dfb8f3c04a3aae1f6cf524b706520e9e1037bc4cb54ecbce6dcfcf763467a9740c61ea95ae0bc85c482e685ac0ef1bb89671b7dff96c477a5241f203e667c0909acb97e2f93bbcd0209eee7a0196be1f58ceabf5911e9dfc4f2238812091d9b990a84c9f3799ac1b95758defd4376960a529f6bcfb6bcd08f64cf4d4d6b35b8dad80aa15ef493568d1a4fe28f64590a", @nested={0x1182, 0xc7, 0x0, 0x1, [@generic="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", @typed={0x8, 0x11f, 0x0, 0x0, @pid}, @nested={0x4, 0x7e}, @generic="bcb32901cc2f5af6ae91ca91197264aee82a89b24c8852408eea7108573accbd12486eef11676f034ae89fbd0bc10757c723e20c0bb626521d98eee8c541f6733a7ca2a5b78f0bf2d4a5405b18e97efb3979c69419361c8a2e35f8fa0b9fc6fc5f1780365e4061ed91577442734b06caf08c3c955ce24513c687025f319115157aed784ac3890e9b16552fb2ac67b125", @typed={0x7, 0xa0, 0x0, 0x0, @str='fq\x00'}, @generic="445bf0ef10a85b586185cd", @generic="97b413876b88fd8c76090b6ac4e1d2c7ab", @typed={0x4, 0x13a}, @generic="c8cc7c060818be7702bad6cdad1fa8e4137b2200cd5d802033ba52b4c26593797d761a63fdbc8ed8d402104c9e73abe52bef61030bcb0948d721e8bb9e4bc2f47d5cfb7b2aa1dd78be64542423f30fc06fbd12b8edd5d45f33490c80fff2357371e165929b75e2e14044b0b2ef4e33c700afc7a21d459b603cf62b290fbd0572b54425322345cceefef3598de4461e06cdceb81bed2968058e38186d2db937ddac97c650f5bd84522ab7cc37cb2d5ea6c43e89d82e267ebe53d4"]}, @typed={0x8, 0xa0, 0x0, 0x0, @uid}, @nested={0x1ce, 0xf9, 0x0, 0x1, [@generic="6228467bcdc2a15ae94493c3ba8f59249d64ff53e66f760b3201880d0844d3f5b71732cda09f72fc43982e46f45dafc10aa871b72c2cdaaa4543eecc8d8b401ef18ce1e8b65217eff959fe5b0ae503d3ecdee1a327c21e0957ba3b28e4d9cf6338769061cc9042bdb7f127d0356ffe9f2115115319ea17a80ba900b39e5d4ff8774ec125df46f2617e3b7a80c98573ff48f40630568105a43f69f7efff4070a8fa7649261b87d7b865c1cf3ac974d8f8d28425caa74a958e55789c5642bdd0af3a9c82", @nested={0x4, 0xad}, @generic="d254607dee2e1496786f8303ba5ea82bfe7bcce4ba05bca36ee3c27115be322f4d8f463ee6961fccb709dd2334edba3a7982bc730b12eae1c090fc592bdc6f0074881afdd78f3d2152d01968113a37f03ca9a85a44d67f1f678a630edbe174e48d6b2bb939299cff734ca4980ad630766dd234816f7e4b5515d98fab1e3c4d", @nested={0x84, 0x76, 0x0, 0x1, [@generic="3cee9ec0a8f173832a6953efd16344dc75d2310dd08fd2b20b37178928d22a05a40a78b03baf5ba7f56dfefc8cd087d8ac0343eb82c3603af7fbd6", @generic="5ce4b3befbd05c4d19bee7cc9f6fff526b7f036dd6771f0698962ed1d89cd641031d88f59fe20ccc6492f9224cdcaeca71322aed9f7e744a515812f1429dfeee77c8817dfc"]}]}, @generic="d1f15dc5288f7b8977eef57b999c34f6b1f4067b2f8dff4b8fc52ae0810d714b064100b51cf6e2b15381219b59fb9bba6ccb1e215a70943ef7fadfd4eda9660f0963c4430f6eda799f9c40fc804062de6ee82a8bae224d9a460113eb7b64262b9a85d5914968da2ab5b592816bcd8eb4ac52c7dd2d547690b74e04", @generic="109ed9212e350a1b3dfe7dfebb1c288c6262dc2863aa0bfb7928c00d7a3d4c895f8df45385c7bfc4454b755db22ea231e281b5db46ed41cf461d76949f0bc130c82778b0b4f836eb22751f927d059e72b75d09e478b8a6e3754f802cdfccbe29393b3e152b7c239b92160f7e3221b33a9db8f265fba7c630413c18d5b86fb7ffb005a941227006184574413516488cfc30877b24d8cc3b33c17d1185f6394f8e534b287f95a5ee2cd09779d5ba889043171abcbe6d2c8fc73b26a01f0facdc78ed279b54827138496aed3d5205c4d8c19544f1ac8a866118c695b4c88119cbe478"]}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r7}]}, 0x2648}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRESOCT, @ANYRES32=r2, @ANYRES32=r1, @ANYRESDEC=r6, @ANYRESHEX=r1, @ANYRES16=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r13}, &(0x7f0000000780), &(0x7f0000000740)}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r13, &(0x7f0000000540), 0x0}, 0x20) r14 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r14, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x1, 0x0, @empty}, 0x0, {[0x0, 0xbd2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_FLUSH(r14, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r14, 0x84, 0x16, &(0x7f0000000600)={0x6, [0x4, 0x4, 0x3ff, 0x3, 0x5, 0x0]}, &(0x7f0000000640)=0x10) 441.457017ms ago: executing program 0 (id=1615): sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8089) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff02000000020000203c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 294.560585ms ago: executing program 0 (id=1616): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getpid() getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getpid() r1 = accept(r0, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000008d80), 0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000a80)={{r2, 0x0, 0x400, 0x0, 0x7, &(0x7f0000000380)={@_ha_fsid}, 0x0}, 0x0, &(0x7f0000000a00)}) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket(0x1e, 0x5, 0x0) pipe(&(0x7f0000000480)) listen(r3, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 258.040373ms ago: executing program 2 (id=1617): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028014000180080001803e0000000800010000000000040003"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x8000) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="200029bd7000fedbdf250a0000001100070075bc0a062a55c80d0fb41dd9ed00000008000900f3ab0f0005000800000000001100070092c9244167ec6271c3d99396b100000011000700f9f57d17c761706f58c84a7c1600000009000700c96adbf1460000000800090001ac0f000a000600ffffffffffff0000"], 0x80}, 0x1, 0x0, 0x0, 0x20004800}, 0x24044000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x12, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x12, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYRES64=r10], 0x0) sendmsg$nl_generic(r10, &(0x7f00000001c0)={0x0, 0x3b, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x200c4040) 199.180788ms ago: executing program 1 (id=1618): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x78, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7a735b41}}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.12331ms ago: executing program 0 (id=1619): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0xa, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}}], 0x2, 0x40408d1) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000080ffff", 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x8040) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) 444.667µs ago: executing program 3 (id=1620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x9c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x7c, 0x3, "fd7c400f2ffd10ac56a901205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb9553ffffffffa2bc4978b4999bf4d277bea36acb997e31ab600156796cc60303e812a25bea54f1839749e2fcf0c6c1bb457b5bfa52e41edd07d452fb4e10be16f523f3208b6670b3bb8a5c8eda900a4095c9"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x4040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x8040) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000008000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) 0s ago: executing program 1 (id=1621): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000021000100000002"], 0x0, 0x53}, 0x28) kernel console output (not intermixed with test programs): PREEMPT(full) [ 106.264657][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.264668][ T6695] Call Trace: [ 106.264681][ T6695] [ 106.264689][ T6695] dump_stack_lvl+0xe8/0x150 [ 106.264720][ T6695] should_fail_ex+0x410/0x560 [ 106.264747][ T6695] should_failslab+0xa8/0x100 [ 106.264771][ T6695] __kmalloc_noprof+0xfe/0x720 [ 106.264789][ T6695] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 106.264814][ T6695] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 106.264855][ T6695] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 106.264892][ T6695] genl_family_rcv_msg_doit+0xda/0x340 [ 106.264922][ T6695] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 106.264950][ T6695] ? __pfx_genl_get_cmd+0x10/0x10 [ 106.264969][ T6695] ? stack_trace_save+0xa9/0x100 [ 106.264984][ T6695] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 106.265031][ T6695] ? __lock_acquire+0x747/0x2de0 [ 106.265061][ T6695] genl_rcv_msg+0x614/0x7a0 [ 106.265090][ T6695] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.265112][ T6695] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 106.265146][ T6695] netlink_rcv_skb+0x226/0x4a0 [ 106.265165][ T6695] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.265188][ T6695] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.265221][ T6695] ? down_read+0x2be/0x330 [ 106.265252][ T6695] genl_rcv+0x28/0x40 [ 106.265275][ T6695] netlink_unicast+0x7bd/0x940 [ 106.265311][ T6695] netlink_sendmsg+0x813/0xb40 [ 106.265339][ T6695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.265366][ T6695] ? apparmor_socket_sendmsg+0x98/0x360 [ 106.265389][ T6695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.265405][ T6695] sock_sendmsg_nosec+0x13a/0x180 [ 106.265428][ T6695] ____sys_sendmsg+0x54e/0x850 [ 106.265458][ T6695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.265498][ T6695] ? import_iovec+0x73/0xa0 [ 106.265524][ T6695] ___sys_sendmsg+0x2a5/0x360 [ 106.265547][ T6695] ? __lock_acquire+0x747/0x2de0 [ 106.265570][ T6695] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.265630][ T6695] ? __fget_files+0x2a/0x420 [ 106.265653][ T6695] ? __fget_files+0x3a2/0x420 [ 106.265694][ T6695] __x64_sys_sendmsg+0x1b1/0x290 [ 106.265722][ T6695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 106.265768][ T6695] do_syscall_64+0x166/0x520 [ 106.265791][ T6695] ? trace_irq_disable+0x3b/0x140 [ 106.265807][ T6695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.265824][ T6695] ? clear_bhb_loop+0x70/0xc0 [ 106.265846][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.265864][ T6695] RIP: 0033:0x7f878d19e159 [ 106.265880][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.265894][ T6695] RSP: 002b:00007f878dfc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.265912][ T6695] RAX: ffffffffffffffda RBX: 00007f878d425fa0 RCX: 00007f878d19e159 [ 106.265925][ T6695] RDX: 0000000000040040 RSI: 0000200000000240 RDI: 0000000000000006 [ 106.265936][ T6695] RBP: 00007f878dfc6090 R08: 0000000000000000 R09: 0000000000000000 [ 106.265946][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.265957][ T6695] R13: 00007f878d426038 R14: 00007f878d425fa0 R15: 00007ffc678b72f8 [ 106.265987][ T6695] [ 106.620865][ T6709] netlink: 'syz.4.300': attribute type 1 has an invalid length. [ 106.913254][ T6709] bond1: entered promiscuous mode [ 106.917720][ T6709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.921712][ T6713] netlink: 976 bytes leftover after parsing attributes in process `syz.0.301'. [ 106.984438][ T6714] vlan3: entered allmulticast mode [ 106.984459][ T6714] bond1: entered allmulticast mode [ 107.085388][ T6717] bond1: (slave bridge2): making interface the new active one [ 107.085412][ T6717] bridge2: entered promiscuous mode [ 107.085585][ T6717] bridge2: entered allmulticast mode [ 107.109204][ T6717] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 107.115822][ T6725] Cannot find del_set index 0 as target [ 107.353386][ T6739] netlink: 44 bytes leftover after parsing attributes in process `syz.1.308'. [ 107.558863][ T6752] netlink: 4704 bytes leftover after parsing attributes in process `syz.2.318'. [ 107.558901][ T6752] netlink: 'syz.2.318': attribute type 1 has an invalid length. [ 107.685199][ T6748] syz.0.315 (6748) used greatest stack depth: 17888 bytes left [ 107.686912][ T6756] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.757817][ T6756] syzkaller0: entered promiscuous mode [ 107.757839][ T6756] syzkaller0: entered allmulticast mode [ 107.878486][ T6764] netlink: 4704 bytes leftover after parsing attributes in process `syz.1.321'. [ 107.905821][ T6764] netlink: 'syz.1.321': attribute type 1 has an invalid length. [ 108.086530][ T6777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 108.192745][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 108.202481][ T6778] vlan2: left allmulticast mode [ 108.202502][ T6778] bond0: left allmulticast mode [ 108.202514][ T6778] bond_slave_0: left allmulticast mode [ 108.202527][ T6778] bond_slave_1: left allmulticast mode [ 108.215575][ T6778] bond1: left promiscuous mode [ 108.215595][ T6778] bridge0: left promiscuous mode [ 108.221519][ T6778] vlan3: left allmulticast mode [ 108.221539][ T6778] bond1: left allmulticast mode [ 108.221550][ T6778] bridge0: left allmulticast mode [ 108.284703][ T6778] netlink: zone id is out of range [ 108.284718][ T6778] netlink: zone id is out of range [ 108.284726][ T6778] netlink: zone id is out of range [ 108.284733][ T6778] netlink: zone id is out of range [ 108.284740][ T6778] netlink: zone id is out of range [ 108.284747][ T6778] netlink: zone id is out of range [ 108.284757][ T6778] netlink: zone id is out of range [ 108.284764][ T6778] netlink: zone id is out of range [ 108.284771][ T6778] netlink: zone id is out of range [ 108.284778][ T6778] netlink: zone id is out of range [ 108.326629][ T6786] netlink: 'syz.1.330': attribute type 1 has an invalid length. [ 108.412835][ T6786] bond1: entered promiscuous mode [ 108.413941][ T6786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.464499][ T6789] vlan3: entered allmulticast mode [ 108.464520][ T6789] bond1: entered allmulticast mode [ 108.483462][ T6786] bond1: (slave bridge1): making interface the new active one [ 108.483484][ T6786] bridge1: entered promiscuous mode [ 108.483724][ T6786] bridge1: entered allmulticast mode [ 108.486235][ T6786] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 108.563439][ T6790] can: request_module (can-proto-0) failed. [ 108.724344][ T6804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.335'. [ 108.923481][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.338'. [ 109.037800][ T6821] netlink: 80 bytes leftover after parsing attributes in process `syz.2.340'. [ 109.096866][ T6821] sctp: [Deprecated]: syz.2.340 (pid 6821) Use of int in max_burst socket option. [ 109.096866][ T6821] Use struct sctp_assoc_value instead [ 109.116440][ T6821] netlink: 'syz.2.340': attribute type 1 has an invalid length. [ 109.116461][ T6821] netlink: 140 bytes leftover after parsing attributes in process `syz.2.340'. [ 109.116474][ T6821] netlink: 'syz.2.340': attribute type 1 has an invalid length. [ 109.116484][ T6821] netlink: 'syz.2.340': attribute type 2 has an invalid length. [ 109.807792][ T6862] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 110.248081][ T6877] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.267613][ T6877] syzkaller0: entered promiscuous mode [ 110.267635][ T6877] syzkaller0: entered allmulticast mode [ 110.321555][ T6883] x_tables: duplicate entry at hook 2 [ 110.643071][ T6894] netlink: 'syz.0.368': attribute type 5 has an invalid length. [ 110.766902][ T6900] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 110.906984][ T6903] vcan0: left promiscuous mode [ 111.440118][ T6934] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.443990][ T6934] syzkaller0: entered promiscuous mode [ 111.444019][ T6934] syzkaller0: entered allmulticast mode [ 111.787501][ T6954] netlink: 'syz.0.387': attribute type 24 has an invalid length. [ 111.787655][ T6954] netlink: 'syz.0.387': attribute type 24 has an invalid length. [ 111.865762][ T6957] netlink: 'syz.1.389': attribute type 1 has an invalid length. [ 111.868528][ T6950] veth3: entered allmulticast mode [ 111.984294][ T6957] bond2: entered promiscuous mode [ 111.986415][ T6957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.072405][ T6961] vlan4: entered allmulticast mode [ 112.072426][ T6961] bond2: entered allmulticast mode [ 112.084127][ T6964] lo: left promiscuous mode [ 112.107994][ T6964] tunl0: left promiscuous mode [ 112.109262][ T6964] gre0: left promiscuous mode [ 112.116072][ T6964] gretap0: left promiscuous mode [ 112.122686][ T6964] erspan0: left promiscuous mode [ 112.132989][ T6964] ip_vti0: left promiscuous mode [ 112.144956][ T6964] sit0: left promiscuous mode [ 112.145823][ T6964] ip6tnl0: left promiscuous mode [ 112.146690][ T6964] ip6gre0: left promiscuous mode [ 112.147582][ T6964] syz_tun: left promiscuous mode [ 112.164245][ T6964] bridge0: left promiscuous mode [ 112.168020][ T6964] vcan0: left promiscuous mode [ 112.172253][ T6964] bond0: left promiscuous mode [ 112.175866][ T6964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.176669][ T6964] team0: left promiscuous mode [ 112.177656][ T6964] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.180391][ T6964] dummy0: left promiscuous mode [ 112.183003][ T6964] nlmon0: left promiscuous mode [ 112.184387][ T6964] batadv0: left promiscuous mode [ 112.187648][ T6964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.190743][ T6964] vxcan0: left promiscuous mode [ 112.194529][ T6964] vxcan1: left promiscuous mode [ 112.196540][ T6964] veth0: left promiscuous mode [ 112.203337][ T6964] veth1: left promiscuous mode [ 112.245151][ T6964] wg0: left promiscuous mode [ 112.253856][ T6964] wg1: left promiscuous mode [ 112.263146][ T6964] wg2: left promiscuous mode [ 112.275101][ T6964] veth0_to_bridge: left promiscuous mode [ 112.285535][ T6964] bridge_slave_0: left promiscuous mode [ 112.286907][ T6964] veth1_to_bridge: left promiscuous mode [ 112.288049][ T6964] bridge_slave_1: left promiscuous mode [ 112.306595][ T6964] veth0_to_bond: left promiscuous mode [ 112.307775][ T6964] bond_slave_0: left promiscuous mode [ 112.323950][ T6964] veth1_to_bond: left promiscuous mode [ 112.325123][ T6964] bond_slave_1: left promiscuous mode [ 112.325651][ T6964] veth0_to_team: left promiscuous mode [ 112.326752][ T6964] team_slave_0: left promiscuous mode [ 112.327361][ T6964] veth1_to_team: left promiscuous mode [ 112.356580][ T6964] team_slave_1: left promiscuous mode [ 112.357223][ T6964] veth0_to_batadv: left promiscuous mode [ 112.370499][ T6964] batadv_slave_0: left promiscuous mode [ 112.371605][ T6964] veth1_to_batadv: left promiscuous mode [ 112.372793][ T6964] batadv_slave_1: left promiscuous mode [ 112.373826][ T6964] xfrm0: left promiscuous mode [ 112.378645][ T6964] veth0_to_hsr: left promiscuous mode [ 112.408761][ T6964] veth1_to_hsr: left promiscuous mode [ 112.410609][ T6964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.410630][ T6964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.417330][ T6964] veth1_vlan: left promiscuous mode [ 112.452122][ T6964] veth0_vlan: left promiscuous mode [ 112.453863][ T6964] veth0_vlan: entered promiscuous mode [ 112.456214][ T6964] veth1_vlan: entered promiscuous mode [ 112.478779][ T6964] veth1_macvtap: left promiscuous mode [ 112.480663][ T6964] veth0_macvtap: left promiscuous mode [ 112.481800][ T6964] veth0_macvtap: entered promiscuous mode [ 112.482988][ T6964] veth1_macvtap: entered promiscuous mode [ 112.487940][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.502710][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.504103][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.509545][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.513608][ T6964] vlan2: left allmulticast mode [ 112.513628][ T6964] bond0: left allmulticast mode [ 112.515814][ T6964] geneve2: left promiscuous mode [ 112.518864][ T6964] veth3: left allmulticast mode [ 112.546303][ T6967] bond2: (slave bridge2): making interface the new active one [ 112.546326][ T6967] bridge2: entered promiscuous mode [ 112.546483][ T6967] bridge2: entered allmulticast mode [ 112.556494][ T6967] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 112.641735][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.668645][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.668692][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.668726][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.700954][ T6990] __nla_validate_parse: 9 callbacks suppressed [ 112.700975][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 112.701084][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 112.701180][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 112.701274][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 112.701367][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 112.701460][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 112.701560][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 112.707648][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 112.707752][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 112.707846][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 112.976813][ T6993] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.020301][ T6993] syzkaller0: entered promiscuous mode [ 113.020324][ T6993] syzkaller0: entered allmulticast mode [ 113.348054][ T7012] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 114.318926][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.321438][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.321478][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.321508][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.488928][ T7067] xt_hashlimit: max too large, truncated to 1048576 [ 114.489114][ T7067] xt_hashlimit: overflow, try lower: 0/0 [ 114.530749][ T7071] net_ratelimit: 498 callbacks suppressed [ 114.530768][ T7071] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 114.605226][ T7077] lo: entered allmulticast mode [ 114.750269][ T5628] Bluetooth: hci1: connection err: -111 [ 114.816294][ T7078] lo: left allmulticast mode [ 115.125412][ T7105] netlink: 'syz.4.438': attribute type 1 has an invalid length. [ 115.181205][ T7107] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 115.269715][ T7111] syzkaller0: entered promiscuous mode [ 115.269737][ T7111] syzkaller0: entered allmulticast mode [ 115.358988][ T7116] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 115.876512][ T7138] block nbd0: not configured, cannot reconfigure [ 116.283113][ T7161] netlink: 'syz.1.459': attribute type 4 has an invalid length. [ 116.472919][ T7172] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 116.591931][ T7179] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 116.876251][ T7191] Cannot find set identified by id 0 to match [ 116.892377][ T7196] netlink: 'syz.2.473': attribute type 4 has an invalid length. [ 117.315061][ T7216] tipc: Started in network mode [ 117.315090][ T7216] tipc: Node identity 2ee1af509bbc, cluster identity 4711 [ 117.315307][ T7216] tipc: Enabled bearer , priority 0 [ 117.316990][ T7216] syzkaller0: entered promiscuous mode [ 117.317010][ T7216] syzkaller0: entered allmulticast mode [ 117.373501][ T7216] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 117.395115][ T7216] tipc: Resetting bearer [ 117.415827][ T7215] tipc: Resetting bearer [ 117.451023][ T7215] tipc: Disabling bearer [ 117.587234][ T7222] syzkaller0: entered promiscuous mode [ 117.587255][ T7222] syzkaller0: entered allmulticast mode [ 118.936984][ T7234] __nla_validate_parse: 47 callbacks suppressed [ 118.937007][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'. [ 118.937032][ T7234] netlink: 'syz.0.486': attribute type 10 has an invalid length. [ 118.937047][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 120.417471][ T7227] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1504) ! [ 120.557924][ T7234] geneve2: entered promiscuous mode [ 120.557964][ T7234] geneve2: entered allmulticast mode [ 120.804601][ T7240] syzkaller0: entered promiscuous mode [ 120.804624][ T7240] syzkaller0: entered allmulticast mode [ 120.920307][ T7253] netlink: 44 bytes leftover after parsing attributes in process `syz.0.494'. [ 120.927591][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 121.270827][ T7262] ip6_vti0: left promiscuous mode [ 121.270958][ T7262] netlink: 964 bytes leftover after parsing attributes in process `syz.4.497'. [ 121.270976][ T7262] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 121.296257][ T7259] tipc: Enabled bearer , priority 0 [ 121.370676][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.501'. [ 121.451158][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.502'. [ 121.476699][ T7268] syzkaller0: entered promiscuous mode [ 121.476722][ T7268] syzkaller0: entered allmulticast mode [ 121.542162][ T7258] tipc: Resetting bearer [ 121.643914][ T7258] tipc: Disabling bearer [ 121.656690][ T7281] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 121.736882][ T7289] syzkaller0: entered promiscuous mode [ 121.736904][ T7289] syzkaller0: entered allmulticast mode [ 121.846644][ T7293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.506'. [ 121.846705][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 121.846718][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 122.139708][ T7312] netlink: 'syz.0.517': attribute type 4 has an invalid length. [ 122.369993][ T7324] pim6reg1: entered promiscuous mode [ 122.370014][ T7324] pim6reg1: entered allmulticast mode [ 122.591250][ T7332] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1504) ! [ 122.612363][ T7330] syzkaller0: entered promiscuous mode [ 122.612384][ T7330] syzkaller0: entered allmulticast mode [ 122.843933][ T7340] FAULT_INJECTION: forcing a failure. [ 122.843933][ T7340] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 122.843983][ T7340] CPU: 0 UID: 0 PID: 7340 Comm: syz.1.530 Not tainted syzkaller #0 PREEMPT(full) [ 122.843995][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.844001][ T7340] Call Trace: [ 122.844006][ T7340] [ 122.844011][ T7340] dump_stack_lvl+0xe8/0x150 [ 122.844037][ T7340] should_fail_ex+0x410/0x560 [ 122.844052][ T7340] _copy_from_user+0x2d/0xb0 [ 122.844066][ T7340] ___sys_sendmsg+0x1c6/0x360 [ 122.844085][ T7340] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.844120][ T7340] ? vfs_write+0x9ce/0xba0 [ 122.844157][ T7340] ? do_sys_openat2+0x14e/0x200 [ 122.844187][ T7340] __x64_sys_sendmsg+0x1b1/0x290 [ 122.844215][ T7340] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.844243][ T7340] do_syscall_64+0x166/0x520 [ 122.844257][ T7340] ? trace_irq_disable+0x3b/0x140 [ 122.844267][ T7340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.844277][ T7340] ? clear_bhb_loop+0x70/0xc0 [ 122.844289][ T7340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.844299][ T7340] RIP: 0033:0x7fc606b9e159 [ 122.844313][ T7340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.844321][ T7340] RSP: 002b:00007fc604df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.844335][ T7340] RAX: ffffffffffffffda RBX: 00007fc606e25fa0 RCX: 00007fc606b9e159 [ 122.844342][ T7340] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000c [ 122.844348][ T7340] RBP: 00007fc604df6090 R08: 0000000000000000 R09: 0000000000000000 [ 122.844354][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.844360][ T7340] R13: 00007fc606e26038 R14: 00007fc606e25fa0 R15: 00007fff128db4c8 [ 122.844375][ T7340] [ 123.003567][ T7347] netlink: 'syz.4.532': attribute type 14 has an invalid length. [ 123.107773][ T7356] netlink: 'syz.3.535': attribute type 4 has an invalid length. [ 123.515526][ T7377] syzkaller0: entered promiscuous mode [ 123.515548][ T7377] syzkaller0: entered allmulticast mode [ 123.537095][ T7377] tc mirred to Houston: device batadv_slave_0 is down [ 123.611542][ T7382] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 123.941582][ T7401] __nla_validate_parse: 13 callbacks suppressed [ 123.941603][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 123.941623][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 123.985072][ T7402] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1504) ! [ 124.134800][ T7407] FAULT_INJECTION: forcing a failure. [ 124.134800][ T7407] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.134830][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.0.556 Not tainted syzkaller #0 PREEMPT(full) [ 124.134849][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.134858][ T7407] Call Trace: [ 124.134864][ T7407] [ 124.134871][ T7407] dump_stack_lvl+0xe8/0x150 [ 124.134899][ T7407] should_fail_ex+0x410/0x560 [ 124.134921][ T7407] prepare_alloc_pages+0x223/0x600 [ 124.134944][ T7407] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 124.134964][ T7407] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 124.134987][ T7407] ? __pfx_policy_nodemask+0x10/0x10 [ 124.135005][ T7407] ? __get_vm_area_node+0x155/0x2f0 [ 124.135028][ T7407] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 124.135053][ T7407] ? __vmalloc_noprof+0xd2/0x120 [ 124.135076][ T7407] ? bpf_check+0x115d/0x2ef0 [ 124.135094][ T7407] ? bpf_prog_load+0x14d6/0x1c20 [ 124.135112][ T7407] ? __x64_sys_bpf+0xba/0xd0 [ 124.135127][ T7407] ? do_syscall_64+0x166/0x520 [ 124.135149][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.135172][ T7407] alloc_pages_mpol+0x21e/0x390 [ 124.135197][ T7407] alloc_pages_noprof+0xb1/0x2b0 [ 124.135219][ T7407] get_free_pages_noprof+0xf/0x80 [ 124.135236][ T7407] __kasan_populate_vmalloc+0x38/0x1c0 [ 124.135265][ T7407] ? do_raw_spin_unlock+0xf5/0x200 [ 124.135291][ T7407] alloc_vmap_area+0xd1a/0x1420 [ 124.135325][ T7407] ? __pfx_alloc_vmap_area+0x10/0x10 [ 124.135344][ T7407] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 124.135362][ T7407] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 124.135378][ T7407] ? __get_vm_area_node+0x155/0x2f0 [ 124.135405][ T7407] __get_vm_area_node+0x200/0x2f0 [ 124.135433][ T7407] __vmalloc_node_range_noprof+0x343/0x1540 [ 124.135458][ T7407] ? bpf_check+0x115d/0x2ef0 [ 124.135487][ T7407] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 124.135514][ T7407] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 124.135550][ T7407] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 124.135579][ T7407] ? apparmor_capable+0x126/0x170 [ 124.135609][ T7407] ? bpf_lsm_capable+0x9/0x20 [ 124.135625][ T7407] ? security_capable+0x7e/0x2c0 [ 124.135653][ T7407] ? bpf_check+0x115d/0x2ef0 [ 124.135671][ T7407] __vmalloc_noprof+0xd2/0x120 [ 124.135698][ T7407] ? bpf_check+0x115d/0x2ef0 [ 124.135718][ T7407] bpf_check+0x115d/0x2ef0 [ 124.135754][ T7407] ? __pfx_bpf_check+0x10/0x10 [ 124.135776][ T7407] ? bpf_obj_name_cpy+0x194/0x1e0 [ 124.135807][ T7407] bpf_prog_load+0x14d6/0x1c20 [ 124.135842][ T7407] ? __pfx_bpf_prog_load+0x10/0x10 [ 124.135888][ T7407] __sys_bpf+0xd0d/0xd90 [ 124.135916][ T7407] ? __pfx___sys_bpf+0x10/0x10 [ 124.135948][ T7407] ? __fget_files+0x2a/0x420 [ 124.135991][ T7407] ? ksys_write+0x242/0x270 [ 124.136020][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 124.136052][ T7407] __x64_sys_bpf+0xba/0xd0 [ 124.136075][ T7407] do_syscall_64+0x166/0x520 [ 124.136099][ T7407] ? trace_irq_disable+0x3b/0x140 [ 124.136118][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.136137][ T7407] ? clear_bhb_loop+0x70/0xc0 [ 124.136160][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.136178][ T7407] RIP: 0033:0x7f878d19e159 [ 124.136196][ T7407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.136210][ T7407] RSP: 002b:00007f878dfc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.136231][ T7407] RAX: ffffffffffffffda RBX: 00007f878d425fa0 RCX: 00007f878d19e159 [ 124.136244][ T7407] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 124.136263][ T7407] RBP: 00007f878dfc6090 R08: 0000000000000000 R09: 0000000000000000 [ 124.136274][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.136285][ T7407] R13: 00007f878d426038 R14: 00007f878d425fa0 R15: 00007ffc678b72f8 [ 124.136316][ T7407] [ 124.136378][ T7407] syz.0.556: vmalloc error: size 2312, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 124.136436][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.0.556 Not tainted syzkaller #0 PREEMPT(full) [ 124.136455][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.136465][ T7407] Call Trace: [ 124.136472][ T7407] [ 124.136480][ T7407] dump_stack_lvl+0xe8/0x150 [ 124.136507][ T7407] warn_alloc+0x24d/0x270 [ 124.136527][ T7407] ? lockdep_hardirqs_on+0x7b/0x110 [ 124.136554][ T7407] ? __pfx_warn_alloc+0x10/0x10 [ 124.136571][ T7407] ? kfree+0x1c5/0x650 [ 124.136603][ T7407] ? __get_vm_area_node+0x219/0x2f0 [ 124.136636][ T7407] __vmalloc_node_range_noprof+0x36b/0x1540 [ 124.136676][ T7407] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 124.136702][ T7407] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 124.136738][ T7407] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 124.136766][ T7407] ? apparmor_capable+0x126/0x170 [ 124.136795][ T7407] ? bpf_lsm_capable+0x9/0x20 [ 124.136811][ T7407] ? security_capable+0x7e/0x2c0 [ 124.136834][ T7407] ? bpf_check+0x115d/0x2ef0 [ 124.136851][ T7407] __vmalloc_noprof+0xd2/0x120 [ 124.136878][ T7407] ? bpf_check+0x115d/0x2ef0 [ 124.136900][ T7407] bpf_check+0x115d/0x2ef0 [ 124.136937][ T7407] ? __pfx_bpf_check+0x10/0x10 [ 124.136959][ T7407] ? bpf_obj_name_cpy+0x194/0x1e0 [ 124.136986][ T7407] bpf_prog_load+0x14d6/0x1c20 [ 124.137016][ T7407] ? __pfx_bpf_prog_load+0x10/0x10 [ 124.137062][ T7407] __sys_bpf+0xd0d/0xd90 [ 124.137091][ T7407] ? __pfx___sys_bpf+0x10/0x10 [ 124.137123][ T7407] ? __fget_files+0x2a/0x420 [ 124.137156][ T7407] ? ksys_write+0x242/0x270 [ 124.137183][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 124.137212][ T7407] __x64_sys_bpf+0xba/0xd0 [ 124.137231][ T7407] do_syscall_64+0x166/0x520 [ 124.137262][ T7407] ? trace_irq_disable+0x3b/0x140 [ 124.137279][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.137297][ T7407] ? clear_bhb_loop+0x70/0xc0 [ 124.137320][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.137339][ T7407] RIP: 0033:0x7f878d19e159 [ 124.137355][ T7407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.137369][ T7407] RSP: 002b:00007f878dfc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.137388][ T7407] RAX: ffffffffffffffda RBX: 00007f878d425fa0 RCX: 00007f878d19e159 [ 124.137401][ T7407] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 124.137413][ T7407] RBP: 00007f878dfc6090 R08: 0000000000000000 R09: 0000000000000000 [ 124.137424][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.137435][ T7407] R13: 00007f878d426038 R14: 00007f878d425fa0 R15: 00007ffc678b72f8 [ 124.137466][ T7407] [ 124.137473][ T7407] Mem-Info: [ 124.137482][ T7407] active_anon:5877 inactive_anon:0 isolated_anon:0 [ 124.137482][ T7407] active_file:0 inactive_file:43328 isolated_file:0 [ 124.137482][ T7407] unevictable:0 dirty:294 writeback:0 [ 124.137482][ T7407] slab_reclaimable:10493 slab_unreclaimable:94717 [ 124.137482][ T7407] mapped:29454 shmem:522 pagetables:1165 [ 124.137482][ T7407] sec_pagetables:0 bounce:0 [ 124.137482][ T7407] kernel_misc_reclaimable:0 [ 124.137482][ T7407] free:1337501 free_pcp:7688 free_cma:0 [ 124.137526][ T7407] Node 0 active_anon:23508kB inactive_anon:0kB active_file:0kB inactive_file:173108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117816kB dirty:1172kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12216kB pagetables:4504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 124.137574][ T7407] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 124.137613][ T7407] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.137662][ T7407] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 124.137696][ T7407] Node 0 DMA32 free:1394752kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23508kB inactive_anon:0kB active_file:0kB inactive_file:173108kB unevictable:0kB writepending:1172kB zspages:0kB present:3129332kB managed:2546840kB mlocked:0kB bounce:0kB free_pcp:30752kB local_pcp:18636kB free_cma:0kB [ 124.137755][ T7407] lowmem_reserve[]: 0 0 0 0 0 [ 124.137788][ T7407] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.137835][ T7407] lowmem_reserve[]: 0 0 0 0 0 [ 124.137868][ T7407] Node 1 Normal free:3939892kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.137917][ T7407] lowmem_reserve[]: 0 0 0 0 0 [ 124.137950][ T7407] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 124.138070][ T7407] Node 0 DMA32: 1288*4kB (UME) 454*8kB (UME) 117*16kB (UME) 22*32kB (UME) 54*64kB (UME) 38*128kB (UM) 19*256kB (M) 10*512kB (ME) 9*1024kB (UME) 6*2048kB (UM) 328*4096kB (UM) = 1394656kB [ 124.227460][ T7407] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 124.227549][ T7407] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 3*16kB (UM) 6*32kB (UM) 6*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3939892kB [ 124.227683][ T7407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.227697][ T7407] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.227710][ T7407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.227760][ T7407] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.227774][ T7407] 43846 total pagecache pages [ 124.227781][ T7407] 0 pages in swap cache [ 124.227787][ T7407] Free swap = 124996kB [ 124.227794][ T7407] Total swap = 124996kB [ 124.227800][ T7407] 2097051 pages RAM [ 124.227806][ T7407] 0 pages HighMem/MovableOnly [ 124.227812][ T7407] 428725 pages reserved [ 124.227819][ T7407] 0 pages cma reserved [ 124.288752][ T5621] Bluetooth: hci4: command 0x0405 tx timeout [ 124.380332][ T7410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.557'. [ 124.814862][ T7422] IPv6: sit1: Disabled Multicast RS [ 124.848661][ T7419] netlink: 'syz.2.560': attribute type 14 has an invalid length. [ 124.931211][ T7422] netlink: 52 bytes leftover after parsing attributes in process `syz.1.562'. [ 125.282674][ T7431] syzkaller0: entered promiscuous mode [ 125.282695][ T7431] syzkaller0: entered allmulticast mode [ 125.295426][ T7431] tc mirred to Houston: device batadv_slave_0 is down [ 125.398585][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 125.399337][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 125.583448][ T50] IPVS: starting estimator thread 0... [ 125.669372][ T7454] IPVS: using max 32 ests per chain, 76800 per kthread [ 125.966565][ T7473] openvswitch: netlink: Geneve opt len 66 is not a multiple of 4. [ 125.966991][ T7473] netlink: 40 bytes leftover after parsing attributes in process `syz.4.578'. [ 126.054739][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 126.054770][ T7475] netlink: 'syz.4.579': attribute type 10 has an invalid length. [ 126.054784][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.579'. [ 126.117104][ T7475] geneve2: entered promiscuous mode [ 126.117127][ T7475] geneve2: entered allmulticast mode [ 126.225282][ T7480] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 126.339687][ T7482] netlink: 'syz.1.582': attribute type 14 has an invalid length. [ 126.366001][ T7485] netlink: 'syz.2.584': attribute type 1 has an invalid length. [ 126.512711][ T7491] bond2: (slave veth5): Enslaving as an active interface with a down link [ 126.609551][ T7485] bond2: (slave veth7): Enslaving as an active interface with a down link [ 126.650805][ T7491] veth9: entered allmulticast mode [ 126.657721][ T7491] bond2: (slave veth9): Enslaving as an active interface with a down link [ 126.898512][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 126.964778][ T7509] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.967920][ T7509] bond3: (slave bond4): Enslaving as an active interface with an up link [ 127.321972][ T7533] netlink: 'syz.2.594': attribute type 4 has an invalid length. [ 127.697777][ T7546] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 127.752090][ T7544] netlink: 'syz.1.603': attribute type 1 has an invalid length. [ 127.804662][ T7550] Cannot find set identified by id 0 to match [ 127.804800][ T7550] Cannot find set identified by id 0 to match [ 127.804911][ T7550] Cannot find set identified by id 0 to match [ 127.805024][ T7550] Cannot find set identified by id 0 to match [ 127.805134][ T7550] Cannot find set identified by id 0 to match [ 127.818078][ T7550] Cannot find set identified by id 0 to match [ 127.818462][ T7550] Cannot find set identified by id 0 to match [ 127.818581][ T7550] Cannot find set identified by id 0 to match [ 127.865057][ T7550] Cannot find set identified by id 0 to match [ 127.865607][ T7550] Cannot find set identified by id 0 to match [ 128.270811][ T7574] syzkaller0: entered promiscuous mode [ 128.270832][ T7574] syzkaller0: entered allmulticast mode [ 128.304752][ T7574] tc mirred to Houston: device batadv_slave_0 is down [ 128.437892][ T7577] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 128.821581][ T7593] syzkaller0: entered promiscuous mode [ 128.821609][ T7593] syzkaller0: entered allmulticast mode [ 129.085536][ T7604] ip_tables: iptables: counters copy to user failed while replacing table [ 129.457875][ T7620] __nla_validate_parse: 12 callbacks suppressed [ 129.457896][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 129.458963][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 129.836958][ T7641] netlink: 32 bytes leftover after parsing attributes in process `syz.0.633'. [ 130.949913][ T7617] warning: `syz.4.624' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.084356][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 131.086567][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.636'. [ 131.223718][ T7667] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1504) ! [ 131.346389][ T7675] netlink: 'syz.0.641': attribute type 14 has an invalid length. [ 131.384120][ T166] IPVS: starting estimator thread 0... [ 131.396731][ T7677] IPVS: Error connecting to the multicast addr [ 131.470455][ T7681] IPVS: using max 33 ests per chain, 79200 per kthread [ 131.519367][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 131.700128][ T7695] ip_tables: iptables: counters copy to user failed while replacing table [ 131.862259][ T7700] syzkaller0: entered promiscuous mode [ 131.862280][ T7700] syzkaller0: entered allmulticast mode [ 131.905778][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 131.912243][ T7705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.922436][ T7707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.961927][ T7703] bond2: option lacp_active: invalid value (5) [ 131.966897][ T7703] bond2 (unregistering): Released all slaves [ 132.009830][ T7710] tipc: Started in network mode [ 132.009857][ T7710] tipc: Node identity 1a0873be07eb, cluster identity 4711 [ 132.011084][ T7710] tipc: Enabled bearer , priority 0 [ 132.016361][ T7698] tipc: Resetting bearer [ 132.039747][ T7698] tipc: Disabling bearer [ 132.066532][ T7713] syzkaller0: entered promiscuous mode [ 132.066546][ T7713] syzkaller0: entered allmulticast mode [ 132.114690][ T7713] tipc: Enabled bearer , priority 0 [ 132.129033][ T7712] tipc: Resetting bearer [ 132.181525][ T7712] tipc: Disabling bearer [ 132.356852][ T7721] netlink: 52 bytes leftover after parsing attributes in process `syz.0.656'. [ 132.512049][ T7725] netlink: 9 bytes leftover after parsing attributes in process `syz.2.658'. [ 132.512419][ T7725] gretap0: entered promiscuous mode [ 132.545727][ T7725] netlink: 5 bytes leftover after parsing attributes in process `syz.2.658'. [ 132.545936][ T7725] 0ªî{X¹¦: renamed from gretap0 [ 132.570646][ T7725] 0ªî{X¹¦: left promiscuous mode [ 132.570668][ T7725] 0ªî{X¹¦: entered allmulticast mode [ 132.580024][ T7725] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 132.843180][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.843236][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.052661][ T7750] ip_tables: iptables: counters copy to user failed while replacing table [ 133.425766][ T7768] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 133.629417][ T7775] netlink: zone id is out of range [ 133.629446][ T7775] netlink: zone id is out of range [ 133.629453][ T7775] netlink: zone id is out of range [ 133.629522][ T7775] netlink: zone id is out of range [ 133.629532][ T7775] netlink: zone id is out of range [ 133.629541][ T7775] netlink: zone id is out of range [ 133.689452][ T7781] syzkaller0: entered promiscuous mode [ 133.689489][ T7781] syzkaller0: entered allmulticast mode [ 133.786048][ T7781] tipc: Enabled bearer , priority 0 [ 133.795946][ T7780] tipc: Resetting bearer [ 133.801399][ T7787] FAULT_INJECTION: forcing a failure. [ 133.801399][ T7787] name failslab, interval 1, probability 0, space 0, times 0 [ 133.801428][ T7787] CPU: 1 UID: 0 PID: 7787 Comm: syz.0.684 Not tainted syzkaller #0 PREEMPT(full) [ 133.801447][ T7787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.801457][ T7787] Call Trace: [ 133.801464][ T7787] [ 133.801472][ T7787] dump_stack_lvl+0xe8/0x150 [ 133.801505][ T7787] should_fail_ex+0x410/0x560 [ 133.801529][ T7787] ? __alloc_skb+0x1db/0x7a0 [ 133.801551][ T7787] should_failslab+0xa8/0x100 [ 133.801574][ T7787] ? __alloc_skb+0x1db/0x7a0 [ 133.801593][ T7787] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 133.801620][ T7787] ? __alloc_skb+0x18d/0x7a0 [ 133.801641][ T7787] ? __alloc_skb+0x1db/0x7a0 [ 133.801668][ T7787] __alloc_skb+0x1db/0x7a0 [ 133.801694][ T7787] netlink_ack+0x136/0xb30 [ 133.801709][ T7787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 133.801748][ T7787] netlink_rcv_skb+0x2a4/0x4a0 [ 133.801766][ T7787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 133.801789][ T7787] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.801821][ T7787] ? down_read+0x2be/0x330 [ 133.801851][ T7787] genl_rcv+0x28/0x40 [ 133.801870][ T7787] netlink_unicast+0x7bd/0x940 [ 133.801907][ T7787] netlink_sendmsg+0x813/0xb40 [ 133.801933][ T7787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.801959][ T7787] ? apparmor_socket_sendmsg+0x98/0x360 [ 133.801982][ T7787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.801998][ T7787] sock_sendmsg_nosec+0x13a/0x180 [ 133.802020][ T7787] ____sys_sendmsg+0x54e/0x850 [ 133.802049][ T7787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.802083][ T7787] ? import_iovec+0x73/0xa0 [ 133.802108][ T7787] ___sys_sendmsg+0x2a5/0x360 [ 133.802137][ T7787] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.802183][ T7787] ? vfs_write+0x9ce/0xba0 [ 133.802222][ T7787] ? do_sys_openat2+0x14e/0x200 [ 133.802251][ T7787] __x64_sys_sendmsg+0x1b1/0x290 [ 133.802279][ T7787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.802324][ T7787] do_syscall_64+0x166/0x520 [ 133.802352][ T7787] ? trace_irq_disable+0x3b/0x140 [ 133.802369][ T7787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.802387][ T7787] ? clear_bhb_loop+0x70/0xc0 [ 133.802409][ T7787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.802426][ T7787] RIP: 0033:0x7f878d19e159 [ 133.802442][ T7787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.802456][ T7787] RSP: 002b:00007f878dfc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.802474][ T7787] RAX: ffffffffffffffda RBX: 00007f878d425fa0 RCX: 00007f878d19e159 [ 133.802486][ T7787] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000c [ 133.802497][ T7787] RBP: 00007f878dfc6090 R08: 0000000000000000 R09: 0000000000000000 [ 133.802508][ T7787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.802518][ T7787] R13: 00007f878d426038 R14: 00007f878d425fa0 R15: 00007ffc678b72f8 [ 133.802547][ T7787] [ 133.863985][ T7780] tipc: Disabling bearer [ 134.155915][ T7794] netlink: 'syz.3.686': attribute type 2 has an invalid length. [ 134.297581][ T7802] netlink: 'syz.3.686': attribute type 29 has an invalid length. [ 134.399379][ T7806] netlink: 'syz.1.690': attribute type 5 has an invalid length. [ 134.401616][ T7806] netlink: 'syz.1.690': attribute type 5 has an invalid length. [ 134.635392][ T7815] __nla_validate_parse: 11 callbacks suppressed [ 134.635411][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.694'. [ 134.778435][ T7824] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 134.878031][ T7826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.697'. [ 134.878053][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'. [ 134.933974][ T7830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.945922][ T7830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.006606][ T7830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.016725][ T7830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.033285][ T7830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.033308][ T7830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.055478][ T7839] Bluetooth: MGMT ver 1.23 [ 135.070004][ T7830] veth1_vlan: left promiscuous mode [ 135.077533][ T7830] veth0_vlan: left promiscuous mode [ 135.095966][ T7830] veth0_vlan: entered promiscuous mode [ 135.106294][ T7830] veth1_vlan: entered promiscuous mode [ 135.120551][ T7830] veth1_macvtap: left promiscuous mode [ 135.121658][ T7830] veth0_macvtap: left promiscuous mode [ 135.122754][ T7830] veth0_macvtap: entered promiscuous mode [ 135.123812][ T7830] veth1_macvtap: entered promiscuous mode [ 135.155220][ T7830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 135.156751][ T7830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.157805][ T7830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.183937][ T7830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.202351][ T7830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.343978][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 135.359424][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.359470][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.359504][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.372009][ T7846] syzkaller0: entered promiscuous mode [ 135.372030][ T7846] syzkaller0: entered allmulticast mode [ 135.429396][ T7849] syzkaller0: entered promiscuous mode [ 135.429410][ T7849] syzkaller0: entered allmulticast mode [ 135.478619][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.484894][ T7846] tipc: Enabled bearer , priority 0 [ 135.487698][ T7849] tc mirred to Houston: device batadv_slave_0 is down [ 135.521636][ T7845] tipc: Resetting bearer [ 135.565103][ T7845] tipc: Disabling bearer [ 135.802372][ T7863] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 136.185065][ T7880] netlink: 44 bytes leftover after parsing attributes in process `syz.0.714'. [ 136.531852][ T7898] netlink: 'syz.0.719': attribute type 4 has an invalid length. [ 136.652760][ T7901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.723'. [ 137.158418][ T5621] Bluetooth: hci2: command 0x0401 tx timeout [ 137.158554][ T5628] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 137.217129][ T7922] syzkaller0: entered promiscuous mode [ 137.217151][ T7922] syzkaller0: entered allmulticast mode [ 137.621307][ T7929] tipc: Enabled bearer , priority 0 [ 137.693630][ T7921] tipc: Resetting bearer [ 137.815090][ T7921] tipc: Disabling bearer [ 137.917225][ T7943] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 137.993275][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.734'. [ 137.994641][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'. [ 138.151572][ T7935] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.205871][ T7959] netlink: 'syz.4.741': attribute type 10 has an invalid length. [ 138.205914][ T7959] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 138.207379][ T7959] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.233912][ T7959] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 138.234986][ T7959] team0: Port device netdevsim1 added [ 138.304589][ T7967] netlink: 'syz.2.743': attribute type 15 has an invalid length. [ 138.346339][ T7967] netlink: 'syz.2.743': attribute type 15 has an invalid length. [ 138.346585][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 138.346787][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 138.346835][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 138.346865][ T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 138.405270][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'. [ 138.723943][ T7986] syzkaller0: entered promiscuous mode [ 138.723968][ T7986] syzkaller0: entered allmulticast mode [ 138.726835][ T7988] netlink: 204 bytes leftover after parsing attributes in process `syz.2.753'. [ 138.791891][ T7986] tc mirred to Houston: device batadv_slave_0 is down [ 139.644543][ T8023] __nla_validate_parse: 2 callbacks suppressed [ 139.644562][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 139.649200][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.765'. [ 139.920799][ T8029] netlink: 'syz.3.769': attribute type 14 has an invalid length. [ 140.216150][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 140.216174][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 140.241284][ T8041] netlink: 'syz.2.772': attribute type 12 has an invalid length. [ 140.252957][ T8041] netlink: 388 bytes leftover after parsing attributes in process `syz.2.772'. [ 140.609964][ T8060] netlink: 'syz.2.781': attribute type 14 has an invalid length. [ 140.771634][ T8064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.782'. [ 140.865776][ T8074] netlink: 4704 bytes leftover after parsing attributes in process `syz.0.782'. [ 140.886120][ T8074] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 140.895626][ T8064] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003 [ 140.983119][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.787'. [ 141.331077][ T8096] netlink: 'syz.0.794': attribute type 14 has an invalid length. [ 141.603427][ T8109] netlink: 'syz.3.797': attribute type 10 has an invalid length. [ 141.612159][ T8109] team0: Port device dummy0 added [ 141.622674][ T8109] netlink: 'syz.3.797': attribute type 10 has an invalid length. [ 141.642070][ T8109] team0: Port device dummy0 removed [ 141.671062][ T8114] netlink: 'syz.2.800': attribute type 1 has an invalid length. [ 141.877355][ T8128] syzkaller0: entered promiscuous mode [ 141.877377][ T8128] syzkaller0: entered allmulticast mode [ 141.896749][ T8128] tc mirred to Houston: device batadv_slave_0 is down [ 142.071584][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 142.323321][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 142.659736][ T8174] FAULT_INJECTION: forcing a failure. [ 142.659736][ T8174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.659766][ T8174] CPU: 0 UID: 0 PID: 8174 Comm: syz.1.816 Not tainted syzkaller #0 PREEMPT(full) [ 142.659785][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.659794][ T8174] Call Trace: [ 142.659801][ T8174] [ 142.659808][ T8174] dump_stack_lvl+0xe8/0x150 [ 142.659839][ T8174] should_fail_ex+0x410/0x560 [ 142.659865][ T8174] _copy_from_user+0x2d/0xb0 [ 142.659889][ T8174] fd_array_get_map_idx+0x285/0x480 [ 142.659913][ T8174] ? kfree+0x1c5/0x650 [ 142.659937][ T8174] ? __pfx_fd_array_get_map_idx+0x10/0x10 [ 142.659962][ T8174] ? bpf_prog_calc_tag+0x310/0x370 [ 142.659986][ T8174] check_and_resolve_insns+0x7b0/0x21d0 [ 142.660016][ T8174] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 142.660047][ T8174] bpf_check+0x18f9/0x2ef0 [ 142.660084][ T8174] ? __pfx_bpf_check+0x10/0x10 [ 142.660106][ T8174] ? bpf_obj_name_cpy+0x194/0x1e0 [ 142.660136][ T8174] bpf_prog_load+0x14d6/0x1c20 [ 142.660169][ T8174] ? __pfx_bpf_prog_load+0x10/0x10 [ 142.660214][ T8174] __sys_bpf+0xd0d/0xd90 [ 142.660243][ T8174] ? __pfx___sys_bpf+0x10/0x10 [ 142.660272][ T8174] ? __fget_files+0x2a/0x420 [ 142.660316][ T8174] ? ksys_write+0x242/0x270 [ 142.660343][ T8174] ? __pfx_ksys_write+0x10/0x10 [ 142.660374][ T8174] __x64_sys_bpf+0xba/0xd0 [ 142.660396][ T8174] do_syscall_64+0x166/0x520 [ 142.660420][ T8174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.660439][ T8174] ? clear_bhb_loop+0x70/0xc0 [ 142.660461][ T8174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.660486][ T8174] RIP: 0033:0x7fc606b9e159 [ 142.660503][ T8174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.660517][ T8174] RSP: 002b:00007fc604df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.660536][ T8174] RAX: ffffffffffffffda RBX: 00007fc606e25fa0 RCX: 00007fc606b9e159 [ 142.660548][ T8174] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 142.660559][ T8174] RBP: 00007fc604df6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.660569][ T8174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.660579][ T8174] R13: 00007fc606e26038 R14: 00007fc606e25fa0 R15: 00007fff128db4c8 [ 142.660607][ T8174] [ 142.801068][ T8182] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 143.093435][ T8188] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 143.604376][ T8205] netlink: 'syz.2.829': attribute type 4 has an invalid length. [ 143.623723][ T8205] .`: renamed from bond0 [ 143.895257][ T8224] netlink: 'syz.2.835': attribute type 10 has an invalid length. [ 144.051661][ T8224] IPVS: Error connecting to the multicast addr [ 145.056952][ T8264] tipc: Invalid UDP bearer configuration [ 145.057001][ T8264] tipc: Enabling of bearer rejected, failed to enable media [ 145.085388][ T8266] __nla_validate_parse: 6 callbacks suppressed [ 145.085407][ T8266] netlink: 492 bytes leftover after parsing attributes in process `syz.1.854'. [ 145.393166][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 145.942610][ T8312] netlink: 'syz.2.871': attribute type 1 has an invalid length. [ 146.012960][ T8312] bond0: entered promiscuous mode [ 146.018681][ T8312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.024457][ T8320] netlink: 'syz.1.872': attribute type 2 has an invalid length. [ 146.043982][ T8318] vlan4: entered allmulticast mode [ 146.044004][ T8318] bond0: entered allmulticast mode [ 146.104504][ T8312] bond0: (slave bridge3): making interface the new active one [ 146.104526][ T8312] bridge3: entered promiscuous mode [ 146.104735][ T8312] bridge3: entered allmulticast mode [ 146.106211][ T8312] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 146.156435][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 146.247889][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'. [ 146.298864][ T8329] netlink: 52 bytes leftover after parsing attributes in process `syz.0.875'. [ 146.667092][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 146.667613][ T8346] netlink: 52 bytes leftover after parsing attributes in process `syz.0.882'. [ 146.678326][ T8346] netlink: 52 bytes leftover after parsing attributes in process `syz.0.882'. [ 146.722927][ T8346] bond0: (slave bond_slave_0): Releasing backup interface [ 146.751168][ T8346] bond0: (slave bond_slave_1): Releasing backup interface [ 146.783327][ T8346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.783352][ T8346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.785305][ T8348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.789653][ T8346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.789675][ T8346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.799452][ T8346] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.862653][ T8356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.884'. [ 146.862716][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'. [ 147.064348][ T8364] netlink: 'syz.1.889': attribute type 2 has an invalid length. [ 147.120932][ T8367] netlink: 'syz.0.890': attribute type 1 has an invalid length. [ 147.161360][ T8367] bond2: entered promiscuous mode [ 147.165039][ T8367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.244110][ T8367] vlan4: entered allmulticast mode [ 147.251852][ T8367] bond2: entered allmulticast mode [ 147.301019][ T8367] bond2: (slave bridge1): making interface the new active one [ 147.301041][ T8367] bridge1: entered promiscuous mode [ 147.301197][ T8367] bridge1: entered allmulticast mode [ 147.302507][ T8367] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 147.391048][ T8375] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 147.994263][ T8401] netlink: 'syz.3.906': attribute type 1 has an invalid length. [ 148.135572][ T8401] bond1: option mode: invalid value (8) [ 148.151203][ T8401] bond1 (unregistering): Released all slaves [ 148.265820][ T8421] syzkaller0: entered promiscuous mode [ 148.265841][ T8421] syzkaller0: entered allmulticast mode [ 148.305900][ T8421] tc mirred to Houston: device batadv_slave_0 is down [ 148.401387][ T8430] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 148.741424][ T8436] batman_adv: batadv0: Adding interface: macvlan2 [ 148.741442][ T8436] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.741470][ T8436] batman_adv: batadv0: Interface activated: macvlan2 [ 148.911227][ T8448] FAULT_INJECTION: forcing a failure. [ 148.911227][ T8448] name failslab, interval 1, probability 0, space 0, times 0 [ 148.911255][ T8448] CPU: 1 UID: 0 PID: 8448 Comm: syz.0.917 Not tainted syzkaller #0 PREEMPT(full) [ 148.911274][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.911283][ T8448] Call Trace: [ 148.911290][ T8448] [ 148.911297][ T8448] dump_stack_lvl+0xe8/0x150 [ 148.911327][ T8448] should_fail_ex+0x410/0x560 [ 148.911354][ T8448] should_failslab+0xa8/0x100 [ 148.911390][ T8448] __kvmalloc_node_noprof+0x176/0x820 [ 148.911413][ T8448] ? bpf_check_cfg+0x13f/0x3840 [ 148.911430][ T8448] ? bpf_check_cfg+0x13f/0x3840 [ 148.911452][ T8448] bpf_check_cfg+0x13f/0x3840 [ 148.911485][ T8448] ? bpf_map_inc+0x1e/0x30 [ 148.911509][ T8448] ? __add_used_map+0x98c/0x12e0 [ 148.911535][ T8448] ? fput+0xa0/0xd0 [ 148.911557][ T8448] ? fd_array_get_map_idx+0x404/0x480 [ 148.911581][ T8448] ? __pfx_bpf_check_cfg+0x10/0x10 [ 148.911599][ T8448] ? __pfx_fd_array_get_map_idx+0x10/0x10 [ 148.911625][ T8448] ? bpf_prog_calc_tag+0x310/0x370 [ 148.911651][ T8448] ? check_and_resolve_insns+0x1d54/0x21d0 [ 148.911678][ T8448] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 148.911702][ T8448] ? add_kfuncs+0x251/0x2e0 [ 148.911724][ T8448] bpf_check+0x25fd/0x2ef0 [ 148.911758][ T8448] ? __pfx_bpf_check+0x10/0x10 [ 148.911780][ T8448] ? bpf_obj_name_cpy+0x194/0x1e0 [ 148.911805][ T8448] bpf_prog_load+0x14d6/0x1c20 [ 148.911834][ T8448] ? __pfx_bpf_prog_load+0x10/0x10 [ 148.911878][ T8448] __sys_bpf+0xd0d/0xd90 [ 148.911907][ T8448] ? __pfx___sys_bpf+0x10/0x10 [ 148.911939][ T8448] ? __fget_files+0x2a/0x420 [ 148.911980][ T8448] ? ksys_write+0x242/0x270 [ 148.912005][ T8448] ? __pfx_ksys_write+0x10/0x10 [ 148.912035][ T8448] __x64_sys_bpf+0xba/0xd0 [ 148.912056][ T8448] do_syscall_64+0x166/0x520 [ 148.912080][ T8448] ? trace_irq_disable+0x3b/0x140 [ 148.912098][ T8448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.912115][ T8448] ? clear_bhb_loop+0x70/0xc0 [ 148.912137][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.912155][ T8448] RIP: 0033:0x7f878d19e159 [ 148.912171][ T8448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.912185][ T8448] RSP: 002b:00007f878dfc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.912204][ T8448] RAX: ffffffffffffffda RBX: 00007f878d425fa0 RCX: 00007f878d19e159 [ 148.912217][ T8448] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 148.912228][ T8448] RBP: 00007f878dfc6090 R08: 0000000000000000 R09: 0000000000000000 [ 148.912239][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.912250][ T8448] R13: 00007f878d426038 R14: 00007f878d425fa0 R15: 00007ffc678b72f8 [ 148.912280][ T8448] [ 149.423678][ T8468] netlink: 'syz.4.921': attribute type 11 has an invalid length. [ 149.423738][ T8468] netlink: 'syz.4.921': attribute type 14 has an invalid length. [ 149.999828][ T8501] FAULT_INJECTION: forcing a failure. [ 149.999828][ T8501] name failslab, interval 1, probability 0, space 0, times 0 [ 149.999858][ T8501] CPU: 0 UID: 0 PID: 8501 Comm: syz.2.933 Not tainted syzkaller #0 PREEMPT(full) [ 149.999878][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.999888][ T8501] Call Trace: [ 149.999895][ T8501] [ 149.999903][ T8501] dump_stack_lvl+0xe8/0x150 [ 149.999934][ T8501] should_fail_ex+0x410/0x560 [ 149.999961][ T8501] should_failslab+0xa8/0x100 [ 149.999987][ T8501] __kmalloc_noprof+0xfe/0x720 [ 150.000005][ T8501] ? is_bpf_text_address+0x26/0x2b0 [ 150.000027][ T8501] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 150.000051][ T8501] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 150.000086][ T8501] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 150.000119][ T8501] genl_family_rcv_msg_doit+0xda/0x340 [ 150.000149][ T8501] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 150.000181][ T8501] ? apparmor_capable+0x126/0x170 [ 150.000210][ T8501] ? bpf_lsm_capable+0x9/0x20 [ 150.000225][ T8501] ? security_capable+0x7e/0x2c0 [ 150.000252][ T8501] genl_rcv_msg+0x614/0x7a0 [ 150.000282][ T8501] ? __pfx_genl_rcv_msg+0x10/0x10 [ 150.000304][ T8501] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 150.000331][ T8501] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 150.000353][ T8501] ? __pfx_nl80211_post_doit+0x10/0x10 [ 150.000394][ T8501] netlink_rcv_skb+0x226/0x4a0 [ 150.000414][ T8501] ? __pfx_genl_rcv_msg+0x10/0x10 [ 150.000438][ T8501] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.000472][ T8501] ? down_read+0x2be/0x330 [ 150.000503][ T8501] genl_rcv+0x28/0x40 [ 150.000522][ T8501] netlink_unicast+0x7bd/0x940 [ 150.000558][ T8501] netlink_sendmsg+0x813/0xb40 [ 150.000586][ T8501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.000614][ T8501] ? apparmor_socket_sendmsg+0x98/0x360 [ 150.000636][ T8501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.000654][ T8501] sock_sendmsg_nosec+0x13a/0x180 [ 150.000677][ T8501] ____sys_sendmsg+0x54e/0x850 [ 150.000708][ T8501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.000749][ T8501] ? import_iovec+0x73/0xa0 [ 150.000776][ T8501] ___sys_sendmsg+0x2a5/0x360 [ 150.000800][ T8501] ? __lock_acquire+0x747/0x2de0 [ 150.000824][ T8501] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.000887][ T8501] ? __fget_files+0x2a/0x420 [ 150.000911][ T8501] ? __fget_files+0x3a2/0x420 [ 150.000946][ T8501] __x64_sys_sendmsg+0x1b1/0x290 [ 150.000974][ T8501] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.001022][ T8501] do_syscall_64+0x166/0x520 [ 150.001046][ T8501] ? trace_irq_disable+0x3b/0x140 [ 150.001064][ T8501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.001082][ T8501] ? clear_bhb_loop+0x70/0xc0 [ 150.001105][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.001123][ T8501] RIP: 0033:0x7ff3b359e159 [ 150.001140][ T8501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.001154][ T8501] RSP: 002b:00007ff3b43d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.001173][ T8501] RAX: ffffffffffffffda RBX: 00007ff3b3825fa0 RCX: 00007ff3b359e159 [ 150.001186][ T8501] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 150.001198][ T8501] RBP: 00007ff3b43d9090 R08: 0000000000000000 R09: 0000000000000000 [ 150.001208][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.001219][ T8501] R13: 00007ff3b3826038 R14: 00007ff3b3825fa0 R15: 00007ffddc873e58 [ 150.001249][ T8501] [ 150.379132][ T8508] __nla_validate_parse: 11 callbacks suppressed [ 150.379152][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'. [ 150.940980][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'. [ 150.941013][ T8523] netlink: 'syz.2.944': attribute type 10 has an invalid length. [ 150.941026][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'. [ 150.976401][ T8523] geneve3: entered promiscuous mode [ 150.976425][ T8523] geneve3: entered allmulticast mode [ 151.100421][ T8527] netlink: 964 bytes leftover after parsing attributes in process `syz.0.946'. [ 151.100445][ T8527] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 151.192306][ T8529] xt_policy: output policy not valid in PREROUTING and INPUT [ 151.376619][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 151.450868][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 151.477646][ T8531] netlink: zone id is out of range [ 151.477663][ T8531] netlink: zone id is out of range [ 151.477670][ T8531] netlink: zone id is out of range [ 151.477679][ T8531] netlink: zone id is out of range [ 151.477685][ T8531] netlink: zone id is out of range [ 151.477693][ T8531] netlink: zone id is out of range [ 151.700287][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 151.700311][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 151.776502][ T8553] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 151.889246][ T8560] syz_tun: entered allmulticast mode [ 151.934567][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 151.934652][ T8569] netlink: 'syz.2.965': attribute type 10 has an invalid length. [ 151.934668][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 152.204395][ T8560] dvmrp8: entered allmulticast mode [ 152.270277][ T8569] geneve3: entered promiscuous mode [ 152.270300][ T8569] geneve3: entered allmulticast mode [ 152.357027][ T8591] netlink: 'syz.1.968': attribute type 11 has an invalid length. [ 152.367837][ T8594] block nbd0: not configured, cannot reconfigure [ 152.513840][ T8602] FAULT_INJECTION: forcing a failure. [ 152.513840][ T8602] name failslab, interval 1, probability 0, space 0, times 0 [ 152.513870][ T8602] CPU: 1 UID: 0 PID: 8602 Comm: syz.3.972 Not tainted syzkaller #0 PREEMPT(full) [ 152.513889][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.513898][ T8602] Call Trace: [ 152.513904][ T8602] [ 152.513912][ T8602] dump_stack_lvl+0xe8/0x150 [ 152.513940][ T8602] should_fail_ex+0x410/0x560 [ 152.513966][ T8602] should_failslab+0xa8/0x100 [ 152.513989][ T8602] __kvmalloc_node_noprof+0x176/0x820 [ 152.514012][ T8602] ? __kvmalloc_node_noprof+0x345/0x820 [ 152.514041][ T8602] ? bpf_compute_postorder+0xda/0x970 [ 152.514059][ T8602] ? bpf_compute_postorder+0xda/0x970 [ 152.514082][ T8602] bpf_compute_postorder+0xda/0x970 [ 152.514089][ T8599] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 152.514101][ T8602] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 152.514124][ T8602] ? add_kfuncs+0x251/0x2e0 [ 152.514146][ T8602] bpf_check+0x261f/0x2ef0 [ 152.514182][ T8602] ? __pfx_bpf_check+0x10/0x10 [ 152.514204][ T8602] ? bpf_obj_name_cpy+0x194/0x1e0 [ 152.514234][ T8602] bpf_prog_load+0x14d6/0x1c20 [ 152.514266][ T8602] ? __pfx_bpf_prog_load+0x10/0x10 [ 152.514310][ T8602] __sys_bpf+0xd0d/0xd90 [ 152.514338][ T8602] ? __pfx___sys_bpf+0x10/0x10 [ 152.514368][ T8602] ? __fget_files+0x2a/0x420 [ 152.514409][ T8602] ? ksys_write+0x242/0x270 [ 152.514446][ T8602] ? __pfx_ksys_write+0x10/0x10 [ 152.514475][ T8602] __x64_sys_bpf+0xba/0xd0 [ 152.514495][ T8602] do_syscall_64+0x166/0x520 [ 152.514516][ T8602] ? trace_irq_disable+0x3b/0x140 [ 152.514530][ T8602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.514544][ T8602] ? clear_bhb_loop+0x70/0xc0 [ 152.514561][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.514574][ T8602] RIP: 0033:0x7f4e7699e159 [ 152.514588][ T8602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.514600][ T8602] RSP: 002b:00007f4e74bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.514617][ T8602] RAX: ffffffffffffffda RBX: 00007f4e76c25fa0 RCX: 00007f4e7699e159 [ 152.514627][ T8602] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 152.514636][ T8602] RBP: 00007f4e74bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 152.514644][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.514660][ T8602] R13: 00007f4e76c26038 R14: 00007f4e76c25fa0 R15: 00007ffe48d81df8 [ 152.514682][ T8602] [ 152.545303][ T8559] syz_tun: left allmulticast mode [ 152.594370][ T8589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.693219][ T8659] netlink: 'syz.2.984': attribute type 1 has an invalid length. [ 153.715705][ T8659] net_ratelimit: 500 callbacks suppressed [ 153.715726][ T8659] openvswitch: netlink: Message has 4 unknown bytes. [ 154.857725][ T8640] team0: Port device dummy0 removed [ 154.857995][ T8640] bridge_slave_0: left allmulticast mode [ 154.858006][ T8640] bridge_slave_0: left promiscuous mode [ 154.858234][ T8640] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.861602][ T8640] bridge_slave_1: left allmulticast mode [ 154.861624][ T8640] bridge_slave_1: left promiscuous mode [ 154.861849][ T8640] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.874984][ T8640] bond0: (slave bond_slave_0): Releasing backup interface [ 154.895733][ T8640] bond0: (slave bond_slave_1): Releasing backup interface [ 154.902560][ T8640] team0: Port device team_slave_0 removed [ 154.910032][ T8640] team0: Port device team_slave_1 removed [ 154.910400][ T8640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.918094][ T8640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.930653][ T8640] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 154.932713][ T8639] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 154.935625][ T8647] tc_dump_action: action bad kind [ 154.936289][ T8646] tc_dump_action: action bad kind [ 154.996398][ T8658] macsec1: entered promiscuous mode [ 155.232657][ T8665] block nbd0: not configured, cannot reconfigure [ 155.607013][ T8692] __nla_validate_parse: 11 callbacks suppressed [ 155.607034][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 155.616940][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.996'. [ 155.634298][ T8692] netlink: 'syz.0.996': attribute type 15 has an invalid length. [ 155.649212][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.997'. [ 155.670941][ T8692] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 155.920721][ T8719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1001'. [ 155.920781][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 155.920795][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 155.920853][ T8719] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1001'. [ 155.920866][ T8719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1001'. [ 155.934760][ T8720] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 156.452252][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 156.455201][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1011'. [ 156.461676][ T8744] netlink: 'syz.0.1011': attribute type 15 has an invalid length. [ 156.470778][ T8744] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 156.627431][ T8745] xt_connbytes: Forcing CT accounting to be enabled [ 156.741936][ T8753] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 156.944925][ T8757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.070873][ T8762] Cannot find del_set index 0 as target [ 157.257943][ T8769] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 157.419313][ T8772] netlink: 'syz.0.1022': attribute type 15 has an invalid length. [ 157.424890][ T8772] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 158.544655][ T8807] netlink: 'syz.4.1034': attribute type 21 has an invalid length. [ 158.700960][ T8815] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 158.792335][ T8807] netlink: 'syz.4.1034': attribute type 5 has an invalid length. [ 158.824318][ T8813] netlink: 'syz.1.1035': attribute type 15 has an invalid length. [ 158.900109][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.900162][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.900197][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.900229][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.624099][ T8838] 0·: renamed from hsr0 [ 159.668756][ T8838] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.668783][ T8838] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.670660][ T8838] 0·: entered allmulticast mode [ 159.670682][ T8838] hsr_slave_0: entered allmulticast mode [ 159.670697][ T8838] hsr_slave_1: entered allmulticast mode [ 159.672656][ T8838] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 159.675341][ T8840] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 159.767808][ T8840] bond1: entered promiscuous mode [ 159.771503][ T8840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.838051][ T8840] vlan3: entered allmulticast mode [ 159.838072][ T8840] bond1: entered allmulticast mode [ 159.857462][ T8846] netlink: 'syz.0.1048': attribute type 15 has an invalid length. [ 159.901957][ T8846] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 159.935892][ T8848] FAULT_INJECTION: forcing a failure. [ 159.935892][ T8848] name failslab, interval 1, probability 0, space 0, times 0 [ 159.935923][ T8848] CPU: 0 UID: 0 PID: 8848 Comm: syz.1.1049 Not tainted syzkaller #0 PREEMPT(full) [ 159.935943][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.935954][ T8848] Call Trace: [ 159.935961][ T8848] [ 159.935969][ T8848] dump_stack_lvl+0xe8/0x150 [ 159.936000][ T8848] should_fail_ex+0x410/0x560 [ 159.936025][ T8848] ? __alloc_skb+0x1db/0x7a0 [ 159.936047][ T8848] should_failslab+0xa8/0x100 [ 159.936071][ T8848] ? __alloc_skb+0x1db/0x7a0 [ 159.936091][ T8848] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 159.936120][ T8848] ? __alloc_skb+0x18d/0x7a0 [ 159.936142][ T8848] ? __alloc_skb+0x1db/0x7a0 [ 159.936171][ T8848] __alloc_skb+0x1db/0x7a0 [ 159.936198][ T8848] netlink_sendmsg+0x5d4/0xb40 [ 159.936230][ T8848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.936257][ T8848] ? apparmor_socket_sendmsg+0x98/0x360 [ 159.936281][ T8848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.936299][ T8848] sock_sendmsg_nosec+0x13a/0x180 [ 159.936330][ T8848] ____sys_sendmsg+0x54e/0x850 [ 159.936361][ T8848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.936393][ T8848] ? import_iovec+0x73/0xa0 [ 159.936418][ T8848] ___sys_sendmsg+0x2a5/0x360 [ 159.936441][ T8848] ? __lock_acquire+0x747/0x2de0 [ 159.936464][ T8848] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.936522][ T8848] ? __fget_files+0x2a/0x420 [ 159.936544][ T8848] ? __fget_files+0x3a2/0x420 [ 159.936576][ T8848] __x64_sys_sendmsg+0x1b1/0x290 [ 159.936603][ T8848] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.936646][ T8848] do_syscall_64+0x166/0x520 [ 159.936669][ T8848] ? trace_irq_disable+0x3b/0x140 [ 159.936687][ T8848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.936705][ T8848] ? clear_bhb_loop+0x70/0xc0 [ 159.936726][ T8848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.936744][ T8848] RIP: 0033:0x7fc606b9e159 [ 159.936762][ T8848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.936775][ T8848] RSP: 002b:00007fc604df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.936794][ T8848] RAX: ffffffffffffffda RBX: 00007fc606e25fa0 RCX: 00007fc606b9e159 [ 159.936808][ T8848] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004 [ 159.936819][ T8848] RBP: 00007fc604df6090 R08: 0000000000000000 R09: 0000000000000000 [ 159.936830][ T8848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.936840][ T8848] R13: 00007fc606e26038 R14: 00007fc606e25fa0 R15: 00007fff128db4c8 [ 159.936871][ T8848] [ 160.063155][ T8840] bond1: (slave bridge1): making interface the new active one [ 160.063181][ T8840] bridge1: entered promiscuous mode [ 160.063377][ T8840] bridge1: entered allmulticast mode [ 160.086128][ T8840] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 160.502739][ T8860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.247366][ T8869] netlink: 'syz.1.1057': attribute type 1 has an invalid length. [ 161.406180][ T8870] syzkaller0: entered promiscuous mode [ 161.406203][ T8870] syzkaller0: entered allmulticast mode [ 161.409963][ T8877] __nla_validate_parse: 18 callbacks suppressed [ 161.409979][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'. [ 161.520177][ T8885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1060'. [ 161.557407][ T8869] bond3: entered promiscuous mode [ 161.557599][ T8869] bond3: entered allmulticast mode [ 161.558061][ T8869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.700889][ T8873] veth0: entered promiscuous mode [ 161.842831][ T8874] erspan1: entered allmulticast mode [ 161.846517][ T8874] bond3: (slave erspan1): making interface the new active one [ 161.846540][ T8874] erspan1: entered promiscuous mode [ 161.847801][ T8874] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 162.001986][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 162.024538][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1062'. [ 162.104887][ T8896] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 162.358796][ T9] page_pool_release_retry() stalled pool shutdown: id 28, 1 inflight 60 sec [ 163.644040][ T8891] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1504) ! [ 163.644503][ T8892] netlink: 'syz.4.1062': attribute type 15 has an invalid length. [ 163.772627][ T8867] veth0: left promiscuous mode [ 164.086784][ T8932] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1075'. [ 164.086891][ T8932] 0·: renamed from hsr0 [ 164.103614][ T8932] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.103639][ T8932] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.103714][ T8932] 0·: entered allmulticast mode [ 164.103727][ T8932] hsr_slave_0: entered allmulticast mode [ 164.103742][ T8932] hsr_slave_1: entered allmulticast mode [ 164.111109][ T8932] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 164.213324][ T8938] x_tables: ip6_tables: SYNPROXY.0 target: invalid size 8 (kernel) != (user) 0 [ 164.435323][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 164.448964][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'. [ 164.455108][ T8945] netlink: 'syz.3.1080': attribute type 15 has an invalid length. [ 164.516750][ T8945] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 164.538019][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 164.538045][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 164.751124][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 165.008120][ T8976] Cannot find del_set index 0 as target [ 165.127018][ T5628] block nbd0: Receive control failed (result -32) [ 165.189688][ T8983] netlink: 'syz.0.1098': attribute type 15 has an invalid length. [ 165.197355][ T8983] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 165.258947][ T8981] batman_adv: batadv0: Interface deactivated: macvlan2 [ 165.402112][ T8996] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 166.029974][ T9016] netlink: 'syz.3.1111': attribute type 29 has an invalid length. [ 166.033861][ T9016] netlink: 'syz.3.1111': attribute type 29 has an invalid length. [ 166.901447][ T9059] __nla_validate_parse: 7 callbacks suppressed [ 166.901467][ T9059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1125'. [ 166.904723][ T9067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1125'. [ 166.987801][ T9072] netlink: 'syz.0.1129': attribute type 1 has an invalid length. [ 167.032172][ T9072] bond3: entered promiscuous mode [ 167.032678][ T9072] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.059965][ T9072] vlan5: entered allmulticast mode [ 167.060011][ T9072] bond3: entered allmulticast mode [ 167.095651][ T9072] bond3: (slave bridge2): making interface the new active one [ 167.095675][ T9072] bridge2: entered promiscuous mode [ 167.095832][ T9072] bridge2: entered allmulticast mode [ 167.117949][ T9072] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 167.152625][ T9077] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1131'. [ 167.174423][ T9075] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1130'. [ 167.175647][ T9075] 0·: renamed from hsr0 [ 167.319805][ T9075] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.319832][ T9075] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.319978][ T9075] 0·: left promiscuous mode [ 167.320027][ T9075] 0·: entered allmulticast mode [ 167.320039][ T9075] hsr_slave_0: entered allmulticast mode [ 167.320054][ T9075] hsr_slave_1: entered allmulticast mode [ 167.332078][ T9075] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 167.521047][ T9090] netlink: 1335 bytes leftover after parsing attributes in process `syz.2.1135'. [ 168.135856][ T9116] netlink: 'syz.4.1146': attribute type 1 has an invalid length. [ 168.251350][ T9116] bond2: entered promiscuous mode [ 168.253437][ T9116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.256549][ T9123] syzkaller0: entered promiscuous mode [ 168.256571][ T9123] syzkaller0: entered allmulticast mode [ 168.305644][ T9120] vlan4: entered allmulticast mode [ 168.305666][ T9120] bond2: entered allmulticast mode [ 168.337544][ T9130] netlink: 'syz.2.1144': attribute type 10 has an invalid length. [ 168.363758][ T9116] bond2: (slave bridge3): making interface the new active one [ 168.363781][ T9116] bridge3: entered promiscuous mode [ 168.363930][ T9116] bridge3: entered allmulticast mode [ 168.366116][ T9116] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 168.376783][ T9113] tipc: Enabled bearer , priority 0 [ 168.383786][ T9130] netlink: 'syz.2.1144': attribute type 10 has an invalid length. [ 168.412548][ T9127] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1149'. [ 168.425120][ T9112] tipc: Resetting bearer [ 168.453303][ T9112] tipc: Disabling bearer [ 168.502024][ T9127] 0·: renamed from hsr0 [ 168.511265][ T9127] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.511291][ T9127] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.511391][ T9127] 0·: entered allmulticast mode [ 168.511405][ T9127] hsr_slave_0: entered allmulticast mode [ 168.511420][ T9127] hsr_slave_1: entered allmulticast mode [ 168.512937][ T9127] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 168.667827][ T9138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1152'. [ 168.669695][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1150'. [ 168.670408][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1150'. [ 168.980133][ T9140] syzkaller1: entered promiscuous mode [ 168.980165][ T9140] syzkaller1: entered allmulticast mode [ 169.412101][ T9172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1166'. [ 170.139061][ T9209] netlink: 'syz.0.1178': attribute type 10 has an invalid length. [ 170.251867][ T9209] geneve2: entered promiscuous mode [ 170.251892][ T9209] geneve2: entered allmulticast mode [ 170.401964][ T9212] FAULT_INJECTION: forcing a failure. [ 170.401964][ T9212] name failslab, interval 1, probability 0, space 0, times 0 [ 170.401998][ T9212] CPU: 0 UID: 0 PID: 9212 Comm: syz.3.1179 Not tainted syzkaller #0 PREEMPT(full) [ 170.402018][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.402033][ T9212] Call Trace: [ 170.402041][ T9212] [ 170.402055][ T9212] dump_stack_lvl+0xe8/0x150 [ 170.402086][ T9212] should_fail_ex+0x410/0x560 [ 170.402114][ T9212] should_failslab+0xa8/0x100 [ 170.402138][ T9212] __kvmalloc_node_noprof+0x176/0x820 [ 170.402156][ T9212] ? __kvmalloc_node_noprof+0x345/0x820 [ 170.402172][ T9212] ? analyze_subprog+0x8ac/0x9e00 [ 170.402192][ T9212] ? analyze_subprog+0x8ac/0x9e00 [ 170.402223][ T9212] analyze_subprog+0x8ac/0x9e00 [ 170.402243][ T9212] ? is_bpf_text_address+0x292/0x2b0 [ 170.402269][ T9212] ? kernel_text_address+0xa5/0xe0 [ 170.402311][ T9212] ? __pfx_stack_trace_save+0x10/0x10 [ 170.402345][ T9212] ? call_instance+0x263/0x560 [ 170.402368][ T9212] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 170.402388][ T9212] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 170.402410][ T9212] ? __pfx_analyze_subprog+0x10/0x10 [ 170.402428][ T9212] ? __x64_sys_bpf+0xba/0xd0 [ 170.402442][ T9212] ? do_syscall_64+0x166/0x520 [ 170.402464][ T9212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.402512][ T9212] ? call_instance+0x263/0x560 [ 170.402531][ T9212] ? rcu_is_watching+0x16/0xb0 [ 170.402552][ T9212] ? call_instance+0x263/0x560 [ 170.402570][ T9212] ? trace_kmalloc+0x2a/0xf0 [ 170.402589][ T9212] ? call_instance+0x263/0x560 [ 170.402608][ T9212] ? __kvmalloc_node_noprof+0x52f/0x820 [ 170.402642][ T9212] ? __kvmalloc_node_noprof+0x345/0x820 [ 170.402662][ T9212] ? call_instance+0x263/0x560 [ 170.402679][ T9212] ? call_instance+0x263/0x560 [ 170.402703][ T9212] ? call_instance+0x42e/0x560 [ 170.402728][ T9212] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 170.402748][ T9212] ? sk_lookup_func_proto+0xdd/0x1d0 [ 170.402798][ T9212] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 170.402823][ T9212] ? __kvmalloc_node_noprof+0x345/0x820 [ 170.402842][ T9212] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 170.402861][ T9212] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 170.402889][ T9212] bpf_compute_live_registers+0x8d3/0x1ff0 [ 170.402929][ T9212] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 170.402960][ T9212] bpf_check+0x2746/0x2ef0 [ 170.402997][ T9212] ? __pfx_bpf_check+0x10/0x10 [ 170.403019][ T9212] ? bpf_obj_name_cpy+0x194/0x1e0 [ 170.403048][ T9212] bpf_prog_load+0x14d6/0x1c20 [ 170.403080][ T9212] ? __pfx_bpf_prog_load+0x10/0x10 [ 170.403124][ T9212] __sys_bpf+0xd0d/0xd90 [ 170.403152][ T9212] ? __pfx___sys_bpf+0x10/0x10 [ 170.403182][ T9212] ? __fget_files+0x2a/0x420 [ 170.403223][ T9212] ? rcu_is_watching+0x16/0xb0 [ 170.403248][ T9212] __x64_sys_bpf+0xba/0xd0 [ 170.403267][ T9212] do_syscall_64+0x166/0x520 [ 170.403287][ T9212] ? trace_irq_disable+0x3b/0x140 [ 170.403305][ T9212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.403323][ T9212] ? clear_bhb_loop+0x70/0xc0 [ 170.403345][ T9212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.403360][ T9212] RIP: 0033:0x7f4e7699e159 [ 170.403377][ T9212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.403390][ T9212] RSP: 002b:00007f4e74bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.403407][ T9212] RAX: ffffffffffffffda RBX: 00007f4e76c25fa0 RCX: 00007f4e7699e159 [ 170.403420][ T9212] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 170.403431][ T9212] RBP: 00007f4e74bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 170.403441][ T9212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.403451][ T9212] R13: 00007f4e76c26038 R14: 00007f4e76c25fa0 R15: 00007ffe48d81df8 [ 170.403476][ T9212] [ 172.179113][ T9281] __nla_validate_parse: 13 callbacks suppressed [ 172.179145][ T9281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1201'. [ 172.179203][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'. [ 172.179217][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'. [ 172.179279][ T9281] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1201'. [ 172.179292][ T9281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1201'. [ 172.284516][ T9286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1202'. [ 172.284551][ T9286] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 172.982965][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 175.404021][ T9338] syzkaller0: entered promiscuous mode [ 175.404046][ T9338] syzkaller0: entered allmulticast mode [ 175.429828][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 175.429864][ T9345] netlink: 'syz.3.1218': attribute type 10 has an invalid length. [ 175.429880][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'. [ 175.574070][ T9350] netlink: 'syz.1.1221': attribute type 1 has an invalid length. [ 175.767071][ T9360] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1220'. [ 177.202324][ T9345] geneve3: entered promiscuous mode [ 177.202338][ T9345] geneve3: entered allmulticast mode [ 177.226130][ T9350] bond4: entered promiscuous mode [ 177.226418][ T9350] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.238982][ T9354] vlan5: entered allmulticast mode [ 177.239003][ T9354] bond4: entered allmulticast mode [ 177.253738][ T9357] bond4: (slave bridge3): making interface the new active one [ 177.253759][ T9357] bridge3: entered promiscuous mode [ 177.253926][ T9357] bridge3: entered allmulticast mode [ 177.261945][ T9357] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 177.304862][ T9360] 1·: renamed from c0· [ 177.318686][ T9360] 1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.318712][ T9360] 1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.322561][ T9360] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 177.434738][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 177.434764][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 177.478061][ T9367] netlink: 'syz.1.1222': attribute type 1 has an invalid length. [ 177.531310][ T9374] xt_bpf: check failed: parse error [ 177.615290][ T9367] bond5: entered promiscuous mode [ 177.625489][ T9367] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.773492][ T9375] vlan6: entered allmulticast mode [ 177.773515][ T9375] bond5: entered allmulticast mode [ 177.826551][ T9367] bond5: (slave bridge4): making interface the new active one [ 177.826573][ T9367] bridge4: entered promiscuous mode [ 177.826718][ T9367] bridge4: entered allmulticast mode [ 177.828086][ T9367] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 178.144416][ T9393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.179557][ T9393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.256215][ T9393] veth1_vlan: left promiscuous mode [ 178.257412][ T9393] veth0_vlan: left promiscuous mode [ 178.270500][ T9393] veth0_vlan: entered promiscuous mode [ 178.273400][ T9393] veth1_vlan: entered promiscuous mode [ 178.292843][ T9393] veth1_macvtap: left promiscuous mode [ 178.294080][ T9393] veth0_macvtap: left promiscuous mode [ 178.295215][ T9393] veth0_macvtap: entered promiscuous mode [ 178.296329][ T9393] veth1_macvtap: entered promiscuous mode [ 178.339038][ T9393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.340210][ T9393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.341228][ T9393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.342335][ T9393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.347226][ T9393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.396452][ T9393] bond2: left promiscuous mode [ 178.396474][ T9393] bridge1: left promiscuous mode [ 178.398427][ T9393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.427502][ T9393] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 178.429701][ T9393] bond3: left promiscuous mode [ 178.429722][ T9393] bridge2: left promiscuous mode [ 178.430888][ T9393] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.748952][ T9407] netlink: 964 bytes leftover after parsing attributes in process `syz.3.1236'. [ 178.748977][ T9407] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 179.065330][ T9416] syzkaller0: entered promiscuous mode [ 179.065357][ T9416] syzkaller0: entered allmulticast mode [ 179.080446][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.080488][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.080530][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.080566][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.080642][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.080666][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.080700][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.080748][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.086617][ T9425] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1238'. [ 179.086743][ T9425] 1·: renamed from c0· (while UP) [ 179.146283][ T9443] ip_tables: iptables: counters copy to user failed while replacing table [ 179.171702][ T9425] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 179.330380][ T9450] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1247'. [ 181.048051][ T9454] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 181.061398][ T9465] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 181.120601][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'. [ 181.232173][ T9471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.302478][ T9474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1256'. [ 181.345623][ T9477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1254'. [ 181.430435][ T9480] smc: net device lo applied user defined pnetid SYZ0 [ 181.436211][ T9485] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1259'. [ 181.436322][ T9485] 0·: renamed from c1· (while UP) [ 181.470078][ T9485] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 181.767896][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1262'. [ 181.802006][ T9492] netlink: 'syz.1.1261': attribute type 2 has an invalid length. [ 181.875473][ T9499] bond3: entered promiscuous mode [ 181.875505][ T9499] bond3: entered allmulticast mode [ 181.947273][ T9492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.957857][ T9492] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.031358][ T9492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.720275][ T9492] veth1_vlan: left promiscuous mode [ 182.721403][ T9492] veth0_vlan: left promiscuous mode [ 182.722999][ T9492] veth0_vlan: entered promiscuous mode [ 182.725286][ T9492] veth1_vlan: entered promiscuous mode [ 182.734318][ T9492] veth1_macvtap: left promiscuous mode [ 182.737810][ T9492] veth0_macvtap: left promiscuous mode [ 182.739628][ T9492] veth0_macvtap: entered promiscuous mode [ 182.740857][ T9492] veth1_macvtap: entered promiscuous mode [ 182.749053][ T9492] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.750568][ T9492] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.751638][ T9492] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.752707][ T9492] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.755095][ T9492] batman_adv: batadv0: Interface activated: vlan2 [ 182.756246][ T9492] bond1: left promiscuous mode [ 182.756263][ T9492] bridge1: left promiscuous mode [ 182.757549][ T9492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.775550][ T9492] bond2: left promiscuous mode [ 182.775572][ T9492] bridge2: left promiscuous mode [ 182.782077][ T9492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.800688][ T9492] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 183.039032][ T9549] __nla_validate_parse: 3 callbacks suppressed [ 183.039052][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1276'. [ 183.242520][ T9563] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1278'. [ 183.403721][ T9549] 8021q: adding VLAN 0 to HW filter on device .` [ 183.686380][ T9549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.686406][ T9549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.695511][ T9549] veth1_vlan: left promiscuous mode [ 183.696749][ T9549] veth0_vlan: left promiscuous mode [ 183.699109][ T9549] veth0_vlan: entered promiscuous mode [ 183.702225][ T9549] veth1_vlan: entered promiscuous mode [ 183.707842][ T9549] veth0_macvtap: left promiscuous mode [ 183.710273][ T9549] veth0_macvtap: entered promiscuous mode [ 183.723990][ T9549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 183.725321][ T9549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 183.733613][ T9549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 183.735004][ T9549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.740571][ T9549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.767014][ T9549] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 183.803010][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.803057][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.803089][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.803118][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.803167][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.803200][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.803229][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.809039][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.829698][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.829839][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.842866][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.842966][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.877973][ T9615] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 185.375650][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'. [ 185.392265][ T9642] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 185.497211][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 185.512452][ T9650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1307'. [ 185.515196][ T9650] netlink: 'syz.4.1307': attribute type 15 has an invalid length. [ 185.518038][ T9650] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 185.760825][ T9661] netlink: 'syz.3.1309': attribute type 1 has an invalid length. [ 185.944184][ T9661] bond2: entered promiscuous mode [ 185.951915][ T9661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.029965][ T9666] vlan4: entered allmulticast mode [ 186.031642][ T9666] bond2: entered allmulticast mode [ 186.214794][ T9661] bond2: (slave bridge2): making interface the new active one [ 186.214819][ T9661] bridge2: entered promiscuous mode [ 186.217478][ T9661] bridge2: entered allmulticast mode [ 186.251793][ T9661] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 186.287950][ T9686] bridge_slave_0: default FDB implementation only supports local addresses [ 186.326505][ T9697] nbd1: detected capacity change from 0 to 63 [ 186.476757][ T9703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1315'. [ 186.476784][ T9703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1315'. [ 186.708019][ T9711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'. [ 186.708046][ T9711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'. [ 186.708059][ T9711] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1316'. [ 186.815146][ T9721] syzkaller0: entered promiscuous mode [ 186.815161][ T9721] syzkaller0: entered allmulticast mode [ 186.860642][ T9722] netlink: 'syz.1.1322': attribute type 15 has an invalid length. [ 186.862032][ T9722] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 187.170570][ T5628] block nbd1: Receive control failed (result -104) [ 189.196659][ T9690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.449195][ T9733] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 189.496128][ T9737] __nla_validate_parse: 2 callbacks suppressed [ 189.496148][ T9737] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1328'. [ 189.839998][ T5628] Bluetooth: hci4: link tx timeout [ 189.840112][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.885413][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 189.921416][ T9758] netlink: 'syz.4.1333': attribute type 1 has an invalid length. [ 189.921440][ T9758] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1333'. [ 189.998015][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1333'. [ 190.015181][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'. [ 190.263906][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 190.287872][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1335'. [ 190.303139][ T9773] netlink: 'syz.0.1335': attribute type 15 has an invalid length. [ 190.319471][ T9773] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 190.465130][ T9782] netlink: 'syz.2.1339': attribute type 75 has an invalid length. [ 190.517706][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 190.517757][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'. [ 190.593894][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1339'. [ 190.623076][ T9779] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 190.623111][ T9779] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 190.623147][ T9779] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 190.683776][ T9779] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 190.685283][ T9787] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1504) ! [ 190.712588][ T9779] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 191.060183][ T9803] netlink: 'syz.4.1350': attribute type 15 has an invalid length. [ 191.081911][ T9803] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 191.211033][ T9807] syzkaller1: entered promiscuous mode [ 191.211056][ T9807] syzkaller1: entered allmulticast mode [ 191.382519][ T9821] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 191.552862][ T9825] Bluetooth: hci0: unsupported parameter 5135 [ 191.552884][ T9825] Bluetooth: hci0: unsupported parameter 8192 [ 191.552900][ T9825] Bluetooth: hci0: unsupported parameter 5135 [ 191.552911][ T9825] Bluetooth: hci0: unsupported parameter 8192 [ 191.655159][ T9833] netlink: 'syz.0.1365': attribute type 15 has an invalid length. [ 191.682587][ T9831] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 191.724978][ T9833] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 191.882035][ T5628] Bluetooth: hci4: command 0x0405 tx timeout [ 191.919752][ T9843] netlink: 'syz.4.1371': attribute type 16 has an invalid length. [ 192.170454][ T9863] FAULT_INJECTION: forcing a failure. [ 192.170454][ T9863] name failslab, interval 1, probability 0, space 0, times 0 [ 192.170485][ T9863] CPU: 0 UID: 0 PID: 9863 Comm: syz.1.1373 Not tainted syzkaller #0 PREEMPT(full) [ 192.170505][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.170515][ T9863] Call Trace: [ 192.170523][ T9863] [ 192.170531][ T9863] dump_stack_lvl+0xe8/0x150 [ 192.170563][ T9863] should_fail_ex+0x410/0x560 [ 192.170588][ T9863] should_failslab+0xa8/0x100 [ 192.170611][ T9863] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 192.170632][ T9863] ? rcu_is_watching+0x16/0xb0 [ 192.170653][ T9863] ? copy_array+0x71/0x100 [ 192.170675][ T9863] ? copy_array+0x71/0x100 [ 192.170698][ T9863] ? copy_array+0x71/0x100 [ 192.170722][ T9863] krealloc_node_align_noprof+0x19a/0x390 [ 192.170746][ T9863] copy_array+0x71/0x100 [ 192.170773][ T9863] bpf_copy_verifier_state+0x36a/0x1170 [ 192.170810][ T9863] bpf_is_state_visited+0x385b/0x48b0 [ 192.170841][ T9863] ? bpf_diag_record_branch+0x58/0x90 [ 192.170882][ T9863] do_check_common+0x224b/0x55c0 [ 192.170937][ T9863] ? __pfx_do_check_common+0x10/0x10 [ 192.170974][ T9863] do_check_main+0xa2/0x1f0 [ 192.170997][ T9863] bpf_check+0x2777/0x2ef0 [ 192.171033][ T9863] ? __pfx_bpf_check+0x10/0x10 [ 192.171054][ T9863] ? bpf_obj_name_cpy+0x194/0x1e0 [ 192.171099][ T9863] bpf_prog_load+0x14d6/0x1c20 [ 192.171129][ T9863] ? __pfx_bpf_prog_load+0x10/0x10 [ 192.171170][ T9863] __sys_bpf+0xd0d/0xd90 [ 192.171196][ T9863] ? __pfx___sys_bpf+0x10/0x10 [ 192.171223][ T9863] ? __fget_files+0x2a/0x420 [ 192.171261][ T9863] ? ksys_write+0x242/0x270 [ 192.171287][ T9863] ? __pfx_ksys_write+0x10/0x10 [ 192.171316][ T9863] __x64_sys_bpf+0xba/0xd0 [ 192.171345][ T9863] do_syscall_64+0x166/0x520 [ 192.171369][ T9863] ? trace_irq_disable+0x3b/0x140 [ 192.171387][ T9863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.171405][ T9863] ? clear_bhb_loop+0x70/0xc0 [ 192.171428][ T9863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.171447][ T9863] RIP: 0033:0x7fc606b9e159 [ 192.171463][ T9863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.171477][ T9863] RSP: 002b:00007fc604df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.171497][ T9863] RAX: ffffffffffffffda RBX: 00007fc606e25fa0 RCX: 00007fc606b9e159 [ 192.171510][ T9863] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 192.171521][ T9863] RBP: 00007fc604df6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.171532][ T9863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.171542][ T9863] R13: 00007fc606e26038 R14: 00007fc606e25fa0 R15: 00007fff128db4c8 [ 192.171571][ T9863] [ 193.262372][ T9901] can: request_module (can-proto-3) failed. [ 194.280995][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.281053][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.486614][ T9920] bridge_slave_0: left allmulticast mode [ 194.486633][ T9920] bridge_slave_0: left promiscuous mode [ 194.486793][ T9920] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.505976][ T9920] bridge_slave_1: left allmulticast mode [ 194.506017][ T9920] bridge_slave_1: left promiscuous mode [ 194.506337][ T9920] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.850285][ T9841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.085184][ T9940] netlink: 'syz.1.1403': attribute type 34 has an invalid length. [ 195.086354][ T9940] __nla_validate_parse: 13 callbacks suppressed [ 195.086370][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'. [ 195.192722][ T9940] bond6: option lacp_strict: invalid value (16) [ 195.196960][ T9940] bond6 (unregistering): Released all slaves [ 195.261482][ T166] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.261526][ T166] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.261557][ T166] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.261588][ T166] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.709053][ T9973] bridge0: entered promiscuous mode [ 195.709574][ T9973] bridge0: entered allmulticast mode [ 196.219320][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1415'. [ 196.219382][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 196.219397][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 196.219467][ T9999] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1415'. [ 196.219480][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1415'. [ 196.400852][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 196.431177][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1417'. [ 196.469042][T10011] netlink: 'syz.2.1417': attribute type 15 has an invalid length. [ 196.470388][T10011] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 197.626443][T10061] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 197.626443][T10061] Please contact the netfilter-devel mailing list or update your nftables rules. [ 197.840840][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 197.846426][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1430'. [ 197.928093][T10070] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 197.965353][T10074] netlink: 'syz.4.1430': attribute type 15 has an invalid length. [ 199.341365][T10131] veth1_to_bond: entered allmulticast mode [ 199.364913][T10128] netlink: 'syz.3.1443': attribute type 15 has an invalid length. [ 199.394820][T10128] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 199.540489][T10131] veth1_to_bond: entered promiscuous mode [ 199.585626][T10131] veth1_to_bond (unregistering): left promiscuous mode [ 199.585671][T10131] veth1_to_bond (unregistering): left allmulticast mode [ 199.610832][T10143] FAULT_INJECTION: forcing a failure. [ 199.610832][T10143] name failslab, interval 1, probability 0, space 0, times 0 [ 199.610866][T10143] CPU: 1 UID: 0 PID: 10143 Comm: syz.3.1447 Not tainted syzkaller #0 PREEMPT(full) [ 199.610887][T10143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.610898][T10143] Call Trace: [ 199.610905][T10143] [ 199.610913][T10143] dump_stack_lvl+0xe8/0x150 [ 199.610945][T10143] should_fail_ex+0x410/0x560 [ 199.610972][T10143] should_failslab+0xa8/0x100 [ 199.610997][T10143] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 199.611024][T10143] ? __lock_acquire+0x747/0x2de0 [ 199.611045][T10143] ? __d_alloc+0x37/0x6f0 [ 199.611070][T10143] ? __d_alloc+0x37/0x6f0 [ 199.611109][T10143] __d_alloc+0x37/0x6f0 [ 199.611133][T10143] ? __lock_acquire+0x747/0x2de0 [ 199.611157][T10143] d_alloc_pseudo+0x21/0xc0 [ 199.611185][T10143] alloc_path_pseudo+0x107/0x220 [ 199.611212][T10143] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 199.611246][T10143] alloc_file_pseudo+0xa8/0x1e0 [ 199.611270][T10143] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 199.611300][T10143] anon_inode_getfd+0xc8/0x1f0 [ 199.611328][T10143] bpf_prog_load+0x1612/0x1c20 [ 199.611363][T10143] ? __pfx_bpf_prog_load+0x10/0x10 [ 199.611407][T10143] __sys_bpf+0xd0d/0xd90 [ 199.611434][T10143] ? __pfx___sys_bpf+0x10/0x10 [ 199.611462][T10143] ? __fget_files+0x2a/0x420 [ 199.611499][T10143] ? ksys_write+0x242/0x270 [ 199.611524][T10143] ? __pfx_ksys_write+0x10/0x10 [ 199.611554][T10143] __x64_sys_bpf+0xba/0xd0 [ 199.611574][T10143] do_syscall_64+0x166/0x520 [ 199.611596][T10143] ? trace_irq_disable+0x3b/0x140 [ 199.611614][T10143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.611632][T10143] ? clear_bhb_loop+0x70/0xc0 [ 199.611655][T10143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.611672][T10143] RIP: 0033:0x7f4e7699e159 [ 199.611686][T10143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.611700][T10143] RSP: 002b:00007f4e74bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.611718][T10143] RAX: ffffffffffffffda RBX: 00007f4e76c25fa0 RCX: 00007f4e7699e159 [ 199.611729][T10143] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 199.611740][T10143] RBP: 00007f4e74bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.611751][T10143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.611760][T10143] R13: 00007f4e76c26038 R14: 00007f4e76c25fa0 R15: 00007ffe48d81df8 [ 199.611789][T10143] [ 199.968351][T10153] x_tables: duplicate underflow at hook 3 [ 200.067786][T10161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.086161][T10161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.096874][T10162] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 200.163754][T10162] bond4: entered promiscuous mode [ 200.164558][T10162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.206607][T10168] vlan6: entered allmulticast mode [ 200.206629][T10168] bond4: entered allmulticast mode [ 200.231923][T10162] __nla_validate_parse: 9 callbacks suppressed [ 200.231942][T10162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1452'. [ 200.701941][T10186] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1462'. [ 200.975999][T10199] netlink: 'syz.4.1467': attribute type 4 has an invalid length. [ 200.976020][T10199] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1467'. [ 200.977681][T10199] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 201.153482][T10208] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1470'. [ 201.300167][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1475'. [ 201.405183][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 201.481500][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 201.481540][ T5633] Bluetooth: hci2: command 0x0401 tx timeout [ 201.481593][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 201.644165][T10224] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”à�I�ƺ¥þ àø§% [ 201.955085][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1481'. [ 201.980855][T10243] IPVS: Scheduler module ip_vs_ not found [ 202.055932][T10256] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1480'. [ 202.069803][T10256] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1480'. [ 202.136894][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 202.162769][T10263] syzkaller0: entered promiscuous mode [ 202.162790][T10263] syzkaller0: entered allmulticast mode [ 202.802554][T10289] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1504) ! [ 203.626916][T10317] block nbd2: server does not support multiple connections per device. [ 203.627634][T10317] block nbd2: shutting down sockets [ 203.828645][T10317] TC_ACT_REPEAT abuse ? [ 203.916454][T10325] netlink: 'syz.2.1504': attribute type 1 has an invalid length. [ 203.994432][T10325] bond6: entered promiscuous mode [ 203.994941][T10325] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.995607][T10327] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 204.077583][T10333] vlan5: entered allmulticast mode [ 204.077604][T10333] bond6: entered allmulticast mode [ 204.086675][T10331] netlink: 'syz.1.1500': attribute type 15 has an invalid length. [ 204.112448][T10331] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 204.195981][T10339] syzkaller0: entered promiscuous mode [ 204.196003][T10339] syzkaller0: entered allmulticast mode [ 204.610151][T10355] ip_tables: iptables: counters copy to user failed while replacing table [ 205.663558][T10399] __nla_validate_parse: 8 callbacks suppressed [ 205.663579][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'. [ 205.714509][T10399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 205.761719][T10399] netlink: 'syz.3.1520': attribute type 15 has an invalid length. [ 205.786959][T10399] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 206.025385][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1528'. [ 206.211664][ T31] audit: type=1800 audit(1790468494.235:4): pid=10425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1531" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1613 res=0 errno=0 [ 206.420256][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1535'. [ 206.447311][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1535'. [ 206.481342][T10434] netlink: 'syz.1.1535': attribute type 15 has an invalid length. [ 206.500465][T10434] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 206.596735][T10444] netlink: 976 bytes leftover after parsing attributes in process `syz.1.1538'. [ 206.596759][T10444] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 206.605814][T10442] tipc: Started in network mode [ 206.605844][T10442] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 206.606029][T10442] tipc: Enabled bearer , priority 10 [ 206.761873][T10453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1540'. [ 206.986547][T10463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1544'. [ 207.304978][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 207.309665][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1548'. [ 207.319702][T10474] netlink: 'syz.0.1548': attribute type 15 has an invalid length. [ 207.355193][T10474] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 207.520141][T10481] ip6gretap0: entered allmulticast mode [ 207.532252][T10481] batman_adv: batadv0: Adding interface: ip6gretap0 [ 207.532269][T10481] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1536 would solve the problem. [ 207.532536][T10481] batman_adv: batadv0: Interface activated: ip6gretap0 [ 207.875919][T10512] netlink: 'syz.0.1558': attribute type 1 has an invalid length. [ 207.881050][ T5731] tipc: Node number set to 10136234 [ 208.146590][T10523] Cannot find del_set index 0 as target [ 208.183156][T10517] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 208.306316][T10525] netlink: 'syz.3.1564': attribute type 15 has an invalid length. [ 208.318489][T10525] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 208.825636][T10549] syzkaller0: entered promiscuous mode [ 208.825660][T10549] syzkaller0: entered allmulticast mode [ 208.844733][T10549] tipc: Enabled bearer , priority 0 [ 208.864038][T10546] tipc: Resetting bearer [ 208.953415][T10558] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 208.994669][T10546] tipc: Disabling bearer [ 209.023624][T10552] netlink: 'syz.3.1577': attribute type 15 has an invalid length. [ 209.153866][T10569] syzkaller0: entered promiscuous mode [ 209.153887][T10569] syzkaller0: entered allmulticast mode [ 209.322980][T10576] netlink: 'syz.3.1586': attribute type 15 has an invalid length. [ 209.490312][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 209.490355][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 209.490387][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 209.490432][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 209.491298][T10584] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 209.641462][T10586] bridge_slave_0: default FDB implementation only supports local addresses [ 209.702485][T10590] openvswitch: netlink: Geneve opt len 66 is not a multiple of 4. [ 209.827672][T10599] sctp: [Deprecated]: syz.0.1595 (pid 10599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.827672][T10599] Use struct sctp_sack_info instead [ 209.904808][T10603] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 210.003075][T10601] netlink: 'syz.2.1596': attribute type 15 has an invalid length. [ 210.015873][T10601] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 210.598616][T10630] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 210.805916][T10630] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 210.840163][T10641] __nla_validate_parse: 13 callbacks suppressed [ 210.840186][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1612'. [ 210.964315][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 210.980407][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1614'. [ 210.999750][T10630] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 211.053076][T10651] openvswitch: netlink: VXLAN extension 160 out of range max 1 [ 211.129956][T10648] netlink: 'syz.1.1614': attribute type 15 has an invalid length. [ 211.226461][T10630] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 211.399110][T10630] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 211.540028][ C1] ================================================================== [ 211.540048][ C1] BUG: KASAN: double-free in rcu_free_sheaf+0x31/0x200 [ 211.540078][ C1] Free of addr ffff88802b1aae00 by task ksoftirqd/1/24 [ 211.540093][ C1] [ 211.540104][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 211.540128][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.540141][ C1] Call Trace: [ 211.540149][ C1] [ 211.540158][ C1] dump_stack_lvl+0xe8/0x150 [ 211.540190][ C1] print_address_description+0x55/0x1e0 [ 211.540218][ C1] print_report+0x58/0x70 [ 211.540241][ C1] ? rcu_free_sheaf+0x31/0x200 [ 211.540261][ C1] kasan_report_invalid_free+0xea/0x110 [ 211.540288][ C1] ? rcu_free_sheaf+0x31/0x200 [ 211.540311][ C1] ? rcu_free_sheaf+0x31/0x200 [ 211.540332][ C1] __kasan_slab_pre_free+0x104/0x120 [ 211.540356][ C1] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 211.540385][ C1] ? rcu_core+0x8a8/0x1260 [ 211.540408][ C1] rcu_free_sheaf+0x31/0x200 [ 211.540429][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 211.540457][ C1] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 211.540479][ C1] ? rcu_core+0x8a8/0x1260 [ 211.540498][ C1] rcu_core+0x926/0x1260 [ 211.540521][ C1] ? __pfx_rcu_core+0x10/0x10 [ 211.540559][ C1] handle_softirqs+0x226/0x860 [ 211.540582][ C1] ? schedule+0x90/0x2b0 [ 211.540607][ C1] ? run_ksoftirqd+0x36/0x60 [ 211.540640][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 211.540670][ C1] run_ksoftirqd+0x36/0x60 [ 211.540700][ C1] smpboot_thread_fn+0x565/0xa70 [ 211.540732][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 211.540765][ C1] kthread+0x38b/0x480 [ 211.540786][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 211.540815][ C1] ? __pfx_kthread+0x10/0x10 [ 211.540836][ C1] ret_from_fork+0x514/0xb70 [ 211.541035][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 211.541059][ C1] ? __switch_to+0xc89/0x1420 [ 211.541115][ C1] ? __pfx_kthread+0x10/0x10 [ 211.541137][ C1] ret_from_fork_asm+0x1a/0x30 [ 211.541178][ C1] [ 211.541186][ C1] [ 211.541191][ C1] Allocated by task 1455: [ 211.541202][ C1] kasan_save_track+0x3e/0x80 [ 211.541257][ C1] __kasan_kmalloc+0x93/0xb0 [ 211.541285][ C1] __kmalloc_cache_noprof+0x321/0x600 [ 211.541305][ C1] hwsim_update_pib+0x7e/0x400 [ 211.541332][ C1] hwsim_set_promiscuous_mode+0x196/0x2e0 [ 211.541361][ C1] drv_set_promiscuous_mode+0x159/0x2e0 [ 211.541408][ C1] drv_start+0x4ea/0x1010 [ 211.541428][ C1] mac802154_scan_worker+0x8e6/0xe60 [ 211.541449][ C1] process_scheduled_works+0xc3d/0x1630 [ 211.541476][ C1] worker_thread+0xa47/0xfb0 [ 211.541501][ C1] kthread+0x38b/0x480 [ 211.541515][ C1] ret_from_fork+0x514/0xb70 [ 211.541528][ C1] ret_from_fork_asm+0x1a/0x30 [ 211.541553][ C1] [ 211.541558][ C1] Freed by task 24: [ 211.541567][ C1] kasan_save_track+0x3e/0x80 [ 211.541585][ C1] kasan_save_free_info+0x40/0x50 [ 211.541611][ C1] __kasan_slab_free+0x5c/0x80 [ 211.541629][ C1] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 211.541652][ C1] rcu_free_sheaf+0x31/0x200 [ 211.541669][ C1] rcu_core+0x926/0x1260 [ 211.541711][ C1] handle_softirqs+0x226/0x860 [ 211.541736][ C1] run_ksoftirqd+0x36/0x60 [ 211.541764][ C1] smpboot_thread_fn+0x565/0xa70 [ 211.541794][ C1] kthread+0x38b/0x480 [ 211.541813][ C1] ret_from_fork+0x514/0xb70 [ 211.541831][ C1] ret_from_fork_asm+0x1a/0x30 [ 211.541860][ C1] [ 211.541866][ C1] The buggy address belongs to the object at ffff88802b1aae00 [ 211.541866][ C1] which belongs to the cache kmalloc-64 of size 64 [ 211.541884][ C1] The buggy address is located 0 bytes inside of [ 211.541884][ C1] 64-byte region [ffff88802b1aae00, ffff88802b1aae40) [ 211.541907][ C1] [ 211.541913][ C1] The buggy address belongs to the physical page: [ 211.541934][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b1aa [ 211.541952][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 211.541985][ C1] page_type: f5(slab) [ 211.542005][ C1] raw: 00fff00000000000 ffff88801b0418c0 dead000000000100 dead000000000122 [ 211.542023][ C1] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 211.542035][ C1] page dumped because: kasan: bad access detected [ 211.542051][ C1] page_owner tracks the page as allocated [ 211.542059][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 50, tgid 50 (kworker/u8:3), ts 11351566715 [ 211.542101][ C1] post_alloc_hook+0x1f9/0x250 [ 211.542134][ C1] get_page_from_freelist+0x2209/0x2280 [ 211.542155][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 211.542177][ C1] allocate_slab+0x7d/0x620 [ 211.542202][ C1] refill_objects+0x2d5/0x350 [ 211.542228][ C1] __pcs_replace_empty_main+0x2c8/0x6c0 [ 211.542254][ C1] __kmalloc_cache_noprof+0x39b/0x600 [ 211.542274][ C1] percpu_ref_init+0xc5/0x350 [ 211.542293][ C1] blk_alloc_queue+0x42a/0x690 [ 211.542314][ C1] blk_mq_alloc_queue+0x17d/0x2e0 [ 211.542339][ C1] scsi_alloc_sdev+0x79d/0xc60 [ 211.542360][ C1] scsi_probe_and_add_lun+0x156/0x47b0 [ 211.542381][ C1] __scsi_scan_target+0x199/0xd10 [ 211.542397][ C1] scsi_scan_host_selected+0x391/0x6c0 [ 211.542418][ C1] do_scan_async+0x10e/0x660 [ 211.542437][ C1] async_run_entry_fn+0x9d/0x430 [ 211.542465][ C1] page_owner free stack trace missing [ 211.542473][ C1] [ 211.542477][ C1] Memory state around the buggy address: [ 211.542489][ C1] ffff88802b1aad00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 211.542504][ C1] ffff88802b1aad80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 211.542519][ C1] >ffff88802b1aae00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 211.542530][ C1] ^ [ 211.542541][ C1] ffff88802b1aae80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 211.542556][ C1] ffff88802b1aaf00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 211.542566][ C1] ================================================================== [ 211.542627][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 212.153476][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 212.162851][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.173006][ C1] Call Trace: [ 212.176306][ C1] [ 212.179503][ C1] vpanic+0x56d/0xa60 [ 212.183545][ C1] ? rcu_is_watching+0x16/0xb0 [ 212.188429][ C1] ? __pfx_vpanic+0x10/0x10 [ 212.192978][ C1] panic+0xc5/0xd0 [ 212.196727][ C1] ? __pfx_panic+0x10/0x10 [ 212.201153][ C1] check_panic_on_warn+0x89/0xb0 [ 212.206136][ C1] end_report+0x73/0x170 [ 212.210406][ C1] ? rcu_free_sheaf+0x31/0x200 [ 212.215539][ C1] kasan_report_invalid_free+0xfa/0x110 [ 212.221112][ C1] ? rcu_free_sheaf+0x31/0x200 [ 212.225882][ C1] ? rcu_free_sheaf+0x31/0x200 [ 212.230817][ C1] __kasan_slab_pre_free+0x104/0x120 [ 212.236111][ C1] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 212.241755][ C1] ? rcu_core+0x8a8/0x1260 [ 212.246170][ C1] rcu_free_sheaf+0x31/0x200 [ 212.250755][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 212.256577][ C1] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 212.261769][ C1] ? rcu_core+0x8a8/0x1260 [ 212.266721][ C1] rcu_core+0x926/0x1260 [ 212.271128][ C1] ? __pfx_rcu_core+0x10/0x10 [ 212.275856][ C1] handle_softirqs+0x226/0x860 [ 212.280663][ C1] ? schedule+0x90/0x2b0 [ 212.284914][ C1] ? run_ksoftirqd+0x36/0x60 [ 212.289593][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 212.294616][ C1] run_ksoftirqd+0x36/0x60 [ 212.299029][ C1] smpboot_thread_fn+0x565/0xa70 [ 212.304076][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 212.309113][ C1] kthread+0x38b/0x480 [ 212.313178][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 212.318638][ C1] ? __pfx_kthread+0x10/0x10 [ 212.323223][ C1] ret_from_fork+0x514/0xb70 [ 212.327816][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 212.333008][ C1] ? __switch_to+0xc89/0x1420 [ 212.337684][ C1] ? __pfx_kthread+0x10/0x10 [ 212.342267][ C1] ret_from_fork_asm+0x1a/0x30 [ 212.347035][ C1] [ 212.350313][ C1] Kernel Offset: disabled [ 212.354981][ C1] Rebooting in 86400 seconds..