last executing test programs: 8.123430623s ago: executing program 0 (id=5742): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000051400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 7.85126632s ago: executing program 0 (id=5746): sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x4048050) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000200)="448b7c", 0x3}, {&(0x7f0000000440)="03be9b0e06798d7d34d9b282be419e87b4b88c0e4015bf66d971220929e8c28c517103000000000000", 0x29}], 0x3) 4.897076825s ago: executing program 0 (id=5758): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r2, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0xb31}, 0x1c) getsockname$packet(r7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003704feffffff0000000000000000", @ANYRES32=r8, @ANYBLOB="c13c06001b14bf262000128008000100736974001400028008000100e00000020500050081"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r6, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r9 = socket(0x10, 0x3, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r10, &(0x7f0000000100)={0x2c, 0xa, r11}, 0x10) 4.81204897s ago: executing program 3 (id=5762): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c000200080001000633716b553807ff4cd4f5fc38889509420e826195acdca15f4338cb2f320414678dd38da1eb4d8e93ca98107292c819ffe4aec9422649accc8c93347b72d4a643bb600cb9be8674a244e88e54f94d510969"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB="b589539b95f57302aba0aefa0c8e2144403523736f229df70ea4481c7d14c2f9ad84b3940ebd547df0b9bb669f891855d80eeb997a4156270f79190310d9070c219cc5871b42970ede6024b0f9f5e5655c64785d2c1e213c5f05112888171f2e6dd0e62060d7e146a466015133452c83da9180d0683b137429"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)={r5, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r5, 0x3}, 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="202027bd7000ffdbdf0604000000050038cdde4589263bc84b00c9000000050030000100000005042a0000ff065c552c1504937d360ba14871de05003700"], 0x44}, 0x1, 0x0, 0x0, 0xa8c4}, 0x4048884) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x40000, 0x3}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = socket$netlink(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000006080)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000006180)={0x0, 0x17, &(0x7f0000006140)={&(0x7f0000000000)={0x28, r12, 0x300, 0x70bd22, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_SOCKET_OWNER]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004014) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f00000001c0)={@val, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmmsg$inet(r6, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200040c0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0x79, [@rand_addr, @dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x44}}}}}}, 0x0) 4.450938345s ago: executing program 1 (id=5767): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x10, 0x1, 0x21000000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xffff, 0x1}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 4.418622145s ago: executing program 0 (id=5768): sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x4048050) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000200)="448b7c", 0x3}, {&(0x7f0000000440)="03be9b0e06798d7d34d9b282be419e87b4b88c0e4015bf66d971220929e8c28c517103000000000000", 0x29}], 0x3) 4.273992952s ago: executing program 1 (id=5769): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, @in={0x2, 0x4e22, @loopback}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, @qipcrtr={0x2a, 0xffffffff, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)='netpci0\x00', 0x7, 0x6, 0xfff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_EVENT={0x8, 0x2c, 0xa8}, @IFLA_ADDRESS={0xff2b, 0x1, @random="baeead4459ac"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20028001}, 0x8000) 4.100538268s ago: executing program 1 (id=5770): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) mmap(&(0x7f00005d6000/0x3000)=nil, 0x3000, 0x0, 0x840000000000a132, r0, 0x1000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}}, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0xa0010, r1, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) getsockopt$packet_int(r1, 0x107, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="020afc000700000028bd7000fe9bdf2505001a0000000000000300000000000000000000640101000000000000000000000000000a00"], 0x38}}, 0x40408c0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x27c0, 0x2}, 0x90) 3.678309915s ago: executing program 2 (id=5771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000280)={0x5, 0x4, 0x845, 0x7, 0x9, 0x7, 0x4, 0x8}, &(0x7f0000001300)={0x2, 0x100000001, 0xd01, 0x2, 0x100000000, 0x3, 0xff, 0x7}, 0x0, &(0x7f0000001380)={0x0, 0x2710}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0xffffff30, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/186, 0xba}}], 0x2, 0x10000, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r1, 0x501, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x10) 1.606121406s ago: executing program 1 (id=5775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) 1.57921364s ago: executing program 0 (id=5776): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x8, @loopback}, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r7, 0x4004743c, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r9}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r11, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x30, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 1.533723372s ago: executing program 2 (id=5777): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x9c, 0x4, 0x12}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x6, 0xa, 0x200}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000001c0)={r8, 0x2, 0x10000}, &(0x7f0000000200)=0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001bc0)={r6, 0x0, 0x0, 0x494bf96d869690d4}, 0x20) 1.529504894s ago: executing program 4 (id=5778): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r2, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0xb31}, 0x1c) getsockname$packet(r7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003704feffffff0000000000000000", @ANYRES32=r8, @ANYBLOB="c13c06001b14bf262000128008000100736974001400028008000100e00000020500050081"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r6, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r9 = socket(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xa, r10}, 0x10) 1.50088923s ago: executing program 3 (id=5779): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000", 0x17}], 0x1}, 0x2000489c) 1.40567324s ago: executing program 3 (id=5780): r0 = socket$inet6(0xa, 0x5, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0xffff}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000580)) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f0000000480)={&(0x7f0000000300)=[{0x10, 0x6, 0x7fffffffffffffff, 0x1, 0x10000}, {0x7, 0x4, 0xeae6, 0xd985}, {0x80000000, 0x73b4, 0x4, 0xf6, 0x7f}, {0x100, 0xdb7, 0x4, 0x7, 0x2}, {0x2, 0x6, 0x4, 0x9, 0x7}, {0x3, 0x100, 0x9, 0x2, 0x7f7}, {0x6, 0x7, 0x4, 0x3, 0x3}, {0xfffffffffffffff8, 0x100000000, 0x10, 0x7, 0x5dd}, {0x8, 0x8, 0x8, 0xaf60, 0x5}], 0x9, 0x28, 0x4, 0x4000000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={r6}) 1.383110459s ago: executing program 1 (id=5781): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x9ab7, @any, 0x7a, 0x2}, 0xe) socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4000000) close(0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xa00}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={0x0, 0x2c}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000340)=0x3e, 0x4) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x21, @none}, 0xe) 1.245077496s ago: executing program 4 (id=5782): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xc, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x80, 0x8, 0x5, 0x1, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x67, 0x0, 0x6, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}, {[@timestamp_prespec={0x44, 0xc, 0x16, 0x3, 0xf, [{@empty, 0x7}]}, @timestamp_prespec={0x44, 0x4c, 0xce, 0x3, 0x0, [{@local, 0x8}, {@local, 0x101}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xbc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@multicast2, 0xfffffff7}, {@multicast1, 0x1}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x81}]}, @noop, @cipso={0x86, 0x9, 0xffffffffffffffff, [{0x1, 0x3, '@'}]}, @timestamp_addr={0x44, 0x14, 0x58, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x40}, 0xc9}, {@multicast1, 0x5}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x4a, 0x0, 0x8, [0x8, 0x100, 0x3, 0x3673, 0x8, 0x3, 0x4, 0x2]}, @end, @ssrr={0x89, 0x7, 0x39, [@empty]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x24, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa184, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @generic={0x9, 0xb, 0x8, 0xc, 0x9}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @generic={0x3, 0x3, 0x1, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x9, 0xd2, &(0x7f0000000500)=""/210, 0x41100, 0x17, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x5, 0x40, 0x100}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000007c0)=[{0x5, 0x5, 0x3}, {0x0, 0x4, 0x6, 0x2}, {0x0, 0x4, 0x5, 0x9}], 0x10, 0x81}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=@deltaction={0x110, 0x31, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe5ab}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 1.226808965s ago: executing program 4 (id=5783): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000280)={0x6, {0x1a, 0x7, 0x80, 0x9, 0x3}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_flash={0x33, 0x5, './file0/file0/..\x00'}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000180000000000000cf7a0b85495f746e6c000014000280060012002425b916374e23000006000f0011000000"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)=0x12, 0x800) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000000540)={0x1, 0x80}) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="7993cca5e412f0", @ANYRES16=r3, @ANYBLOB="110725bd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r5, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0xa}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 1.186912251s ago: executing program 2 (id=5784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x4008000) 1.116295873s ago: executing program 4 (id=5785): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2e, 0x25dfdbfe, {0x2, 0x0, 0x0, r3, 0x10, 0x10, 0x72748f52b8af0932}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x3c}}, 0x20024090) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x64, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.113386978s ago: executing program 0 (id=5786): sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x4048050) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000200)="448b7c", 0x3}, {&(0x7f0000000440)="03be9b0e06798d7d34d9b282be419e87b4b88c0e4015bf66d971220929e8c28c517103000000000000", 0x29}], 0x3) 994.649254ms ago: executing program 2 (id=5787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x7000, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 903.716897ms ago: executing program 4 (id=5788): r0 = socket$netlink(0x10, 0x3, 0x2) unshare(0x20000400) connect(r0, &(0x7f0000000040)=@phonet={0x23, 0xf, 0x3, 0x81}, 0x80) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000180)="804af099ffb719158700f1b89d35f8a9d348417842be7246dc20b8f01478664dc1ca22a4053c6dd4a7f224a87e089929f7bddd1b14edcfe83515b650d4441db4f657a93c119206a1e426cde96877ca0b40e606b4293fa24ed777aa97a4dbad28834a03055fa389c16cf5775093e189", 0x6f}, {&(0x7f00000002c0)="eb5a652551567ecfc7fc7d76387d52c9120f32eeaf4b338a479d9b0caaa3da41ea30c2d87cf294393f5ec02e5910830111387c3f146f087b5ac53b1a2bd8d80a37abcb7c42f439b059d2c92745571daaa090c6aa318ebafc78", 0x59}, {&(0x7f0000000340)="4bb2359cbae4aa8271663d871a2d4fa7d3ef6feb07a83cf082ef346fa0e555250ad4cdddb1ad23227599182e94b63552c869797fcd9389a30c8f9280d17953ee4f39a3e1f79ba063c4b1daab3c1bade3007812d257151de19b820f27315de9136c982dc89e8df1c148e18155a58b6eaf96259c10f492b3e4c13d5b366e1665a8cce3b40c2109ae759eefb8455e195e461f408c3b90252568f9104104851918fa9b9096a978a9b79c5d052121eb5b99a25d5ba3", 0xb3}], 0x3) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fe211e81000000000000000000000008000d"], 0x38}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r4) 852.428348ms ago: executing program 2 (id=5789): unshare(0x20000400) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) sendmsg$netlink(r1, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007a00)={0x44, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x32, 0xa9, 0x0, 0x1, [@generic="57d753865bc026738a23", @nested={0x21, 0xeb, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r1}, @generic="2db88f6f88ebb2fd1bd786312d0c165c579777e85d"]}]}]}, 0x44}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x458}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff7f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3b2b}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x94}}, 0x5) 763.294538ms ago: executing program 2 (id=5790): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0xe, 0x4, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000071103900000000009500000000000000be1d1b2c505db5ebbdd5c0e931bc4ee4f47ca5ee82a0103d26a3e04b4ec83f299168b07342d3a201e5a5a4e525da92a3c07a861c1e7cb3b63614fedc26ce5beac183e28c6df75a13ab75bb22cb8dde05e1006223d26e72bb41015273c63ede57d2d0893070aea2fd0ba60320ca9eea761c682f0ac7121789bedf0246b6c56a5b060864f1cc4b7ec5b9a592ad99def1e96728e091e0396287ef3c67bcaa898723f890273741086f476fdf14b914dfa899125a3149d45d9232034d7c1b04057bb62fe865bd2bace41ec32effa0d3ce37ab9a04dc1f72404d793158a568ef4608a2d9e2304ce9a731254710162165cd12"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x32) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0800000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a000000000000000000000080400000000000000000080000000000000000010000030000"], 0xfc}, 0x1, 0x0, 0x0, 0x82}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = socket(0x10, 0x80002, 0x0) socketpair(0x2c, 0x803, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0xaa83e6559588492b, 0x800, 0x2) r7 = socket(0xf, 0x4, 0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0460000a82838100240012800c0001006d6163766c616e00140002800800010004ebb56686c2516c080000000800038a06631e241b0000000000"], 0x44}}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000007c0)={0x0, "4de4a9508d636efdc613c6950d178bd2"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f00000017c0)={r9, 0x8, 0x0, [0x10000, 0x4, 0x0, 0x9, 0xc], [0x8, 0x1, 0x8000, 0x10, 0x20000000000, 0xe, 0x0, 0x80000001, 0x6, 0xffffffffffffffc0, 0x2, 0xe2e2, 0x6, 0x2, 0xffffffff, 0xfffffffffffffffb, 0xffffffffffffffb7, 0x0, 0xb2, 0x0, 0x401, 0xffffffffffffffff, 0x0, 0x2000000000, 0xffffffffffffffff, 0x6, 0x7, 0x9, 0x80000000, 0x6, 0x7, 0xff, 0x3, 0x400, 0x5, 0xc, 0x3, 0x8, 0x3c94, 0x6, 0x10, 0x6, 0x2, 0x8, 0xfffffffffffff94f, 0x0, 0x4, 0x5, 0x0, 0x9, 0x5, 0x1, 0xf, 0x5, 0x1, 0xfff, 0x5, 0x4, 0xffffffff, 0x1, 0x7, 0x3, 0x5, 0x10, 0x6, 0xc08a, 0x3f1e, 0x4, 0x6, 0x0, 0x3, 0x7, 0x5, 0x2, 0x400, 0x0, 0xbcb, 0x4, 0x8, 0xe60c, 0x20000000000000, 0x1fccea80, 0x2, 0x54, 0x3ff, 0xbf, 0xfffffffffffffff4, 0xa, 0x5, 0x2, 0x4, 0x515b91ed, 0x0, 0x0, 0x92, 0x100000000, 0x4, 0xf4, 0x32d8, 0x100000001, 0x5, 0x9389, 0x4, 0x3, 0x31bc6922, 0x8, 0x100000001, 0x50, 0x2, 0x4, 0x0, 0x10001, 0x100000001, 0x950, 0x7, 0x3, 0xef6, 0x8b47, 0x8, 0xa, 0x8]}) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0252528758044c846d000000010900009c000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r11}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@empty}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0, 0x3}}], 0x1, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1fb664ad3f48b9e0", 0x35}], 0x1}, 0x0) 454.453009ms ago: executing program 3 (id=5791): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140)=0x1, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10003, 0x1}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r6, 0x1, 0xffffffff, 0x1400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0x11}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x0) 453.420664ms ago: executing program 4 (id=5792): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r1 = socket(0x2b, 0x1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r3], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) write$cgroup_subtree(r2, &(0x7f0000000740)=ANY=[@ANYRES8=r2, @ANYRES8=r1, @ANYRES8=r1, @ANYRES64=r0, @ANYRES64=r3, @ANYRESDEC=r5, @ANYRES16=r2, @ANYRES16=r4], 0xfffffffffffffebb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7020000000033d3850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002040000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r7, 0x0, 0x8, 0x8, &(0x7f00000006c0)="00000000e9ffffff", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0xffffffffffffffbd, 0x0, &(0x7f00000002c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2c29ae499b3f581", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x6, &(0x7f0000000200)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unshare(0x2c020400) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r11, &(0x7f0000000040)={0x1f, @none, 0x10}, 0xa) 331.375586ms ago: executing program 3 (id=5793): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000e7ffba7d5de4812d06a85654b3ca020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r8, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b"], 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local, 'vcan0\x00'}}, 0x1e) sendmmsg(r10, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000c00)="04a35a7aae93279e73e93bd791262e5dc743367decf1613dc8ae9cc8c6921ce6e872cca8e01735f9d8564ea717ad3cac3e47e41ea5f7275dfce2e1", 0x3b}], 0x1, &(0x7f00000009c0)=ANY=[], 0x1c8}}], 0x1, 0xb0861ca603e0ed85) 128.688422ms ago: executing program 3 (id=5794): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x9c, 0x4, 0x12}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x6, 0xa, 0x200}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000001c0)={r8, 0x2, 0x10000}, &(0x7f0000000200)=0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001bc0)={r6, 0x0, 0x0, 0x494bf96d869690d4}, 0x20) 0s ago: executing program 1 (id=5795): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) write$tun(0xffffffffffffffff, &(0x7f0000000580)={@val={0x0, 0xc}, @val={0x3, 0x4, 0xa, 0x2, 0x5e85, 0x9}, @x25={0x2, 0x0, 0x1, "bd3db7564febea42e4da8ebd749b947b85458a8d3f72d05363da6b0a3486f36d5f8e0c7193bc475570a7d8726ac300783fb1c26b81e80019f04f2b35d97a24856df57aa1feb929662d0e472a5fd3b14b7921fc9dd94139e873d346dae462d88678a44673717ba9bcf35ab648ddc4d23c2425e37aed0c885570227e3b522212485d8e900609c336341ba02e0734395318240a15c355a799acdb64b5703956bfa88e66df09c9861b0582f1c83cc1d59b04fd0c5529414dce8b0bef5bb0e23b355da244407605ff9687e30b4f4067551a4fc0d61f49910636edaa1d6b9e3a660c17cebf7ea86c5ebd1516271a234c3d269ec7f7fbe664917d1ed4"}}, 0x10a) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0xd0, 0x270, 0xd0, 0x340, 0x340, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x44}, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@local, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0xffffffff], 'tunl0\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x340}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'wg1\x00', 'team_slave_1\x00', {0xff}, {}, 0x2f, 0x6b, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xcc0, 0x0, &(0x7f0000000140)="06ff03076844268cb89e14f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x1c, r9, 0x411, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x34, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b29815447b5f2beaa401e41cd37d0967"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) socket(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): .639467][T23286] ? clear_bhb_loop+0x40/0x90 [ 620.639488][T23286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.639503][T23286] RIP: 0033:0x7f8ddd59ce59 [ 620.639521][T23286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.639535][T23286] RSP: 002b:00007f8dde4fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 620.639554][T23286] RAX: ffffffffffffffda RBX: 00007f8ddd815fa0 RCX: 00007f8ddd59ce59 [ 620.639565][T23286] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 620.639576][T23286] RBP: 00007f8dde4fc090 R08: 0000000000000000 R09: 0000000000000000 [ 620.639586][T23286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.639596][T23286] R13: 00007f8ddd816038 R14: 00007f8ddd815fa0 R15: 00007ffd2269c3e8 [ 620.639623][T23286] [ 621.568798][T23315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4649'. [ 621.586234][T23316] FAULT_INJECTION: forcing a failure. [ 621.586234][T23316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.610787][T23318] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4651'. [ 621.620969][T23318] 0ªX¹¦À: renamed from batadv0 (while UP) [ 621.627260][T23316] CPU: 0 UID: 0 PID: 23316 Comm: syz.1.4650 Not tainted syzkaller #0 PREEMPT(full) [ 621.627282][T23316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 621.627292][T23316] Call Trace: [ 621.627299][T23316] [ 621.627307][T23316] dump_stack_lvl+0xe8/0x150 [ 621.627331][T23316] should_fail_ex+0x412/0x560 [ 621.627355][T23316] _copy_from_user+0x2d/0xb0 [ 621.627374][T23316] ___sys_sendmsg+0x1c6/0x360 [ 621.627393][T23316] ? __lock_acquire+0x6b5/0x2cf0 [ 621.627414][T23316] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.627460][T23316] ? __fget_files+0x2a/0x420 [ 621.627478][T23316] ? __fget_files+0x3a0/0x420 [ 621.627508][T23316] __x64_sys_sendmsg+0x1bd/0x2a0 [ 621.627528][T23316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 621.627551][T23316] ? __pfx_ksys_write+0x10/0x10 [ 621.627579][T23316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.627595][T23316] do_syscall_64+0x174/0x580 [ 621.627612][T23316] ? trace_irq_disable+0x3b/0x140 [ 621.627633][T23316] ? clear_bhb_loop+0x40/0x90 [ 621.627652][T23316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.627668][T23316] RIP: 0033:0x7f4be2d9ce59 [ 621.627685][T23316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.627698][T23316] RSP: 002b:00007f4be3d3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.627717][T23316] RAX: ffffffffffffffda RBX: 00007f4be3015fa0 RCX: 00007f4be2d9ce59 [ 621.627729][T23316] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 621.627739][T23316] RBP: 00007f4be3d3a090 R08: 0000000000000000 R09: 0000000000000000 [ 621.627750][T23316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.627760][T23316] R13: 00007f4be3016038 R14: 00007f4be3015fa0 R15: 00007fffd3d1f528 [ 621.627787][T23316] [ 621.817214][T23318] 0ªX¹¦À: entered allmulticast mode [ 621.823162][T23318] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 622.046949][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4652'. [ 622.477768][T23348] FAULT_INJECTION: forcing a failure. [ 622.477768][T23348] name failslab, interval 1, probability 0, space 0, times 0 [ 622.519655][T23348] CPU: 0 UID: 0 PID: 23348 Comm: syz.1.4660 Not tainted syzkaller #0 PREEMPT(full) [ 622.519680][T23348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 622.519691][T23348] Call Trace: [ 622.519698][T23348] [ 622.519706][T23348] dump_stack_lvl+0xe8/0x150 [ 622.519733][T23348] should_fail_ex+0x412/0x560 [ 622.519754][T23348] should_failslab+0xa8/0x100 [ 622.519773][T23348] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 622.519795][T23348] ? __alloc_skb+0x186/0x7d0 [ 622.519812][T23348] ? __alloc_skb+0x1d0/0x7d0 [ 622.519826][T23348] ? __local_bh_enable_ip+0xd0/0x130 [ 622.519848][T23348] __alloc_skb+0x1d0/0x7d0 [ 622.519864][T23348] ? netlink_ack_tlv_len+0x6c/0x210 [ 622.519885][T23348] netlink_ack+0x146/0xa50 [ 622.519909][T23348] ? __kmalloc_cache_noprof+0x31c/0x660 [ 622.519938][T23348] nfnetlink_rcv+0x251a/0x27b0 [ 622.519988][T23348] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 622.520020][T23348] ? ref_tracker_free+0x693/0x840 [ 622.520064][T23348] ? __netlink_deliver_tap+0x807/0x850 [ 622.520091][T23348] ? netlink_deliver_tap+0x2e/0x1b0 [ 622.520108][T23348] ? netlink_deliver_tap+0x2e/0x1b0 [ 622.520131][T23348] netlink_unicast+0x75c/0x8e0 [ 622.520158][T23348] netlink_sendmsg+0x813/0xb40 [ 622.520184][T23348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.520203][T23348] ? aa_sock_msg_perm+0xf1/0x1b0 [ 622.520225][T23348] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 622.520249][T23348] ____sys_sendmsg+0x972/0x9f0 [ 622.520265][T23348] ? __might_fault+0xaf/0x130 [ 622.520290][T23348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 622.520315][T23348] ? import_iovec+0x73/0xa0 [ 622.520336][T23348] ___sys_sendmsg+0x2a5/0x360 [ 622.520353][T23348] ? __lock_acquire+0x6b5/0x2cf0 [ 622.520375][T23348] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.520422][T23348] ? __fget_files+0x2a/0x420 [ 622.520440][T23348] ? __fget_files+0x3a0/0x420 [ 622.520467][T23348] __x64_sys_sendmsg+0x1bd/0x2a0 [ 622.520485][T23348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 622.520509][T23348] ? __pfx_ksys_write+0x10/0x10 [ 622.520550][T23348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.520567][T23348] do_syscall_64+0x174/0x580 [ 622.520585][T23348] ? trace_irq_disable+0x3b/0x140 [ 622.520607][T23348] ? clear_bhb_loop+0x40/0x90 [ 622.520627][T23348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.520643][T23348] RIP: 0033:0x7f4be2d9ce59 [ 622.520659][T23348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.520675][T23348] RSP: 002b:00007f4be3d3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.520692][T23348] RAX: ffffffffffffffda RBX: 00007f4be3015fa0 RCX: 00007f4be2d9ce59 [ 622.520704][T23348] RDX: 0000000000004000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 622.520713][T23348] RBP: 00007f4be3d3a090 R08: 0000000000000000 R09: 0000000000000000 [ 622.520723][T23348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.520732][T23348] R13: 00007f4be3016038 R14: 00007f4be3015fa0 R15: 00007fffd3d1f528 [ 622.520759][T23348] [ 623.344953][T23367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4664'. [ 623.400053][T23367] tipc: Enabled bearer , priority 0 [ 623.651864][T23380] netlink: 178112 bytes leftover after parsing attributes in process `syz.2.4668'. [ 624.381571][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 624.790039][T23407] ip6gre1: entered promiscuous mode [ 624.810335][T23407] ip6gre1: entered allmulticast mode [ 624.920982][T23420] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4678'. [ 624.934409][T23422] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4680'. [ 624.936357][T23420] openvswitch: netlink: Flow key attr not present in new flow. [ 624.963844][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.974243][T23423] xt_TCPMSS: Only works on TCP SYN packets [ 624.982704][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.991170][ T9583] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.993573][T23425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4680'. [ 625.009593][T23420] netlink: 'syz.2.4678': attribute type 1 has an invalid length. [ 625.022981][T23420] netlink: 'syz.2.4678': attribute type 1 has an invalid length. [ 625.118571][ T5756] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 625.221757][T23426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4682'. [ 625.548504][ T9583] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 626.070560][T23456] sctp: [Deprecated]: syz.2.4690 (pid 23456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 626.070560][T23456] Use struct sctp_sack_info instead [ 626.152298][T23458] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4691'. [ 626.726868][T23480] netlink: 'syz.2.4698': attribute type 8 has an invalid length. [ 626.797644][T23482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4699'. [ 626.900929][T23489] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4699'. [ 626.932917][T23490] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4702'. [ 626.936181][T23489] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4699'. [ 626.988202][T23489] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4699'. [ 626.993223][T23490] netlink: 'syz.1.4702': attribute type 23 has an invalid length. [ 627.822193][T23520] tipc: Resetting bearer [ 627.856521][T23520] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 628.938453][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.557147][T23553] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 629.589988][T23553] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 629.764237][T23558] FAULT_INJECTION: forcing a failure. [ 629.764237][T23558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.818594][T23558] CPU: 1 UID: 0 PID: 23558 Comm: syz.2.4725 Not tainted syzkaller #0 PREEMPT(full) [ 629.818619][T23558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 629.818629][T23558] Call Trace: [ 629.818636][T23558] [ 629.818643][T23558] dump_stack_lvl+0xe8/0x150 [ 629.818670][T23558] should_fail_ex+0x412/0x560 [ 629.818692][T23558] _copy_from_user+0x2d/0xb0 [ 629.818712][T23558] generic_map_update_batch+0x648/0x990 [ 629.818743][T23558] ? __pfx_generic_map_update_batch+0x10/0x10 [ 629.818763][T23558] ? __fget_files+0x2a/0x420 [ 629.818790][T23558] ? __pfx_generic_map_update_batch+0x10/0x10 [ 629.818810][T23558] bpf_map_do_batch+0x39b/0x630 [ 629.818832][T23558] __sys_bpf+0x7c1/0x950 [ 629.818855][T23558] ? __pfx___sys_bpf+0x10/0x10 [ 629.818890][T23558] ? ksys_write+0x242/0x270 [ 629.818915][T23558] ? __pfx_ksys_write+0x10/0x10 [ 629.818940][T23558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.818959][T23558] __x64_sys_bpf+0x7c/0x90 [ 629.818979][T23558] do_syscall_64+0x174/0x580 [ 629.818996][T23558] ? trace_irq_disable+0x3b/0x140 [ 629.819017][T23558] ? clear_bhb_loop+0x40/0x90 [ 629.819035][T23558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.819049][T23558] RIP: 0033:0x7f663519ce59 [ 629.819066][T23558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.819080][T23558] RSP: 002b:00007f66333f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 629.819097][T23558] RAX: ffffffffffffffda RBX: 00007f6635415fa0 RCX: 00007f663519ce59 [ 629.819108][T23558] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 629.819119][T23558] RBP: 00007f66333f6090 R08: 0000000000000000 R09: 0000000000000000 [ 629.819129][T23558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 629.819139][T23558] R13: 00007f6635416038 R14: 00007f6635415fa0 R15: 00007ffd5838d548 [ 629.819167][T23558] [ 630.189881][T23564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4728'. [ 630.381098][T23571] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4731'. [ 631.035850][T23606] FAULT_INJECTION: forcing a failure. [ 631.035850][T23606] name failslab, interval 1, probability 0, space 0, times 0 [ 631.080099][T23606] CPU: 1 UID: 0 PID: 23606 Comm: syz.2.4742 Not tainted syzkaller #0 PREEMPT(full) [ 631.080124][T23606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 631.080134][T23606] Call Trace: [ 631.080142][T23606] [ 631.080150][T23606] dump_stack_lvl+0xe8/0x150 [ 631.080176][T23606] should_fail_ex+0x412/0x560 [ 631.080200][T23606] should_failslab+0xa8/0x100 [ 631.080221][T23606] __kmalloc_noprof+0xe8/0x760 [ 631.080244][T23606] ? ethnl_default_start+0x14b/0x620 [ 631.080342][T23606] ? __kmalloc_noprof+0x1b8/0x760 [ 631.080368][T23606] ethnl_default_start+0x14b/0x620 [ 631.080395][T23606] genl_start+0x4c3/0x6c0 [ 631.080426][T23606] __netlink_dump_start+0x469/0x7e0 [ 631.080460][T23606] genl_family_rcv_msg_dumpit+0x213/0x310 [ 631.080487][T23606] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 631.080507][T23606] ? genl_get_cmd+0x6cb/0x960 [ 631.080533][T23606] ? __pfx_genl_start+0x10/0x10 [ 631.080551][T23606] ? __pfx_genl_dumpit+0x10/0x10 [ 631.080571][T23606] ? __pfx_genl_done+0x10/0x10 [ 631.080606][T23606] genl_rcv_msg+0x5e8/0x7a0 [ 631.080635][T23606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.080655][T23606] ? __pfx_ethnl_default_start+0x10/0x10 [ 631.080673][T23606] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 631.080692][T23606] ? __pfx_ethnl_default_done+0x10/0x10 [ 631.080713][T23606] ? __pfx_ref_tracker_free+0x10/0x10 [ 631.080743][T23606] netlink_rcv_skb+0x232/0x4b0 [ 631.080763][T23606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.080786][T23606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 631.080821][T23606] ? down_read+0x270/0x2e0 [ 631.080839][T23606] ? genl_rcv+0xd/0x40 [ 631.080862][T23606] genl_rcv+0x28/0x40 [ 631.080881][T23606] netlink_unicast+0x75c/0x8e0 [ 631.080910][T23606] netlink_sendmsg+0x813/0xb40 [ 631.080938][T23606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.080960][T23606] ? aa_sock_msg_perm+0xf1/0x1b0 [ 631.080985][T23606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 631.081011][T23606] ____sys_sendmsg+0x972/0x9f0 [ 631.081030][T23606] ? __might_fault+0xaf/0x130 [ 631.081057][T23606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 631.081086][T23606] ? import_iovec+0x73/0xa0 [ 631.081110][T23606] ___sys_sendmsg+0x2a5/0x360 [ 631.081130][T23606] ? __lock_acquire+0x6b5/0x2cf0 [ 631.081153][T23606] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.081208][T23606] ? __fget_files+0x2a/0x420 [ 631.081227][T23606] ? __fget_files+0x3a0/0x420 [ 631.081256][T23606] __x64_sys_sendmsg+0x1bd/0x2a0 [ 631.081276][T23606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 631.081305][T23606] ? __pfx_ksys_write+0x10/0x10 [ 631.081334][T23606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.081351][T23606] do_syscall_64+0x174/0x580 [ 631.081367][T23606] ? trace_irq_disable+0x3b/0x140 [ 631.081389][T23606] ? clear_bhb_loop+0x40/0x90 [ 631.081409][T23606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.081426][T23606] RIP: 0033:0x7f663519ce59 [ 631.081442][T23606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.081463][T23606] RSP: 002b:00007f66333f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.081481][T23606] RAX: ffffffffffffffda RBX: 00007f6635415fa0 RCX: 00007f663519ce59 [ 631.081493][T23606] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 631.081504][T23606] RBP: 00007f66333f6090 R08: 0000000000000000 R09: 0000000000000000 [ 631.081514][T23606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.081523][T23606] R13: 00007f6635416038 R14: 00007f6635415fa0 R15: 00007ffd5838d548 [ 631.081554][T23606] [ 631.948702][T23611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4744'. [ 632.422859][T23623] IPv6: addrconf: prefix option has invalid lifetime [ 632.672255][T23635] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4752'. [ 632.956296][T23649] netlink: 'syz.2.4757': attribute type 1 has an invalid length. [ 633.044069][T23649] bond10: entered promiscuous mode [ 633.049731][T23649] bond10: entered allmulticast mode [ 633.056211][T23649] 8021q: adding VLAN 0 to HW filter on device bond10 [ 633.129751][T23661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4761'. [ 633.375295][T23671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4766'. [ 633.409521][ T12] bond0: (slave bond_slave_0): interface is now down [ 633.426698][T23671] tipc: Enabling of bearer rejected, failed to enable media [ 633.431996][ T12] bond0: (slave bond_slave_1): interface is now down [ 633.608494][ T12] bond0: (slave bond_slave_0): interface is now down [ 633.626835][ T12] bond0: (slave bond_slave_1): interface is now down [ 633.635312][T23682] netlink: 393 bytes leftover after parsing attributes in process `syz.3.4771'. [ 633.655225][T23683] netlink: 393 bytes leftover after parsing attributes in process `syz.3.4771'. [ 633.711808][ T12] bond0: now running without any active interface! [ 633.871943][T23690] FAULT_INJECTION: forcing a failure. [ 633.871943][T23690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.887041][T23691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4772'. [ 633.905784][T23691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4772'. [ 633.915122][T23690] CPU: 1 UID: 0 PID: 23690 Comm: syz.3.4773 Not tainted syzkaller #0 PREEMPT(full) [ 633.915146][T23690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 633.915156][T23690] Call Trace: [ 633.915164][T23690] [ 633.915171][T23690] dump_stack_lvl+0xe8/0x150 [ 633.915196][T23690] should_fail_ex+0x412/0x560 [ 633.915219][T23690] _copy_from_user+0x2d/0xb0 [ 633.915239][T23690] ___sys_recvmsg+0x175/0x590 [ 633.915265][T23690] ? __pfx____sys_recvmsg+0x10/0x10 [ 633.915296][T23690] ? __fget_files+0x2a/0x420 [ 633.915344][T23690] do_recvmmsg+0x334/0x800 [ 633.915371][T23690] ? __pfx_do_recvmmsg+0x10/0x10 [ 633.915401][T23690] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 633.915437][T23690] __x64_sys_recvmmsg+0x198/0x250 [ 633.915475][T23690] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 633.915503][T23690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.915521][T23690] do_syscall_64+0x174/0x580 [ 633.915537][T23690] ? trace_irq_disable+0x3b/0x140 [ 633.915560][T23690] ? clear_bhb_loop+0x40/0x90 [ 633.915579][T23690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.915599][T23690] RIP: 0033:0x7f8ddd59ce59 [ 633.915616][T23690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.915630][T23690] RSP: 002b:00007f8dde4fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 633.915649][T23690] RAX: ffffffffffffffda RBX: 00007f8ddd815fa0 RCX: 00007f8ddd59ce59 [ 633.915661][T23690] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000005 [ 633.915672][T23690] RBP: 00007f8dde4fc090 R08: 0000000000000000 R09: 0000000000000000 [ 633.915682][T23690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 633.915692][T23690] R13: 00007f8ddd816038 R14: 00007f8ddd815fa0 R15: 00007ffd2269c3e8 [ 633.915721][T23690] [ 634.537716][T23714] netlink: 'syz.1.4780': attribute type 12 has an invalid length. [ 634.924948][T23725] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 635.009219][T23727] nbd: must specify at least one socket [ 635.025884][T23727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4783'. [ 635.047619][T23727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4783'. [ 636.078904][T23762] pim6reg1: entered promiscuous mode [ 636.106006][T23762] pim6reg1: entered allmulticast mode [ 636.538496][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 637.229520][T23810] netlink: 'syz.4.4811': attribute type 10 has an invalid length. [ 637.260735][T23810] __nla_validate_parse: 4 callbacks suppressed [ 637.260753][T23810] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4811'. [ 637.261765][T23803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4812'. [ 637.347622][T23813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4814'. [ 638.339687][T23852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4829'. [ 638.410238][T23855] xt_CT: You must specify a L4 protocol and not use inversions on it [ 638.414138][T23857] 8021q: VLANs not supported on ip6gre0 [ 638.462148][T23853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4828'. [ 638.684972][T23872] netlink: 'syz.2.4832': attribute type 21 has an invalid length. [ 639.094119][T23886] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 639.130479][T23886] sctp: [Deprecated]: syz.2.4839 (pid 23886) Use of int in max_burst socket option. [ 639.130479][T23886] Use struct sctp_assoc_value instead [ 640.322001][T23925] FAULT_INJECTION: forcing a failure. [ 640.322001][T23925] name failslab, interval 1, probability 0, space 0, times 0 [ 640.376626][T23925] CPU: 1 UID: 0 PID: 23925 Comm: syz.0.4850 Not tainted syzkaller #0 PREEMPT(full) [ 640.376652][T23925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 640.376663][T23925] Call Trace: [ 640.376670][T23925] [ 640.376679][T23925] dump_stack_lvl+0xe8/0x150 [ 640.376705][T23925] should_fail_ex+0x412/0x560 [ 640.376728][T23925] should_failslab+0xa8/0x100 [ 640.376754][T23925] __kvmalloc_node_noprof+0x178/0x8a0 [ 640.376777][T23925] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 640.376798][T23925] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 640.376825][T23925] bpf_test_run_xdp_live+0x223/0x1cf0 [ 640.376843][T23925] ? arch_stack_walk+0xfb/0x150 [ 640.376876][T23925] ? __pfx_stack_trace_save+0x10/0x10 [ 640.376901][T23925] ? stack_depot_save_flags+0x33/0x810 [ 640.376926][T23925] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 640.376943][T23925] ? bpf_test_init+0x9f/0x150 [ 640.376958][T23925] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 640.376975][T23925] ? bpf_prog_test_run+0x2c7/0x340 [ 640.376991][T23925] ? __sys_bpf+0x643/0x950 [ 640.377010][T23925] ? __x64_sys_bpf+0x7c/0x90 [ 640.377060][T23925] ? __might_fault+0xaf/0x130 [ 640.377081][T23925] ? __might_fault+0xaf/0x130 [ 640.377106][T23925] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 640.377134][T23925] ? _copy_from_user+0x94/0xb0 [ 640.377154][T23925] ? bpf_test_init+0x113/0x150 [ 640.377170][T23925] ? xdp_convert_md_to_buff+0x5b/0x330 [ 640.377191][T23925] bpf_prog_test_run_xdp+0x81c/0x1160 [ 640.377223][T23925] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 640.377246][T23925] ? __fget_files+0x2a/0x420 [ 640.377270][T23925] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 640.377289][T23925] bpf_prog_test_run+0x2c7/0x340 [ 640.377310][T23925] __sys_bpf+0x643/0x950 [ 640.377334][T23925] ? __pfx___sys_bpf+0x10/0x10 [ 640.377371][T23925] ? ksys_write+0x242/0x270 [ 640.377395][T23925] ? __pfx_ksys_write+0x10/0x10 [ 640.377421][T23925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.377439][T23925] __x64_sys_bpf+0x7c/0x90 [ 640.377461][T23925] do_syscall_64+0x174/0x580 [ 640.377478][T23925] ? trace_irq_disable+0x3b/0x140 [ 640.377500][T23925] ? clear_bhb_loop+0x40/0x90 [ 640.377520][T23925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.377536][T23925] RIP: 0033:0x7fb36e99ce59 [ 640.377553][T23925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.377566][T23925] RSP: 002b:00007fb36f7e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 640.377584][T23925] RAX: ffffffffffffffda RBX: 00007fb36ec15fa0 RCX: 00007fb36e99ce59 [ 640.377599][T23925] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 640.377610][T23925] RBP: 00007fb36f7e4090 R08: 0000000000000000 R09: 0000000000000000 [ 640.377620][T23925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.377630][T23925] R13: 00007fb36ec16038 R14: 00007fb36ec15fa0 R15: 00007ffe83cf6938 [ 640.377657][T23925] [ 641.507907][T23941] FAULT_INJECTION: forcing a failure. [ 641.507907][T23941] name failslab, interval 1, probability 0, space 0, times 0 [ 641.562164][T23941] CPU: 0 UID: 0 PID: 23941 Comm: syz.3.4856 Not tainted syzkaller #0 PREEMPT(full) [ 641.562187][T23941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 641.562197][T23941] Call Trace: [ 641.562204][T23941] [ 641.562212][T23941] dump_stack_lvl+0xe8/0x150 [ 641.562238][T23941] should_fail_ex+0x412/0x560 [ 641.562258][T23941] ? sock_alloc_inode+0x2c/0x190 [ 641.562280][T23941] should_failslab+0xa8/0x100 [ 641.562299][T23941] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 641.562328][T23941] ? __pfx_sock_alloc_inode+0x10/0x10 [ 641.562348][T23941] sock_alloc_inode+0x2c/0x190 [ 641.562368][T23941] ? __pfx_sock_alloc_inode+0x10/0x10 [ 641.562387][T23941] alloc_inode+0x6a/0x1b0 [ 641.562408][T23941] __sock_create+0x12d/0x9d0 [ 641.562439][T23941] __sys_socket+0xd6/0x1b0 [ 641.562462][T23941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.562481][T23941] __x64_sys_socket+0x7a/0x90 [ 641.562504][T23941] do_syscall_64+0x174/0x580 [ 641.562522][T23941] ? trace_irq_disable+0x3b/0x140 [ 641.562544][T23941] ? clear_bhb_loop+0x40/0x90 [ 641.562565][T23941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.562581][T23941] RIP: 0033:0x7f8ddd59ce59 [ 641.562597][T23941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.562611][T23941] RSP: 002b:00007f8dde4ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 641.562629][T23941] RAX: ffffffffffffffda RBX: 00007f8ddd816180 RCX: 00007f8ddd59ce59 [ 641.562641][T23941] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 641.562660][T23941] RBP: 00007f8dde4ba090 R08: 0000000000000000 R09: 0000000000000000 [ 641.562670][T23941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.562680][T23941] R13: 00007f8ddd816218 R14: 00007f8ddd816180 R15: 00007ffd2269c3e8 [ 641.562705][T23941] [ 641.562715][T23941] socket: no more sockets [ 642.426767][T23957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4864'. [ 642.540880][T23957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4864'. [ 642.819806][T23976] pimreg: entered allmulticast mode [ 642.847562][T23976] IPVS: set_ctl: invalid protocol: 136 100.1.1.1:20004 [ 643.156801][T23992] FAULT_INJECTION: forcing a failure. [ 643.156801][T23992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.186976][T23992] CPU: 1 UID: 0 PID: 23992 Comm: syz.0.4877 Not tainted syzkaller #0 PREEMPT(full) [ 643.187001][T23992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 643.187012][T23992] Call Trace: [ 643.187019][T23992] [ 643.187027][T23992] dump_stack_lvl+0xe8/0x150 [ 643.187054][T23992] should_fail_ex+0x412/0x560 [ 643.187077][T23992] _copy_from_user+0x2d/0xb0 [ 643.187099][T23992] smc_setsockopt+0x39b/0xad0 [ 643.187129][T23992] ? __pfx_smc_setsockopt+0x10/0x10 [ 643.187149][T23992] ? aa_sock_opt_perm+0xff/0x1a0 [ 643.187175][T23992] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 643.187196][T23992] ? __pfx_smc_setsockopt+0x10/0x10 [ 643.187219][T23992] do_sock_setsockopt+0x17c/0x1b0 [ 643.187244][T23992] __x64_sys_setsockopt+0x13d/0x1b0 [ 643.187264][T23992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.187293][T23992] do_syscall_64+0x174/0x580 [ 643.187311][T23992] ? trace_irq_disable+0x3b/0x140 [ 643.187334][T23992] ? clear_bhb_loop+0x40/0x90 [ 643.187354][T23992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.187377][T23992] RIP: 0033:0x7fb36e99ce59 [ 643.187393][T23992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.187406][T23992] RSP: 002b:00007fb36f7e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 643.187424][T23992] RAX: ffffffffffffffda RBX: 00007fb36ec15fa0 RCX: 00007fb36e99ce59 [ 643.187436][T23992] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 643.187447][T23992] RBP: 00007fb36f7e4090 R08: 0000000000000228 R09: 0000000000000000 [ 643.187457][T23992] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000001 [ 643.187467][T23992] R13: 00007fb36ec16038 R14: 00007fb36ec15fa0 R15: 00007ffe83cf6938 [ 643.187495][T23992] [ 643.527265][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4879'. [ 643.583842][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4879'. [ 643.597227][ T3362] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 643.629778][ T3362] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 643.660929][ T3362] bond0: active interface up! [ 644.051859][T24014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4885'. [ 644.067187][T24014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4885'. [ 644.100439][T24014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4885'. [ 644.180334][T24019] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4887'. [ 644.206520][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4887'. [ 644.242742][T24019] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4887'. [ 644.625958][T24033] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 645.338958][T24059] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 645.363541][T24059] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 645.507898][T24059] tipc: Enabling of bearer rejected, already enabled [ 646.103772][T24101] x_tables: duplicate underflow at hook 1 [ 646.177745][T24107] netlink: 'syz.0.4916': attribute type 8 has an invalid length. [ 646.199555][T24104] bond11: (slave bond_slave_1): Device is not our slave [ 646.208390][T24104] bond11: option active_slave: invalid value (bond_slave_1) [ 646.229216][T24104] bond11 (unregistering): Released all slaves [ 646.801137][T24135] syzkaller0: entered promiscuous mode [ 646.806839][T24135] syzkaller0: entered allmulticast mode [ 647.691660][T24173] __nla_validate_parse: 7 callbacks suppressed [ 647.691682][T24173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4935'. [ 647.883850][T24178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4935'. [ 647.981604][T24179] netlink: 'syz.4.4935': attribute type 5 has an invalid length. [ 650.205376][T24213] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4942'. [ 650.867783][T24247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4950'. [ 651.350983][T24266] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 651.368655][T24266] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 651.486677][T24270] bridge6: entered promiscuous mode [ 651.503175][T24270] bridge6: entered allmulticast mode [ 651.655645][T24273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.908435][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 652.085690][T24286] tipc: Enabling of bearer rejected, already enabled [ 652.396774][T24300] sctp: [Deprecated]: syz.1.4970 (pid 24300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 652.396774][T24300] Use struct sctp_sack_info instead [ 652.597687][T24310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4972'. [ 652.802841][T24318] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 652.909026][T24322] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 653.136896][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4984'. [ 653.193165][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4984'. [ 653.204319][T24335] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4984'. [ 653.318639][T24350] FAULT_INJECTION: forcing a failure. [ 653.318639][T24350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.354643][T24350] CPU: 1 UID: 0 PID: 24350 Comm: syz.3.4988 Not tainted syzkaller #0 PREEMPT(full) [ 653.354668][T24350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 653.354678][T24350] Call Trace: [ 653.354685][T24350] [ 653.354692][T24350] dump_stack_lvl+0xe8/0x150 [ 653.354717][T24350] should_fail_ex+0x412/0x560 [ 653.354738][T24350] _copy_to_user+0x31/0xb0 [ 653.354761][T24350] simple_read_from_buffer+0xe1/0x170 [ 653.354786][T24350] proc_fail_nth_read+0x1bb/0x230 [ 653.354811][T24350] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 653.354834][T24350] ? rw_verify_area+0x2a6/0x4d0 [ 653.354854][T24350] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 653.354874][T24350] vfs_read+0x20c/0xa70 [ 653.354901][T24350] ? __pfx_vfs_read+0x10/0x10 [ 653.354917][T24350] ? aa_sk_perm+0x6d5/0x900 [ 653.354942][T24350] ? fd_install+0x94/0x3d0 [ 653.354962][T24350] ? __pfx_aa_sk_perm+0x10/0x10 [ 653.354991][T24350] ksys_read+0x150/0x270 [ 653.355013][T24350] ? __pfx_ksys_read+0x10/0x10 [ 653.355049][T24350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.355066][T24350] do_syscall_64+0x174/0x580 [ 653.355084][T24350] ? trace_irq_disable+0x3b/0x140 [ 653.355106][T24350] ? clear_bhb_loop+0x40/0x90 [ 653.355125][T24350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.355140][T24350] RIP: 0033:0x7f8ddd55d68e [ 653.355157][T24350] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 653.355169][T24350] RSP: 002b:00007f8dde4fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 653.355186][T24350] RAX: ffffffffffffffda RBX: 00007f8dde4fc6c0 RCX: 00007f8ddd55d68e [ 653.355197][T24350] RDX: 000000000000000f RSI: 00007f8dde4fc0a0 RDI: 0000000000000004 [ 653.355207][T24350] RBP: 00007f8dde4fc090 R08: 0000000000000000 R09: 0000000000000000 [ 653.355217][T24350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.355227][T24350] R13: 00007f8ddd816038 R14: 00007f8ddd815fa0 R15: 00007ffd2269c3e8 [ 653.355255][T24350] [ 654.040902][T24375] netlink: 'syz.4.4997': attribute type 1 has an invalid length. [ 654.056167][T24375] netlink: 476 bytes leftover after parsing attributes in process `syz.4.4997'. [ 654.071338][T24378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4998'. [ 654.087449][T24375] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.4997'. [ 654.139866][ T57] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.151184][T24378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4998'. [ 654.167776][ T57] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.212614][ T57] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.247838][ T57] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.435249][T24396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5003'. [ 654.550790][T24400] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5004'. [ 654.628307][T24400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5004'. [ 654.803976][T24410] syz_tun: entered allmulticast mode [ 654.843386][T24410] bridge0: port 1(bond0) entered disabled state [ 655.088712][T24428] veth1_to_bond: entered allmulticast mode [ 655.156021][T24430] netlink: 'syz.4.5013': attribute type 1 has an invalid length. [ 655.204973][T24431] veth1_to_bond (unregistering): left allmulticast mode [ 655.261596][T24431] bond0: (slave bond_slave_1): Releasing backup interface [ 655.287703][T24431] bond_slave_1 (unregistering): left allmulticast mode [ 655.414884][T24430] 8021q: adding VLAN 0 to HW filter on device bond9 [ 656.646495][T24506] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 657.324231][T24530] netlink: 'syz.3.5050': attribute type 1 has an invalid length. [ 657.332461][T24528] tipc: Enabling of bearer rejected, already enabled [ 657.347774][T24532] FAULT_INJECTION: forcing a failure. [ 657.347774][T24532] name failslab, interval 1, probability 0, space 0, times 0 [ 657.373191][T24532] CPU: 0 UID: 0 PID: 24532 Comm: syz.1.5051 Not tainted syzkaller #0 PREEMPT(full) [ 657.373215][T24532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 657.373225][T24532] Call Trace: [ 657.373232][T24532] [ 657.373240][T24532] dump_stack_lvl+0xe8/0x150 [ 657.373266][T24532] should_fail_ex+0x412/0x560 [ 657.373292][T24532] should_failslab+0xa8/0x100 [ 657.373311][T24532] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 657.373333][T24532] ? __alloc_skb+0x186/0x7d0 [ 657.373350][T24532] ? __alloc_skb+0x1d0/0x7d0 [ 657.373364][T24532] ? __local_bh_enable_ip+0xd0/0x130 [ 657.373386][T24532] __alloc_skb+0x1d0/0x7d0 [ 657.373403][T24532] ? __lock_acquire+0x6b5/0x2cf0 [ 657.373423][T24532] alloc_skb_with_frags+0xc8/0x760 [ 657.373456][T24532] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 657.373486][T24532] sock_alloc_send_pskb+0x878/0x990 [ 657.373523][T24532] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 657.373549][T24532] ? aa_sk_perm+0x6d5/0x900 [ 657.373575][T24532] hci_sock_sendmsg+0x208/0xf40 [ 657.373598][T24532] ? __pfx_aa_sk_perm+0x10/0x10 [ 657.373621][T24532] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 657.373642][T24532] ? aa_sock_msg_perm+0xf1/0x1b0 [ 657.373674][T24532] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 657.373697][T24532] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 657.373716][T24532] sock_write_iter+0x49b/0x4f0 [ 657.373739][T24532] ? __pfx_sock_write_iter+0x10/0x10 [ 657.373784][T24532] ? bpf_lsm_file_permission+0x9/0x20 [ 657.373806][T24532] ? security_file_permission+0x75/0x260 [ 657.373833][T24532] vfs_write+0x61d/0xb90 [ 657.373862][T24532] ? __pfx_vfs_write+0x10/0x10 [ 657.373892][T24532] ? __fget_files+0x2a/0x420 [ 657.373920][T24532] ksys_write+0x150/0x270 [ 657.373943][T24532] ? __pfx_ksys_write+0x10/0x10 [ 657.373973][T24532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.373991][T24532] do_syscall_64+0x174/0x580 [ 657.374008][T24532] ? trace_irq_disable+0x3b/0x140 [ 657.374030][T24532] ? clear_bhb_loop+0x40/0x90 [ 657.374050][T24532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.374067][T24532] RIP: 0033:0x7f4be2d9ce59 [ 657.374083][T24532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.374097][T24532] RSP: 002b:00007f4be3d3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 657.374116][T24532] RAX: ffffffffffffffda RBX: 00007f4be3015fa0 RCX: 00007f4be2d9ce59 [ 657.374128][T24532] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004 [ 657.374138][T24532] RBP: 00007f4be3d3a090 R08: 0000000000000000 R09: 0000000000000000 [ 657.374148][T24532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.374158][T24532] R13: 00007f4be3016038 R14: 00007f4be3015fa0 R15: 00007fffd3d1f528 [ 657.374186][T24532] [ 657.412208][T24530] bond20: entered promiscuous mode [ 657.660890][T24530] bond20: entered allmulticast mode [ 657.666599][T24530] 8021q: adding VLAN 0 to HW filter on device bond20 [ 657.926063][T24553] netlink: 'syz.1.5056': attribute type 1 has an invalid length. [ 658.262683][T24560] __nla_validate_parse: 8 callbacks suppressed [ 658.262702][T24560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5057'. [ 658.501873][T24563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5059'. [ 658.565426][T24569] netlink: 'syz.3.5061': attribute type 1 has an invalid length. [ 658.596666][T24569] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5061'. [ 659.091433][T24581] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5066'. [ 659.141239][T24583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5067'. [ 659.203126][T24588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.287050][T24590] FAULT_INJECTION: forcing a failure. [ 659.287050][T24590] name failslab, interval 1, probability 0, space 0, times 0 [ 659.307984][T24590] CPU: 1 UID: 0 PID: 24590 Comm: syz.3.5069 Not tainted syzkaller #0 PREEMPT(full) [ 659.308009][T24590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 659.308023][T24590] Call Trace: [ 659.308031][T24590] [ 659.308038][T24590] dump_stack_lvl+0xe8/0x150 [ 659.308064][T24590] should_fail_ex+0x412/0x560 [ 659.308088][T24590] should_failslab+0xa8/0x100 [ 659.308107][T24590] __kvmalloc_node_noprof+0x178/0x8a0 [ 659.308131][T24590] ? page_pool_create_percpu+0x304/0xc80 [ 659.308154][T24590] ? page_pool_create_percpu+0xaf/0xc80 [ 659.308179][T24590] page_pool_create_percpu+0x304/0xc80 [ 659.308206][T24590] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 659.308224][T24590] ? arch_stack_walk+0xfb/0x150 [ 659.308254][T24590] ? __pfx_stack_trace_save+0x10/0x10 [ 659.308278][T24590] ? stack_depot_save_flags+0x33/0x810 [ 659.308301][T24590] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 659.308318][T24590] ? bpf_test_init+0x9f/0x150 [ 659.308332][T24590] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 659.308349][T24590] ? bpf_prog_test_run+0x2c7/0x340 [ 659.308365][T24590] ? __sys_bpf+0x643/0x950 [ 659.308384][T24590] ? __x64_sys_bpf+0x7c/0x90 [ 659.308432][T24590] ? __might_fault+0xaf/0x130 [ 659.308453][T24590] ? __might_fault+0xaf/0x130 [ 659.308486][T24590] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 659.308516][T24590] ? _copy_from_user+0x94/0xb0 [ 659.308536][T24590] ? bpf_test_init+0x113/0x150 [ 659.308552][T24590] ? xdp_convert_md_to_buff+0x5b/0x330 [ 659.308573][T24590] bpf_prog_test_run_xdp+0x81c/0x1160 [ 659.308602][T24590] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 659.308625][T24590] ? __fget_files+0x2a/0x420 [ 659.308649][T24590] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 659.308668][T24590] bpf_prog_test_run+0x2c7/0x340 [ 659.308687][T24590] __sys_bpf+0x643/0x950 [ 659.308710][T24590] ? __pfx___sys_bpf+0x10/0x10 [ 659.308746][T24590] ? ksys_write+0x242/0x270 [ 659.308770][T24590] ? __pfx_ksys_write+0x10/0x10 [ 659.308794][T24590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.308811][T24590] __x64_sys_bpf+0x7c/0x90 [ 659.308831][T24590] do_syscall_64+0x174/0x580 [ 659.308848][T24590] ? trace_irq_disable+0x3b/0x140 [ 659.308869][T24590] ? clear_bhb_loop+0x40/0x90 [ 659.308889][T24590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.308905][T24590] RIP: 0033:0x7f8ddd59ce59 [ 659.308920][T24590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.308934][T24590] RSP: 002b:00007f8dde4fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 659.308952][T24590] RAX: ffffffffffffffda RBX: 00007f8ddd815fa0 RCX: 00007f8ddd59ce59 [ 659.308964][T24590] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 659.308974][T24590] RBP: 00007f8dde4fc090 R08: 0000000000000000 R09: 0000000000000000 [ 659.308984][T24590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.308994][T24590] R13: 00007f8ddd816038 R14: 00007f8ddd815fa0 R15: 00007ffd2269c3e8 [ 659.309022][T24590] [ 659.636561][T24588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.646703][T24590] page_pool_create_percpu() gave up with errno -12 [ 659.713313][T24593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.797473][T24597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5071'. [ 660.222295][T24622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5080'. [ 660.252165][T24620] tipc: Resetting bearer [ 660.522039][T24620] tipc: Resetting bearer [ 660.531040][T24644] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5081'. [ 660.705320][T24649] netlink: 212332 bytes leftover after parsing attributes in process `syz.1.5087'. [ 660.723069][T24653] netlink: 'syz.4.5089': attribute type 1 has an invalid length. [ 660.733985][T24649] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5087'. [ 660.814691][T24653] bond10: entered promiscuous mode [ 660.828461][T24653] bond10: entered allmulticast mode [ 660.839538][T24653] 8021q: adding VLAN 0 to HW filter on device bond10 [ 660.854428][T24647] IPVS: Scheduler module ip_vs_ not found [ 661.057802][T24663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.608794][T24700] FAULT_INJECTION: forcing a failure. [ 661.608794][T24700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.652406][T24700] CPU: 1 UID: 0 PID: 24700 Comm: syz.2.5103 Not tainted syzkaller #0 PREEMPT(full) [ 661.652438][T24700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 661.652449][T24700] Call Trace: [ 661.652456][T24700] [ 661.652464][T24700] dump_stack_lvl+0xe8/0x150 [ 661.652489][T24700] should_fail_ex+0x412/0x560 [ 661.652513][T24700] _copy_from_iter+0x1d3/0x1670 [ 661.652534][T24700] ? rcu_is_watching+0x15/0xb0 [ 661.652560][T24700] ? __pfx__copy_from_iter+0x10/0x10 [ 661.652585][T24700] ? netlink_sendmsg+0x650/0xb40 [ 661.652603][T24700] ? skb_put+0x11b/0x210 [ 661.652623][T24700] netlink_sendmsg+0x6c0/0xb40 [ 661.652651][T24700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.652673][T24700] ? aa_sock_msg_perm+0xf1/0x1b0 [ 661.652697][T24700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 661.652722][T24700] ____sys_sendmsg+0x972/0x9f0 [ 661.652740][T24700] ? __might_fault+0xaf/0x130 [ 661.652767][T24700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.652794][T24700] ? import_iovec+0x73/0xa0 [ 661.652816][T24700] ___sys_sendmsg+0x2a5/0x360 [ 661.652833][T24700] ? __lock_acquire+0x6b5/0x2cf0 [ 661.652855][T24700] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.652904][T24700] ? __fget_files+0x2a/0x420 [ 661.652923][T24700] ? __fget_files+0x3a0/0x420 [ 661.652951][T24700] __x64_sys_sendmsg+0x1bd/0x2a0 [ 661.652972][T24700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.652996][T24700] ? __pfx_ksys_write+0x10/0x10 [ 661.653026][T24700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.653045][T24700] do_syscall_64+0x174/0x580 [ 661.653062][T24700] ? trace_irq_disable+0x3b/0x140 [ 661.653084][T24700] ? clear_bhb_loop+0x40/0x90 [ 661.653104][T24700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.653120][T24700] RIP: 0033:0x7f663519ce59 [ 661.653137][T24700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.653151][T24700] RSP: 002b:00007f66333f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.653169][T24700] RAX: ffffffffffffffda RBX: 00007f6635415fa0 RCX: 00007f663519ce59 [ 661.653180][T24700] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 661.653191][T24700] RBP: 00007f66333f6090 R08: 0000000000000000 R09: 0000000000000000 [ 661.653201][T24700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.653211][T24700] R13: 00007f6635416038 R14: 00007f6635415fa0 R15: 00007ffd5838d548 [ 661.653239][T24700] [ 662.846266][T24732] FAULT_INJECTION: forcing a failure. [ 662.846266][T24732] name failslab, interval 1, probability 0, space 0, times 0 [ 662.878408][T24732] CPU: 0 UID: 0 PID: 24732 Comm: syz.4.5113 Not tainted syzkaller #0 PREEMPT(full) [ 662.878432][T24732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 662.878442][T24732] Call Trace: [ 662.878449][T24732] [ 662.878457][T24732] dump_stack_lvl+0xe8/0x150 [ 662.878482][T24732] should_fail_ex+0x412/0x560 [ 662.878505][T24732] should_failslab+0xa8/0x100 [ 662.878523][T24732] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 662.878545][T24732] ? __alloc_skb+0x186/0x7d0 [ 662.878561][T24732] ? __alloc_skb+0x1d0/0x7d0 [ 662.878574][T24732] ? __local_bh_enable_ip+0xd0/0x130 [ 662.878596][T24732] __alloc_skb+0x1d0/0x7d0 [ 662.878612][T24732] ? process_measurement+0x451/0x1c80 [ 662.878633][T24732] alloc_skb_with_frags+0xc8/0x760 [ 662.878650][T24732] ? __lock_acquire+0x6b5/0x2cf0 [ 662.878677][T24732] sock_alloc_send_pskb+0x878/0x990 [ 662.878711][T24732] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 662.878738][T24732] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 662.878762][T24732] ? dev_get_by_index+0x22/0x2e0 [ 662.878858][T24732] ? dev_get_by_index+0x22/0x2e0 [ 662.878883][T24732] packet_sendmsg+0x315a/0x4fb0 [ 662.878927][T24732] ? unwind_next_frame+0xa6/0x2550 [ 662.878966][T24732] ? __pfx_packet_sendmsg+0x10/0x10 [ 662.878982][T24732] ? aa_sk_perm+0x6d5/0x900 [ 662.879011][T24732] ? __pfx_aa_sk_perm+0x10/0x10 [ 662.879030][T24732] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 662.879093][T24732] ? aa_sock_msg_perm+0xf1/0x1b0 [ 662.879117][T24732] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.879141][T24732] ____sys_sendmsg+0x972/0x9f0 [ 662.879209][T24732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 662.879236][T24732] ? import_iovec+0x73/0xa0 [ 662.879258][T24732] ___sys_sendmsg+0x2a5/0x360 [ 662.879275][T24732] ? __lock_acquire+0x6b5/0x2cf0 [ 662.879295][T24732] ? __pfx____sys_sendmsg+0x10/0x10 [ 662.879345][T24732] ? __fget_files+0x2a/0x420 [ 662.879364][T24732] ? __fget_files+0x3a0/0x420 [ 662.879393][T24732] __x64_sys_sendmsg+0x1bd/0x2a0 [ 662.879414][T24732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 662.879441][T24732] ? __pfx_ksys_write+0x10/0x10 [ 662.879471][T24732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.879490][T24732] do_syscall_64+0x174/0x580 [ 662.879508][T24732] ? trace_irq_disable+0x3b/0x140 [ 662.879530][T24732] ? clear_bhb_loop+0x40/0x90 [ 662.879551][T24732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.879566][T24732] RIP: 0033:0x7f7a02b9ce59 [ 662.879584][T24732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.879597][T24732] RSP: 002b:00007f7a039ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.879615][T24732] RAX: ffffffffffffffda RBX: 00007f7a02e15fa0 RCX: 00007f7a02b9ce59 [ 662.879627][T24732] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 000000000000000a [ 662.879637][T24732] RBP: 00007f7a039ae090 R08: 0000000000000000 R09: 0000000000000000 [ 662.879648][T24732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.879658][T24732] R13: 00007f7a02e16038 R14: 00007f7a02e15fa0 R15: 00007ffda30d6b68 [ 662.879686][T24732] [ 663.370811][T24744] __nla_validate_parse: 6 callbacks suppressed [ 663.370830][T24744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5114'. [ 664.403778][T24775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5126'. [ 664.697542][T24792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5132'. [ 665.789578][T24824] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5139'. [ 665.866567][T24830] netlink: 'syz.0.5141': attribute type 8 has an invalid length. [ 666.031649][T24839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5142'. [ 666.314237][T24852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5148'. [ 667.020708][T24860] FAULT_INJECTION: forcing a failure. [ 667.020708][T24860] name failslab, interval 1, probability 0, space 0, times 0 [ 667.051614][T24860] CPU: 0 UID: 0 PID: 24860 Comm: syz.2.5151 Not tainted syzkaller #0 PREEMPT(full) [ 667.051639][T24860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 667.051650][T24860] Call Trace: [ 667.051658][T24860] [ 667.051666][T24860] dump_stack_lvl+0xe8/0x150 [ 667.051693][T24860] should_fail_ex+0x412/0x560 [ 667.051716][T24860] should_failslab+0xa8/0x100 [ 667.051735][T24860] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 667.051758][T24860] ? __alloc_skb+0x186/0x7d0 [ 667.051778][T24860] ? __alloc_skb+0x1d0/0x7d0 [ 667.051792][T24860] ? __local_bh_enable_ip+0xd0/0x130 [ 667.051814][T24860] __alloc_skb+0x1d0/0x7d0 [ 667.051830][T24860] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 667.051856][T24860] netlink_sendmsg+0x5d4/0xb40 [ 667.051885][T24860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.051907][T24860] ? aa_sock_msg_perm+0xf1/0x1b0 [ 667.051931][T24860] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 667.051954][T24860] ____sys_sendmsg+0x972/0x9f0 [ 667.051973][T24860] ? __might_fault+0xaf/0x130 [ 667.051999][T24860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.052027][T24860] ? import_iovec+0x73/0xa0 [ 667.052050][T24860] ___sys_sendmsg+0x2a5/0x360 [ 667.052067][T24860] ? __lock_acquire+0x6b5/0x2cf0 [ 667.052089][T24860] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.052138][T24860] ? __fget_files+0x2a/0x420 [ 667.052157][T24860] ? __fget_files+0x3a0/0x420 [ 667.052186][T24860] __x64_sys_sendmsg+0x1bd/0x2a0 [ 667.052207][T24860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.052234][T24860] ? __pfx_ksys_write+0x10/0x10 [ 667.052270][T24860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.052288][T24860] do_syscall_64+0x174/0x580 [ 667.052305][T24860] ? trace_irq_disable+0x3b/0x140 [ 667.052329][T24860] ? clear_bhb_loop+0x40/0x90 [ 667.052349][T24860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.052365][T24860] RIP: 0033:0x7f663519ce59 [ 667.052381][T24860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.052394][T24860] RSP: 002b:00007f66333f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.052413][T24860] RAX: ffffffffffffffda RBX: 00007f6635415fa0 RCX: 00007f663519ce59 [ 667.052425][T24860] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000007 [ 667.052436][T24860] RBP: 00007f66333f6090 R08: 0000000000000000 R09: 0000000000000000 [ 667.052447][T24860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.052457][T24860] R13: 00007f6635416038 R14: 00007f6635415fa0 R15: 00007ffd5838d548 [ 667.052493][T24860] [ 667.965755][T24885] veth1_macvtap: renamed from vlan0 [ 667.993827][T24900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5159'. [ 668.016522][T24879] syzkaller1: entered promiscuous mode [ 668.022627][T24879] syzkaller1: entered allmulticast mode [ 668.153268][T24906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5163'. [ 668.462061][T24917] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5166'. [ 669.381468][T24951] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 669.486208][T24958] netlink: 'syz.4.5173': attribute type 1 has an invalid length. [ 669.798483][T24979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5178'. [ 669.841160][T24979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5178'. [ 669.924757][T24979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5178'. [ 670.471398][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 672.802429][T25037] bond11: option tlb_dynamic_lb: invalid value (115) [ 672.833300][T25037] bond11 (unregistering): Released all slaves [ 673.314674][T25065] FAULT_INJECTION: forcing a failure. [ 673.314674][T25065] name failslab, interval 1, probability 0, space 0, times 0 [ 673.331616][T25065] CPU: 1 UID: 0 PID: 25065 Comm: syz.3.5199 Not tainted syzkaller #0 PREEMPT(full) [ 673.331641][T25065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 673.331651][T25065] Call Trace: [ 673.331658][T25065] [ 673.331665][T25065] dump_stack_lvl+0xe8/0x150 [ 673.331693][T25065] should_fail_ex+0x412/0x560 [ 673.331716][T25065] should_failslab+0xa8/0x100 [ 673.331735][T25065] __kmalloc_noprof+0xe8/0x760 [ 673.331759][T25065] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 673.331787][T25065] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 673.331816][T25065] genl_family_rcv_msg_doit+0xd9/0x330 [ 673.331844][T25065] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 673.331872][T25065] ? apparmor_capable+0x126/0x170 [ 673.331894][T25065] ? bpf_lsm_capable+0x9/0x20 [ 673.331910][T25065] ? security_capable+0x7e/0x2c0 [ 673.331939][T25065] genl_rcv_msg+0x61c/0x7a0 [ 673.331967][T25065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.331987][T25065] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 673.332007][T25065] ? __pfx_nl80211_get_mpp+0x10/0x10 [ 673.332026][T25065] ? __pfx_nl80211_post_doit+0x10/0x10 [ 673.332044][T25065] ? __pfx_ref_tracker_free+0x10/0x10 [ 673.332072][T25065] netlink_rcv_skb+0x232/0x4b0 [ 673.332093][T25065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.332115][T25065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.332150][T25065] ? down_read+0x270/0x2e0 [ 673.332168][T25065] ? genl_rcv+0xd/0x40 [ 673.332190][T25065] genl_rcv+0x28/0x40 [ 673.332210][T25065] netlink_unicast+0x75c/0x8e0 [ 673.332238][T25065] netlink_sendmsg+0x813/0xb40 [ 673.332267][T25065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.332289][T25065] ? aa_sock_msg_perm+0xf1/0x1b0 [ 673.332313][T25065] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.332337][T25065] ____sys_sendmsg+0x972/0x9f0 [ 673.332356][T25065] ? __might_fault+0xaf/0x130 [ 673.332383][T25065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.332411][T25065] ? import_iovec+0x73/0xa0 [ 673.332434][T25065] ___sys_sendmsg+0x2a5/0x360 [ 673.332451][T25065] ? __lock_acquire+0x6b5/0x2cf0 [ 673.332483][T25065] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.332534][T25065] ? __fget_files+0x2a/0x420 [ 673.332552][T25065] ? __fget_files+0x3a0/0x420 [ 673.332581][T25065] __x64_sys_sendmsg+0x1bd/0x2a0 [ 673.332603][T25065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 673.332649][T25065] ? __pfx_ksys_write+0x10/0x10 [ 673.332680][T25065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.332699][T25065] do_syscall_64+0x174/0x580 [ 673.332716][T25065] ? trace_irq_disable+0x3b/0x140 [ 673.332738][T25065] ? clear_bhb_loop+0x40/0x90 [ 673.332759][T25065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.332775][T25065] RIP: 0033:0x7f8ddd59ce59 [ 673.332792][T25065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.332806][T25065] RSP: 002b:00007f8dde4fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.332825][T25065] RAX: ffffffffffffffda RBX: 00007f8ddd815fa0 RCX: 00007f8ddd59ce59 [ 673.332837][T25065] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 673.332847][T25065] RBP: 00007f8dde4fc090 R08: 0000000000000000 R09: 0000000000000000 [ 673.332857][T25065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.332868][T25065] R13: 00007f8ddd816038 R14: 00007f8ddd815fa0 R15: 00007ffd2269c3e8 [ 673.332897][T25065] [ 674.885320][T25129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5218'. [ 676.026598][T25177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5232'. [ 676.055154][T25177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5232'. [ 676.079598][T25181] netlink: 'syz.3.5234': attribute type 4 has an invalid length. [ 676.133602][T25183] netlink: 'syz.3.5234': attribute type 4 has an invalid length. [ 676.304108][T25187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5237'. [ 676.313495][T25187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5237'. [ 676.396286][T25196] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5238'. [ 676.586274][T25198] netlink: 'syz.3.5239': attribute type 1 has an invalid length. [ 676.605162][T25198] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5239'. [ 676.615562][T25198] netlink: 'syz.3.5239': attribute type 1 has an invalid length. [ 676.625672][T25198] netlink: 'syz.3.5239': attribute type 8 has an invalid length. [ 676.635283][T25198] netlink: 586 bytes leftover after parsing attributes in process `syz.3.5239'. [ 676.665268][T25198] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5239'. [ 676.694799][T25206] netlink: 'syz.1.5242': attribute type 4 has an invalid length. [ 676.929170][T25220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5248'. [ 677.477644][T25248] netlink: 'syz.1.5258': attribute type 1 has an invalid length. [ 677.495821][T25248] netlink: 'syz.1.5258': attribute type 1 has an invalid length. [ 677.513135][T25248] netlink: 'syz.1.5258': attribute type 8 has an invalid length. [ 677.909405][ T3362] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 678.340743][T25300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.423142][T25300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.505411][T25313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.694601][ T5952] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 679.365970][ T57] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 680.374351][T25367] team_slave_0: left promiscuous mode [ 680.383123][T25367] team_slave_1: left promiscuous mode [ 680.547483][T25367] team0 (unregistering): Port device team_slave_0 removed [ 680.567429][T25367] team0 (unregistering): Port device team_slave_1 removed [ 680.584818][T25369] gretap0: refused to change device tx_queue_len [ 680.591998][T25369] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 680.723392][T25392] syzkaller0: entered promiscuous mode [ 680.736330][T25392] syzkaller0: entered allmulticast mode [ 680.761836][T25403] sctp: [Deprecated]: syz.1.5304 (pid 25403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 680.761836][T25403] Use struct sctp_sack_info instead [ 680.790411][T25405] __nla_validate_parse: 9 callbacks suppressed [ 680.790430][T25405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5306'. [ 681.147686][ T5952] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 681.433160][T25423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5311'. [ 681.442295][T25423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5311'. [ 681.650958][T25432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5313'. [ 683.902546][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 683.926052][T25422] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5311'. [ 684.060753][T25444] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 684.067264][T25446] FAULT_INJECTION: forcing a failure. [ 684.067264][T25446] name failslab, interval 1, probability 0, space 0, times 0 [ 684.101519][T25446] CPU: 1 UID: 0 PID: 25446 Comm: syz.3.5316 Not tainted syzkaller #0 PREEMPT(full) [ 684.101543][T25446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 684.101552][T25446] Call Trace: [ 684.101559][T25446] [ 684.101566][T25446] dump_stack_lvl+0xe8/0x150 [ 684.101591][T25446] should_fail_ex+0x412/0x560 [ 684.101621][T25446] ? sock_alloc_inode+0x2c/0x190 [ 684.101644][T25446] should_failslab+0xa8/0x100 [ 684.101662][T25446] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 684.101681][T25446] ? look_up_lock_class+0x57/0x110 [ 684.101705][T25446] ? __pfx_sock_alloc_inode+0x10/0x10 [ 684.101724][T25446] sock_alloc_inode+0x2c/0x190 [ 684.101744][T25446] ? __pfx_sock_alloc_inode+0x10/0x10 [ 684.101761][T25446] alloc_inode+0x6a/0x1b0 [ 684.101781][T25446] __sock_create+0x12d/0x9d0 [ 684.101810][T25446] rfcomm_dlc_open+0x364/0x1210 [ 684.101914][T25446] ? reacquire_held_locks+0x104/0x190 [ 684.101933][T25446] ? release_sock+0x2f/0x260 [ 684.101953][T25446] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 684.101983][T25446] ? __local_bh_enable_ip+0xd0/0x130 [ 684.102006][T25446] rfcomm_sock_connect+0x2f7/0x640 [ 684.102057][T25446] __sys_connect+0x312/0x450 [ 684.102076][T25446] ? __pfx___sys_connect+0x10/0x10 [ 684.102104][T25446] ? __pfx_ksys_write+0x10/0x10 [ 684.102130][T25446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.102148][T25446] __x64_sys_connect+0x7a/0x90 [ 684.102165][T25446] do_syscall_64+0x174/0x580 [ 684.102181][T25446] ? trace_irq_disable+0x3b/0x140 [ 684.102204][T25446] ? clear_bhb_loop+0x40/0x90 [ 684.102224][T25446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.102240][T25446] RIP: 0033:0x7f8ddd59ce59 [ 684.102256][T25446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.102270][T25446] RSP: 002b:00007f8dde4fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 684.102288][T25446] RAX: ffffffffffffffda RBX: 00007f8ddd815fa0 RCX: 00007f8ddd59ce59 [ 684.102300][T25446] RDX: 000000000000000a RSI: 0000200000000040 RDI: 0000000000000004 [ 684.102310][T25446] RBP: 00007f8dde4fc090 R08: 0000000000000000 R09: 0000000000000000 [ 684.102321][T25446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.102331][T25446] R13: 00007f8ddd816038 R14: 00007f8ddd815fa0 R15: 00007ffd2269c3e8 [ 684.102360][T25446] [ 684.102383][T25446] socket: no more sockets [ 684.363215][T25424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 684.602508][T25471] netlink: 'syz.2.5322': attribute type 1 has an invalid length. [ 684.677571][ T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 684.734130][T25471] 8021q: adding VLAN 0 to HW filter on device bond11 [ 684.789166][T25474] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5317'. [ 684.852200][T25477] bond11: option tlb_dynamic_lb: unable to set because the bond device is up [ 684.890248][T25475] tipc: Enabled bearer , priority 10 [ 684.987001][T25488] bridge0: Caught tx_queue_len zero misconfig [ 685.109033][T25494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5326'. [ 685.256566][T25503] netlink: 'syz.1.5328': attribute type 17 has an invalid length. [ 687.330873][T25538] netlink: 'syz.4.5336': attribute type 7 has an invalid length. [ 688.234868][T25555] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 688.258961][T25555] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 688.312101][T25558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5342'. [ 688.381576][T25558] FAULT_INJECTION: forcing a failure. [ 688.381576][T25558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.425604][T25558] CPU: 0 UID: 0 PID: 25558 Comm: syz.3.5342 Not tainted syzkaller #0 PREEMPT(full) [ 688.425628][T25558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 688.425638][T25558] Call Trace: [ 688.425645][T25558] [ 688.425653][T25558] dump_stack_lvl+0xe8/0x150 [ 688.425678][T25558] should_fail_ex+0x412/0x560 [ 688.425701][T25558] _copy_from_user+0x2d/0xb0 [ 688.425723][T25558] copy_from_sockptr_offset+0x66/0xa0 [ 688.425747][T25558] do_ip6t_set_ctl+0x99a/0xe20 [ 688.425765][T25558] ? __pfx___mutex_trylock_common+0x10/0x10 [ 688.425790][T25558] ? rcu_is_watching+0x15/0xb0 [ 688.425818][T25558] ? trace_contention_end+0x3d/0x140 [ 688.425839][T25558] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 688.425875][T25558] ? __pfx___mutex_lock+0x10/0x10 [ 688.425894][T25558] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 688.425919][T25558] ? __pfx_aa_sk_perm+0x10/0x10 [ 688.425947][T25558] nf_setsockopt+0x26f/0x290 [ 688.425972][T25558] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 688.425996][T25558] do_sock_setsockopt+0x17c/0x1b0 [ 688.426019][T25558] __x64_sys_setsockopt+0x13d/0x1b0 [ 688.426039][T25558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.426057][T25558] do_syscall_64+0x174/0x580 [ 688.426073][T25558] ? trace_irq_disable+0x3b/0x140 [ 688.426095][T25558] ? clear_bhb_loop+0x40/0x90 [ 688.426116][T25558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.426131][T25558] RIP: 0033:0x7f8ddd59ce59 [ 688.426148][T25558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.426164][T25558] RSP: 002b:00007f8dde4fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 688.426182][T25558] RAX: ffffffffffffffda RBX: 00007f8ddd815fa0 RCX: 00007f8ddd59ce59 [ 688.426194][T25558] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 688.426204][T25558] RBP: 00007f8dde4fc090 R08: 00000000000004e8 R09: 0000000000000000 [ 688.426214][T25558] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.426224][T25558] R13: 00007f8ddd816038 R14: 00007f8ddd815fa0 R15: 00007ffd2269c3e8 [ 688.426252][T25558] [ 688.818077][T25579] syzkaller1: entered promiscuous mode [ 688.833061][T25579] syzkaller1: entered allmulticast mode [ 688.856554][T25582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5346'. [ 689.014906][T25577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5346'. [ 690.304834][T25630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5363'. [ 690.696551][T25638] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5364'. [ 690.790629][T25640] FAULT_INJECTION: forcing a failure. [ 690.790629][T25640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.827892][T25640] CPU: 1 UID: 0 PID: 25640 Comm: syz.3.5365 Not tainted syzkaller #0 PREEMPT(full) [ 690.827914][T25640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 690.827924][T25640] Call Trace: [ 690.827931][T25640] [ 690.827939][T25640] dump_stack_lvl+0xe8/0x150 [ 690.827962][T25640] should_fail_ex+0x412/0x560 [ 690.827985][T25640] _copy_to_user+0x31/0xb0 [ 690.828007][T25640] bpf_test_finish+0x53c/0x6b0 [ 690.828037][T25640] ? __pfx_bpf_test_finish+0x10/0x10 [ 690.828054][T25640] ? eth_type_trans+0x348/0x7e0 [ 690.828169][T25640] bpf_prog_test_run_skb+0x1250/0x2260 [ 690.828209][T25640] ? __fget_files+0x3a0/0x420 [ 690.828227][T25640] ? __fget_files+0x2a/0x420 [ 690.828249][T25640] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 690.828268][T25640] bpf_prog_test_run+0x2c7/0x340 [ 690.828290][T25640] __sys_bpf+0x643/0x950 [ 690.828314][T25640] ? __pfx___sys_bpf+0x10/0x10 [ 690.828350][T25640] ? ksys_write+0x242/0x270 [ 690.828375][T25640] ? __pfx_ksys_write+0x10/0x10 [ 690.828401][T25640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.828419][T25640] __x64_sys_bpf+0x7c/0x90 [ 690.828441][T25640] do_syscall_64+0x174/0x580 [ 690.828459][T25640] ? trace_irq_disable+0x3b/0x140 [ 690.828480][T25640] ? clear_bhb_loop+0x40/0x90 [ 690.828501][T25640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.828517][T25640] RIP: 0033:0x7f8ddd59ce59 [ 690.828534][T25640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.828548][T25640] RSP: 002b:00007f8dde4fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 690.828567][T25640] RAX: ffffffffffffffda RBX: 00007f8ddd815fa0 RCX: 00007f8ddd59ce59 [ 690.828578][T25640] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 690.828589][T25640] RBP: 00007f8dde4fc090 R08: 0000000000000000 R09: 0000000000000000 [ 690.828599][T25640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.828609][T25640] R13: 00007f8ddd816038 R14: 00007f8ddd815fa0 R15: 00007ffd2269c3e8 [ 690.828643][T25640] [ 690.875587][T25638] : option downdelay: invalid value (18446744073709547007) [ 691.067559][T25638] : option downdelay: allowed values 0 - 2147483647 [ 691.090745][T25638]  (unregistering): Released all slaves [ 691.514465][T25659] netlink: 'syz.3.5370': attribute type 1 has an invalid length. [ 691.559506][T25659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5370'. [ 691.603829][T25664] netlink: 272 bytes leftover after parsing attributes in process `syz.4.5372'. [ 691.652977][T25664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5372'. [ 691.941303][ T5952] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 692.479930][T25703] netlink: 'syz.0.5385': attribute type 1 has an invalid length. [ 692.507098][T25716] FAULT_INJECTION: forcing a failure. [ 692.507098][T25716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.509703][T25703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5385'. [ 692.529859][T25716] CPU: 0 UID: 0 PID: 25716 Comm: syz.1.5387 Not tainted syzkaller #0 PREEMPT(full) [ 692.529882][T25716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 692.529892][T25716] Call Trace: [ 692.529899][T25716] [ 692.529908][T25716] dump_stack_lvl+0xe8/0x150 [ 692.529934][T25716] should_fail_ex+0x412/0x560 [ 692.529957][T25716] _copy_to_user+0x31/0xb0 [ 692.529979][T25716] simple_read_from_buffer+0xe1/0x170 [ 692.530005][T25716] proc_fail_nth_read+0x1bb/0x230 [ 692.530029][T25716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 692.530053][T25716] ? rw_verify_area+0x2a6/0x4d0 [ 692.530074][T25716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 692.530095][T25716] vfs_read+0x20c/0xa70 [ 692.530122][T25716] ? __pfx___mutex_lock+0x10/0x10 [ 692.530142][T25716] ? __pfx_vfs_read+0x10/0x10 [ 692.530165][T25716] ? __fget_files+0x2a/0x420 [ 692.530189][T25716] ? __fget_files+0x3a0/0x420 [ 692.530206][T25716] ? __fget_files+0x2a/0x420 [ 692.530234][T25716] ksys_read+0x150/0x270 [ 692.530257][T25716] ? __pfx_ksys_read+0x10/0x10 [ 692.530285][T25716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.530304][T25716] do_syscall_64+0x174/0x580 [ 692.530320][T25716] ? trace_irq_disable+0x3b/0x140 [ 692.530343][T25716] ? clear_bhb_loop+0x40/0x90 [ 692.530363][T25716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.530380][T25716] RIP: 0033:0x7f4be2d5d68e [ 692.530396][T25716] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 692.530409][T25716] RSP: 002b:00007f4be3d39fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 692.530428][T25716] RAX: ffffffffffffffda RBX: 00007f4be3d3a6c0 RCX: 00007f4be2d5d68e [ 692.530440][T25716] RDX: 000000000000000f RSI: 00007f4be3d3a0a0 RDI: 0000000000000004 [ 692.530450][T25716] RBP: 00007f4be3d3a090 R08: 0000000000000000 R09: 0000000000000000 [ 692.530461][T25716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.530471][T25716] R13: 00007f4be3016038 R14: 00007f4be3015fa0 R15: 00007fffd3d1f528 [ 692.530501][T25716] [ 692.943891][T25726] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5390'. [ 693.131829][T25734] netlink: 'syz.1.5393': attribute type 1 has an invalid length. [ 693.511122][T25753] __nla_validate_parse: 1 callbacks suppressed [ 693.511142][T25753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5399'. [ 693.722267][T25764] netlink: 'syz.0.5400': attribute type 1 has an invalid length. [ 693.732428][T25763] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.5401'. [ 693.760888][T25764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5400'. [ 693.916988][T25771] C: renamed from veth1_to_team (while UP) [ 693.934708][T25771] netlink: 'syz.1.5404': attribute type 2 has an invalid length. [ 693.953198][T25771] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5404'. [ 693.966980][T25774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5405'. [ 693.978161][T25771] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 694.040941][T25776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5404'. [ 694.492993][T25794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5411'. [ 694.618718][T25798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5413'. [ 694.864548][T25805] tipc: Resetting bearer [ 697.178173][T25781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 697.203256][T25802] netlink: 'syz.2.5415': attribute type 1 has an invalid length. [ 697.225168][T25802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5415'. [ 697.325197][T25813] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5417'. [ 697.567702][T25834] FAULT_INJECTION: forcing a failure. [ 697.567702][T25834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.611559][T25834] CPU: 1 UID: 0 PID: 25834 Comm: syz.1.5424 Not tainted syzkaller #0 PREEMPT(full) [ 697.611584][T25834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 697.611596][T25834] Call Trace: [ 697.611603][T25834] [ 697.611612][T25834] dump_stack_lvl+0xe8/0x150 [ 697.611646][T25834] should_fail_ex+0x412/0x560 [ 697.611669][T25834] _copy_from_user+0x2d/0xb0 [ 697.611691][T25834] generic_map_update_batch+0x648/0x990 [ 697.611720][T25834] ? __pfx_generic_map_update_batch+0x10/0x10 [ 697.611741][T25834] ? __fget_files+0x2a/0x420 [ 697.611767][T25834] ? __pfx_generic_map_update_batch+0x10/0x10 [ 697.611787][T25834] bpf_map_do_batch+0x39b/0x630 [ 697.611810][T25834] __sys_bpf+0x7c1/0x950 [ 697.611834][T25834] ? __pfx___sys_bpf+0x10/0x10 [ 697.611872][T25834] ? ksys_write+0x242/0x270 [ 697.611896][T25834] ? __pfx_ksys_write+0x10/0x10 [ 697.611922][T25834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.611940][T25834] __x64_sys_bpf+0x7c/0x90 [ 697.611962][T25834] do_syscall_64+0x174/0x580 [ 697.611980][T25834] ? trace_irq_disable+0x3b/0x140 [ 697.612003][T25834] ? clear_bhb_loop+0x40/0x90 [ 697.612023][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.612039][T25834] RIP: 0033:0x7f4be2d9ce59 [ 697.612056][T25834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.612069][T25834] RSP: 002b:00007f4be3d3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.612088][T25834] RAX: ffffffffffffffda RBX: 00007f4be3015fa0 RCX: 00007f4be2d9ce59 [ 697.612099][T25834] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 697.612109][T25834] RBP: 00007f4be3d3a090 R08: 0000000000000000 R09: 0000000000000000 [ 697.612119][T25834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 697.612127][T25834] R13: 00007f4be3016038 R14: 00007f4be3015fa0 R15: 00007fffd3d1f528 [ 697.612155][T25834] [ 699.158661][T25892] __nla_validate_parse: 2 callbacks suppressed [ 699.158681][T25892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5439'. [ 699.444357][T25894] bond16: option packets_per_slave: invalid value (1048582) [ 699.463656][T25894] bond16: option packets_per_slave: allowed values 0 - 65535 [ 699.495882][T25894] bond16 (unregistering): Released all slaves [ 699.777790][T25918] FAULT_INJECTION: forcing a failure. [ 699.777790][T25918] name failslab, interval 1, probability 0, space 0, times 0 [ 699.790596][T25918] CPU: 1 UID: 0 PID: 25918 Comm: syz.4.5448 Not tainted syzkaller #0 PREEMPT(full) [ 699.790612][T25918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 699.790619][T25918] Call Trace: [ 699.790624][T25918] [ 699.790629][T25918] dump_stack_lvl+0xe8/0x150 [ 699.790650][T25918] should_fail_ex+0x412/0x560 [ 699.790674][T25918] should_failslab+0xa8/0x100 [ 699.790693][T25918] __kvmalloc_node_noprof+0x178/0x8a0 [ 699.790731][T25918] ? xt_alloc_table_info+0x40/0xb0 [ 699.790755][T25918] ? do_ip6t_set_ctl+0x96b/0xe20 [ 699.790774][T25918] ? translate_table+0x191/0x20b0 [ 699.790798][T25918] translate_table+0x191/0x20b0 [ 699.790833][T25918] ? __pfx_translate_table+0x10/0x10 [ 699.790851][T25918] ? __might_fault+0xaf/0x130 [ 699.790867][T25918] ? __might_fault+0xaf/0x130 [ 699.790888][T25918] ? _copy_from_user+0x94/0xb0 [ 699.790902][T25918] do_ip6t_set_ctl+0xa59/0xe20 [ 699.790914][T25918] ? __pfx___mutex_trylock_common+0x10/0x10 [ 699.790928][T25918] ? rcu_is_watching+0x15/0xb0 [ 699.790941][T25918] ? trace_contention_end+0x3d/0x140 [ 699.790953][T25918] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 699.790975][T25918] ? __pfx___mutex_lock+0x10/0x10 [ 699.790989][T25918] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 699.791003][T25918] ? __pfx_aa_sk_perm+0x10/0x10 [ 699.791022][T25918] nf_setsockopt+0x26f/0x290 [ 699.791045][T25918] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 699.791062][T25918] do_sock_setsockopt+0x17c/0x1b0 [ 699.791075][T25918] __x64_sys_setsockopt+0x13d/0x1b0 [ 699.791087][T25918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.791097][T25918] do_syscall_64+0x174/0x580 [ 699.791107][T25918] ? trace_irq_disable+0x3b/0x140 [ 699.791123][T25918] ? clear_bhb_loop+0x40/0x90 [ 699.791134][T25918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.791144][T25918] RIP: 0033:0x7f7a02b9ce59 [ 699.791154][T25918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.791163][T25918] RSP: 002b:00007f7a0398d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 699.791174][T25918] RAX: ffffffffffffffda RBX: 00007f7a02e16090 RCX: 00007f7a02b9ce59 [ 699.791182][T25918] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 699.791188][T25918] RBP: 00007f7a0398d090 R08: 00000000000004e8 R09: 0000000000000000 [ 699.791194][T25918] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.791200][T25918] R13: 00007f7a02e16128 R14: 00007f7a02e16090 R15: 00007ffda30d6b68 [ 699.791215][T25918] [ 701.249377][T25856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 701.425653][T25938] netlink: 272 bytes leftover after parsing attributes in process `syz.0.5457'. [ 701.463413][T25938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5457'. [ 701.499718][T25945] tipc: New replicast peer: 172.30.0.4 [ 701.521788][T25945] tipc: Enabled bearer , priority 26 [ 701.546509][T25945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5455'. [ 701.580316][T25945] tipc: Disabling bearer [ 701.764522][T25963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5460'. [ 701.796605][T25965] netlink: 'syz.0.5462': attribute type 58 has an invalid length. [ 701.905049][T25968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5462'. [ 701.934192][T25968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5462'. [ 702.532062][T25980] netlink: 'syz.1.5467': attribute type 3 has an invalid length. [ 702.622892][T25987] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5468'. [ 702.662593][T25987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5468'. [ 702.721375][T25991] tipc: Enabled bearer , priority 0 [ 702.743714][T25991] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 702.761378][T25992] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5469'. [ 702.768545][T25991] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 702.921550][T26000] FAULT_INJECTION: forcing a failure. [ 702.921550][T26000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.935266][T25994] netlink: 'syz.0.5471': attribute type 1 has an invalid length. [ 702.953520][T26000] CPU: 1 UID: 0 PID: 26000 Comm: syz.2.5473 Not tainted syzkaller #0 PREEMPT(full) [ 702.953546][T26000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 702.953556][T26000] Call Trace: [ 702.953564][T26000] [ 702.953573][T26000] dump_stack_lvl+0xe8/0x150 [ 702.953598][T26000] should_fail_ex+0x412/0x560 [ 702.953622][T26000] _copy_from_user+0x2d/0xb0 [ 702.953643][T26000] ___sys_recvmsg+0x175/0x590 [ 702.953669][T26000] ? __pfx____sys_recvmsg+0x10/0x10 [ 702.953693][T26000] ? __fget_files+0x2a/0x420 [ 702.953741][T26000] do_recvmmsg+0x334/0x800 [ 702.953765][T26000] ? __pfx_do_recvmmsg+0x10/0x10 [ 702.953793][T26000] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 702.953829][T26000] __x64_sys_recvmmsg+0x198/0x250 [ 702.953851][T26000] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 702.953878][T26000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.953897][T26000] do_syscall_64+0x174/0x580 [ 702.953918][T26000] ? trace_irq_disable+0x3b/0x140 [ 702.953940][T26000] ? clear_bhb_loop+0x40/0x90 [ 702.953961][T26000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.953977][T26000] RIP: 0033:0x7f663519ce59 [ 702.953994][T26000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.954007][T26000] RSP: 002b:00007f66333f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 702.954025][T26000] RAX: ffffffffffffffda RBX: 00007f6635415fa0 RCX: 00007f663519ce59 [ 702.954037][T26000] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000005 [ 702.954048][T26000] RBP: 00007f66333f6090 R08: 0000000000000000 R09: 0000000000000000 [ 702.954058][T26000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 702.954068][T26000] R13: 00007f6635416038 R14: 00007f6635415fa0 R15: 00007ffd5838d548 [ 702.954097][T26000] [ 703.546396][T26020] tipc: Enabling of bearer rejected, failed to enable media [ 704.352459][T26060] netlink: 'syz.2.5491': attribute type 1 has an invalid length. [ 704.365045][T26060] __nla_validate_parse: 7 callbacks suppressed [ 704.365063][T26060] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.5491'. [ 704.881643][T26087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5497'. [ 705.055815][T26092] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 705.074693][T26092] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 705.985002][T26122] FAULT_INJECTION: forcing a failure. [ 705.985002][T26122] name failslab, interval 1, probability 0, space 0, times 0 [ 706.013682][T26122] CPU: 0 UID: 0 PID: 26122 Comm: syz.0.5508 Not tainted syzkaller #0 PREEMPT(full) [ 706.013718][T26122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 706.013729][T26122] Call Trace: [ 706.013747][T26122] [ 706.013755][T26122] dump_stack_lvl+0xe8/0x150 [ 706.013783][T26122] should_fail_ex+0x412/0x560 [ 706.013807][T26122] should_failslab+0xa8/0x100 [ 706.013827][T26122] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 706.013850][T26122] ? __alloc_skb+0x1d0/0x7d0 [ 706.013867][T26122] ? __local_bh_enable_ip+0xd0/0x130 [ 706.013893][T26122] __alloc_skb+0x1d0/0x7d0 [ 706.013909][T26122] ? netlink_ack_tlv_len+0x6c/0x210 [ 706.013932][T26122] netlink_ack+0x146/0xa50 [ 706.013947][T26122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 706.013967][T26122] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 706.013989][T26122] ? __pfx_nl80211_post_doit+0x10/0x10 [ 706.014009][T26122] ? __pfx_ref_tracker_free+0x10/0x10 [ 706.014038][T26122] netlink_rcv_skb+0x2b6/0x4b0 [ 706.014058][T26122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 706.014080][T26122] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 706.014113][T26122] ? down_read+0x270/0x2e0 [ 706.014131][T26122] ? genl_rcv+0xd/0x40 [ 706.014153][T26122] genl_rcv+0x28/0x40 [ 706.014172][T26122] netlink_unicast+0x75c/0x8e0 [ 706.014199][T26122] netlink_sendmsg+0x813/0xb40 [ 706.014227][T26122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.014248][T26122] ? aa_sock_msg_perm+0xf1/0x1b0 [ 706.014273][T26122] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 706.014297][T26122] ____sys_sendmsg+0x972/0x9f0 [ 706.014314][T26122] ? __might_fault+0xaf/0x130 [ 706.014338][T26122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 706.014362][T26122] ? import_iovec+0x73/0xa0 [ 706.014384][T26122] ___sys_sendmsg+0x2a5/0x360 [ 706.014398][T26122] ? __lock_acquire+0x6b5/0x2cf0 [ 706.014418][T26122] ? __pfx____sys_sendmsg+0x10/0x10 [ 706.014466][T26122] ? __fget_files+0x2a/0x420 [ 706.014485][T26122] ? __fget_files+0x3a0/0x420 [ 706.014514][T26122] __x64_sys_sendmsg+0x1bd/0x2a0 [ 706.014535][T26122] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 706.014561][T26122] ? __pfx_ksys_write+0x10/0x10 [ 706.014590][T26122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.014609][T26122] do_syscall_64+0x174/0x580 [ 706.014625][T26122] ? trace_irq_disable+0x3b/0x140 [ 706.014647][T26122] ? clear_bhb_loop+0x40/0x90 [ 706.014667][T26122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.014687][T26122] RIP: 0033:0x7fb36e99ce59 [ 706.014710][T26122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.014724][T26122] RSP: 002b:00007fb36f7e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.014740][T26122] RAX: ffffffffffffffda RBX: 00007fb36ec15fa0 RCX: 00007fb36e99ce59 [ 706.014751][T26122] RDX: 0000000000040800 RSI: 0000200000006000 RDI: 0000000000000004 [ 706.014760][T26122] RBP: 00007fb36f7e4090 R08: 0000000000000000 R09: 0000000000000000 [ 706.014771][T26122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.014780][T26122] R13: 00007fb36ec16038 R14: 00007fb36ec15fa0 R15: 00007ffe83cf6938 [ 706.014813][T26122] [ 707.157520][T26170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5519'. [ 707.225494][T26164] tipc: Resetting bearer [ 707.333845][T26164] tipc: Resetting bearer [ 707.621264][T26194] FAULT_INJECTION: forcing a failure. [ 707.621264][T26194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.650296][T26194] CPU: 0 UID: 0 PID: 26194 Comm: syz.4.5525 Not tainted syzkaller #0 PREEMPT(full) [ 707.650321][T26194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 707.650332][T26194] Call Trace: [ 707.650339][T26194] [ 707.650348][T26194] dump_stack_lvl+0xe8/0x150 [ 707.650373][T26194] should_fail_ex+0x412/0x560 [ 707.650397][T26194] _copy_from_iter+0x1d3/0x1670 [ 707.650419][T26194] ? rcu_is_watching+0x15/0xb0 [ 707.650444][T26194] ? __pfx__copy_from_iter+0x10/0x10 [ 707.650470][T26194] ? netlink_sendmsg+0x650/0xb40 [ 707.650488][T26194] ? skb_put+0x11b/0x210 [ 707.650508][T26194] netlink_sendmsg+0x6c0/0xb40 [ 707.650595][T26194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.650618][T26194] ? aa_sock_msg_perm+0xf1/0x1b0 [ 707.650643][T26194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 707.650666][T26194] ____sys_sendmsg+0x972/0x9f0 [ 707.650685][T26194] ? __might_fault+0xaf/0x130 [ 707.650711][T26194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 707.650738][T26194] ? import_iovec+0x73/0xa0 [ 707.650760][T26194] ___sys_sendmsg+0x2a5/0x360 [ 707.650777][T26194] ? __lock_acquire+0x6b5/0x2cf0 [ 707.650799][T26194] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.650848][T26194] ? __fget_files+0x2a/0x420 [ 707.650867][T26194] ? __fget_files+0x3a0/0x420 [ 707.650894][T26194] __x64_sys_sendmsg+0x1bd/0x2a0 [ 707.650914][T26194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 707.650942][T26194] ? __pfx_ksys_write+0x10/0x10 [ 707.650972][T26194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.650990][T26194] do_syscall_64+0x174/0x580 [ 707.651008][T26194] ? trace_irq_disable+0x3b/0x140 [ 707.651030][T26194] ? clear_bhb_loop+0x40/0x90 [ 707.651050][T26194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.651066][T26194] RIP: 0033:0x7f7a02b9ce59 [ 707.651083][T26194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.651096][T26194] RSP: 002b:00007f7a0398d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.651114][T26194] RAX: ffffffffffffffda RBX: 00007f7a02e16090 RCX: 00007f7a02b9ce59 [ 707.651126][T26194] RDX: 0000000020008004 RSI: 00002000000006c0 RDI: 0000000000000006 [ 707.651137][T26194] RBP: 00007f7a0398d090 R08: 0000000000000000 R09: 0000000000000000 [ 707.651148][T26194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.651158][T26194] R13: 00007f7a02e16128 R14: 00007f7a02e16090 R15: 00007ffda30d6b68 [ 707.651186][T26194] [ 707.690194][T26196] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5527'. [ 708.329967][T26186] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 708.773893][T26225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5532'. [ 709.013277][T26233] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5535'. [ 709.196960][T26245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5539'. [ 709.214765][ T5956] tipc: Subscription rejected, illegal request [ 709.433715][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5545'. [ 709.764735][T26284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5551'. [ 709.773514][T26285] netlink: 'syz.0.5549': attribute type 7 has an invalid length. [ 709.816509][T26289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5551'. [ 709.873147][T26270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5548'. [ 709.909719][T26270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5548'. [ 709.930751][T26284] macvtap0: entered promiscuous mode [ 709.948400][T26284] macvtap0: entered allmulticast mode [ 709.966026][T26284] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 710.177490][T26299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5554'. [ 710.242375][T26301] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 710.255459][T26303] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5557'. [ 710.267874][T26301] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 710.323771][T26303] netlink: 'syz.3.5557': attribute type 13 has an invalid length. [ 710.408117][T26311] gre0: entered allmulticast mode [ 710.446022][T26312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5558'. [ 710.492336][T26312] ipip2: entered promiscuous mode [ 710.505388][T26312] ipip2: entered allmulticast mode [ 710.640703][T26312] tipc: Enabling of bearer rejected, already enabled [ 710.655271][T26323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5561'. [ 710.987046][T26333] netlink: 'syz.3.5562': attribute type 7 has an invalid length. [ 711.053918][T26338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5566'. [ 711.404079][T26356] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 711.763753][T26364] tipc: Enabling of bearer rejected, already enabled [ 711.785368][T26364] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 711.804845][T26364] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 711.925497][T26372] openvswitch: netlink: Flow actions attr not present in new flow. [ 712.320192][T26359] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 712.522400][T26408] syzkaller0: entered promiscuous mode [ 712.527975][T26408] syzkaller0: entered allmulticast mode [ 712.536996][T26408] netlink: 'syz.1.5588': attribute type 7 has an invalid length. [ 712.548664][T26408] netlink: 'syz.1.5588': attribute type 7 has an invalid length. [ 715.095048][T26380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 715.336392][T26425] __nla_validate_parse: 3 callbacks suppressed [ 715.336412][T26425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5591'. [ 715.559412][T26438] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 715.570594][T26437] netlink: 'syz.4.5598': attribute type 8 has an invalid length. [ 715.593395][T26438] FAULT_INJECTION: forcing a failure. [ 715.593395][T26438] name failslab, interval 1, probability 0, space 0, times 0 [ 715.628443][T26438] CPU: 0 UID: 0 PID: 26438 Comm: syz.2.5597 Not tainted syzkaller #0 PREEMPT(full) [ 715.628467][T26438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 715.628478][T26438] Call Trace: [ 715.628486][T26438] [ 715.628494][T26438] dump_stack_lvl+0xe8/0x150 [ 715.628521][T26438] should_fail_ex+0x412/0x560 [ 715.628546][T26438] should_failslab+0xa8/0x100 [ 715.628564][T26438] ? skb_clone+0x212/0x3a0 [ 715.628583][T26438] kmem_cache_alloc_noprof+0x87/0x650 [ 715.628614][T26438] skb_clone+0x212/0x3a0 [ 715.628637][T26438] __netlink_deliver_tap+0x404/0x850 [ 715.628668][T26438] ? netlink_deliver_tap+0x2e/0x1b0 [ 715.628688][T26438] netlink_deliver_tap+0x19c/0x1b0 [ 715.628707][T26438] __netlink_sendskb+0x47/0x90 [ 715.628726][T26438] netlink_dump+0xa0f/0xe10 [ 715.628755][T26438] ? __pfx_netlink_dump+0x10/0x10 [ 715.628787][T26438] ? genl_start+0x499/0x6c0 [ 715.628816][T26438] __netlink_dump_start+0x5cb/0x7e0 [ 715.628842][T26438] genl_family_rcv_msg_dumpit+0x213/0x310 [ 715.628868][T26438] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 715.628897][T26438] ? __pfx_genl_start+0x10/0x10 [ 715.628915][T26438] ? __pfx_genl_dumpit+0x10/0x10 [ 715.628933][T26438] ? __pfx_genl_done+0x10/0x10 [ 715.628958][T26438] ? bpf_lsm_capable+0x9/0x20 [ 715.628975][T26438] ? security_capable+0x7e/0x2c0 [ 715.629004][T26438] genl_rcv_msg+0x5e8/0x7a0 [ 715.629031][T26438] ? __pfx_genl_rcv_msg+0x10/0x10 [ 715.629052][T26438] ? __pfx_ip_vs_genl_dump_services+0x10/0x10 [ 715.629161][T26438] ? __pfx_ref_tracker_free+0x10/0x10 [ 715.629191][T26438] netlink_rcv_skb+0x232/0x4b0 [ 715.629212][T26438] ? __pfx_genl_rcv_msg+0x10/0x10 [ 715.629235][T26438] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 715.629270][T26438] ? down_read+0x270/0x2e0 [ 715.629289][T26438] ? genl_rcv+0xd/0x40 [ 715.629312][T26438] genl_rcv+0x28/0x40 [ 715.629337][T26438] netlink_unicast+0x75c/0x8e0 [ 715.629367][T26438] netlink_sendmsg+0x813/0xb40 [ 715.629395][T26438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.629418][T26438] ? aa_sock_msg_perm+0xf1/0x1b0 [ 715.629443][T26438] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 715.629468][T26438] ____sys_sendmsg+0x972/0x9f0 [ 715.629487][T26438] ? __might_fault+0xaf/0x130 [ 715.629515][T26438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 715.629543][T26438] ? import_iovec+0x73/0xa0 [ 715.629567][T26438] ___sys_sendmsg+0x2a5/0x360 [ 715.629601][T26438] ? __lock_acquire+0x6b5/0x2cf0 [ 715.629625][T26438] ? __pfx____sys_sendmsg+0x10/0x10 [ 715.629682][T26438] ? __fget_files+0x2a/0x420 [ 715.629701][T26438] ? __fget_files+0x3a0/0x420 [ 715.629733][T26438] __x64_sys_sendmsg+0x1bd/0x2a0 [ 715.629756][T26438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 715.629785][T26438] ? __pfx_ksys_write+0x10/0x10 [ 715.629816][T26438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.629835][T26438] do_syscall_64+0x174/0x580 [ 715.629852][T26438] ? trace_irq_disable+0x3b/0x140 [ 715.629875][T26438] ? clear_bhb_loop+0x40/0x90 [ 715.629896][T26438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.629913][T26438] RIP: 0033:0x7f663519ce59 [ 715.629930][T26438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.629944][T26438] RSP: 002b:00007f66333f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.629962][T26438] RAX: ffffffffffffffda RBX: 00007f6635415fa0 RCX: 00007f663519ce59 [ 715.629974][T26438] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000006 [ 715.629985][T26438] RBP: 00007f66333f6090 R08: 0000000000000000 R09: 0000000000000000 [ 715.629995][T26438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.630005][T26438] R13: 00007f6635416038 R14: 00007f6635415fa0 R15: 00007ffd5838d548 [ 715.630035][T26438] [ 715.657658][T26442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5600'. [ 715.962812][T26454] FAULT_INJECTION: forcing a failure. [ 715.962812][T26454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.980754][T26434] netlink: set zone limit has 4 unknown bytes [ 716.045298][T26454] CPU: 1 UID: 0 PID: 26454 Comm: syz.2.5602 Not tainted syzkaller #0 PREEMPT(full) [ 716.045322][T26454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 716.045332][T26454] Call Trace: [ 716.045340][T26454] [ 716.045348][T26454] dump_stack_lvl+0xe8/0x150 [ 716.045374][T26454] should_fail_ex+0x412/0x560 [ 716.045398][T26454] _copy_from_iter+0x1d3/0x1670 [ 716.045421][T26454] ? rcu_is_watching+0x15/0xb0 [ 716.045454][T26454] ? __pfx__copy_from_iter+0x10/0x10 [ 716.045469][T26454] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 716.045498][T26454] ? netlink_sendmsg+0x650/0xb40 [ 716.045514][T26454] ? skb_put+0x11b/0x210 [ 716.045533][T26454] netlink_sendmsg+0x6c0/0xb40 [ 716.045555][T26454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.045571][T26454] ? aa_sock_msg_perm+0xf1/0x1b0 [ 716.045590][T26454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 716.045610][T26454] ____sys_sendmsg+0x972/0x9f0 [ 716.045625][T26454] ? __might_fault+0xaf/0x130 [ 716.045645][T26454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 716.045664][T26454] ? import_iovec+0x73/0xa0 [ 716.045681][T26454] ___sys_sendmsg+0x2a5/0x360 [ 716.045693][T26454] ? __lock_acquire+0x6b5/0x2cf0 [ 716.045710][T26454] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.045747][T26454] ? __fget_files+0x2a/0x420 [ 716.045762][T26454] ? __fget_files+0x3a0/0x420 [ 716.045782][T26454] __x64_sys_sendmsg+0x1bd/0x2a0 [ 716.045798][T26454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 716.045818][T26454] ? __pfx_ksys_write+0x10/0x10 [ 716.045841][T26454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.045856][T26454] do_syscall_64+0x174/0x580 [ 716.045869][T26454] ? trace_irq_disable+0x3b/0x140 [ 716.045888][T26454] ? clear_bhb_loop+0x40/0x90 [ 716.045902][T26454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.045915][T26454] RIP: 0033:0x7f663519ce59 [ 716.045927][T26454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.045938][T26454] RSP: 002b:00007f66333f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.045953][T26454] RAX: ffffffffffffffda RBX: 00007f6635415fa0 RCX: 00007f663519ce59 [ 716.045962][T26454] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 716.045970][T26454] RBP: 00007f66333f6090 R08: 0000000000000000 R09: 0000000000000000 [ 716.045977][T26454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.045985][T26454] R13: 00007f6635416038 R14: 00007f6635415fa0 R15: 00007ffd5838d548 [ 716.046006][T26454] [ 716.774263][T26485] wg1: Caught tx_queue_len zero misconfig [ 716.840327][T26492] netlink: 'syz.3.5610': attribute type 12 has an invalid length. [ 717.010306][T26496] FAULT_INJECTION: forcing a failure. [ 717.010306][T26496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.043117][T26494] openvswitch: netlink: Flow actions attr not present in new flow. [ 717.049167][T26496] CPU: 1 UID: 0 PID: 26496 Comm: syz.1.5612 Not tainted syzkaller #0 PREEMPT(full) [ 717.049190][T26496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 717.049200][T26496] Call Trace: [ 717.049208][T26496] [ 717.049215][T26496] dump_stack_lvl+0xe8/0x150 [ 717.049241][T26496] should_fail_ex+0x412/0x560 [ 717.049265][T26496] _copy_from_user+0x2d/0xb0 [ 717.049285][T26496] ___sys_sendmsg+0x1c6/0x360 [ 717.049303][T26496] ? __lock_acquire+0x6b5/0x2cf0 [ 717.049325][T26496] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.049374][T26496] ? __fget_files+0x2a/0x420 [ 717.049393][T26496] ? __fget_files+0x3a0/0x420 [ 717.049420][T26496] __x64_sys_sendmsg+0x1bd/0x2a0 [ 717.049440][T26496] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 717.049467][T26496] ? __pfx_ksys_write+0x10/0x10 [ 717.049515][T26496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.049532][T26496] do_syscall_64+0x174/0x580 [ 717.049550][T26496] ? trace_irq_disable+0x3b/0x140 [ 717.049571][T26496] ? clear_bhb_loop+0x40/0x90 [ 717.049591][T26496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.049607][T26496] RIP: 0033:0x7f4be2d9ce59 [ 717.049624][T26496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.049637][T26496] RSP: 002b:00007f4be3d3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.049655][T26496] RAX: ffffffffffffffda RBX: 00007f4be3015fa0 RCX: 00007f4be2d9ce59 [ 717.049666][T26496] RDX: 0000000000000840 RSI: 0000200000000200 RDI: 0000000000000005 [ 717.049676][T26496] RBP: 00007f4be3d3a090 R08: 0000000000000000 R09: 0000000000000000 [ 717.049686][T26496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.049696][T26496] R13: 00007f4be3016038 R14: 00007f4be3015fa0 R15: 00007fffd3d1f528 [ 717.049724][T26496] [ 717.443662][T26507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5614'. [ 717.543731][T26517] IPVS: set_ctl: invalid protocol: 195 224.0.0.1:20000 [ 718.078866][T26545] block nbd1: server does not support multiple connections per device. [ 718.098745][T26545] block nbd1: shutting down sockets [ 718.245085][T26555] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5628'. [ 718.269845][T26555] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5628'. [ 718.739757][T26581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5636'. [ 718.749222][T26581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5636'. [ 718.751389][T26580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5636'. [ 718.758770][T26581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5636'. [ 718.792320][T26581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5636'. [ 719.493410][T26617] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 719.506818][T26617] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 720.377622][T26621] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 721.615917][T26569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.628720][T26620] netlink: 'syz.3.5649': attribute type 1 has an invalid length. [ 721.673565][T26620] __nla_validate_parse: 5 callbacks suppressed [ 721.673581][T26620] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5649'. [ 721.991034][T26646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5659'. [ 722.186067][T26661] gretap0: refused to change device tx_queue_len [ 722.246190][T26661] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 722.265790][T26668] FAULT_INJECTION: forcing a failure. [ 722.265790][T26668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.287019][T26668] CPU: 1 UID: 0 PID: 26668 Comm: syz.2.5664 Not tainted syzkaller #0 PREEMPT(full) [ 722.287042][T26668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 722.287052][T26668] Call Trace: [ 722.287059][T26668] [ 722.287067][T26668] dump_stack_lvl+0xe8/0x150 [ 722.287092][T26668] should_fail_ex+0x412/0x560 [ 722.287116][T26668] _copy_from_user+0x2d/0xb0 [ 722.287137][T26668] generic_map_update_batch+0x648/0x990 [ 722.287167][T26668] ? __pfx_generic_map_update_batch+0x10/0x10 [ 722.287187][T26668] ? __fget_files+0x2a/0x420 [ 722.287213][T26668] ? __pfx_generic_map_update_batch+0x10/0x10 [ 722.287232][T26668] bpf_map_do_batch+0x39b/0x630 [ 722.287255][T26668] __sys_bpf+0x7c1/0x950 [ 722.287280][T26668] ? __pfx___sys_bpf+0x10/0x10 [ 722.287316][T26668] ? ksys_write+0x242/0x270 [ 722.287341][T26668] ? __pfx_ksys_write+0x10/0x10 [ 722.287365][T26668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.287382][T26668] __x64_sys_bpf+0x7c/0x90 [ 722.287404][T26668] do_syscall_64+0x174/0x580 [ 722.287421][T26668] ? trace_irq_disable+0x3b/0x140 [ 722.287442][T26668] ? clear_bhb_loop+0x40/0x90 [ 722.287462][T26668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.287477][T26668] RIP: 0033:0x7f663519ce59 [ 722.287493][T26668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.287506][T26668] RSP: 002b:00007f66333f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 722.287524][T26668] RAX: ffffffffffffffda RBX: 00007f6635415fa0 RCX: 00007f663519ce59 [ 722.287535][T26668] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 722.287544][T26668] RBP: 00007f66333f6090 R08: 0000000000000000 R09: 0000000000000000 [ 722.287553][T26668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 722.287560][T26668] R13: 00007f6635416038 R14: 00007f6635415fa0 R15: 00007ffd5838d548 [ 722.287579][T26668] [ 722.779363][T26682] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5668'. [ 722.936839][T26692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5667'. [ 723.110164][T26699] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 723.117410][T26699] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 723.302556][T26710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5677'. [ 723.389626][T26714] gretap0: refused to change device tx_queue_len [ 723.408692][T26714] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 724.493822][T26720] netlink: 'syz.3.5679': attribute type 10 has an invalid length. [ 724.571520][T26724] FAULT_INJECTION: forcing a failure. [ 724.571520][T26724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.585299][T26724] CPU: 1 UID: 0 PID: 26724 Comm: syz.3.5681 Not tainted syzkaller #0 PREEMPT(full) [ 724.585323][T26724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 724.585334][T26724] Call Trace: [ 724.585342][T26724] [ 724.585350][T26724] dump_stack_lvl+0xe8/0x150 [ 724.585392][T26724] should_fail_ex+0x412/0x560 [ 724.585416][T26724] _copy_to_user+0x31/0xb0 [ 724.585438][T26724] simple_read_from_buffer+0xe1/0x170 [ 724.585462][T26724] proc_fail_nth_read+0x1bb/0x230 [ 724.585487][T26724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 724.585511][T26724] ? rw_verify_area+0x2a6/0x4d0 [ 724.585532][T26724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 724.585553][T26724] vfs_read+0x20c/0xa70 [ 724.585580][T26724] ? __pfx___mutex_lock+0x10/0x10 [ 724.585599][T26724] ? __pfx_vfs_read+0x10/0x10 [ 724.585623][T26724] ? __fget_files+0x2a/0x420 [ 724.585646][T26724] ? __fget_files+0x3a0/0x420 [ 724.585664][T26724] ? __fget_files+0x2a/0x420 [ 724.585691][T26724] ksys_read+0x150/0x270 [ 724.585715][T26724] ? __pfx_ksys_read+0x10/0x10 [ 724.585745][T26724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.585770][T26724] do_syscall_64+0x174/0x580 [ 724.585786][T26724] ? trace_irq_disable+0x3b/0x140 [ 724.585823][T26724] ? clear_bhb_loop+0x40/0x90 [ 724.585846][T26724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.585863][T26724] RIP: 0033:0x7f8ddd55d68e [ 724.585879][T26724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 724.585892][T26724] RSP: 002b:00007f8dde4fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 724.585910][T26724] RAX: ffffffffffffffda RBX: 00007f8dde4fc6c0 RCX: 00007f8ddd55d68e [ 724.585922][T26724] RDX: 000000000000000f RSI: 00007f8dde4fc0a0 RDI: 0000000000000004 [ 724.585933][T26724] RBP: 00007f8dde4fc090 R08: 0000000000000000 R09: 0000000000000000 [ 724.585943][T26724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.585953][T26724] R13: 00007f8ddd816038 R14: 00007f8ddd815fa0 R15: 00007ffd2269c3e8 [ 724.585982][T26724] [ 725.235006][T26666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.510201][T26741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5687'. [ 725.879434][T26763] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 725.887038][T26763] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 725.973588][T26771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5699'. [ 726.037303][T26775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5700'. [ 726.173120][T26783] erspan2: entered promiscuous mode [ 726.178572][T26783] erspan2: entered allmulticast mode [ 728.911291][T26765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.123289][T26806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5708'. [ 729.382557][T26807] syzkaller0: entered promiscuous mode [ 729.395105][T26807] syzkaller0: entered allmulticast mode [ 729.781301][T26836] netlink: zone id is out of range [ 729.795433][T26836] netlink: zone id is out of range [ 729.815827][T26836] netlink: zone id is out of range [ 729.831124][T26836] netlink: zone id is out of range [ 729.844530][T26836] netlink: zone id is out of range [ 729.860030][T26836] netlink: zone id is out of range [ 729.876144][T26836] netlink: zone id is out of range [ 729.890041][T26836] netlink: zone id is out of range [ 729.905640][T26836] netlink: zone id is out of range [ 729.924835][T26836] netlink: zone id is out of range [ 730.534166][T26849] FAULT_INJECTION: forcing a failure. [ 730.534166][T26849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.548249][T26849] CPU: 1 UID: 0 PID: 26849 Comm: syz.4.5719 Not tainted syzkaller #0 PREEMPT(full) [ 730.548273][T26849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 730.548282][T26849] Call Trace: [ 730.548290][T26849] [ 730.548298][T26849] dump_stack_lvl+0xe8/0x150 [ 730.548323][T26849] should_fail_ex+0x412/0x560 [ 730.548345][T26849] _copy_to_user+0x31/0xb0 [ 730.548367][T26849] simple_read_from_buffer+0xe1/0x170 [ 730.548390][T26849] proc_fail_nth_read+0x1bb/0x230 [ 730.548413][T26849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 730.548437][T26849] ? rw_verify_area+0x2a6/0x4d0 [ 730.548457][T26849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 730.548477][T26849] vfs_read+0x20c/0xa70 [ 730.548503][T26849] ? __pfx___mutex_lock+0x10/0x10 [ 730.548541][T26849] ? __pfx_vfs_read+0x10/0x10 [ 730.548563][T26849] ? __fget_files+0x2a/0x420 [ 730.548585][T26849] ? __fget_files+0x3a0/0x420 [ 730.548602][T26849] ? __fget_files+0x2a/0x420 [ 730.548628][T26849] ksys_read+0x150/0x270 [ 730.548649][T26849] ? __pfx_ksys_read+0x10/0x10 [ 730.548675][T26849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.548690][T26849] do_syscall_64+0x174/0x580 [ 730.548707][T26849] ? trace_irq_disable+0x3b/0x140 [ 730.548729][T26849] ? clear_bhb_loop+0x40/0x90 [ 730.548748][T26849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.548762][T26849] RIP: 0033:0x7f7a02b5d68e [ 730.548778][T26849] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 730.548791][T26849] RSP: 002b:00007f7a00df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 730.548809][T26849] RAX: ffffffffffffffda RBX: 00007f7a00df66c0 RCX: 00007f7a02b5d68e [ 730.548820][T26849] RDX: 000000000000000f RSI: 00007f7a00df60a0 RDI: 0000000000000005 [ 730.548830][T26849] RBP: 00007f7a00df6090 R08: 0000000000000000 R09: 0000000000000000 [ 730.548839][T26849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.548849][T26849] R13: 00007f7a02e16218 R14: 00007f7a02e16180 R15: 00007ffda30d6b68 [ 730.548876][T26849] [ 731.703592][T26865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5723'. [ 732.710288][T26854] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 732.718066][T26854] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 732.781641][T26867] FAULT_INJECTION: forcing a failure. [ 732.781641][T26867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.833172][T26867] CPU: 0 UID: 0 PID: 26867 Comm: syz.3.5724 Not tainted syzkaller #0 PREEMPT(full) [ 732.833197][T26867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 732.833207][T26867] Call Trace: [ 732.833214][T26867] [ 732.833222][T26867] dump_stack_lvl+0xe8/0x150 [ 732.833248][T26867] should_fail_ex+0x412/0x560 [ 732.833271][T26867] _copy_from_user+0x2d/0xb0 [ 732.833292][T26867] ___sys_recvmsg+0x175/0x590 [ 732.833318][T26867] ? __pfx____sys_recvmsg+0x10/0x10 [ 732.833341][T26867] ? __fget_files+0x2a/0x420 [ 732.833388][T26867] do_recvmmsg+0x334/0x800 [ 732.833415][T26867] ? __pfx_do_recvmmsg+0x10/0x10 [ 732.833443][T26867] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 732.833476][T26867] __x64_sys_recvmmsg+0x198/0x250 [ 732.833497][T26867] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 732.833522][T26867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.833540][T26867] do_syscall_64+0x174/0x580 [ 732.833555][T26867] ? trace_irq_disable+0x3b/0x140 [ 732.833577][T26867] ? clear_bhb_loop+0x40/0x90 [ 732.833596][T26867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.833612][T26867] RIP: 0033:0x7f8ddd59ce59 [ 732.833628][T26867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.833655][T26867] RSP: 002b:00007f8dde4fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 732.833673][T26867] RAX: ffffffffffffffda RBX: 00007f8ddd815fa0 RCX: 00007f8ddd59ce59 [ 732.833684][T26867] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000005 [ 732.833694][T26867] RBP: 00007f8dde4fc090 R08: 0000000000000000 R09: 0000000000000000 [ 732.833705][T26867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 732.833714][T26867] R13: 00007f8ddd816038 R14: 00007f8ddd815fa0 R15: 00007ffd2269c3e8 [ 732.833742][T26867] [ 733.183950][T26884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5730'. [ 733.193051][T26884] netlink: 'syz.3.5730': attribute type 11 has an invalid length. [ 733.216323][T26884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5730'. [ 733.225432][T26884] netlink: 'syz.3.5730': attribute type 11 has an invalid length. [ 733.319716][T26892] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5728'. [ 733.336198][T26891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5732'. [ 733.377997][T26894] FAULT_INJECTION: forcing a failure. [ 733.377997][T26894] name failslab, interval 1, probability 0, space 0, times 0 [ 733.392645][T26894] CPU: 0 UID: 0 PID: 26894 Comm: syz.0.5733 Not tainted syzkaller #0 PREEMPT(full) [ 733.392668][T26894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 733.392679][T26894] Call Trace: [ 733.392686][T26894] [ 733.392694][T26894] dump_stack_lvl+0xe8/0x150 [ 733.392720][T26894] should_fail_ex+0x412/0x560 [ 733.392754][T26894] should_failslab+0xa8/0x100 [ 733.392772][T26894] ? skb_clone+0x212/0x3a0 [ 733.392792][T26894] kmem_cache_alloc_noprof+0x87/0x650 [ 733.392811][T26894] ? dev_queue_xmit_nit+0x2d/0xad0 [ 733.392836][T26894] skb_clone+0x212/0x3a0 [ 733.392853][T26894] ? dev_queue_xmit_nit+0x268/0xad0 [ 733.392872][T26894] dev_queue_xmit_nit+0x29a/0xad0 [ 733.392890][T26894] ? dev_queue_xmit_nit+0x2d/0xad0 [ 733.392917][T26894] dev_hard_start_xmit+0x1c1/0x830 [ 733.392953][T26894] __dev_queue_xmit+0x14d9/0x3950 [ 733.392971][T26894] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 733.392996][T26894] ? __dev_queue_xmit+0x2b6/0x3950 [ 733.393029][T26894] ? __pfx___dev_queue_xmit+0x10/0x10 [ 733.393058][T26894] ? __copy_skb_header+0xa3/0x4a0 [ 733.393096][T26894] ? skb_clone+0x246/0x3a0 [ 733.393117][T26894] __netlink_deliver_tap+0x5ad/0x850 [ 733.393147][T26894] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.393167][T26894] netlink_deliver_tap+0x19c/0x1b0 [ 733.393186][T26894] netlink_unicast+0x730/0x8e0 [ 733.393214][T26894] netlink_sendmsg+0x813/0xb40 [ 733.393239][T26894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.393260][T26894] ? aa_sock_msg_perm+0xf1/0x1b0 [ 733.393283][T26894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 733.393307][T26894] ____sys_sendmsg+0x972/0x9f0 [ 733.393325][T26894] ? __might_fault+0xaf/0x130 [ 733.393351][T26894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.393376][T26894] ? import_iovec+0x73/0xa0 [ 733.393400][T26894] ___sys_sendmsg+0x2a5/0x360 [ 733.393417][T26894] ? __lock_acquire+0x6b5/0x2cf0 [ 733.393438][T26894] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.393481][T26894] ? __fget_files+0x2a/0x420 [ 733.393496][T26894] ? __fget_files+0x3a0/0x420 [ 733.393516][T26894] __x64_sys_sendmsg+0x1bd/0x2a0 [ 733.393533][T26894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 733.393561][T26894] ? __pfx_ksys_write+0x10/0x10 [ 733.393590][T26894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.393609][T26894] do_syscall_64+0x174/0x580 [ 733.393626][T26894] ? trace_irq_disable+0x3b/0x140 [ 733.393648][T26894] ? clear_bhb_loop+0x40/0x90 [ 733.393669][T26894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.393685][T26894] RIP: 0033:0x7fb36e99ce59 [ 733.393702][T26894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.393715][T26894] RSP: 002b:00007fb36f7e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.393743][T26894] RAX: ffffffffffffffda RBX: 00007fb36ec15fa0 RCX: 00007fb36e99ce59 [ 733.393755][T26894] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 733.393765][T26894] RBP: 00007fb36f7e4090 R08: 0000000000000000 R09: 0000000000000000 [ 733.393775][T26894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.393784][T26894] R13: 00007fb36ec16038 R14: 00007fb36ec15fa0 R15: 00007ffe83cf6938 [ 733.393812][T26894] [ 733.816677][T26892] block nbd1: not configured, cannot reconfigure [ 733.832417][T26904] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 734.164285][T26917] macvlan3: entered promiscuous mode [ 734.183451][T26917] macvlan3: entered allmulticast mode [ 734.203930][T26913] netlink: 'syz.3.5740': attribute type 1 has an invalid length. [ 734.215868][T26913] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5740'. [ 734.249910][T26913] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5740'. [ 734.320178][T26925] syzkaller0: entered promiscuous mode [ 734.325925][T26925] syzkaller0: entered allmulticast mode [ 737.306874][T26972] netlink: 'syz.3.5762': attribute type 1 has an invalid length. [ 737.403916][T26977] tipc: Enabled bearer , priority 10 [ 737.552060][T26980] bond21: (slave veth11): Enslaving as an active interface with a down link [ 737.681124][T26992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5767'. [ 737.703619][T26992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5767'. [ 737.816682][T26998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5769'. [ 737.830675][T26995] syzkaller0: entered promiscuous mode [ 737.844761][T26995] syzkaller0: entered allmulticast mode [ 740.503372][T27015] netlink: 'syz.0.5776': attribute type 1 has an invalid length. [ 740.576627][T27015] bond16: entered promiscuous mode [ 740.582252][T27015] bond16: entered allmulticast mode [ 740.588031][T27015] 8021q: adding VLAN 0 to HW filter on device bond16 [ 740.730829][T27015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5776'. [ 740.744389][T27015] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5776'. [ 740.774984][T27015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5776'. [ 740.811888][T27015] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5776'. [ 740.852957][T27035] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 741.216664][T27047] syzkaller0: entered promiscuous mode [ 741.223684][T27047] syzkaller0: entered allmulticast mode [ 741.233503][T27054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5788'. [ 741.587299][T27064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5790'. [ 741.621040][T27064] netlink: 'syz.2.5790': attribute type 10 has an invalid length. [ 741.772585][T27070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5793'. [ 741.787398][T27070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5793'. [ 741.801118][T27070] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5793'. [ 741.810799][T27070] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5793'. [ 742.150257][ C1] [ 742.152628][ C1] ============================================ [ 742.158858][ C1] WARNING: possible recursive locking detected [ 742.165161][ C1] syzkaller #0 Not tainted [ 742.169597][ C1] -------------------------------------------- [ 742.175762][ C1] syz.0.5786/27046 is trying to acquire lock: [ 742.181836][ C1] ffff888029ede558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 742.191820][ C1] [ 742.191820][ C1] but task is already holding lock: [ 742.199188][ C1] ffff88803236c558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 742.209013][ C1] [ 742.209013][ C1] other info that might help us debug this: [ 742.217064][ C1] Possible unsafe locking scenario: [ 742.217064][ C1] [ 742.224587][ C1] CPU0 [ 742.227866][ C1] ---- [ 742.231174][ C1] lock(&qdisc_xmit_lock_key#4); [ 742.236230][ C1] lock(&qdisc_xmit_lock_key#4); [ 742.241242][ C1] [ 742.241242][ C1] *** DEADLOCK *** [ 742.241242][ C1] [ 742.249365][ C1] May be due to missing lock nesting notation [ 742.249365][ C1] [ 742.257685][ C1] 11 locks held by syz.0.5786/27046: [ 742.262951][ C1] #0: ffffffff8fdc8f40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 742.271911][ C1] #1: ffffc90000a08cc0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 742.281472][ C1] #2: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x215/0x1670 [ 742.290944][ C1] #3: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 742.300077][ C1] #4: ffffffff8e95cd00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 742.310009][ C1] #5: ffff88807d9bb228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 742.322616][ C1] #6: ffff88803236c558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 742.332901][ C1] #7: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 742.341874][ C1] #8: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 742.351598][ C1] #9: ffffffff8e95cd00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 742.361508][ C1] #10: ffff88802c0de228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 742.374190][ C1] [ 742.374190][ C1] stack backtrace: [ 742.380061][ C1] CPU: 1 UID: 0 PID: 27046 Comm: syz.0.5786 Not tainted syzkaller #0 PREEMPT(full) [ 742.380078][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 742.380087][ C1] Call Trace: [ 742.380092][ C1] [ 742.380100][ C1] dump_stack_lvl+0xe8/0x150 [ 742.380118][ C1] print_deadlock_bug+0x279/0x290 [ 742.380137][ C1] __lock_acquire+0x253f/0x2cf0 [ 742.380158][ C1] ? sch_direct_xmit+0x15f/0x4c0 [ 742.380178][ C1] lock_acquire+0x106/0x350 [ 742.380191][ C1] ? sch_direct_xmit+0x15f/0x4c0 [ 742.380214][ C1] _raw_spin_lock+0x2e/0x40 [ 742.380234][ C1] ? sch_direct_xmit+0x15f/0x4c0 [ 742.380253][ C1] sch_direct_xmit+0x15f/0x4c0 [ 742.380273][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 742.380293][ C1] ? __local_bh_enable_ip+0x70/0x130 [ 742.380309][ C1] __dev_queue_xmit+0x180f/0x3950 [ 742.380328][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 742.380346][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 742.380360][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 742.380377][ C1] ? nf_hook+0xa1/0x3a0 [ 742.380395][ C1] ? iptable_mangle_hook+0x189/0x4c0 [ 742.380490][ C1] ? ip_finish_output2+0xa1e/0x1070 [ 742.380504][ C1] ? ip_finish_output2+0x3c2/0x1070 [ 742.380516][ C1] ip_finish_output2+0xc68/0x1070 [ 742.380529][ C1] ? ip_finish_output2+0x3c2/0x1070 [ 742.380544][ C1] ip_output+0x29f/0x450 [ 742.380562][ C1] ? ip_output+0x5b/0x450 [ 742.380580][ C1] iptunnel_xmit+0x621/0xd10 [ 742.380624][ C1] ip_tunnel_xmit+0x193a/0x1f20 [ 742.380673][ C1] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 742.380694][ C1] ? __pfx_gre_build_header+0x10/0x10 [ 742.380714][ C1] __gre_xmit+0x19e/0x240 [ 742.380731][ C1] ? __pfx___gre_xmit+0x10/0x10 [ 742.380747][ C1] ? iptunnel_handle_offloads+0x2fd/0x630 [ 742.380764][ C1] erspan_xmit+0xa41/0x14d0 [ 742.380785][ C1] ? __pfx_erspan_xmit+0x10/0x10 [ 742.380806][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 742.380826][ C1] sch_direct_xmit+0x251/0x4c0 [ 742.380847][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 742.380869][ C1] __dev_queue_xmit+0x180f/0x3950 [ 742.380887][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 742.380907][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 742.380923][ C1] ? neigh_resolve_output+0x438/0x750 [ 742.380944][ C1] ? eth_header+0x11b/0x200 [ 742.380960][ C1] ? __asan_memcpy+0x40/0x70 [ 742.380989][ C1] ? ip6_output+0x126/0x550 [ 742.381005][ C1] ip6_output+0x340/0x550 [ 742.381021][ C1] ? __pfx_ip6_output+0x10/0x10 [ 742.381036][ C1] ndisc_send_skb+0xd0b/0x1670 [ 742.381049][ C1] ? ndisc_send_skb+0x215/0x1670 [ 742.381063][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 742.381076][ C1] ? __pfx_dst_output+0x10/0x10 [ 742.381095][ C1] addrconf_rs_timer+0x395/0x6d0 [ 742.381144][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 742.381161][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 742.381182][ C1] call_timer_fn+0x192/0x5e0 [ 742.381196][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 742.381214][ C1] ? call_timer_fn+0xd4/0x5e0 [ 742.381227][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 742.381245][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 742.381264][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 742.381283][ C1] __run_timer_base+0x652/0x8b0 [ 742.381296][ C1] ? ktime_get+0x45/0x220 [ 742.381318][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 742.381336][ C1] run_timer_softirq+0xb7/0x170 [ 742.381349][ C1] handle_softirqs+0x22a/0x840 [ 742.381363][ C1] ? __irq_exit_rcu+0xca/0x220 [ 742.381379][ C1] __irq_exit_rcu+0xca/0x220 [ 742.381392][ C1] irq_exit_rcu+0x9/0x30 [ 742.381404][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 742.381419][ C1] [ 742.381424][ C1] [ 742.381429][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 742.381443][ C1] RIP: 0010:lockdep_unregister_key+0x2d5/0x350 [ 742.381460][ C1] Code: 91 0a 09 00 89 c6 48 c7 c7 30 b8 41 96 e8 d3 1f 0a 0a 90 e9 65 fe ff ff e8 e8 5c 07 0a 41 f7 c7 00 02 00 00 74 b3 fb 40 84 ed <75> b2 eb c3 90 0f 0b 90 e9 26 ff ff ff 90 0f 0b 90 e9 2e ff ff ff [ 742.381472][ C1] RSP: 0018:ffffc90005a5f980 EFLAGS: 00000246 [ 742.381485][ C1] RAX: 0000000000000046 RBX: ffff88805611c268 RCX: 0000000000000046 [ 742.381496][ C1] RDX: ffffffff93fd3398 RSI: ffffffff8dfc7cbe RDI: ffffffff8c28b7e0 [ 742.381506][ C1] RBP: ffff888029768000 R08: ffffffff81af2048 R09: ffffffff8e95cca0 [ 742.381516][ C1] R10: dffffc0000000000 R11: fffffbfff206115f R12: 0000000000000000 [ 742.381526][ C1] R13: ffff88805611c269 R14: 0000000000001000 R15: 0000000000000a87 [ 742.381538][ C1] ? __is_module_percpu_address+0x28/0x3f0 [ 742.381562][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 742.381575][ C1] __qdisc_destroy+0x1ab/0x470 [ 742.381590][ C1] dev_shutdown+0x93/0x440 [ 742.381605][ C1] unregister_netdevice_many_notify+0x11a2/0x20c0 [ 742.381628][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 742.381647][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 742.381665][ C1] ? skb_queue_purge_reason+0x229/0x3b0 [ 742.381684][ C1] ? skb_queue_purge_reason+0x229/0x3b0 [ 742.381705][ C1] unregister_netdevice_queue+0x31f/0x360 [ 742.381722][ C1] ? ptr_ring_consume+0x1f8/0x420 [ 742.381738][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 742.381758][ C1] __tun_detach+0xfca/0x1800 [ 742.381777][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 742.381789][ C1] tun_chr_close+0x10a/0x1c0 [ 742.381803][ C1] __fput+0x44f/0xa60 [ 742.381822][ C1] task_work_run+0x1d9/0x270 [ 742.381842][ C1] ? __pfx_task_work_run+0x10/0x10 [ 742.381863][ C1] exit_to_user_mode_loop+0x193/0x680 [ 742.381876][ C1] ? rcu_is_watching+0x15/0xb0 [ 742.381891][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.381905][ C1] do_syscall_64+0x353/0x580 [ 742.381919][ C1] ? clear_bhb_loop+0x40/0x90 [ 742.381934][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.381947][ C1] RIP: 0033:0x7fb36e99ce59 [ 742.381960][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.381971][ C1] RSP: 002b:00007ffe83cf6a98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 742.381989][ C1] RAX: 0000000000000000 RBX: 00007fb36ec17da0 RCX: 00007fb36e99ce59 [ 742.381998][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 742.382007][ C1] RBP: 00007fb36ec17da0 R08: 00007fb36ec16038 R09: 0000000000000000 [ 742.382016][ C1] R10: 00000000003fee80 R11: 0000000000000246 R12: 00000000000b519e [ 742.382024][ C1] R13: 00007fb36ec1609c R14: 00000000000b4f24 R15: 00007fb36ec16090 [ 742.382039][ C1] [ 744.835721][T27059] net_ratelimit: 350 callbacks suppressed [ 744.835733][T27059] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 747.259287][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!