last executing test programs: 3.280148487s ago: executing program 0 (id=1100): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003f0009002abd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f00000000c0)={0x70004, 0x200}, 0x8) shutdown(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x4d68a01a2d4100bd, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f0000000500)={r8, 0x0, 0xf, 0xc, 0x6, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)=@deltaction={0x194, 0x31, 0x246, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x51}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbb0}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcb}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000800000850000007500000095000000f4ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.983987604s ago: executing program 0 (id=1104): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 2.278340193s ago: executing program 2 (id=1110): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRES8, @ANYRESHEX=r1], 0x33) sendfile(r4, r3, 0x0, 0x10000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x44, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x20000800) r7 = socket$nl_generic(0x10, 0x3, 0x10) getgid() r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="00b0b3", @ANYRES16, @ANYBLOB="08002abd7000fcdbdf25620000000600b300020000000600b300000000000600b400950f00000600b300000000000600b400a30600000600b400640f00000600b4005d080000"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x0) 2.077629805s ago: executing program 0 (id=1113): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.921932414s ago: executing program 0 (id=1117): r0 = socket(0x5, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x4000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) unshare(0x28040680) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000140001000000000000080000e0000002000000000000ffffffffffffff800000000000000000ffffac1414bb4e1e0002500000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000f4ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000400da42000000000000000000000000feffffffffffffff00000000bc6b6e0000000000000000008f1bbac2dcb21c6e64"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 1.716480309s ago: executing program 2 (id=1122): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r4, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a80)=""/4089, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd08, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipmr_delroute={0x24, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {0x80, 0x20, 0x90, 0x0, 0x0, 0x4, 0x0, 0x5, 0x5100}, [@RTA_DST={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000004) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x15c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0xb4, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf1}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000540)=""/8, 0x8}, {&(0x7f0000000600)=""/238, 0xee}], 0x2}, 0x0) 1.689076577s ago: executing program 0 (id=1124): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 1.551394723s ago: executing program 3 (id=1125): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000402000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.470154733s ago: executing program 4 (id=1126): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0x7) socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.433865332s ago: executing program 2 (id=1128): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0x7) socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3", 0xa3}, {&(0x7f0000000700)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab75", 0x73}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343", 0xa7}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d4", 0xa}, {&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad514caf83c851eec544ac66993e0aa8aac7013f19af84202254eadfd12b56f2ebc32396500466e9f16d358dd5354ef69bb8caedf66a220372311a092a4f03a336f27222302c6364b738a58c3b8e99d1a40552dfad46ba272544c0b39ebbca7d1da95fc74f6010956a8bb3165ee8db3867d1f92176de044693fa090b97bcadedd59b7e509e0d60017b6a3b025aac6650826d7f3406d4206b4d714c620225b5797e60513988e244874ac2a0ac80d18c707edf4999d1beaf841f2b8dd9a3da66e193ef2ab6ddba5185b5fd322187b4ff2f9677ecd725eaf86412158b744e32abb8ee3c039cce34f129d6f2665630931a5e03fc6984278e20e320318b0aa676822c2f732337cc75a858a07ed8c17b323d52ee421e79cff1800d1da3f311699f5eb8792f6d67c035ea9348f7f6ff81b9143db4742618e5ffbe48865d787e0a31f8e4d9e7895eb15c36ba4a81355080818efd3cd792293ec3e8cdc577f5c42abbb74331b352f17772ea7cdab8bb640b11db772baa4b32069b99e4cc43118257afa84eff7c8eb2c585da8e8e76404312b55db433c7365a866bc2a678f4817ba7b0838d63eaca429ce563fe8adfe7f114a941f629017d6f0ae80d2c0952ff5550bf361bda46eca47e1c271e0241d60290b9f8e1261b447ad0ba09fab7881291f7c2792537e7a5948eaba0235472406903f1d7095800da3aeb07e914868f2e75208b7354bd8118e91f1a8324c2dac24d633bedadd5b1fa6f2a2df302b7c7516f7f87fe570807fb205b287da3f3a1d4f66cade6cf61922cfa0f23212e282e260655a1d7dffd3be5e2c87ed16b6132de36d46240b76e0ae38e9b", 0x2ad}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x30, 0xfa, 0x3, 0xfffff030}, {0x6, 0x5, 0xe, 0x1}]}) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) 1.099965539s ago: executing program 1 (id=1131): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newroute={0x20, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080002000300e4602c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480340001800b0001006c6f6f6b75700000240002800900010073797a3100000000080002400000000b0900010073797a30000000000c000180080001006f736600100001800b00010072656a65637400000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000704000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 965.88312ms ago: executing program 3 (id=1132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000004000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x1d, &(0x7f0000000180), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005a0001ff7f000000000000000400fd80080003"], 0x1c}], 0x1}, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000080)=r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00'}) 919.67028ms ago: executing program 0 (id=1133): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000302000000030000000000000000000000000000014500000020000000000000000000000b0200000000", @ANYRES64], 0x0, 0x58}, 0x28) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001540)={{r0, &(0x7f0000000000)='*$\x00', 0x0, &(0x7f0000000040)={@align=0x3, {0x2, 0x2, 0x2, 0x7}}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x200}, 0x4, &(0x7f00000014c0)=[{0x3, 0x9f, &(0x7f0000000100)=',+&#[\x00', &(0x7f0000000140)="e81a5ed5fd1261e933650c5ddb60832373ac1c7fa907acd38d6dcecc6420f7ba1877c6c4af2b8fb2c3bd1f49ad22810e831c146da2d37d04621320401092a3412c2aa48c08997f44b203e1c875df36941c2fc2762be5c5d7bab34ec22c37d57cc5dc9a2899ff494fd22f5da7975c666cda696723e5a14f6316c60fee981365f5f9d6ab81cf669c28c13d223cf475f6d3936e3271a2d4e006ecc3044d6e99b08bdd90be3e00409d819dbfa26d483899ece7aa93e7a3105fedaa73620b39af8adb846387925faeb2cfc4ec9b2dc76c9541645d562dc9394538df62cdfa58c563", 0xdf, 0x8}, {0x1, 0x6, &(0x7f0000000240)='/(,\\}\x00', &(0x7f0000000280)="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", 0x1000, 0x36}, {0x3, 0x0, &(0x7f0000001280)='\x00', &(0x7f00000012c0)="004fa46c9e19ff9a491a1a7e914347fa8f57259006de28486d8378d9e21182f3647a507d2ff319e786beab223b8c742e8458016beca0d3e77b82088eb55a643b131b96759e0fc5f67d6df50b4348ed70b7604545f535b36b86bd0f1df0d23f91952d36a713f6e61fd8413040fb1f653776784c331eb606160786b3412a3b062ef1c210269206a10c4865", 0x8a}, {0x3, 0x3, &(0x7f0000001380)='\x8f\x00', &(0x7f00000013c0)="202eb70077be1a902ac39ddc7485a6336ffa732490cdeebd7b3c6f1a535c395f975d66cae76db5fe860e453dd5944605aea3d2e5cb165db4df4ed6105d8a", 0x3e, 0xc53df1b31b4eb508}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001640)={{0x1}, &(0x7f00000015c0), &(0x7f0000001600)='%pI4 \x00'}, 0x20) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYRESHEX=r2], 0x8) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r5 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x2}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4010004) bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@bloom_filter={0x1e, 0x6, 0x7ff, 0x0, 0x20, 0x1, 0x2, '\x00', 0x0, r0, 0x1, 0x5, 0x4, 0xb}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f00000000c0)="328ab2b3e5"}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001900)=@bloom_filter={0x1e, 0x6, 0x84a, 0x3, 0x14, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x4}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f00000019c0)=@generic={&(0x7f0000001980)='./file0\x00', 0x0, 0x10}, 0x18) r9 = socket$kcm(0x29, 0x5, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(r9, r10, 0x0, 0xffffffff000) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r12 = socket$nl_audit(0x10, 0x3, 0x9) splice(r11, 0x0, r12, 0x0, 0x25a5, 0x0) pipe(&(0x7f0000000380)) 917.9292ms ago: executing program 4 (id=1134): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000800800071115b000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x3c44aadc539c6433, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005e1f2f637bfb4ea71fda457d7b7888cd41903b1d572e7388c9f0086a03ca9583bbbe4dee1ffdb3e7f11de2cdd51262b03f6362750e1a5a6828676e308d1ef0f448973f4e2d3db5fa916913e1a33c788c91f6492e3fee35e851dabdcbd1a21b401856653dd99f6fe1959036994981f1c944c7e5d2d374f0a0067cbe190a2810492003a1a23acf30a0cc72df1e54b08314bb8950ffa3bc6a7d5cc2b1e0b83f835c46"], 0x50) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfff7fffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, 0x0}}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="09032b9d7000fcdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x110) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f80ff00"], 0x38}}, 0x40812) 843.945631ms ago: executing program 2 (id=1135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x99, 0x1, 0xe1}, {0xc, 0x0, 0x2, 0x1, 0x4, 0x0, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002300)}], 0x1}, 0x4) 738.053945ms ago: executing program 1 (id=1136): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00096c80020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 733.335693ms ago: executing program 3 (id=1137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="b83c6bc76f69cb15cb59", 0xa}, {&(0x7f0000000240)="50be9945", 0x4}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x30, r2, 0x10ada85e65c25349, 0x3, 0x25dfdbfb, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x117, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200449a0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, r1, 0xe0d7b000) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', r4, 0x0, 0x4, 0xfe, 0x100, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast2, 0x8000, 0x700, 0x2, 0x2aa1f153}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58000000100001000000000000000000000000004ae9fefb34b72496b6f83eea059a619c9feafe463ba2bfbfbceb63fbaf47d06bf3142e02c9c29095b2325d2885f5bb0c", @ANYRES32=0x0, @ANYBLOB="0a00030000000000300016802c0001802800010005000000bbbbbbbbbbbb000000000000000000000000000000000000000000000000000008001b0000000000"], 0x58}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r6, 0x0, 0x82, 0x64, 0x1ac9ee85, 0x0, @mcast1, @empty, 0x0, 0x1, 0xd, 0xa174}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="0000000022000000000000010000070a6f8a2cb0869c23d470fbc80771164b20e04c62710f29ace0a66e55002fd8b659206d44c0287c7008cb991df25a78e7a33f06e92a8dbf4891eb8db1ddee2066c55ec87b5dc554c5b88cdbeec875efbab795b2bbaf193a6bb8f3c50f872697642decfd715d99007237507c583e2b3f295b284e142cf0d3d5df0595e8ba0874f8fd89a12e1ab63582657aa4cfd36d8dfdb033b39cae7772d1f958790a263782da008155ba5a450b1f96d47b771ecb3f93e3c5aafcb86d7deacd12c55ee2c64db6607749566d", @ANYRES32=0x0, @ANYBLOB="3f00000000000000300012800b00010062726964676500002000028005000700080000000c002e0003000000030000000500170000000000"], 0x50}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000180)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000700)={{{@in=@remote, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) 663.153042ms ago: executing program 4 (id=1138): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000003a00003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28) 598.257279ms ago: executing program 1 (id=1139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a3000000000090003000c00f5ffffff03000c000240000000000000000114000000110001"], 0x60}}, 0x0) 526.881887ms ago: executing program 1 (id=1140): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="89000000140081ae08060cdc030000fe7f03446b000000000001ffca1bdcfdd9fb0024c00e72f750375ed08a56", 0x2d}], 0x1}, 0x4000000) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000001000000000000000700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f00000000c0)=r7, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000)=r7, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000300012800b0001006d6163736563000020000280080005000d0000000c0001000001000000000000050003000800000008000500", @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, &(0x7f0000003200), &(0x7f0000003240)=0x4) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x3, 0x3, 0x6, 0x10, r3, 0x40, '\x00', 0x0, r7, 0x3, 0x2, 0x2, 0x3}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff000000000100060000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x51) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000400)=ANY=[], 0x2f561) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r13, 0xffd57000) (async) sendmsg$IPSET_CMD_LIST(r13, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x43002200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c0000000706198f0000000000070000030800050d000100070000010800069f4000d800100900020073797a300000000008000640000008ba09000200737902000000000600000000070001000500010007000000274b81afed908f0000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) 524.243594ms ago: executing program 4 (id=1141): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 448.789507ms ago: executing program 2 (id=1142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004081}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7ffffffe, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa01, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0xa, 0x2, 0x1, 0x104}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000004001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020000000000000000000000000000ff010000000000000000000000000001ff020000000000000000000000000001ffffffff0000000000000000000000006c010000"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f80)={'veth0_to_bond\x00', 0x0}) sendto$packet(r5, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x3, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 373.605945ms ago: executing program 3 (id=1143): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept(r0, &(0x7f0000000040)=@qipcrtr, &(0x7f00000000c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x7800, 0x80, 0x0, 0x7ff, {{0x1a, 0x4, 0x0, 0x2e, 0x68, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @rr={0x7, 0x13, 0xae, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @noop, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x34, 0x4d, 0x1, 0x3, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x930}, {@broadcast, 0x8}, {@private=0xa010101, 0x80000001}, {@local, 0x100}, {@rand_addr=0x64010102, 0xffffffff}]}, @generic={0x94, 0x6, "8c28a002"}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000100000000000000192aa8f0000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000003780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080"], 0x24}}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000001840)=@assoc_value={0x0}, &(0x7f0000001780)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r6, 0xd}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000001000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x30, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000500)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xa, 0x8, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r9}, 0x38) 373.48837ms ago: executing program 1 (id=1144): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000003000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 372.986152ms ago: executing program 4 (id=1145): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000ff1000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000337", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) 152.606839ms ago: executing program 3 (id=1146): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000000000000000086fa60010100000c0a0020010000000000000000000000000000fe8000000000000000000000000000aa00030e22000c907801030000"], 0x0) socket(0x28, 0x5, 0x0) 152.24722ms ago: executing program 4 (id=1147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 77.228325ms ago: executing program 1 (id=1148): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x150, r2, 0x700, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}, {0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0xb}, {0x8, 0x13, 0x1000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xb}, {0x8, 0x13, 0xe}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x101}, {0x8, 0x13, 0x4}, {0x5}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4824}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)={0x20, r3, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x8080) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)={0x20, r3, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x8080) 77.100449ms ago: executing program 3 (id=1149): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x1, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 0s ago: executing program 2 (id=1150): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1807000008000000000000000300e80018460000fdffffff000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa10a600d55be5aaeccb02000001fe80000000000000000000000000001200000000000000000000000000000001000000000000"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x1c, 0x2, 0x81, 0x3}, {0x20, 0x0, 0x0, 0xfffff011}, {0x6, 0x80, 0x0, 0x5}]}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. [ 73.363474][ T5606] cgroup: Unknown subsys name 'net' [ 73.536757][ T5606] cgroup: Unknown subsys name 'cpuset' [ 73.546108][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.013314][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.220776][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.229212][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.237471][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.247505][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.255479][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.264465][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.269597][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.280254][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.281402][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.289907][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.301363][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.305289][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.312453][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.319305][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.327253][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.333102][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.340465][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.349045][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.355259][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.370262][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.370702][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.385873][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.394485][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.395824][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.411539][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.087455][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.096366][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.104588][ T5626] bridge_slave_0: entered allmulticast mode [ 79.112697][ T5626] bridge_slave_0: entered promiscuous mode [ 79.171239][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.178859][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.187740][ T5626] bridge_slave_1: entered allmulticast mode [ 79.195144][ T5626] bridge_slave_1: entered promiscuous mode [ 79.243445][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.251096][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.259603][ T5621] bridge_slave_0: entered allmulticast mode [ 79.266772][ T5621] bridge_slave_0: entered promiscuous mode [ 79.305112][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.313525][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.321789][ T5621] bridge_slave_1: entered allmulticast mode [ 79.329479][ T5621] bridge_slave_1: entered promiscuous mode [ 79.343937][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.359483][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.368190][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.375693][ T5619] bridge_slave_0: entered allmulticast mode [ 79.383290][ T5619] bridge_slave_0: entered promiscuous mode [ 79.411515][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.423278][ T5641] Bluetooth: hci4: command tx timeout [ 79.439357][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.446805][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.455143][ T5619] bridge_slave_1: entered allmulticast mode [ 79.462125][ T5619] bridge_slave_1: entered promiscuous mode [ 79.512478][ T5624] Bluetooth: hci2: command tx timeout [ 79.518874][ T4937] Bluetooth: hci1: command tx timeout [ 79.519616][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.525018][ T5634] Bluetooth: hci0: command tx timeout [ 79.535299][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.540728][ T5641] Bluetooth: hci3: command tx timeout [ 79.547126][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.547483][ T5618] bridge_slave_0: entered allmulticast mode [ 79.568173][ T5618] bridge_slave_0: entered promiscuous mode [ 79.586698][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.594247][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.601889][ T5620] bridge_slave_0: entered allmulticast mode [ 79.611373][ T5620] bridge_slave_0: entered promiscuous mode [ 79.631541][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.641433][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.649105][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.656616][ T5618] bridge_slave_1: entered allmulticast mode [ 79.663933][ T5618] bridge_slave_1: entered promiscuous mode [ 79.675054][ T5626] team0: Port device team_slave_0 added [ 79.680852][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.689255][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.696792][ T5620] bridge_slave_1: entered allmulticast mode [ 79.705065][ T5620] bridge_slave_1: entered promiscuous mode [ 79.715113][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.746341][ T5626] team0: Port device team_slave_1 added [ 79.772348][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.831132][ T5621] team0: Port device team_slave_0 added [ 79.840018][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.850837][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.858485][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.885876][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.900299][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.920464][ T5621] team0: Port device team_slave_1 added [ 79.928912][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.947591][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.954919][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.981641][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.994897][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.006420][ T5619] team0: Port device team_slave_0 added [ 80.047838][ T5619] team0: Port device team_slave_1 added [ 80.065448][ T5618] team0: Port device team_slave_0 added [ 80.074271][ T5618] team0: Port device team_slave_1 added [ 80.100015][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.107539][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.134277][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.147586][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.154641][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.181132][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.202752][ T5620] team0: Port device team_slave_0 added [ 80.247405][ T5620] team0: Port device team_slave_1 added [ 80.262079][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.269457][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.297371][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.324077][ T5626] hsr_slave_0: entered promiscuous mode [ 80.330999][ T5626] hsr_slave_1: entered promiscuous mode [ 80.338147][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.345601][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.373696][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.395312][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.403056][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.429676][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.459642][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.467134][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.494886][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.506990][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.514181][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.540924][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.564517][ T5621] hsr_slave_0: entered promiscuous mode [ 80.570764][ T5621] hsr_slave_1: entered promiscuous mode [ 80.577506][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 80.583425][ T5621] Cannot create hsr debugfs directory [ 80.597497][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.604531][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.631274][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.742849][ T5619] hsr_slave_0: entered promiscuous mode [ 80.749609][ T5619] hsr_slave_1: entered promiscuous mode [ 80.756072][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 80.762021][ T5619] Cannot create hsr debugfs directory [ 80.802132][ T5618] hsr_slave_0: entered promiscuous mode [ 80.808961][ T5618] hsr_slave_1: entered promiscuous mode [ 80.816159][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 80.821907][ T5618] Cannot create hsr debugfs directory [ 80.905592][ T5620] hsr_slave_0: entered promiscuous mode [ 80.912103][ T5620] hsr_slave_1: entered promiscuous mode [ 80.918936][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 80.924970][ T5620] Cannot create hsr debugfs directory [ 81.330068][ T5626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.342890][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.353924][ T5626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.367504][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.377589][ T5626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.387573][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.404534][ T5626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.414594][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.478102][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.488193][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.496124][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.504028][ T5634] Bluetooth: hci4: command tx timeout [ 81.513905][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.530756][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.542185][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.566121][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.577106][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.592572][ T4937] Bluetooth: hci1: command tx timeout [ 81.598283][ T5624] Bluetooth: hci2: command tx timeout [ 81.603895][ T5641] Bluetooth: hci3: command tx timeout [ 81.610028][ T5634] Bluetooth: hci0: command tx timeout [ 81.667167][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.678490][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.687631][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.698720][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.707135][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.716519][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.725076][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.734479][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.853796][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.865347][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.877004][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.896374][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.907685][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.918991][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.929383][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.947422][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.958714][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.039687][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.084284][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.095287][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.112044][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.119922][ T3314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.131469][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.141679][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.159330][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.169047][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.181699][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.195277][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.203269][ T3314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.214832][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.226603][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.269378][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.318813][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.356100][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.368536][ T3314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.390295][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.416373][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.425331][ T3314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.450965][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.458950][ T3314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.470808][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.478372][ T3314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.663479][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.778820][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.794690][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.816847][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.824436][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.856638][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.864036][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.956030][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.990540][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.998101][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.035387][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.042598][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.494047][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.583426][ T5641] Bluetooth: hci4: command tx timeout [ 83.663661][ T5641] Bluetooth: hci3: command tx timeout [ 83.669344][ T5641] Bluetooth: hci0: command tx timeout [ 83.675443][ T5634] Bluetooth: hci1: command tx timeout [ 83.681312][ T4937] Bluetooth: hci2: command tx timeout [ 83.799885][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.995426][ T5621] veth0_vlan: entered promiscuous mode [ 84.016445][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.066397][ T5621] veth1_vlan: entered promiscuous mode [ 84.247742][ T5619] veth0_vlan: entered promiscuous mode [ 84.258189][ T5621] veth0_macvtap: entered promiscuous mode [ 84.284862][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.305938][ T5621] veth1_macvtap: entered promiscuous mode [ 84.326128][ T5619] veth1_vlan: entered promiscuous mode [ 84.366421][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.435207][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.466125][ T5626] veth0_vlan: entered promiscuous mode [ 84.484023][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.516233][ T5619] veth0_macvtap: entered promiscuous mode [ 84.530988][ T134] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.541185][ T134] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.553079][ T5626] veth1_vlan: entered promiscuous mode [ 84.563627][ T5619] veth1_macvtap: entered promiscuous mode [ 84.577359][ T134] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.586640][ T134] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.627574][ T5620] veth0_vlan: entered promiscuous mode [ 84.640484][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.650778][ T5618] veth0_vlan: entered promiscuous mode [ 84.678034][ T5620] veth1_vlan: entered promiscuous mode [ 84.686974][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.735184][ T5618] veth1_vlan: entered promiscuous mode [ 84.749435][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.758916][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.788552][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.798131][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.830107][ T3314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.842696][ T3314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.850413][ T5626] veth0_macvtap: entered promiscuous mode [ 84.857127][ T5626] veth1_macvtap: entered promiscuous mode [ 84.949775][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.950999][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.957853][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.977592][ T5620] veth0_macvtap: entered promiscuous mode [ 84.994615][ T5618] veth0_macvtap: entered promiscuous mode [ 85.025987][ T5618] veth1_macvtap: entered promiscuous mode [ 85.046555][ T5620] veth1_macvtap: entered promiscuous mode [ 85.078383][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.081074][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.129125][ T3314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.133171][ T3282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.157873][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.172160][ T3282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.202183][ T3314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.223496][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.255556][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.267839][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.285688][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.347962][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.366447][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.401428][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.415682][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.437269][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.447706][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.469526][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.500458][ T5820] netlink: 'syz.1.6': attribute type 8 has an invalid length. [ 85.511626][ T5820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 85.537812][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.546849][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.564395][ T5820] bond0: entered promiscuous mode [ 85.569561][ T5820] bond_slave_0: entered promiscuous mode [ 85.576577][ T5820] bond_slave_1: entered promiscuous mode [ 85.589154][ T5820] gretap0: entered promiscuous mode [ 85.597285][ T5820] bond0: left promiscuous mode [ 85.603455][ T5820] bond_slave_0: left promiscuous mode [ 85.610686][ T5820] bond_slave_1: left promiscuous mode [ 85.619511][ T5820] gretap0: left promiscuous mode [ 85.651557][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.662722][ T4937] Bluetooth: hci4: command tx timeout [ 85.686411][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.736842][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.737305][ T5822] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 85.756408][ T4937] Bluetooth: hci2: command tx timeout [ 85.761864][ T5634] Bluetooth: hci1: command tx timeout [ 85.767695][ T4937] Bluetooth: hci0: command tx timeout [ 85.773458][ T5641] Bluetooth: hci3: command tx timeout [ 85.781084][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.796994][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.959545][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.972401][ T5826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 85.975707][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.030849][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.063605][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.101066][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.128802][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.263020][ T3314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.279290][ T3314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.373124][ T3314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.386702][ T3314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.769885][ T5848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 86.868298][ T5849] Zero length message leads to an empty skb [ 86.983801][ T5851] netlink: 'syz.3.4': attribute type 5 has an invalid length. [ 87.346459][ T5866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'. [ 87.803433][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22'. [ 89.215744][ T5891] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 89.260877][ T5891] veth1: entered promiscuous mode [ 89.279007][ T5891] veth1: entered allmulticast mode [ 89.335328][ T5891] macvlan2: entered promiscuous mode [ 89.353872][ T5891] macvlan2: entered allmulticast mode [ 89.438128][ T5902] syz.4.28 uses obsolete (PF_INET,SOCK_PACKET) [ 89.918879][ T5917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.35'. [ 89.961336][ T5917] netlink: 56 bytes leftover after parsing attributes in process `syz.1.35'. [ 90.174831][ T5932] netlink: 14 bytes leftover after parsing attributes in process `syz.1.40'. [ 90.600859][ T5944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.45'. [ 90.617843][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 90.778010][ T5957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.50'. [ 90.801656][ T5944] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 90.826327][ T5944] bond1 (unregistering): Released all slaves [ 90.928126][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.940128][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.970157][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 91.060472][ T5970] batadv0: entered promiscuous mode [ 91.095465][ T5970] macsec1: entered promiscuous mode [ 91.103646][ T5972] netlink: 128 bytes leftover after parsing attributes in process `syz.1.53'. [ 91.112133][ T5970] macsec1: entered allmulticast mode [ 91.132456][ T5970] batadv0: entered allmulticast mode [ 91.151158][ T5970] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 91.188042][ T5970] batadv0: left allmulticast mode [ 91.200698][ T5970] batadv0: left promiscuous mode [ 91.370108][ T5981] warning: `syz.1.57' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.470780][ T58] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.501552][ T58] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.519875][ T5992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.61'. [ 91.546177][ T58] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.577815][ T58] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.603265][ T5996] xt_hashlimit: max too large, truncated to 1048576 [ 91.734731][ T6002] netlink: 44 bytes leftover after parsing attributes in process `syz.4.65'. [ 91.792987][ T6002] netlink: 44 bytes leftover after parsing attributes in process `syz.4.65'. [ 91.909022][ T6007] netlink: 'syz.3.68': attribute type 13 has an invalid length. [ 92.004610][ T29] cfg80211: failed to load regulatory.db [ 92.138365][ T6031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.295206][ T6038] netlink: 40 bytes leftover after parsing attributes in process `syz.1.78'. [ 92.405220][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 92.447753][ T6042] batadv0: entered promiscuous mode [ 92.460451][ T6042] macsec1: entered promiscuous mode [ 92.478852][ T6042] macsec1: entered allmulticast mode [ 92.492982][ T6042] batadv0: entered allmulticast mode [ 92.511781][ T6042] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 92.540412][ T6042] batadv0: left allmulticast mode [ 92.555831][ T6042] batadv0: left promiscuous mode [ 94.789777][ T6015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.568759][ T6113] netlink: 'syz.2.95': attribute type 6 has an invalid length. [ 95.742184][ T6119] xt_hashlimit: max too large, truncated to 1048576 [ 98.201328][ T6086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.438272][ T6133] __nla_validate_parse: 7 callbacks suppressed [ 98.438290][ T6133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.103'. [ 98.497743][ T6133] ip6gre1: entered promiscuous mode [ 98.510784][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 98.518416][ T6133] ip6gre1: entered allmulticast mode [ 98.557781][ T6134] netlink: 104 bytes leftover after parsing attributes in process `syz.2.100'. [ 98.612440][ T6146] vlan2: entered promiscuous mode [ 98.623185][ T6146] syz_tun: entered promiscuous mode [ 98.636732][ T6146] vlan2: entered allmulticast mode [ 98.660473][ T6146] syz_tun: entered allmulticast mode [ 98.722700][ T6149] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 99.336336][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 99.381519][ T6163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.111'. [ 99.472137][ T6175] dvmrp0: entered allmulticast mode [ 99.505992][ T6179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.116'. [ 99.736505][ T6179] ip6gre1: entered promiscuous mode [ 99.752036][ T6179] ip6gre1: entered allmulticast mode [ 99.963884][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 100.353369][ T6212] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 100.816828][ T6237] IPv6: sit1: Disabled Multicast RS [ 100.891021][ T6239] syzkaller0: entered promiscuous mode [ 100.903941][ T6239] syzkaller0: entered allmulticast mode [ 101.064094][ T6246] xt_hashlimit: max too large, truncated to 1048576 [ 101.161177][ T6248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.139'. [ 101.240845][ T6255] netlink: 76 bytes leftover after parsing attributes in process `syz.4.143'. [ 101.543950][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 101.727158][ T6266] netlink: 'syz.3.147': attribute type 2 has an invalid length. [ 101.785396][ T6274] ip6gre1: entered promiscuous mode [ 101.800548][ T6274] ip6gre1: entered allmulticast mode [ 101.878336][ T6266] þ: entered promiscuous mode [ 101.921240][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.240899][ T6294] xt_hashlimit: max too large, truncated to 1048576 [ 102.686344][ T6306] netlink: 'syz.4.163': attribute type 2 has an invalid length. [ 103.237692][ T6335] ip6gre1: entered promiscuous mode [ 103.258899][ T6335] ip6gre1: entered allmulticast mode [ 103.340916][ T6336] syz.2.173 (6336) used greatest stack depth: 19488 bytes left [ 103.504604][ T6344] __nla_validate_parse: 2 callbacks suppressed [ 103.504622][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.177'. [ 103.559454][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'. [ 103.580962][ T6344] netlink: 56 bytes leftover after parsing attributes in process `syz.3.177'. [ 103.996598][ T6360] netlink: 104 bytes leftover after parsing attributes in process `syz.1.181'. [ 104.145665][ T6369] netlink: 36 bytes leftover after parsing attributes in process `syz.3.183'. [ 104.257815][ T6378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.183'. [ 104.321991][ T6381] netlink: 'syz.0.187': attribute type 1 has an invalid length. [ 104.338199][ T6379] erspan0: entered promiscuous mode [ 104.347165][ T6375] netlink: 104 bytes leftover after parsing attributes in process `syz.1.185'. [ 104.367568][ T6379] vlan2: entered promiscuous mode [ 104.449655][ T6381] bond1: option mode: invalid value (7) [ 104.458744][ T6381] bond1 (unregistering): Released all slaves [ 104.474673][ T6393] FAULT_INJECTION: forcing a failure. [ 104.474673][ T6393] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.489478][ T6393] CPU: 0 UID: 0 PID: 6393 Comm: syz.1.189 Not tainted syzkaller #0 PREEMPT(full) [ 104.489500][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 104.489516][ T6393] Call Trace: [ 104.489523][ T6393] [ 104.489529][ T6393] dump_stack_lvl+0xe8/0x150 [ 104.489580][ T6393] should_fail_ex+0x40c/0x560 [ 104.489603][ T6393] _copy_from_user+0x2d/0xb0 [ 104.489619][ T6393] ___sys_sendmsg+0x1c6/0x360 [ 104.489635][ T6393] ? __lock_acquire+0x683/0x2cf0 [ 104.489662][ T6393] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.489707][ T6393] ? __fget_files+0x2a/0x420 [ 104.489730][ T6393] ? __fget_files+0x3a2/0x420 [ 104.489767][ T6393] __x64_sys_sendmsg+0x1b1/0x290 [ 104.489787][ T6393] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.489819][ T6393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.489836][ T6393] do_syscall_64+0x174/0x580 [ 104.489854][ T6393] ? trace_irq_disable+0x3b/0x140 [ 104.489875][ T6393] ? clear_bhb_loop+0x40/0x90 [ 104.489895][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.489910][ T6393] RIP: 0033:0x7f011f99de99 [ 104.489931][ T6393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.489943][ T6393] RSP: 002b:00007f01208e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.489963][ T6393] RAX: ffffffffffffffda RBX: 00007f011fc25fa0 RCX: 00007f011f99de99 [ 104.489974][ T6393] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 104.489984][ T6393] RBP: 00007f01208e4090 R08: 0000000000000000 R09: 0000000000000000 [ 104.489993][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.490002][ T6393] R13: 00007f011fc26038 R14: 00007f011fc25fa0 R15: 00007fffc6314148 [ 104.490026][ T6393] [ 104.700725][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 104.721174][ T6391] : renamed from dummy0 [ 104.748172][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.191'. [ 104.784507][ T6394] bond1: entered promiscuous mode [ 104.790375][ T6394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.826690][ T6399] netlink: 56 bytes leftover after parsing attributes in process `syz.1.191'. [ 104.836573][ T6403] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 105.193671][ T6413] netlink: 'syz.3.197': attribute type 2 has an invalid length. [ 105.496105][ T6434] bond1: entered promiscuous mode [ 105.505398][ T6434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.559070][ T6449] netlink: 'syz.3.202': attribute type 4 has an invalid length. [ 105.684118][ T6432] bond1: entered promiscuous mode [ 105.689916][ T6432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.987841][ T6456] bond1: entered promiscuous mode [ 106.016818][ T6456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.751581][ T6500] netlink: 'syz.0.212': attribute type 2 has an invalid length. [ 107.145528][ T6538] FAULT_INJECTION: forcing a failure. [ 107.145528][ T6538] name failslab, interval 1, probability 0, space 0, times 0 [ 107.204123][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.3.222 Not tainted syzkaller #0 PREEMPT(full) [ 107.204145][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 107.204153][ T6538] Call Trace: [ 107.204159][ T6538] [ 107.204165][ T6538] dump_stack_lvl+0xe8/0x150 [ 107.204192][ T6538] should_fail_ex+0x40c/0x560 [ 107.204215][ T6538] should_failslab+0xa8/0x100 [ 107.204240][ T6538] __kmalloc_noprof+0xfe/0x720 [ 107.204259][ T6538] ? sock_kmalloc+0xd6/0x160 [ 107.204274][ T6538] ? sock_kmalloc+0xd6/0x160 [ 107.204294][ T6538] sock_kmalloc+0xd6/0x160 [ 107.204312][ T6538] ____sys_sendmsg+0x1be/0x850 [ 107.204334][ T6538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.204357][ T6538] ? import_iovec+0x73/0xa0 [ 107.204384][ T6538] ___sys_sendmsg+0x2a5/0x360 [ 107.204400][ T6538] ? __lock_acquire+0x683/0x2cf0 [ 107.204426][ T6538] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.204478][ T6538] ? __fget_files+0x2a/0x420 [ 107.204499][ T6538] ? __fget_files+0x3a2/0x420 [ 107.204529][ T6538] __x64_sys_sendmsg+0x1b1/0x290 [ 107.204552][ T6538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.204588][ T6538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.204607][ T6538] do_syscall_64+0x174/0x580 [ 107.204628][ T6538] ? trace_irq_disable+0x3b/0x140 [ 107.204652][ T6538] ? clear_bhb_loop+0x40/0x90 [ 107.204674][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.204701][ T6538] RIP: 0033:0x7f524599de99 [ 107.204723][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.204738][ T6538] RSP: 002b:00007f5246840028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.204757][ T6538] RAX: ffffffffffffffda RBX: 00007f5245c25fa0 RCX: 00007f524599de99 [ 107.204771][ T6538] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 107.204782][ T6538] RBP: 00007f5246840090 R08: 0000000000000000 R09: 0000000000000000 [ 107.204793][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.204804][ T6538] R13: 00007f5245c26038 R14: 00007f5245c25fa0 R15: 00007ffcc4055938 [ 107.204834][ T6538] [ 107.571098][ T6539] bond2: entered promiscuous mode [ 107.577435][ T6539] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.696502][ T6549] syzkaller0: entered promiscuous mode [ 107.705211][ T6549] syzkaller0: entered allmulticast mode [ 107.788847][ T6559] trusted_key: syz.1.229 sent an empty control message without MSG_MORE. [ 107.941015][ T6559] macsec1: entered promiscuous mode [ 108.178939][ T6580] FAULT_INJECTION: forcing a failure. [ 108.178939][ T6580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.247425][ T6580] CPU: 0 UID: 0 PID: 6580 Comm: syz.0.237 Not tainted syzkaller #0 PREEMPT(full) [ 108.247454][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 108.247465][ T6580] Call Trace: [ 108.247474][ T6580] [ 108.247482][ T6580] dump_stack_lvl+0xe8/0x150 [ 108.247515][ T6580] should_fail_ex+0x40c/0x560 [ 108.247544][ T6580] _copy_from_user+0x2d/0xb0 [ 108.247564][ T6580] ____sys_sendmsg+0x303/0x850 [ 108.247594][ T6580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.247625][ T6580] ? import_iovec+0x73/0xa0 [ 108.247658][ T6580] ___sys_sendmsg+0x2a5/0x360 [ 108.247679][ T6580] ? __lock_acquire+0x683/0x2cf0 [ 108.247710][ T6580] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.247764][ T6580] ? __fget_files+0x2a/0x420 [ 108.247789][ T6580] ? __fget_files+0x3a2/0x420 [ 108.247824][ T6580] __x64_sys_sendmsg+0x1b1/0x290 [ 108.247847][ T6580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.247884][ T6580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.247905][ T6580] do_syscall_64+0x174/0x580 [ 108.247931][ T6580] ? clear_bhb_loop+0x40/0x90 [ 108.247954][ T6580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.247974][ T6580] RIP: 0033:0x7fb6e9f9de99 [ 108.247991][ T6580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.248006][ T6580] RSP: 002b:00007fb6eaf30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.248030][ T6580] RAX: ffffffffffffffda RBX: 00007fb6ea225fa0 RCX: 00007fb6e9f9de99 [ 108.248043][ T6580] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 108.248056][ T6580] RBP: 00007fb6eaf30090 R08: 0000000000000000 R09: 0000000000000000 [ 108.248067][ T6580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.248078][ T6580] R13: 00007fb6ea226038 R14: 00007fb6ea225fa0 R15: 00007ffea5be0938 [ 108.248109][ T6580] [ 108.590218][ T6589] __nla_validate_parse: 13 callbacks suppressed [ 108.590236][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 108.590323][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.240'. [ 108.604509][ T6589] netlink: 'syz.2.239': attribute type 17 has an invalid length. [ 108.636530][ T6589] netlink: 52 bytes leftover after parsing attributes in process `syz.2.239'. [ 108.653186][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.663415][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.714386][ T6585] bond3: entered promiscuous mode [ 108.721011][ T6585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.864498][ T6601] bridge1: entered promiscuous mode [ 108.870134][ T6601] bridge1: entered allmulticast mode [ 108.894638][ T6601] team0: Port device bridge1 added [ 108.919859][ T6601] bridge0: port 3(team0) entered blocking state [ 108.940551][ T6601] bridge0: port 3(team0) entered disabled state [ 108.954059][ T6601] team0: entered allmulticast mode [ 108.977266][ T6601] team_slave_0: entered allmulticast mode [ 109.002028][ T6601] team_slave_1: entered allmulticast mode [ 109.052881][ T6601] team0: entered promiscuous mode [ 109.058938][ T6601] team_slave_0: entered promiscuous mode [ 109.074581][ T6601] team_slave_1: entered promiscuous mode [ 109.099149][ T6601] bridge0: port 3(team0) entered blocking state [ 109.106770][ T6601] bridge0: port 3(team0) entered forwarding state [ 109.162961][ T6605] syzkaller0: entered promiscuous mode [ 109.176683][ T6605] syzkaller0: entered allmulticast mode [ 109.283910][ T6628] netlink: 'syz.4.250': attribute type 8 has an invalid length. [ 109.312869][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 109.345384][ T6628] bond0: entered promiscuous mode [ 109.350576][ T6628] bond_slave_0: entered promiscuous mode [ 109.374653][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 109.379238][ T6628] bond_slave_1: entered promiscuous mode [ 109.398222][ T6635] xt_hashlimit: max too large, truncated to 1048576 [ 109.418982][ T6628] gretap0: entered promiscuous mode [ 109.443927][ T6628] bond0: left promiscuous mode [ 109.459078][ T6628] bond_slave_0: left promiscuous mode [ 109.477457][ T6628] bond_slave_1: left promiscuous mode [ 109.500480][ T6641] netlink: 76 bytes leftover after parsing attributes in process `syz.3.255'. [ 109.511800][ T6628] gretap0: left promiscuous mode [ 109.534557][ T6633] veth1_macvtap: left promiscuous mode [ 109.689132][ T6647] pim6reg1: entered promiscuous mode [ 109.703829][ T6647] pim6reg1: entered allmulticast mode [ 109.786657][ T6653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.867530][ T6658] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 110.091771][ T6671] netlink: 'syz.1.267': attribute type 2 has an invalid length. [ 110.117119][ T6669] netlink: 104 bytes leftover after parsing attributes in process `syz.4.266'. [ 110.153059][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 110.173744][ T6663] syzkaller0: entered promiscuous mode [ 110.186080][ T6663] syzkaller0: entered allmulticast mode [ 110.205784][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.268'. [ 110.249154][ T6671] netlink: 44 bytes leftover after parsing attributes in process `syz.1.267'. [ 110.277704][ T6671] syzkaller1: entered promiscuous mode [ 110.293533][ T6671] syzkaller1: entered allmulticast mode [ 110.430025][ T6683] netlink: 'syz.2.271': attribute type 8 has an invalid length. [ 110.430225][ T6682] xt_hashlimit: max too large, truncated to 1048576 [ 110.445140][ T6683] bond0: entered promiscuous mode [ 110.451388][ T6683] bond_slave_0: entered promiscuous mode [ 110.459279][ T6683] bond_slave_1: entered promiscuous mode [ 110.467602][ T6683] gretap0: entered promiscuous mode [ 110.488517][ T6683] bond0: left promiscuous mode [ 110.493991][ T6683] bond_slave_0: left promiscuous mode [ 110.502629][ T6683] bond_slave_1: left promiscuous mode [ 110.522928][ T6683] gretap0: left promiscuous mode [ 110.723193][ T6691] netlink: 'syz.1.275': attribute type 8 has an invalid length. [ 110.758287][ T6691] bond0: entered promiscuous mode [ 110.772364][ T6691] bond_slave_0: entered promiscuous mode [ 110.779744][ T6691] bond_slave_1: entered promiscuous mode [ 110.799205][ T6691] gretap0: entered promiscuous mode [ 110.829962][ T6691] bond0: left promiscuous mode [ 110.842865][ T6691] bond_slave_0: left promiscuous mode [ 110.857348][ T6691] bond_slave_1: left promiscuous mode [ 110.874045][ T6691] gretap0: left promiscuous mode [ 111.389578][ T6719] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 111.888136][ T6702] syz.2.280 (6702) used greatest stack depth: 18312 bytes left [ 112.133509][ T6752] netlink: 'syz.4.294': attribute type 8 has an invalid length. [ 112.158913][ T6752] bond0: entered promiscuous mode [ 112.164352][ T6752] bond_slave_0: entered promiscuous mode [ 112.170724][ T6752] bond_slave_1: entered promiscuous mode [ 112.178598][ T6752] gretap0: entered promiscuous mode [ 112.186232][ T6752] bond0: left promiscuous mode [ 112.191116][ T6752] bond_slave_0: left promiscuous mode [ 112.197072][ T6752] bond_slave_1: left promiscuous mode [ 112.204452][ T6752] gretap0: left promiscuous mode [ 112.452580][ T6734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.720973][ T6768] syzkaller0: entered promiscuous mode [ 112.746921][ T6768] syzkaller0: entered allmulticast mode [ 113.291325][ T6804] macsec1: entered promiscuous mode [ 113.536739][ T6814] sctp: [Deprecated]: syz.2.316 (pid 6814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.536739][ T6814] Use struct sctp_sack_info instead [ 113.594626][ T6814] sctp: [Deprecated]: syz.2.316 (pid 6814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.594626][ T6814] Use struct sctp_sack_info instead [ 113.608360][ T6819] syzkaller0: entered promiscuous mode [ 113.635319][ T6819] syzkaller0: entered allmulticast mode [ 113.956263][ T6834] __nla_validate_parse: 10 callbacks suppressed [ 113.956283][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 114.024190][ T6834] bond2: entered promiscuous mode [ 114.030215][ T6834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.062184][ T6843] netlink: 56 bytes leftover after parsing attributes in process `syz.0.327'. [ 114.249387][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 114.346064][ T6849] bond1: entered promiscuous mode [ 114.353512][ T6849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.414369][ T6866] syzkaller0: entered promiscuous mode [ 114.446132][ T6866] syzkaller0: entered allmulticast mode [ 114.470121][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 114.741940][ T6882] netlink: 56 bytes leftover after parsing attributes in process `syz.3.342'. [ 114.769019][ T6888] netlink: 124 bytes leftover after parsing attributes in process `syz.1.344'. [ 114.873984][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'. [ 115.070083][ T6902] bond4: (slave macvlan1): Enslaving as an active interface with an up link [ 115.107084][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.348'. [ 115.182753][ T6895] bond4 (unregistering): (slave macvlan1): Releasing backup interface [ 115.208442][ T6895] bond4 (unregistering): Released all slaves [ 115.236878][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 115.255352][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 115.327874][ T6901] bond2: entered promiscuous mode [ 115.338495][ T6901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.390855][ T6920] syzkaller0: entered promiscuous mode [ 115.417044][ T6920] syzkaller0: entered allmulticast mode [ 115.619676][ T6934] vlan0: entered promiscuous mode [ 115.791053][ T6946] netlink: 'syz.3.363': attribute type 8 has an invalid length. [ 115.844005][ T6946] bond0: entered promiscuous mode [ 115.869013][ T6946] bond_slave_0: entered promiscuous mode [ 115.889998][ T6946] bond_slave_1: entered promiscuous mode [ 115.914569][ T6946] gretap0: entered promiscuous mode [ 116.009857][ T6946] bond0: left promiscuous mode [ 116.015413][ T6946] bond_slave_0: left promiscuous mode [ 116.021810][ T6946] bond_slave_1: left promiscuous mode [ 116.033710][ T6946] gretap0: left promiscuous mode [ 116.209870][ T6954] bond3: entered promiscuous mode [ 116.216088][ T6954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 116.557889][ T6985] netlink: 'syz.3.375': attribute type 1 has an invalid length. [ 116.573771][ T6985] netlink: 'syz.3.375': attribute type 2 has an invalid length. [ 117.137227][ T7005] bond4: entered promiscuous mode [ 117.148876][ T7005] 8021q: adding VLAN 0 to HW filter on device bond4 [ 117.789743][ T7056] wg2: entered allmulticast mode [ 118.076670][ T7064] bond2: entered promiscuous mode [ 118.100127][ T7064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.182745][ T7071] netlink: zone id is out of range [ 118.209508][ T7071] netlink: get zone limit has 4 unknown bytes [ 118.859898][ T7099] netlink: 'syz.3.411': attribute type 2 has an invalid length. [ 118.926992][ T7100] bond5: entered promiscuous mode [ 118.957016][ T7100] 8021q: adding VLAN 0 to HW filter on device bond5 [ 119.372380][ T7128] syzkaller0: entered promiscuous mode [ 119.379584][ T7128] syzkaller0: entered allmulticast mode [ 119.573631][ T7134] __nla_validate_parse: 18 callbacks suppressed [ 119.573650][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 119.645533][ T7134] 8021q: adding VLAN 0 to HW filter on device bond4 [ 119.680713][ T7139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.423'. [ 119.787236][ T7146] xt_hashlimit: max too large, truncated to 1048576 [ 119.989376][ T7156] netlink: 10 bytes leftover after parsing attributes in process `syz.2.430'. [ 120.188046][ T7163] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 120.230463][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 120.258426][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.435'. [ 120.795137][ T7178] xt_hashlimit: max too large, truncated to 1048576 [ 121.033052][ T7182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.440'. [ 121.404494][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.444'. [ 121.532822][ T7203] sctp: [Deprecated]: syz.2.445 (pid 7203) Use of int in max_burst socket option. [ 121.532822][ T7203] Use struct sctp_assoc_value instead [ 121.560804][ T7187] syzkaller0: entered promiscuous mode [ 121.575503][ T7187] syzkaller0: entered allmulticast mode [ 121.669953][ T7213] netlink: 104 bytes leftover after parsing attributes in process `syz.0.448'. [ 121.694740][ T7201] bond5: entered promiscuous mode [ 121.701845][ T7201] 8021q: adding VLAN 0 to HW filter on device bond5 [ 121.924847][ T7224] xt_hashlimit: max too large, truncated to 1048576 [ 122.009619][ T7231] netlink: 56 bytes leftover after parsing attributes in process `syz.2.453'. [ 122.035279][ T7232] netlink: 'syz.4.452': attribute type 14 has an invalid length. [ 122.055667][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 123.687842][ T7232] netlink: 'syz.4.452': attribute type 14 has an invalid length. [ 123.696064][ T1020] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.724426][ T1020] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.763112][ T1020] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.796373][ T1020] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.197579][ T7262] bond6: entered promiscuous mode [ 124.204127][ T7262] 8021q: adding VLAN 0 to HW filter on device bond6 [ 124.293010][ T7272] bond2: entered promiscuous mode [ 124.315288][ T7272] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.601721][ T7283] syzkaller0: entered promiscuous mode [ 124.609234][ T7283] syzkaller0: entered allmulticast mode [ 124.898836][ T7294] __nla_validate_parse: 6 callbacks suppressed [ 124.898855][ T7294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.469'. [ 124.918830][ T5623] block nbd64: NBD_DISCONNECT [ 124.958717][ T7294] nbd: nbd64 already in use [ 125.336879][ T7319] netlink: 104 bytes leftover after parsing attributes in process `syz.4.475'. [ 125.539839][ T5623] udevd[5623]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 125.588390][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'. [ 125.781109][ T7334] xt_hashlimit: size too large, truncated to 1048576 [ 127.224707][ T7325] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 127.407615][ T7345] xt_NFQUEUE: number of total queues is 0 [ 127.486675][ T7345] netlink: 'syz.1.484': attribute type 30 has an invalid length. [ 127.496876][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 127.506341][ T7350] netlink: 76 bytes leftover after parsing attributes in process `syz.2.487'. [ 127.717368][ T7359] netlink: 104 bytes leftover after parsing attributes in process `syz.0.489'. [ 127.751122][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 127.916036][ T7362] bond3: entered promiscuous mode [ 127.926351][ T7362] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.937792][ T7373] netlink: 'syz.0.495': attribute type 12 has an invalid length. [ 127.961027][ T7373] netlink: 'syz.0.495': attribute type 29 has an invalid length. [ 127.973688][ T7373] netlink: 148 bytes leftover after parsing attributes in process `syz.0.495'. [ 127.986334][ T7373] netlink: 59 bytes leftover after parsing attributes in process `syz.0.495'. [ 128.096937][ T7373] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 128.181111][ T7380] raw_sendmsg: syz.1.497 forgot to set AF_INET. Fix it! [ 128.191636][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 129.021465][ T7409] bond3: entered promiscuous mode [ 129.050562][ T7409] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.535904][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.745286][ T7426] veth1: left promiscuous mode [ 129.770472][ T7426] veth1: left allmulticast mode [ 129.796293][ T7426] wg2: left allmulticast mode [ 129.913829][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.938837][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.178335][ T7426] ip6gre1: left promiscuous mode [ 130.184746][ T7426] ip6gre1: left allmulticast mode [ 130.191969][ T7426] bond1: left promiscuous mode [ 130.202927][ T7426] macsec1: left promiscuous mode [ 130.211090][ T7426] bond2: left promiscuous mode [ 130.224235][ T7426] bond3: left promiscuous mode [ 130.230289][ T7426] bond4: left promiscuous mode [ 130.245826][ T7426] bond5: left promiscuous mode [ 130.252161][ T7426] bond6: left promiscuous mode [ 130.259786][ T7424] syzkaller0: entered promiscuous mode [ 130.269311][ T7424] syzkaller0: entered allmulticast mode [ 130.332976][ T7452] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 130.334035][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.361364][ T7452] __nla_validate_parse: 3 callbacks suppressed [ 130.361379][ T7452] netlink: 224 bytes leftover after parsing attributes in process `syz.0.517'. [ 130.373688][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.420074][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.437856][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.447585][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.458377][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.534835][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.548518][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.576525][ T7457] netlink: 104 bytes leftover after parsing attributes in process `syz.2.518'. [ 130.635302][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.519'. [ 130.731668][ T7460] bond4: entered promiscuous mode [ 130.747781][ T7460] 8021q: adding VLAN 0 to HW filter on device bond4 [ 130.825722][ T7473] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 130.939908][ T7478] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 131.090159][ T7478] 8021q: adding VLAN 0 to HW filter on device bond7 [ 131.210842][ T7482] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 131.259853][ T7487] bond7: entered promiscuous mode [ 131.286377][ T7496] netlink: 104 bytes leftover after parsing attributes in process `syz.3.531'. [ 131.298900][ T7487] bond7: entered allmulticast mode [ 131.368170][ T7478] macvlan2: entered promiscuous mode [ 131.380946][ T7478] macvlan2: entered allmulticast mode [ 131.399165][ T7478] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.504700][ T7500] vlan2: entered promiscuous mode [ 131.523642][ T7500] bridge0: entered promiscuous mode [ 131.609582][ T7501] ip6gretap0: entered promiscuous mode [ 131.669160][ T7503] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 132.629058][ T7555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.684909][ T7555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.549'. [ 132.844888][ T7563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.894331][ T7555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.947301][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.959210][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.029895][ T7572] netlink: 40 bytes leftover after parsing attributes in process `syz.0.556'. [ 133.616565][ T7587] IPVS: set_ctl: invalid protocol: 192 0.32.0.0:18432 [ 133.718770][ T7591] ip6gre2: entered promiscuous mode [ 133.724932][ T7591] ip6gre2: entered allmulticast mode [ 133.920329][ T7596] FAULT_INJECTION: forcing a failure. [ 133.920329][ T7596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.936253][ T7596] CPU: 1 UID: 0 PID: 7596 Comm: syz.2.567 Not tainted syzkaller #0 PREEMPT(full) [ 133.936287][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 133.936297][ T7596] Call Trace: [ 133.936304][ T7596] [ 133.936311][ T7596] dump_stack_lvl+0xe8/0x150 [ 133.936342][ T7596] should_fail_ex+0x40c/0x560 [ 133.936370][ T7596] _copy_from_user+0x2d/0xb0 [ 133.936390][ T7596] btf_new_fd+0x301/0xbb0 [ 133.936414][ T7596] __sys_bpf+0xd2e/0xd90 [ 133.936445][ T7596] ? __pfx___sys_bpf+0x10/0x10 [ 133.936478][ T7596] ? __fget_files+0x2a/0x420 [ 133.936518][ T7596] ? ksys_write+0x242/0x270 [ 133.936538][ T7596] ? __pfx_ksys_write+0x10/0x10 [ 133.936559][ T7596] __x64_sys_bpf+0xba/0xd0 [ 133.936580][ T7596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.936600][ T7596] do_syscall_64+0x174/0x580 [ 133.936622][ T7596] ? trace_irq_disable+0x3b/0x140 [ 133.936646][ T7596] ? clear_bhb_loop+0x40/0x90 [ 133.936665][ T7596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.936683][ T7596] RIP: 0033:0x7f45e159de99 [ 133.936700][ T7596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.936715][ T7596] RSP: 002b:00007f45e24aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.936734][ T7596] RAX: ffffffffffffffda RBX: 00007f45e1825fa0 RCX: 00007f45e159de99 [ 133.936746][ T7596] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 133.936756][ T7596] RBP: 00007f45e24aa090 R08: 0000000000000000 R09: 0000000000000000 [ 133.936766][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.936775][ T7596] R13: 00007f45e1826038 R14: 00007f45e1825fa0 R15: 00007ffe003fadc8 [ 133.936809][ T7596] [ 134.178795][ T7606] netlink: 68 bytes leftover after parsing attributes in process `syz.3.568'. [ 134.397212][ T7617] netlink: 76 bytes leftover after parsing attributes in process `syz.3.572'. [ 134.426214][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.571'. [ 134.605825][ T7614] bond3: entered promiscuous mode [ 134.614726][ T7614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.703282][ T7628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.576'. [ 134.915140][ T7641] netlink: 'syz.0.579': attribute type 7 has an invalid length. [ 134.945642][ T7641] netlink: 'syz.0.579': attribute type 8 has an invalid length. [ 134.979343][ T7641] netlink: 'syz.0.579': attribute type 1 has an invalid length. [ 135.896651][ T7664] __nla_validate_parse: 8 callbacks suppressed [ 135.896671][ T7664] netlink: 550 bytes leftover after parsing attributes in process `syz.2.584'. [ 137.523331][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'. [ 137.650980][ T7668] netlink: 'syz.2.586': attribute type 32 has an invalid length. [ 137.748016][ T7670] syzkaller0: entered promiscuous mode [ 137.779787][ T7670] syzkaller0: entered allmulticast mode [ 138.189431][ T7695] netlink: 128 bytes leftover after parsing attributes in process `syz.0.595'. [ 138.410835][ T7705] xt_hashlimit: max too large, truncated to 1048576 [ 138.574441][ T7713] netlink: 'syz.1.601': attribute type 3 has an invalid length. [ 138.617532][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'. [ 138.639867][ T7715] bridge0: port 4(ip6gretap0) entered blocking state [ 138.655408][ T7715] bridge0: port 4(ip6gretap0) entered disabled state [ 138.674768][ T7715] ip6gretap0: entered allmulticast mode [ 138.683359][ T7715] ip6gretap0: entered promiscuous mode [ 138.690071][ T7715] bridge0: port 4(ip6gretap0) entered blocking state [ 138.696976][ T7715] bridge0: port 4(ip6gretap0) entered forwarding state [ 139.008129][ T7743] netdevsim netdevsim3 €Â: renamed from netdevsim0 (while UP) [ 139.104352][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 139.141036][ T7746] netlink: 36 bytes leftover after parsing attributes in process `syz.2.608'. [ 139.161431][ T7746] netlink: 128 bytes leftover after parsing attributes in process `syz.2.608'. [ 139.316463][ T7753] netlink: 104 bytes leftover after parsing attributes in process `syz.4.610'. [ 139.573250][ T7765] tipc: Started in network mode [ 139.596386][ T7765] tipc: Node identity , cluster identity 4711 [ 139.606754][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'. [ 139.628389][ T7765] tipc: Failed to obtain node identity [ 139.647598][ T7765] tipc: Enabling of bearer rejected, failed to enable media [ 139.757280][ T7784] netlink: 5 bytes leftover after parsing attributes in process `syz.1.615'. [ 139.889489][ T7765] netlink: 'syz.1.615': attribute type 4 has an invalid length. [ 140.295240][ T7810] xt_hashlimit: max too large, truncated to 1048576 [ 140.721173][ T7826] bond9: invalid ARP target 0.0.0.0 specified for addition [ 140.730273][ T7826] bond9: option arp_ip_target: invalid value (0) [ 140.743870][ T7826] bond9 (unregistering): Released all slaves [ 140.903863][ T7841] __nla_validate_parse: 5 callbacks suppressed [ 140.903881][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 140.952417][ T7841] netlink: 88 bytes leftover after parsing attributes in process `syz.2.640'. [ 140.984398][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'. [ 140.995167][ T7847] xt_hashlimit: max too large, truncated to 1048576 [ 141.027571][ T7845] bond4: entered promiscuous mode [ 141.033549][ T7845] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.047844][ T7850] netlink: 164 bytes leftover after parsing attributes in process `syz.1.644'. [ 141.060832][ T7853] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 141.083949][ T7850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.644'. [ 141.093954][ T7851] bridge1: entered promiscuous mode [ 141.100999][ T7851] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 141.126125][ T7850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.197721][ T7850] netlink: 164 bytes leftover after parsing attributes in process `syz.1.644'. [ 141.226289][ T7850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.644'. [ 141.400312][ T7868] netlink: 32 bytes leftover after parsing attributes in process `syz.2.650'. [ 141.414395][ T7868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.438809][ T7868] syzkaller1: entered promiscuous mode [ 141.445812][ T7868] syzkaller1: entered allmulticast mode [ 141.467531][ T7868] netlink: 36 bytes leftover after parsing attributes in process `syz.2.650'. [ 141.487490][ T7868] netlink: 36 bytes leftover after parsing attributes in process `syz.2.650'. [ 141.664094][ T7881] syzkaller0: entered promiscuous mode [ 141.671534][ T7881] syzkaller0: entered allmulticast mode [ 141.843203][ T7893] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 142.124908][ T7901] tipc: Started in network mode [ 142.129947][ T7901] tipc: Node identity ac14140f, cluster identity 4711 [ 142.147101][ T7901] tipc: New replicast peer: 255.255.255.255 [ 142.153785][ T7906] netlink: 'syz.2.662': attribute type 1 has an invalid length. [ 142.164020][ T7901] tipc: Enabled bearer , priority 10 [ 142.187264][ T7906] bond4: entered promiscuous mode [ 142.193387][ T7906] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.257380][ T7901] bond4: entered allmulticast mode [ 142.298540][ T7901] bond4: (slave bridge1): making interface the new active one [ 142.310139][ T7901] bridge1: entered promiscuous mode [ 142.318492][ T7901] bridge1: entered allmulticast mode [ 142.327794][ T7901] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 142.347534][ T7911] geneve2: entered allmulticast mode [ 142.542993][ T7915] ip6gre3: entered promiscuous mode [ 142.551833][ T7915] ip6gre3: entered allmulticast mode [ 142.576632][ T7732] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 142.599409][ T7915] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 142.614289][ T7732] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 142.624136][ T5725] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 142.751173][ T7925] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 142.837193][ T7926] syzkaller0: entered promiscuous mode [ 142.850717][ T7926] syzkaller0: entered allmulticast mode [ 143.212980][ T5725] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 143.306455][ T187] tipc: Node number set to 2886997007 [ 143.400993][ T7954] netlink: 'syz.1.682': attribute type 1 has an invalid length. [ 143.426313][ T187] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 143.547545][ T7954] 8021q: adding VLAN 0 to HW filter on device bond9 [ 143.560328][ T7932] veth1_to_hsr: entered allmulticast mode [ 143.566864][ T7959] bond9: entered promiscuous mode [ 143.621246][ T7969] bond9: (slave dummy0): making interface the new active one [ 143.643920][ T7969] dummy0: entered promiscuous mode [ 143.656643][ T7969] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 144.185459][ T7984] team0: Port device team_slave_0 removed [ 144.301497][ T8006] FAULT_INJECTION: forcing a failure. [ 144.301497][ T8006] name failslab, interval 1, probability 0, space 0, times 0 [ 144.319368][ T8006] CPU: 0 UID: 0 PID: 8006 Comm: syz.4.697 Not tainted syzkaller #0 PREEMPT(full) [ 144.319398][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 144.319407][ T8006] Call Trace: [ 144.319414][ T8006] [ 144.319421][ T8006] dump_stack_lvl+0xe8/0x150 [ 144.319448][ T8006] should_fail_ex+0x40c/0x560 [ 144.319465][ T8006] should_failslab+0xa8/0x100 [ 144.319482][ T8006] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 144.319496][ T8006] ? alloc_empty_file+0x5b/0x1d0 [ 144.319510][ T8006] ? alloc_empty_file+0x5b/0x1d0 [ 144.319525][ T8006] alloc_empty_file+0x5b/0x1d0 [ 144.319539][ T8006] alloc_file_pseudo+0x115/0x1e0 [ 144.319554][ T8006] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 144.319573][ T8006] anon_inode_getfd+0xc8/0x1f0 [ 144.319587][ T8006] btf_new_fd+0x8f6/0xbb0 [ 144.319601][ T8006] __sys_bpf+0xd2e/0xd90 [ 144.319619][ T8006] ? __pfx___sys_bpf+0x10/0x10 [ 144.319638][ T8006] ? __fget_files+0x2a/0x420 [ 144.319661][ T8006] ? ksys_write+0x242/0x270 [ 144.319672][ T8006] ? __pfx_ksys_write+0x10/0x10 [ 144.319684][ T8006] __x64_sys_bpf+0xba/0xd0 [ 144.319696][ T8006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.319707][ T8006] do_syscall_64+0x174/0x580 [ 144.319720][ T8006] ? trace_irq_disable+0x3b/0x140 [ 144.319733][ T8006] ? clear_bhb_loop+0x40/0x90 [ 144.319746][ T8006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.319755][ T8006] RIP: 0033:0x7fd79159de99 [ 144.319767][ T8006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.319775][ T8006] RSP: 002b:00007fd79245c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.319786][ T8006] RAX: ffffffffffffffda RBX: 00007fd791825fa0 RCX: 00007fd79159de99 [ 144.319793][ T8006] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 144.319799][ T8006] RBP: 00007fd79245c090 R08: 0000000000000000 R09: 0000000000000000 [ 144.319807][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.319814][ T8006] R13: 00007fd791826038 R14: 00007fd791825fa0 R15: 00007ffd57c837c8 [ 144.319829][ T8006] [ 144.802783][ T8024] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 145.182127][ T8042] syzkaller0: entered promiscuous mode [ 145.208140][ T8042] syzkaller0: entered allmulticast mode [ 145.227110][ T8040] netlink: 'syz.3.709': attribute type 2 has an invalid length. [ 145.347329][ T8048] netlink: 'syz.4.712': attribute type 11 has an invalid length. [ 145.376862][ T8048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.469251][ T8052] FAULT_INJECTION: forcing a failure. [ 145.469251][ T8052] name failslab, interval 1, probability 0, space 0, times 0 [ 145.502642][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.4.714 Not tainted syzkaller #0 PREEMPT(full) [ 145.502669][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 145.502680][ T8052] Call Trace: [ 145.502687][ T8052] [ 145.502695][ T8052] dump_stack_lvl+0xe8/0x150 [ 145.502728][ T8052] should_fail_ex+0x40c/0x560 [ 145.502755][ T8052] ? alloc_netdev_mqs+0x8f3/0x12b0 [ 145.502781][ T8052] should_failslab+0xa8/0x100 [ 145.502811][ T8052] __kvmalloc_node_noprof+0x176/0x860 [ 145.502839][ T8052] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 145.502863][ T8052] ? alloc_netdev_mqs+0x8f3/0x12b0 [ 145.502895][ T8052] alloc_netdev_mqs+0x8f3/0x12b0 [ 145.502920][ T8052] ? __pfx_geneve_setup+0x10/0x10 [ 145.502943][ T8052] rtnl_create_link+0x321/0xd70 [ 145.502976][ T8052] rtnl_newlink_create+0x258/0x7b0 [ 145.503005][ T8052] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 145.503031][ T8052] ? __pfx___mutex_lock+0x10/0x10 [ 145.503065][ T8052] ? ns_capable+0x89/0xe0 [ 145.503092][ T8052] rtnl_newlink+0x166d/0x1c30 [ 145.503129][ T8052] ? __pfx_rtnl_newlink+0x10/0x10 [ 145.503146][ T8052] ? do_syscall_64+0x174/0x580 [ 145.503168][ T8052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.503225][ T8052] ? kasan_quarantine_put+0xbb/0x1f0 [ 145.503249][ T8052] ? lockdep_hardirqs_on+0x7a/0x110 [ 145.503276][ T8052] ? nlmon_xmit+0xb0/0x100 [ 145.503310][ T8052] ? kmem_cache_free+0x182/0x650 [ 145.503349][ T8052] ? __lock_acquire+0x683/0x2cf0 [ 145.503380][ T8052] ? __dev_queue_xmit+0x29b/0x3820 [ 145.503407][ T8052] ? __local_bh_enable_ip+0xd0/0x130 [ 145.503428][ T8052] ? lockdep_hardirqs_on+0x7a/0x110 [ 145.503449][ T8052] ? __dev_queue_xmit+0x29b/0x3820 [ 145.503469][ T8052] ? __local_bh_enable_ip+0xd0/0x130 [ 145.503490][ T8052] ? __dev_queue_xmit+0x29b/0x3820 [ 145.503521][ T8052] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 145.503564][ T8052] ? __pfx_rtnl_newlink+0x10/0x10 [ 145.503582][ T8052] rtnetlink_rcv_msg+0x802/0xc00 [ 145.503606][ T8052] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 145.503624][ T8052] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.503642][ T8052] ? ref_tracker_free+0x689/0x830 [ 145.503670][ T8052] ? __pfx_ref_tracker_free+0x10/0x10 [ 145.503694][ T8052] ? __asan_memcpy+0x40/0x70 [ 145.503715][ T8052] ? __skb_clone+0x5c/0x6c0 [ 145.503746][ T8052] netlink_rcv_skb+0x226/0x4a0 [ 145.503775][ T8052] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.503797][ T8052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.503844][ T8052] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.503866][ T8052] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.503894][ T8052] netlink_unicast+0x7bb/0x940 [ 145.503926][ T8052] netlink_sendmsg+0x813/0xb40 [ 145.503959][ T8052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.503987][ T8052] ? aa_sock_msg_perm+0xf1/0x1b0 [ 145.504014][ T8052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.504034][ T8052] sock_sendmsg_nosec+0x13a/0x180 [ 145.504065][ T8052] ____sys_sendmsg+0x54e/0x850 [ 145.504093][ T8052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.504125][ T8052] ? import_iovec+0x73/0xa0 [ 145.504158][ T8052] ___sys_sendmsg+0x2a5/0x360 [ 145.504179][ T8052] ? __lock_acquire+0x683/0x2cf0 [ 145.504210][ T8052] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.504270][ T8052] ? __fget_files+0x2a/0x420 [ 145.504295][ T8052] ? __fget_files+0x3a2/0x420 [ 145.504331][ T8052] __x64_sys_sendmsg+0x1b1/0x290 [ 145.504357][ T8052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.504398][ T8052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.504419][ T8052] do_syscall_64+0x174/0x580 [ 145.504440][ T8052] ? trace_irq_disable+0x3b/0x140 [ 145.504465][ T8052] ? clear_bhb_loop+0x40/0x90 [ 145.504488][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.504506][ T8052] RIP: 0033:0x7fd79159de99 [ 145.504524][ T8052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.504549][ T8052] RSP: 002b:00007fd79245c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.504569][ T8052] RAX: ffffffffffffffda RBX: 00007fd791825fa0 RCX: 00007fd79159de99 [ 145.504582][ T8052] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000004 [ 145.504594][ T8052] RBP: 00007fd79245c090 R08: 0000000000000000 R09: 0000000000000000 [ 145.504605][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.504616][ T8052] R13: 00007fd791826038 R14: 00007fd791825fa0 R15: 00007ffd57c837c8 [ 145.504648][ T8052] [ 146.049799][ T8056] __nla_validate_parse: 10 callbacks suppressed [ 146.049817][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.716'. [ 146.068779][ T8054] netlink: 36 bytes leftover after parsing attributes in process `syz.1.715'. [ 146.088305][ T8056] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 146.115306][ T8056] sctp: [Deprecated]: syz.0.716 (pid 8056) Use of int in max_burst socket option. [ 146.115306][ T8056] Use struct sctp_assoc_value instead [ 146.168289][ T8056] sctp: [Deprecated]: syz.0.716 (pid 8056) Use of int in maxseg socket option. [ 146.168289][ T8056] Use struct sctp_assoc_value instead [ 146.416556][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.721'. [ 146.841607][ T8083] ipip0: entered promiscuous mode [ 146.862435][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 147.036342][ T7732] IPVS: starting estimator thread 0... [ 147.068977][ T8097] netlink: 52 bytes leftover after parsing attributes in process `syz.2.729'. [ 147.121287][ T8098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.730'. [ 147.142394][ T8098] netlink: 356 bytes leftover after parsing attributes in process `syz.0.730'. [ 147.162882][ T8090] IPVS: using max 32 ests per chain, 76800 per kthread [ 147.173564][ T8095] netlink: 180 bytes leftover after parsing attributes in process `syz.0.730'. [ 147.182347][ T8098] netlink: 68 bytes leftover after parsing attributes in process `syz.0.730'. [ 147.200942][ T8102] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 147.244198][ T8102] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.251866][ T8098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.730'. [ 147.277529][ T8102] bond5: (slave veth0_to_bond): making interface the new active one [ 147.310275][ T8102] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 147.358528][ T8106] bond5: entered promiscuous mode [ 147.380378][ T8106] veth0_to_bond: entered promiscuous mode [ 147.418070][ T8106] bond5: entered allmulticast mode [ 147.441057][ T8106] veth0_to_bond: entered allmulticast mode [ 147.459967][ T8111] tipc: Enabling of bearer rejected, failed to enable media [ 147.511525][ T8102] macvlan2: entered promiscuous mode [ 147.528762][ T8102] macvlan2: entered allmulticast mode [ 147.551573][ T8102] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.578232][ T8102] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 147.825319][ T8121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.738'. [ 148.509273][ T8156] unsupported nlmsg_type 40 [ 148.891420][ T8157] syzkaller1: entered promiscuous mode [ 148.906091][ T8157] syzkaller1: entered allmulticast mode [ 148.957976][ T8174] FAULT_INJECTION: forcing a failure. [ 148.957976][ T8174] name failslab, interval 1, probability 0, space 0, times 0 [ 148.983203][ T8174] CPU: 0 UID: 0 PID: 8174 Comm: syz.1.750 Not tainted syzkaller #0 PREEMPT(full) [ 148.983248][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 148.983259][ T8174] Call Trace: [ 148.983273][ T8174] [ 148.983281][ T8174] dump_stack_lvl+0xe8/0x150 [ 148.983314][ T8174] should_fail_ex+0x40c/0x560 [ 148.983341][ T8174] ? alloc_netdev_mqs+0x8f3/0x12b0 [ 148.983367][ T8174] should_failslab+0xa8/0x100 [ 148.983398][ T8174] __kvmalloc_node_noprof+0x176/0x860 [ 148.983425][ T8174] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 148.983450][ T8174] ? alloc_netdev_mqs+0x8f3/0x12b0 [ 148.983500][ T8174] alloc_netdev_mqs+0x8f3/0x12b0 [ 148.983538][ T8174] ? __pfx_geneve_setup+0x10/0x10 [ 148.983562][ T8174] rtnl_create_link+0x321/0xd70 [ 148.983595][ T8174] rtnl_newlink_create+0x258/0x7b0 [ 148.983624][ T8174] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 148.983650][ T8174] ? __pfx___mutex_lock+0x10/0x10 [ 148.983685][ T8174] ? ns_capable+0x89/0xe0 [ 148.983712][ T8174] rtnl_newlink+0x166d/0x1c30 [ 148.983751][ T8174] ? __pfx_rtnl_newlink+0x10/0x10 [ 148.983771][ T8174] ? __lock_acquire+0x683/0x2cf0 [ 148.983806][ T8174] ? __lock_acquire+0x683/0x2cf0 [ 148.983847][ T8174] ? unwind_next_frame+0x8f/0x2550 [ 148.983877][ T8174] ? is_bpf_text_address+0x26/0x2b0 [ 148.983917][ T8174] ? is_bpf_text_address+0x26/0x2b0 [ 148.983949][ T8174] ? __lock_acquire+0x683/0x2cf0 [ 148.983979][ T8174] ? kernel_text_address+0xa5/0xe0 [ 148.983998][ T8174] ? __kernel_text_address+0xd/0x30 [ 148.984016][ T8174] ? unwind_get_return_address+0x4d/0x90 [ 148.984035][ T8174] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 148.984060][ T8174] ? arch_stack_walk+0xfb/0x150 [ 148.984092][ T8174] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 148.984129][ T8174] ? __pfx_rtnl_newlink+0x10/0x10 [ 148.984147][ T8174] rtnetlink_rcv_msg+0x802/0xc00 [ 148.984165][ T8174] ? netlink_sendmsg+0x5d4/0xb40 [ 148.984192][ T8174] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 148.984210][ T8174] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.984231][ T8174] ? __lock_acquire+0x683/0x2cf0 [ 148.984277][ T8174] netlink_rcv_skb+0x226/0x4a0 [ 148.984301][ T8174] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.984323][ T8174] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.984360][ T8174] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.984380][ T8174] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.984406][ T8174] netlink_unicast+0x7bb/0x940 [ 148.984433][ T8174] netlink_sendmsg+0x813/0xb40 [ 148.984464][ T8174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.984492][ T8174] ? aa_sock_msg_perm+0xf1/0x1b0 [ 148.984520][ T8174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.984541][ T8174] sock_sendmsg_nosec+0x13a/0x180 [ 148.984570][ T8174] ____sys_sendmsg+0x54e/0x850 [ 148.984598][ T8174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.984631][ T8174] ? import_iovec+0x73/0xa0 [ 148.984662][ T8174] ___sys_sendmsg+0x2a5/0x360 [ 148.984682][ T8174] ? __lock_acquire+0x683/0x2cf0 [ 148.984711][ T8174] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.984770][ T8174] ? __fget_files+0x2a/0x420 [ 148.984795][ T8174] ? __fget_files+0x3a2/0x420 [ 148.984831][ T8174] __x64_sys_sendmsg+0x1b1/0x290 [ 148.984857][ T8174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.984899][ T8174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.984920][ T8174] do_syscall_64+0x174/0x580 [ 148.984942][ T8174] ? trace_irq_disable+0x3b/0x140 [ 148.984967][ T8174] ? clear_bhb_loop+0x40/0x90 [ 148.984990][ T8174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.985009][ T8174] RIP: 0033:0x7f011f99de99 [ 148.985027][ T8174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.985042][ T8174] RSP: 002b:00007f01208c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.985062][ T8174] RAX: ffffffffffffffda RBX: 00007f011fc26090 RCX: 00007f011f99de99 [ 148.985075][ T8174] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000004 [ 148.985087][ T8174] RBP: 00007f01208c3090 R08: 0000000000000000 R09: 0000000000000000 [ 148.985098][ T8174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.985109][ T8174] R13: 00007f011fc26128 R14: 00007f011fc26090 R15: 00007fffc6314148 [ 148.985141][ T8174] [ 149.760172][ T8199] block nbd0: Unsupported socket: should be TCP or UNIX. [ 149.907635][ T8204] ip6gre2: entered promiscuous mode [ 149.926745][ T8204] ip6gre2: entered allmulticast mode [ 150.108975][ T8222] netlink: 'syz.0.764': attribute type 11 has an invalid length. [ 150.176717][ T8222] netlink: 'syz.0.764': attribute type 11 has an invalid length. [ 150.564140][ T8251] netlink: 'syz.2.772': attribute type 3 has an invalid length. [ 150.578897][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 150.620666][ T8253] syzkaller1: entered promiscuous mode [ 150.641550][ T8253] syzkaller1: entered allmulticast mode [ 150.659686][ T8253] netlink: 'syz.1.773': attribute type 4 has an invalid length. [ 150.674228][ T8253] netlink: 'syz.1.773': attribute type 4 has an invalid length. [ 151.057428][ T8276] __nla_validate_parse: 11 callbacks suppressed [ 151.057449][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 151.111529][ T8278] xt_hashlimit: max too large, truncated to 1048576 [ 151.278650][ T8287] netlink: 'syz.3.785': attribute type 3 has an invalid length. [ 151.302424][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'. [ 151.625896][ T8302] netlink: 104 bytes leftover after parsing attributes in process `syz.2.790'. [ 151.726947][ T8311] xt_hashlimit: max too large, truncated to 1048576 [ 151.923798][ T8313] syzkaller0: entered promiscuous mode [ 151.930063][ T8313] syzkaller0: entered allmulticast mode [ 151.945296][ T7735] IPVS: starting estimator thread 0... [ 151.987090][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 152.042450][ T8328] IPVS: using max 40 ests per chain, 96000 per kthread [ 152.153188][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.801'. [ 154.172973][ T8358] xt_hashlimit: max too large, truncated to 1048576 [ 154.245338][ T8352] block nbd0: server does not support multiple connections per device. [ 154.267036][ T8362] netlink: 104 bytes leftover after parsing attributes in process `syz.3.809'. [ 154.356662][ T8352] block nbd0: shutting down sockets [ 154.664669][ T8393] netlink: 128 bytes leftover after parsing attributes in process `syz.4.815'. [ 154.839811][ T8384] syzkaller0: entered promiscuous mode [ 154.878750][ T8384] syzkaller0: entered allmulticast mode [ 154.913524][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 155.023148][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 155.271411][ T8416] xt_hashlimit: max too large, truncated to 1048576 [ 155.342418][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 157.341375][ T8429] netlink: 'syz.1.825': attribute type 21 has an invalid length. [ 157.362828][ T8429] netlink: 132 bytes leftover after parsing attributes in process `syz.1.825'. [ 157.374163][ T8432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.827'. [ 157.503223][ T8438] syzkaller0: entered promiscuous mode [ 157.509777][ T8438] syzkaller0: entered allmulticast mode [ 157.626467][ T8442] netlink: 104 bytes leftover after parsing attributes in process `syz.3.832'. [ 157.663492][ T8445] xt_hashlimit: max too large, truncated to 1048576 [ 157.774336][ T8453] netlink: 128 bytes leftover after parsing attributes in process `syz.2.836'. [ 157.798987][ T8447] syzkaller0: entered promiscuous mode [ 157.804747][ T8447] syzkaller0: entered allmulticast mode [ 160.459612][ T8505] syzkaller0: entered promiscuous mode [ 160.482426][ T8505] syzkaller0: entered allmulticast mode [ 160.490460][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.845'. [ 160.538686][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.845'. [ 160.560026][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 160.600758][ T8518] netlink: 'syz.3.847': attribute type 8 has an invalid length. [ 160.611599][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.847'. [ 160.635029][ T8511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.845'. [ 160.645373][ T8511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.845'. [ 160.668527][ T8518] bond0: entered promiscuous mode [ 160.682680][ T8518] bond_slave_0: entered promiscuous mode [ 160.696521][ T8518] bond_slave_1: entered promiscuous mode [ 160.720593][ T8518] gretap0: entered promiscuous mode [ 160.747603][ T8518] bond0: left promiscuous mode [ 160.769174][ T8518] bond_slave_0: left promiscuous mode [ 160.790122][ T8518] bond_slave_1: left promiscuous mode [ 160.811193][ T8518] gretap0: left promiscuous mode [ 160.837883][ T8520] FAULT_INJECTION: forcing a failure. [ 160.837883][ T8520] name failslab, interval 1, probability 0, space 0, times 0 [ 160.853781][ T8520] CPU: 1 UID: 0 PID: 8520 Comm: syz.1.846 Not tainted syzkaller #0 PREEMPT(full) [ 160.853807][ T8520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 160.853817][ T8520] Call Trace: [ 160.853825][ T8520] [ 160.853833][ T8520] dump_stack_lvl+0xe8/0x150 [ 160.853867][ T8520] should_fail_ex+0x40c/0x560 [ 160.853896][ T8520] should_failslab+0xa8/0x100 [ 160.853926][ T8520] __kmalloc_cache_noprof+0xa8/0x660 [ 160.853954][ T8520] ? register_netdevice+0x57e/0x1eb0 [ 160.853975][ T8520] ? register_netdevice+0x57e/0x1eb0 [ 160.854002][ T8520] register_netdevice+0x57e/0x1eb0 [ 160.854027][ T8520] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 160.854049][ T8520] ? pcpu_alloc_noprof+0x100f/0x1900 [ 160.854074][ T8520] ? pcpu_alloc_noprof+0x1036/0x1900 [ 160.854100][ T8520] ? __pfx_register_netdevice+0x10/0x10 [ 160.854132][ T8520] ? dst_cache_init+0x185/0x270 [ 160.854149][ T8520] ? dst_cache_init+0x1ff/0x270 [ 160.854171][ T8520] geneve_configure+0xcd9/0x1160 [ 160.854210][ T8520] geneve_newlink+0x1c8/0x280 [ 160.854232][ T8520] ? __pfx_geneve_newlink+0x10/0x10 [ 160.854273][ T8520] ? rtnl_create_link+0xa04/0xd70 [ 160.854299][ T8520] ? __pfx_geneve_newlink+0x10/0x10 [ 160.854319][ T8520] rtnl_newlink_create+0x305/0x7b0 [ 160.854347][ T8520] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 160.854373][ T8520] ? __pfx___mutex_lock+0x10/0x10 [ 160.854407][ T8520] ? ns_capable+0x89/0xe0 [ 160.854434][ T8520] rtnl_newlink+0x166d/0x1c30 [ 160.854555][ T8520] ? __pfx_rtnl_newlink+0x10/0x10 [ 160.854582][ T8520] ? __lock_acquire+0x683/0x2cf0 [ 160.854617][ T8520] ? __lock_acquire+0x683/0x2cf0 [ 160.854657][ T8520] ? unwind_next_frame+0x8f/0x2550 [ 160.854685][ T8520] ? is_bpf_text_address+0x26/0x2b0 [ 160.854723][ T8520] ? is_bpf_text_address+0x26/0x2b0 [ 160.854830][ T8520] ? __lock_acquire+0x683/0x2cf0 [ 160.854860][ T8520] ? kernel_text_address+0xa5/0xe0 [ 160.854880][ T8520] ? __kernel_text_address+0xd/0x30 [ 160.854898][ T8520] ? unwind_get_return_address+0x4d/0x90 [ 160.854916][ T8520] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 160.854942][ T8520] ? arch_stack_walk+0xfb/0x150 [ 160.854975][ T8520] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 160.855013][ T8520] ? __pfx_rtnl_newlink+0x10/0x10 [ 160.855032][ T8520] rtnetlink_rcv_msg+0x802/0xc00 [ 160.855049][ T8520] ? netlink_sendmsg+0x5d4/0xb40 [ 160.855077][ T8520] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 160.855096][ T8520] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.855117][ T8520] ? __lock_acquire+0x683/0x2cf0 [ 160.855158][ T8520] netlink_rcv_skb+0x226/0x4a0 [ 160.855183][ T8520] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.855205][ T8520] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.855239][ T8520] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.855261][ T8520] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.855290][ T8520] netlink_unicast+0x7bb/0x940 [ 160.855322][ T8520] netlink_sendmsg+0x813/0xb40 [ 160.855353][ T8520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.855381][ T8520] ? aa_sock_msg_perm+0xf1/0x1b0 [ 160.855408][ T8520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.855427][ T8520] sock_sendmsg_nosec+0x13a/0x180 [ 160.855455][ T8520] ____sys_sendmsg+0x54e/0x850 [ 160.855482][ T8520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.855513][ T8520] ? import_iovec+0x73/0xa0 [ 160.855546][ T8520] ___sys_sendmsg+0x2a5/0x360 [ 160.855567][ T8520] ? __lock_acquire+0x683/0x2cf0 [ 160.855597][ T8520] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.855656][ T8520] ? __fget_files+0x2a/0x420 [ 160.855681][ T8520] ? __fget_files+0x3a2/0x420 [ 160.855716][ T8520] __x64_sys_sendmsg+0x1b1/0x290 [ 160.855750][ T8520] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.855792][ T8520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.855813][ T8520] do_syscall_64+0x174/0x580 [ 160.855837][ T8520] ? trace_irq_disable+0x3b/0x140 [ 160.855862][ T8520] ? clear_bhb_loop+0x40/0x90 [ 160.855886][ T8520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.855904][ T8520] RIP: 0033:0x7f011f99de99 [ 160.855922][ T8520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.855937][ T8520] RSP: 002b:00007f01208c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.855957][ T8520] RAX: ffffffffffffffda RBX: 00007f011fc26090 RCX: 00007f011f99de99 [ 160.855970][ T8520] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000004 [ 160.855982][ T8520] RBP: 00007f01208c3090 R08: 0000000000000000 R09: 0000000000000000 [ 160.855993][ T8520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.856004][ T8520] R13: 00007f011fc26128 R14: 00007f011fc26090 R15: 00007fffc6314148 [ 160.856036][ T8520] [ 161.749850][ T8546] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.910471][ T8550] syzkaller0: entered promiscuous mode [ 161.917406][ T8550] syzkaller0: entered allmulticast mode [ 161.926044][ T8553] syzkaller0: entered promiscuous mode [ 161.932068][ T8553] syzkaller0: entered allmulticast mode [ 161.984260][ T8561] bond6: entered promiscuous mode [ 161.995769][ T8561] 8021q: adding VLAN 0 to HW filter on device bond6 [ 162.037360][ T8567] bridge1: entered promiscuous mode [ 162.053039][ T8567] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 164.313994][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 164.769508][ T8580] __nla_validate_parse: 6 callbacks suppressed [ 164.769525][ T8580] netlink: 56 bytes leftover after parsing attributes in process `syz.3.861'. [ 164.786281][ T8580] netlink: 56 bytes leftover after parsing attributes in process `syz.3.861'. [ 164.908274][ T8630] netlink: 'syz.2.864': attribute type 8 has an invalid length. [ 164.922054][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 164.965890][ T8630] bond0: entered promiscuous mode [ 164.977730][ T8630] bond_slave_0: entered promiscuous mode [ 164.989151][ T8630] bond_slave_1: entered promiscuous mode [ 164.999226][ T8630] gretap0: entered promiscuous mode [ 165.024998][ T8630] bond0: left promiscuous mode [ 165.036668][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.867'. [ 165.042055][ T8630] bond_slave_0: left promiscuous mode [ 165.071039][ T8630] bond_slave_1: left promiscuous mode [ 165.083642][ T8638] openvswitch: netlink: IP tunnel TTL not specified. [ 165.099032][ T8638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.104136][ T8630] gretap0: left promiscuous mode [ 165.201589][ T8638] netlink: 40 bytes leftover after parsing attributes in process `syz.4.867'. [ 165.319362][ T8654] xt_hashlimit: max too large, truncated to 1048576 [ 165.357464][ T8655] netlink: 'syz.2.871': attribute type 1 has an invalid length. [ 165.399065][ T8659] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 165.413716][ T8659] netlink: 'syz.3.872': attribute type 2 has an invalid length. [ 165.424507][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 165.437479][ T8655] 8021q: adding VLAN 0 to HW filter on device bond5 [ 165.516341][ T8662] bond5: (slave geneve2): making interface the new active one [ 165.529120][ T8662] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 165.550585][ T8659] x_tables: duplicate underflow at hook 1 [ 165.584279][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'. [ 165.632509][ T8671] netlink: 56 bytes leftover after parsing attributes in process `syz.0.875'. [ 165.676034][ T8671] netlink: 56 bytes leftover after parsing attributes in process `syz.0.875'. [ 165.851960][ T8666] syzkaller0: entered promiscuous mode [ 165.869613][ T8666] syzkaller0: entered allmulticast mode [ 168.328695][ T8681] syzkaller0: entered promiscuous mode [ 168.334336][ T8681] syzkaller0: entered allmulticast mode [ 168.414959][ T8720] openvswitch: netlink: IP tunnel dst address not specified [ 168.461704][ T8722] netlink: 'syz.1.883': attribute type 8 has an invalid length. [ 168.472479][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 168.590016][ T8731] netlink: 'syz.4.885': attribute type 1 has an invalid length. [ 168.661512][ T8733] netlink: 'syz.3.882': attribute type 6 has an invalid length. [ 170.470287][ T8722] bond0: entered promiscuous mode [ 170.476020][ T8722] bond_slave_0: entered promiscuous mode [ 170.482044][ T8722] bond_slave_1: entered promiscuous mode [ 170.489157][ T8722] gretap0: entered promiscuous mode [ 170.497399][ T8722] bond0: left promiscuous mode [ 170.505923][ T8722] bond_slave_0: left promiscuous mode [ 170.513672][ T8722] bond_slave_1: left promiscuous mode [ 170.521284][ T8722] gretap0: left promiscuous mode [ 170.575398][ T8738] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002 [ 170.594856][ T8731] 8021q: adding VLAN 0 to HW filter on device bond7 [ 170.640678][ T8732] bond7: (slave veth0_to_bond): making interface the new active one [ 170.652184][ T8732] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 170.725999][ T8743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.888'. [ 170.739441][ T8734] bond7: entered promiscuous mode [ 170.750718][ T8734] veth0_to_bond: entered promiscuous mode [ 170.756820][ T8734] bond7: entered allmulticast mode [ 170.762412][ T8734] veth0_to_bond: entered allmulticast mode [ 170.782294][ T8735] macvlan2: entered promiscuous mode [ 170.788021][ T8735] macvlan2: entered allmulticast mode [ 170.795698][ T8735] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 170.807475][ T8735] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 170.856875][ T8743] netlink: 56 bytes leftover after parsing attributes in process `syz.1.888'. [ 171.012496][ T8751] ipvlan2: entered promiscuous mode [ 171.023325][ T8751] bridge0: port 5(ipvlan2) entered blocking state [ 171.037136][ T8751] bridge0: port 5(ipvlan2) entered disabled state [ 171.066134][ T8751] ipvlan2: entered allmulticast mode [ 171.108492][ T8751] bridge0: entered allmulticast mode [ 171.119680][ T8751] ipvlan2: left allmulticast mode [ 171.125208][ T8751] bridge0: left allmulticast mode [ 171.419260][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.896'. [ 171.477847][ T8766] syzkaller0: entered promiscuous mode [ 171.514025][ T8766] syzkaller0: entered allmulticast mode [ 171.622172][ T8784] netlink: 'syz.4.899': attribute type 8 has an invalid length. [ 171.631309][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.899'. [ 171.744054][ T8787] netlink: 32 bytes leftover after parsing attributes in process `syz.2.901'. [ 172.137552][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 172.210567][ T8797] Bluetooth: MGMT ver 1.23 [ 172.298116][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.903'. [ 172.622422][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 174.415958][ T8784] bond0: entered promiscuous mode [ 174.421550][ T8784] bond_slave_0: entered promiscuous mode [ 174.427946][ T8784] bond_slave_1: entered promiscuous mode [ 174.434887][ T8784] gretap0: entered promiscuous mode [ 174.441073][ T8784] bond0: left promiscuous mode [ 174.448203][ T8784] bond_slave_0: left promiscuous mode [ 174.453856][ T8784] bond_slave_1: left promiscuous mode [ 174.460794][ T8784] gretap0: left promiscuous mode [ 174.849577][ T8818] netlink: 524 bytes leftover after parsing attributes in process `syz.0.910'. [ 175.020142][ T8826] netlink: 'syz.1.911': attribute type 1 has an invalid length. [ 175.043610][ T8822] can: request_module (can-proto-0) failed. [ 175.125335][ T8840] netlink: 104 bytes leftover after parsing attributes in process `syz.0.915'. [ 175.321746][ T8844] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 175.383886][ T8844] 8021q: adding VLAN 0 to HW filter on device bond6 [ 175.565351][ T8850] bond6: (slave veth0_to_bond): making interface the new active one [ 175.605074][ T8850] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 175.629525][ T8863] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 175.678927][ T8844] bond6: entered promiscuous mode [ 175.709452][ T8844] veth0_to_bond: entered promiscuous mode [ 175.739754][ T8844] bond6: entered allmulticast mode [ 175.751242][ T8844] veth0_to_bond: entered allmulticast mode [ 175.836021][ T8860] macvlan2: entered promiscuous mode [ 175.855428][ T8860] macvlan2: entered allmulticast mode [ 175.871061][ T8860] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.909169][ T8860] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 175.970404][ T8868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.021651][ T8868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.351511][ T8887] netlink: 388 bytes leftover after parsing attributes in process `syz.3.931'. [ 176.830555][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.938'. [ 176.970488][ T8903] bond10: entered promiscuous mode [ 176.977750][ T8903] 8021q: adding VLAN 0 to HW filter on device bond10 [ 177.005726][ T8912] bridge1: entered promiscuous mode [ 177.012542][ T8912] bond10: (slave bridge1): Enslaving as an active interface with an up link [ 177.073749][ T8921] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002 [ 177.230908][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 177.283245][ T8931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.949'. [ 177.360940][ T8933] geneve2: entered promiscuous mode [ 177.418840][ T8928] tipc: Started in network mode [ 177.446920][ T8928] tipc: Node identity ac14140f, cluster identity 4711 [ 177.469279][ T8928] tipc: New replicast peer: 255.255.255.255 [ 177.476481][ T8928] tipc: Enabled bearer , priority 10 [ 177.767644][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 178.170225][ T8981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.960'. [ 178.347273][ T8990] netlink: 'syz.1.960': attribute type 3 has an invalid length. [ 178.405418][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.960'. [ 178.472019][ T8990] netlink: 'syz.1.960': attribute type 1 has an invalid length. [ 178.532782][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 178.604807][ T24] tipc: Node number set to 2886997007 [ 179.372135][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 179.415188][ T9033] netlink: 'syz.3.971': attribute type 1 has an invalid length. [ 179.430495][ T9033] netlink: 208 bytes leftover after parsing attributes in process `syz.3.971'. [ 179.602661][ T9043] syzkaller1: entered promiscuous mode [ 179.608297][ T9043] syzkaller1: entered allmulticast mode [ 180.023138][ T9063] xt_hashlimit: max too large, truncated to 1048576 [ 181.579311][ T9122] __nla_validate_parse: 2 callbacks suppressed [ 181.579330][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 181.812931][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1000'. [ 181.832416][ T9142] syzkaller0: entered promiscuous mode [ 181.851773][ T9142] syzkaller0: entered allmulticast mode [ 181.971658][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 181.983373][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 182.007530][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1005'. [ 182.048076][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 182.066120][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 182.089176][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.104628][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 182.105169][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.134728][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1005'. [ 182.156801][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.170103][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.222427][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 182.431818][ T9173] set match dimension is over the limit! [ 182.548703][ T9179] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1013'. [ 182.606007][ T9185] syzkaller0: entered promiscuous mode [ 182.632781][ T9185] syzkaller0: entered allmulticast mode [ 182.862847][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.958405][ T9202] bond11: entered promiscuous mode [ 182.964799][ T9202] 8021q: adding VLAN 0 to HW filter on device bond11 [ 182.989573][ T9204] bridge3: entered promiscuous mode [ 182.995852][ T9204] bond11: (slave bridge3): Enslaving as an active interface with an up link [ 183.184919][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.475187][ T9236] syzkaller0: entered promiscuous mode [ 183.480797][ T9236] syzkaller0: entered allmulticast mode [ 183.482976][ T9238] netlink: 'syz.2.1033': attribute type 8 has an invalid length. [ 183.514432][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.586329][ T9238] bond0: entered promiscuous mode [ 183.604051][ T9238] bond_slave_0: entered promiscuous mode [ 183.616797][ T9238] bond_slave_1: entered promiscuous mode [ 183.634160][ T9238] gretap0: entered promiscuous mode [ 183.655428][ T9238] bond0: left promiscuous mode [ 183.668331][ T9238] bond_slave_0: left promiscuous mode [ 183.691161][ T9238] bond_slave_1: left promiscuous mode [ 183.720024][ T9238] gretap0: left promiscuous mode [ 183.798262][ T9245] bond8: entered promiscuous mode [ 183.804232][ T9245] 8021q: adding VLAN 0 to HW filter on device bond8 [ 183.877139][ T9249] bridge2: entered promiscuous mode [ 183.900533][ T9249] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 183.979850][ T199] IPVS: starting estimator thread 0... [ 184.083667][ T9261] IPVS: using max 30 ests per chain, 72000 per kthread [ 184.232899][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.318509][ T9279] syzkaller0: entered promiscuous mode [ 184.337914][ T9279] syzkaller0: entered allmulticast mode [ 184.361874][ T9288] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 184.406735][ T9288] dummy0: mtu less than device minimum [ 184.517383][ T9291] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 184.705497][ T9306] FAULT_INJECTION: forcing a failure. [ 184.705497][ T9306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.724061][ T9306] CPU: 0 UID: 0 PID: 9306 Comm: syz.0.1056 Not tainted syzkaller #0 PREEMPT(full) [ 184.724085][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 184.724095][ T9306] Call Trace: [ 184.724102][ T9306] [ 184.724109][ T9306] dump_stack_lvl+0xe8/0x150 [ 184.724139][ T9306] should_fail_ex+0x40c/0x560 [ 184.724165][ T9306] _copy_from_user+0x2d/0xb0 [ 184.724183][ T9306] ___sys_sendmsg+0x1c6/0x360 [ 184.724203][ T9306] ? __lock_acquire+0x683/0x2cf0 [ 184.724230][ T9306] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.724280][ T9306] ? __fget_files+0x2a/0x420 [ 184.724301][ T9306] ? __fget_files+0x3a2/0x420 [ 184.724331][ T9306] __x64_sys_sendmsg+0x1b1/0x290 [ 184.724353][ T9306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.724387][ T9306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.724404][ T9306] do_syscall_64+0x174/0x580 [ 184.724425][ T9306] ? trace_irq_disable+0x3b/0x140 [ 184.724448][ T9306] ? clear_bhb_loop+0x40/0x90 [ 184.724470][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.724486][ T9306] RIP: 0033:0x7fb6e9f9de99 [ 184.724503][ T9306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.724516][ T9306] RSP: 002b:00007fb6eaf30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.724534][ T9306] RAX: ffffffffffffffda RBX: 00007fb6ea225fa0 RCX: 00007fb6e9f9de99 [ 184.724546][ T9306] RDX: 0000000004000010 RSI: 0000200000000380 RDI: 0000000000000003 [ 184.724556][ T9306] RBP: 00007fb6eaf30090 R08: 0000000000000000 R09: 0000000000000000 [ 184.724565][ T9306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.724574][ T9306] R13: 00007fb6ea226038 R14: 00007fb6ea225fa0 R15: 00007ffea5be0938 [ 184.724601][ T9306] [ 185.264084][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.278143][ T9323] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 185.358519][ T9329] syzkaller0: entered promiscuous mode [ 185.389072][ T9329] syzkaller0: entered allmulticast mode [ 185.508737][ T9335] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 185.649683][ T9352] netlink: 'syz.0.1069': attribute type 1 has an invalid length. [ 185.757354][ T9352] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.867409][ T9358] bond5: (slave veth3): Enslaving as an active interface with a down link [ 185.904650][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.945474][ T9352] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 185.970219][ T9352] bond5: (slave batadv1): making interface the new active one [ 185.981689][ T9352] batadv1: entered promiscuous mode [ 185.992602][ T9352] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 186.208178][ T9379] syzkaller0: entered promiscuous mode [ 186.229059][ T9379] syzkaller0: entered allmulticast mode [ 186.338663][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.349233][ T9383] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002 [ 186.399196][ T9389] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 186.411780][ T9387] syzkaller0: entered promiscuous mode [ 186.432765][ T9387] syzkaller0: entered allmulticast mode [ 186.467186][ T9391] netlink: 'syz.3.1083': attribute type 1 has an invalid length. [ 186.632567][ T9391] 8021q: adding VLAN 0 to HW filter on device bond7 [ 186.748539][ T9395] bond7: (slave geneve3): making interface the new active one [ 186.779280][ T9395] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 186.782004][ T9417] __nla_validate_parse: 19 callbacks suppressed [ 186.782022][ T9417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1089'. [ 186.996781][ T9424] xt_ipcomp: unknown flags 1D [ 187.280082][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1093'. [ 187.324905][ T9438] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 187.345995][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.447411][ T9442] syzkaller0: entered promiscuous mode [ 187.462320][ T9442] syzkaller0: entered allmulticast mode [ 187.531898][ T9448] ip6gre3: entered promiscuous mode [ 187.537540][ T9448] ip6gre3: entered allmulticast mode [ 187.586300][ T9446] batadv_slave_1: entered promiscuous mode [ 187.594452][ T9442] tipc: Started in network mode [ 187.600885][ T9442] tipc: Node identity d2d5c2a15d82, cluster identity 4711 [ 187.612069][ T9442] tipc: Enabled bearer , priority 0 [ 187.665602][ T9441] tipc: Resetting bearer [ 187.689042][ T9441] tipc: Disabling bearer [ 187.707263][ T9445] batadv_slave_1: left promiscuous mode [ 187.729437][ T9450] syzkaller0: entered promiscuous mode [ 187.742499][ T9450] syzkaller0: entered allmulticast mode [ 187.890388][ T9458] net_ratelimit: 634 callbacks suppressed [ 187.890406][ T9458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.920362][ T9461] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1102'. [ 187.940540][ T9458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.952371][ T9458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.961415][ T9458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.973286][ T9458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.985597][ T9458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.999146][ T9465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1103'. [ 188.014447][ T9458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.052597][ T9458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.068065][ T9470] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 188.087122][ T9472] netlink: 'syz.0.1104': attribute type 1 has an invalid length. [ 188.088354][ T9458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.117341][ T9470] netlink: 15918 bytes leftover after parsing attributes in process `syz.3.1105'. [ 188.126416][ T9458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.170726][ T9470] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 188.194492][ T9470] netlink: 15918 bytes leftover after parsing attributes in process `syz.3.1105'. [ 188.219672][ T9472] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.303389][ T9467] bond6: (slave veth0_to_bond): making interface the new active one [ 188.323581][ T9480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1108'. [ 188.336554][ T9467] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 188.369006][ T9467] macvlan2: entered promiscuous mode [ 188.375711][ T9467] macvlan2: entered allmulticast mode [ 188.390106][ T9467] bond6: entered promiscuous mode [ 188.395527][ T9467] veth0_to_bond: entered promiscuous mode [ 188.403871][ T9467] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.413355][ T9467] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 188.431307][ T9467] bond6: left promiscuous mode [ 188.438144][ T9467] veth0_to_bond: left promiscuous mode [ 188.539447][ T9472] bond6: entered promiscuous mode [ 188.556639][ T9472] veth0_to_bond: entered promiscuous mode [ 188.570504][ T9472] bond6: entered allmulticast mode [ 188.586403][ T9472] veth0_to_bond: entered allmulticast mode [ 188.681617][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1110'. [ 189.003428][ T9504] syzkaller0: entered promiscuous mode [ 189.030089][ T9504] syzkaller0: entered allmulticast mode [ 189.102868][ T9513] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1117'. [ 189.315568][ T9533] netlink: 'syz.0.1124': attribute type 1 has an invalid length. [ 189.491597][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1125'. [ 189.523118][ T9533] 8021q: adding VLAN 0 to HW filter on device bond7 [ 189.571296][ T9535] bond6: (slave veth0_to_bond): Releasing active interface [ 189.615440][ T9535] veth0_to_bond: left promiscuous mode [ 189.625959][ T9535] veth0_to_bond: left allmulticast mode [ 189.664057][ T9535] bond7: (slave veth0_to_bond): making interface the new active one [ 189.677939][ T9535] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 189.691011][ T9539] bond7: entered promiscuous mode [ 189.696635][ T9539] veth0_to_bond: entered promiscuous mode [ 189.706985][ T9539] bond7: entered allmulticast mode [ 189.713397][ T9539] veth0_to_bond: entered allmulticast mode [ 189.740107][ T9545] macvlan2: entered promiscuous mode [ 189.751329][ T9545] macvlan2: entered allmulticast mode [ 189.763629][ T9545] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.776518][ T9545] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 189.825490][ T9544] bond8: entered promiscuous mode [ 189.831023][ T9544] 8021q: adding VLAN 0 to HW filter on device bond8 [ 189.859061][ T9553] bridge2: entered promiscuous mode [ 189.865073][ T9553] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 190.186225][ T9577] syzkaller0: entered promiscuous mode [ 190.216775][ T9577] syzkaller0: entered allmulticast mode [ 190.276012][ T9584] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.649261][ T9603] bond12: entered promiscuous mode [ 190.671329][ T9603] 8021q: adding VLAN 0 to HW filter on device bond12 [ 190.680356][ T9600] syzkaller0: entered promiscuous mode [ 190.697233][ T9600] syzkaller0: entered allmulticast mode [ 190.717172][ T9607] bridge4: entered promiscuous mode [ 190.724891][ T9607] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 190.880240][ C0] ================================================================== [ 190.888461][ C0] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 190.896560][ C0] Read of size 2 at addr ffff8881754b6ab4 by task syz.4.1147/9618 [ 190.904391][ C0] [ 190.906870][ C0] CPU: 0 UID: 0 PID: 9618 Comm: syz.4.1147 Not tainted syzkaller #0 PREEMPT(full) [ 190.906895][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 190.906908][ C0] Call Trace: [ 190.906916][ C0] [ 190.906924][ C0] dump_stack_lvl+0xe8/0x150 [ 190.906958][ C0] print_address_description+0x55/0x1e0 [ 190.906989][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 190.907015][ C0] print_report+0x58/0x70 [ 190.907039][ C0] kasan_report+0x117/0x150 [ 190.907068][ C0] ? __lock_acquire+0x683/0x2cf0 [ 190.907096][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 190.907125][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 190.907155][ C0] __dev_queue_xmit+0x27f/0x3820 [ 190.907183][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 190.907206][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 190.907229][ C0] ? ebt_do_table+0x2605/0x27d0 [ 190.907261][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 190.907283][ C0] ? ebt_do_table+0x2605/0x27d0 [ 190.907306][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 190.907334][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 190.907363][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 190.907394][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 190.907420][ C0] ? br_nf_post_routing+0x1d0/0xee0 [ 190.907447][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 190.907467][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 190.907487][ C0] NF_HOOK+0x360/0x3f0 [ 190.907504][ C0] ? net_generic+0x1e/0x240 [ 190.907525][ C0] ? NF_HOOK+0xa2/0x3f0 [ 190.907541][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 190.907560][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 190.907584][ C0] br_forward_finish+0xd3/0x130 [ 190.907601][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 190.907620][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 190.907639][ C0] NF_HOOK+0x360/0x3f0 [ 190.907656][ C0] ? NF_HOOK+0xa2/0x3f0 [ 190.907672][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 190.907690][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 190.907711][ C0] ? br_handle_vlan+0x5e/0x530 [ 190.907739][ C0] __br_forward+0x397/0x540 [ 190.907755][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 190.907775][ C0] br_flood+0x3e6/0x8d0 [ 190.907798][ C0] br_handle_frame_finish+0x1175/0x1990 [ 190.907826][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 190.907849][ C0] ? net_generic+0x1e/0x240 [ 190.907868][ C0] ? net_generic+0x1e/0x240 [ 190.907886][ C0] ? net_generic+0x1e/0x240 [ 190.907907][ C0] ? br_cfm_cc_peer_mep_remove+0x1f0/0x280 [ 190.907928][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 190.907953][ C0] br_handle_frame+0x81b/0x1510 [ 190.907979][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 190.908002][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 190.908028][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 190.908049][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 190.908086][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 190.908115][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 190.908150][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 190.908178][ C0] ? receive_buf+0xf9b/0x1b70 [ 190.908207][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 190.908242][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 190.908282][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 190.908312][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 190.908340][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 190.908368][ C0] ? dev_gro_receive+0x1097/0x2380 [ 190.908394][ C0] napi_complete_done+0x299/0x730 [ 190.908424][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 190.908453][ C0] ? gro_cell_poll+0x175/0x5d0 [ 190.908473][ C0] gro_cell_poll+0x5ab/0x5d0 [ 190.908496][ C0] ? gro_cell_poll+0x175/0x5d0 [ 190.908515][ C0] __napi_poll+0xaa/0x330 [ 190.908543][ C0] net_rx_action+0x61d/0xf50 [ 190.908567][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 190.908583][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 190.908609][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 190.908637][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 190.908658][ C0] ? sched_clock+0x3f/0x60 [ 190.908689][ C0] handle_softirqs+0x225/0x840 [ 190.908713][ C0] ? do_softirq+0x76/0xd0 [ 190.908736][ C0] ? tun_rx_batched+0x185/0x790 [ 190.908763][ C0] do_softirq+0x76/0xd0 [ 190.908785][ C0] [ 190.908791][ C0] [ 190.908798][ C0] __local_bh_enable_ip+0xf8/0x130 [ 190.908820][ C0] ? tun_rx_batched+0x185/0x790 [ 190.908847][ C0] tun_rx_batched+0x616/0x790 [ 190.908877][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 190.908905][ C0] ? tun_get_user+0x2717/0x4370 [ 190.908932][ C0] ? tun_get_user+0x2717/0x4370 [ 190.908960][ C0] ? tun_get_user+0x23cb/0x4370 [ 190.909010][ C0] ? tun_get_user+0x23cb/0x4370 [ 190.909038][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 190.909060][ C0] ? tun_get_user+0x2717/0x4370 [ 190.909092][ C0] ? tun_get_user+0x2717/0x4370 [ 190.909119][ C0] tun_get_user+0x2b44/0x4370 [ 190.909163][ C0] ? aa_file_perm+0x18b/0x15f0 [ 190.909188][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 190.909216][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 190.909250][ C0] ? __lock_acquire+0x683/0x2cf0 [ 190.909278][ C0] ? __pfx_file_ioctl+0x10/0x10 [ 190.909302][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 190.909328][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 190.909354][ C0] ? tun_get+0x1c/0x2f0 [ 190.909378][ C0] ? tun_get+0x1c/0x2f0 [ 190.909407][ C0] ? tun_get+0x1c/0x2f0 [ 190.909433][ C0] ? tun_get+0x1c/0x2f0 [ 190.909461][ C0] tun_chr_write_iter+0x113/0x200 [ 190.909489][ C0] vfs_write+0x612/0xba0 [ 190.909517][ C0] ? __pfx_vfs_write+0x10/0x10 [ 190.909538][ C0] ? __fget_files+0x2a/0x420 [ 190.909568][ C0] ksys_write+0x150/0x270 [ 190.909586][ C0] ? __pfx_ksys_write+0x10/0x10 [ 190.909604][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 190.909631][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.909669][ C0] do_syscall_64+0x174/0x580 [ 190.909692][ C0] ? trace_irq_disable+0x3b/0x140 [ 190.909717][ C0] ? clear_bhb_loop+0x40/0x90 [ 190.909738][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.909757][ C0] RIP: 0033:0x7fd79159de99 [ 190.909774][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.909791][ C0] RSP: 002b:00007fd79243b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.909812][ C0] RAX: ffffffffffffffda RBX: 00007fd791826090 RCX: 00007fd79159de99 [ 190.909827][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000003 [ 190.909839][ C0] RBP: 00007fd791633eaf R08: 0000000000000000 R09: 0000000000000000 [ 190.909851][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.909863][ C0] R13: 00007fd791826128 R14: 00007fd791826090 R15: 00007ffd57c837c8 [ 190.909885][ C0] [ 190.909892][ C0] [ 191.582413][ C0] The buggy address belongs to the physical page: [ 191.589101][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1754b6 [ 191.598040][ C0] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 191.605501][ C0] raw: 057ff00000000000 ffffea0005d52d88 ffffea0005d52d88 0000000000000000 [ 191.614077][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 191.622821][ C0] page dumped because: kasan: bad access detected [ 191.629245][ C0] page_owner info is not present (never set?) [ 191.635446][ C0] [ 191.637760][ C0] Memory state around the buggy address: [ 191.643461][ C0] ffff8881754b6980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 191.651596][ C0] ffff8881754b6a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 191.659660][ C0] >ffff8881754b6a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 191.668061][ C0] ^ [ 191.673719][ C0] ffff8881754b6b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 191.681781][ C0] ffff8881754b6b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 191.689830][ C0] ================================================================== [ 191.698066][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 191.705525][ C0] CPU: 0 UID: 0 PID: 9618 Comm: syz.4.1147 Not tainted syzkaller #0 PREEMPT(full) [ 191.715183][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 191.725899][ C0] Call Trace: [ 191.729281][ C0] [ 191.732139][ C0] vpanic+0x56c/0xa60 [ 191.736325][ C0] ? __pfx_vpanic+0x10/0x10 [ 191.740926][ C0] panic+0xc5/0xd0 [ 191.744644][ C0] ? __pfx_panic+0x10/0x10 [ 191.749141][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 191.754772][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 191.760428][ C0] check_panic_on_warn+0x89/0xb0 [ 191.765484][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 191.771118][ C0] end_report+0x73/0x170 [ 191.775532][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 191.781256][ C0] kasan_report+0x128/0x150 [ 191.785929][ C0] ? __lock_acquire+0x683/0x2cf0 [ 191.790866][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 191.796526][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 191.802248][ C0] __dev_queue_xmit+0x27f/0x3820 [ 191.807185][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 191.812587][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 191.817782][ C0] ? ebt_do_table+0x2605/0x27d0 [ 191.822861][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 191.828256][ C0] ? ebt_do_table+0x2605/0x27d0 [ 191.833201][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 191.838604][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 191.843818][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 191.849410][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 191.854718][ C0] ? br_nf_post_routing+0x1d0/0xee0 [ 191.860099][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 191.865473][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 191.871353][ C0] NF_HOOK+0x360/0x3f0 [ 191.875501][ C0] ? net_generic+0x1e/0x240 [ 191.879999][ C0] ? NF_HOOK+0xa2/0x3f0 [ 191.884169][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 191.888836][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 191.894815][ C0] br_forward_finish+0xd3/0x130 [ 191.899745][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 191.905836][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 191.911292][ C0] NF_HOOK+0x360/0x3f0 [ 191.915443][ C0] ? NF_HOOK+0xa2/0x3f0 [ 191.919745][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 191.924341][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 191.929880][ C0] ? br_handle_vlan+0x5e/0x530 [ 191.934908][ C0] __br_forward+0x397/0x540 [ 191.939489][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 191.945195][ C0] br_flood+0x3e6/0x8d0 [ 191.949415][ C0] br_handle_frame_finish+0x1175/0x1990 [ 191.955042][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 191.960995][ C0] ? net_generic+0x1e/0x240 [ 191.965576][ C0] ? net_generic+0x1e/0x240 [ 191.970335][ C0] ? net_generic+0x1e/0x240 [ 191.974831][ C0] ? br_cfm_cc_peer_mep_remove+0x1f0/0x280 [ 191.980627][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 191.985823][ C0] br_handle_frame+0x81b/0x1510 [ 191.990815][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 191.996352][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 192.002361][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 192.007727][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 192.013454][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 192.019619][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 192.026682][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 192.033529][ C0] ? receive_buf+0xf9b/0x1b70 [ 192.038206][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 192.044309][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 192.051072][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 192.057239][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 192.063907][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 192.070671][ C0] ? dev_gro_receive+0x1097/0x2380 [ 192.075865][ C0] napi_complete_done+0x299/0x730 [ 192.080984][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 192.086518][ C0] ? gro_cell_poll+0x175/0x5d0 [ 192.091270][ C0] gro_cell_poll+0x5ab/0x5d0 [ 192.095865][ C0] ? gro_cell_poll+0x175/0x5d0 [ 192.100640][ C0] __napi_poll+0xaa/0x330 [ 192.104987][ C0] net_rx_action+0x61d/0xf50 [ 192.109693][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 192.114926][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 192.120318][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 192.125603][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 192.130888][ C0] ? sched_clock+0x3f/0x60 [ 192.135331][ C0] handle_softirqs+0x225/0x840 [ 192.140245][ C0] ? do_softirq+0x76/0xd0 [ 192.144656][ C0] ? tun_rx_batched+0x185/0x790 [ 192.149549][ C0] do_softirq+0x76/0xd0 [ 192.153702][ C0] [ 192.156919][ C0] [ 192.159926][ C0] __local_bh_enable_ip+0xf8/0x130 [ 192.165044][ C0] ? tun_rx_batched+0x185/0x790 [ 192.170069][ C0] tun_rx_batched+0x616/0x790 [ 192.175278][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 192.180515][ C0] ? tun_get_user+0x2717/0x4370 [ 192.185396][ C0] ? tun_get_user+0x2717/0x4370 [ 192.190384][ C0] ? tun_get_user+0x23cb/0x4370 [ 192.195235][ C0] ? tun_get_user+0x23cb/0x4370 [ 192.200175][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 192.205544][ C0] ? tun_get_user+0x2717/0x4370 [ 192.210399][ C0] ? tun_get_user+0x2717/0x4370 [ 192.215343][ C0] tun_get_user+0x2b44/0x4370 [ 192.220023][ C0] ? aa_file_perm+0x18b/0x15f0 [ 192.224793][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 192.229635][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 192.234834][ C0] ? __lock_acquire+0x683/0x2cf0 [ 192.239873][ C0] ? __pfx_file_ioctl+0x10/0x10 [ 192.244720][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 192.250300][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 192.256040][ C0] ? tun_get+0x1c/0x2f0 [ 192.260208][ C0] ? tun_get+0x1c/0x2f0 [ 192.264472][ C0] ? tun_get+0x1c/0x2f0 [ 192.268655][ C0] ? tun_get+0x1c/0x2f0 [ 192.272884][ C0] tun_chr_write_iter+0x113/0x200 [ 192.277994][ C0] vfs_write+0x612/0xba0 [ 192.282248][ C0] ? __pfx_vfs_write+0x10/0x10 [ 192.287024][ C0] ? __fget_files+0x2a/0x420 [ 192.291735][ C0] ksys_write+0x150/0x270 [ 192.296190][ C0] ? __pfx_ksys_write+0x10/0x10 [ 192.301096][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 192.306338][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.312414][ C0] do_syscall_64+0x174/0x580 [ 192.317014][ C0] ? trace_irq_disable+0x3b/0x140 [ 192.322036][ C0] ? clear_bhb_loop+0x40/0x90 [ 192.326809][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.332698][ C0] RIP: 0033:0x7fd79159de99 [ 192.337111][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.356891][ C0] RSP: 002b:00007fd79243b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.366030][ C0] RAX: ffffffffffffffda RBX: 00007fd791826090 RCX: 00007fd79159de99 [ 192.374278][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000003 [ 192.382524][ C0] RBP: 00007fd791633eaf R08: 0000000000000000 R09: 0000000000000000 [ 192.391497][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.399770][ C0] R13: 00007fd791826128 R14: 00007fd791826090 R15: 00007ffd57c837c8 [ 192.408000][ C0] [ 192.411629][ C0] Kernel Offset: disabled [ 192.415945][ C0] Rebooting in 86400 seconds..