last executing test programs: 3.022599787s ago: executing program 4 (id=11218): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x30}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, r1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x84, @empty, 0x4e20, 0x3, 'sed\x00', 0x3, 0x1, 0x5f}, 0x2c) 2.925883678s ago: executing program 4 (id=11220): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2000000012005f0214f9f4012100fbe40a000000edff84b5ca8d7c102775", 0x1e) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x2, 0x0) 2.054936955s ago: executing program 4 (id=11241): syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r1 = socket(0x15, 0x5, 0x0) getsockname$llc(r1, 0x0, &(0x7f00000002c0)) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) close(r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x50, r5, 0x852dd6c070cd7e4b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x50}, 0x4, 0x700000000000000, 0x0, 0x4049055}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x2, &(0x7f0000000140), 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)={0x758, 0x19, 0x200, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x621, 0x12, 0x0, 0x1, [@generic="25b57e35619bf2be9082cfcd8fba0cd0f2934efacde0a223b473fe77f3e5ba760d3793b2b3589c9fb23ff943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005", @nested={0x5d1, 0x13c, 0x0, 0x1, [@nested={0x174, 0xb7, 0x0, 0x1, [@nested={0x4, 0x31}, @typed={0xc, 0x17, 0x0, 0x0, @u64=0x101}, @nested={0x160, 0x94, 0x0, 0x1, [@nested={0x15c, 0x72, 0x0, 0x1, [@nested={0x4, 0x107}, @generic="e0d0a70910a57989d469d58e3a96c60552471ca03d18871e6849a6a00d5e64bcc82f69f914585a23c15c3e487ce5dbfa4516d8c8562173b133321177e7a0e9047240b8aaf1e3132d4da9aefb1a388cc59eb254f8edd6e79ac6f9cbc6e8dc649321d5a5532fe38e5f9168c604b876869deecdb715c4a261a408c97cf8ee0138113ac027007cebbb635bfe9746f2440d9ec169f5f7fe15aa964547", @generic="3f31e8654e0c8775cc99edb96a6dc1215c", @generic="846bba65d56f54", @generic="26f0c611f7", @generic="e98126a836531774b9b6696359b7f9cb4c8e22c492fcc73e13e59417ff8cdbe822", @typed={0x7b, 0x5d, 0x0, 0x0, @binary="762c9b9cfacb627252be7d9cd9be6a6b328bcb66ede08a19dc08432e6ba04a21f86a472bae5e3554feadb927144f8719272cc67b3fd2deb1ab866ae181385bc98db7d8f968ceb5dc2561c01a6b4b92d0af320a8bc30b134d730b0e313a87ba38d089ce1ec8e76a68d1468fa5eb4c4940ad8e7266f555d0"}]}]}]}, @typed={0x6a, 0xec, 0x0, 0x0, @binary="6ff89688e0b1fa1ed26321745f6fd357c4868a0dcff9599b2e25265f801336a4b51801c0bd0de3adc0dbc13f9a991c812d9824cd6dbf2a2f7525376bc35c4772b8a7d175de882beca3c2c34b9756a575ed60c451d3207b66582dbe4acebc75e3915d388b468d"}, @nested={0x1f4, 0xc1, 0x0, 0x1, [@typed={0x4, 0x11e}, @generic="bb4a66e2198bc43a59f063d716a456ddef143affac2be9d54dde0eb34c30ac59a2a13c850083e2c799f8756f6b9de716bf7aed857bd560cdf30b3abfc27ede7b404ffce484963ade445ca9f0802662faf0", @typed={0x5, 0x85, 0x0, 0x0, @str='\x00'}, @generic="38e66e2aca26ea617121db451f60318cbe0e0e21b93865babc7e4069aa2b87d62ca11b4325c2884181", @typed={0x8, 0x23, 0x0, 0x0, @fd}, @generic="86080246b95cde0bcffb51acba02c66ea64657388537131ba93658f9149d58024011788506c2b5773f8be485d8f8300a0c83bbb21f18c3bbb5077b553e64a1d4", @generic="480f6ba8494d89adf29321c7332f59e610153fbe7a1c89c519ddde86ea904b4fedc792a3cd32d7d6d308fcd018916082b975c8285f0b44e2b18af8909ae9f441490564eee49b1595a8240de70a482fdeb86b1236f03edae3659d48cf4759df1d75ed04d5c707e268bdeb721e085d2929f0abfd739eac06a4589f47d9de828bd122c3502c5d18329192922b98082542328ac44d5122a565328853c79ae0d3d546acec6e8e766e48371124d53d00ff747d329ee857214cbe04d7c98078877fe277df", @nested={0x4, 0x74}, @generic="3d5600b35594b76402278fdd36b0bce86320eb1b17de8570d559a47f0acca71871161a15893e9d39dff8cc129d4a21e85f4b1d755dd705e50faf04a9d9de862ee8066aa341b27f849e929f5959b045d2f30182b9160eb8e8579c6a731a"]}, @nested={0x4, 0x149}, @generic="12e6367337f8f778dfdd456fd8fb17ae989692d99e13382729458f5708f8a3bebcff5125ee57fc438cee7a3a537b52850a96fe748e56365f2ca1984730091af730611ed8f46c7d176d7cddd92e929184a879cd4a67d89c8b902606e18c9419c8f64f4d688e768aa51d0e956a9a6746811169c9664427f09f87134ca4ff593eb1d947e70b1c2a3c87062ee8ca18bd03b3c7be1aaeec77835414cbc462687e3d3424e8ac8a1f48819ef9b6402eba14f3fb01695e9ae3df9e56ad", @generic="65eb8f85093072e53b0b220719b62a521d0f08189c2c26276c17866e3aa028f19c0e0a7cc64814edd19664a9fdae0eca01fac990ca5a34808c6a982dfd07aaab50bd9fe89f450ea389b1a29cc2ac4addb72b4459342f53aa7af8df9165c129", @typed={0x4, 0x27}, @generic="069c580f0d4953c9571046ad324af751975dfe077643512f9fcaab872fc076ed326157419e4e257502acc74200d885d2b6cc01f9253d93839f12f01cb49b67c20b185925e9976d579b9d74dacfeea69d349ce8906a8ad7d1a87079e8c81bfcec8ad507aeba745822d57aca5b4562f14d2c805e0f40d902facec4c69ac9c569421a5e7642ece17fdf384d7b5d5bdf929f0016b4c710998a2773830123ac0a8a14178b2ac707869893812ade4112f7ce872cee299abcddd4998aa91ef68e64c9d1bde3a1d9daafb951443dff50e2", @typed={0x8, 0x8c, 0x0, 0x0, @uid=r9}, @nested={0x4, 0x64}]}]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xdd, 0x14d, 0x0, 0x0, @binary="0f46f1849e80333a72c47c602d9970739272ca25d0ed59ba2d54f2dbf1ce1d4305d0ef433df7b8370107edbc85bfb216efdc1b0b64d6a716ab6d8204ff7498a0d528471596a2bffd9f39f5d68ca46f729302ab4cb1bca132d999b0a04b1ddb2404cb28de890a87617e79217b4cafbcb340e885260db96e23db715cecc61ce445ad06cf189c29e6fb925cc6f1c5db4e1f43cd4f582f94a84bf0152dfada7b9826bbbfd394d745fd122010a19f7c2e459f59c5e8cccc8d9d0124b01020e16d5fa1f4882dc1043dec61df7983901630639c97157316c9285b79ba"}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x758}}, 0x0) 1.796353248s ago: executing program 0 (id=11243): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x2, 0xfdfd, 0xf}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.576890649s ago: executing program 1 (id=11244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3f00, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.386465527s ago: executing program 1 (id=11245): r0 = socket$inet6(0xa, 0x80d, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [0xffff00, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff, 0xffffff00], 'syz_tun\x00', 'macvtap0\x00', {0xff}, {}, 0xff, 0x7, 0x2, 0x4f}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x77, 0x2, 0x1, [0x8, 0x1000, 0x40, 0x9, 0xfff8, 0x1, 0x6, 0x2, 0x6, 0x7, 0xfee2, 0x2, 0xfff1, 0x2, 0x6, 0x9], 0x3}}, @common=@ah={{0x30}, {[0x3, 0x4d6], 0x8, 0x2, 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @remote, [0xff, 0x0, 0xffffff00, 0xffff00], [0xff, 0xff000000, 0xff, 0xff], 'nr0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x6c, 0x1, 0x8}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x0, 0x2}, {0x1, 0x5}}}}, {{@ipv6={@private1, @remote, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0xff, 0x0, 0xff000000], 'vcan0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x84, 0x2, 0x1, 0x40}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x6], 0x6, 0x22, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010004000000fbe7df2501000000080001064f80a8c01f1515ef53bb59529c811900001400048005000300010000000500030006000000080002000200000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0xc040814}, 0x800) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}}, 0x40) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000006c0)={0x1c, 0x0, 0x11d, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x48094) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r11, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) 1.357981626s ago: executing program 0 (id=11248): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x9, [@enum64={0xb, 0x4, 0x0, 0x13, 0x1, 0x4, [{0x10, 0x7, 0x8}, {0x3, 0x9f, 0x2}, {0x4, 0xa1, 0x80000001}, {0x9, 0x7, 0x9}]}, @var={0xb, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x2e, 0xe, 0x6f, 0x5f, 0x30, 0x61, 0x0]}}, &(0x7f0000000100)=""/172, 0x6d, 0xac, 0x0, 0x7f}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x200001d8, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000)={0x4, 0x8}, 0x8, 0x10, &(0x7f0000000240)={0xfffffffd, 0x0, 0x4}, 0x10}, 0x94) 1.299736173s ago: executing program 1 (id=11249): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40001) r1 = socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000152c0005800c0001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000152c0005800c0001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r3, 0x0) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r4, 0x0) (async) syz_open_procfs$namespace(r4, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x0, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x7, 0xfffff214}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x0, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x7, 0xfffff214}}) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) (async) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001c0000000000000064000000640000000300000003"], 0x0, 0x7f, 0x0, 0x1, 0x2}, 0x20) sendmsg$kcm(r9, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x3c4}, {0x0}], 0x2}, 0x8400) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYRESDEC=r0], 0x4c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYRESDEC=r0], 0x4c}}, 0x0) 1.222006765s ago: executing program 0 (id=11250): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000006380)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @private0, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001840)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}}], 0x1, 0x8044) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 1.177989531s ago: executing program 4 (id=11251): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2000000012005f0214f9f4012100fbe40a000000edff84b5ca8d7c102775", 0x1e) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x2, 0x0) 1.140771741s ago: executing program 0 (id=11253): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x9200000000000000) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/118, 0x76}], 0x1}, 0xd335}], 0x2, 0x2120, 0x0) close(0x4) socket(0x10, 0x803, 0x0) 976.235475ms ago: executing program 1 (id=11255): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804) 906.113233ms ago: executing program 1 (id=11257): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0), 0x0, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) 604.199321ms ago: executing program 3 (id=11262): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x9, 'syz0\x00', @default, 0x1, 0x0, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES32], 0x38}}], 0x2, 0x0) 583.662624ms ago: executing program 2 (id=11263): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) 490.468085ms ago: executing program 3 (id=11264): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="61156d0000000000611350000000ffb0bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c07000000000000009555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a59a08077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aac263dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d85fa4373d5b569ac3353cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2ff070000cfb030dd4ac0fe54db67510d3e9a5d36b900000074000000000000000000000000006e96ba8f5e7e89bef4226173e20ebb17b924e9e6d0ee163713b2bd56f58dec64df91417beaac4061e6216774e048276e110d25fe936b2cf31dc573b98bd037bceeae7feb600897c8364af49ce59027a6ee5d7c6e12c0f45c0f376d9da065ca0499e209655d2420fcfa10fccf2cbe7b60161cc6cbd874c928689acd9d4e00cefacc88"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 488.423135ms ago: executing program 2 (id=11265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x14, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) r2 = socket(0x10, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @mcast1, @empty, 0x7800, 0x7f, 0xfffffffb, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl0\x00', r5, 0x0, 0x0, 0x1, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x42}, @local, 0x10, 0x0, 0xfffffffc}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={&(0x7f00000003c0)="e27a83af22cca7fbcafd890ed024c7b09c20196ee4e69b67418ae4f148f5a0a27362913e8af4dac29912c619e1cb92b1708978fb730c6d77e23df3ebd0f87944a54d89bcdd09db4c6fa66d0d93e8621d11d79ec1e6e0d8502d65e726385bf96d60fe285f4da5fe816abe5009142b75fbb111774275284b4a094eebdf7245b2d77350e9c87223ba3a3f81856eb0e60899e9254d3e1c71da8f6df53d70aa83c80a5958cdf2eb3d88327808aa5f68a24212911f4a7ddd37fe0c75fd", &(0x7f0000000480)=""/241, &(0x7f0000000580)="7791c772a40d8712223dbf756ed9be8a78f951ae4e72c2104ad1b59b6a2344d32f156f4c795af99c5e06b6ad9252c549693fb4fec192e6431e56", &(0x7f00000005c0)="7ff9c0c70649604dbab08a4310865981cd5c38ed574cfc2f1d49d12a1db18cab66c517f41e6b9345fea8547e390dc8ce474c0e8e4197af37f59a880ee1850a7997f6c8962314e3f6e086f0feffd175894383e4818e443f54ed675298dfd2fce2e8a5dc3d5572eba6d2964a99f7d24e118e433b7f274a33b4f9104abbad9ad57a8259780b256d3623a6fc29d8fab8002078fb52c7807f37867978d31872388418b7a352779a37bce56f3bd71352bacf518f7bb95faae3ba0fcc3d5d58bcc6f81e36f981f5c1c17e3b74e64f5c8b2a8abd28d92173017bff", 0x3, r1}, 0x38) (async) r6 = socket(0xa, 0x3, 0xff) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000000506010300000000000000000200000705000000070000000500010007000000fd7a69ffa53d0900030073797a32000000000500010007000000c724d2a97f12dfa58dd035801006e3ab635e1c077117ee9b04bd3cae29f3fec994f9000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) sendmsg$inet6(r6, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="00001000000000", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fe", 0x1b}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000140)='+', 0x1}], 0x4}, 0x20008b88) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004800}, 0x90) 475.589761ms ago: executing program 3 (id=11266): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipmr_newroute={0x1c, 0x18, 0x1, 0x70bd2d, 0x25dfdbff, {0x80, 0x14, 0x20, 0x7, 0xfe, 0x1, 0xfe, 0x6, 0x100}}, 0x1c}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x40, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c"], 0xfc}}, 0x0) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000280)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)="683f0057954e8374745129caea99bc671e3d", 0x9d}, {&(0x7f0000000580)="a492e95857d9dad0c70b72425db11aaf3ffd93dad70350", 0x17}, {&(0x7f0000000400)="00ee4e", 0x3}], 0x5) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) 439.32883ms ago: executing program 2 (id=11267): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (fail_nth: 10) 326.412662ms ago: executing program 2 (id=11268): getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000380)=""/86, &(0x7f0000000400)=0x56) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xff, 0x6}}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x103, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x4000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x103, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"/262, @ANYRES8=r0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"/262, @ANYRES8=r0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @empty}, &(0x7f0000000440)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x68}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) 326.246616ms ago: executing program 3 (id=11269): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030529bd70000000200000000000", @ANYRES32=0x0, @ANYBLOB="00feffffffff000008001d0006000000200012800800010067080000000000ffffff03000200000008000200", @ANYRES32, @ANYBLOB='\b\x00%\x00'], 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 279.683628ms ago: executing program 4 (id=11270): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1003, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="9b0f2bbd7000ffdbdf2d010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 233.616278ms ago: executing program 2 (id=11271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c001000cb58d76b323be9ca985e851f5399cbe1f4c2d3de8c1d55", @ANYRES16=r2, @ANYBLOB="00012bbd7000fddbdf250100000000000000024100000010001369623a70696d367265670000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x40) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 174.614637ms ago: executing program 3 (id=11272): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=r1, @ANYBLOB="000f000023000400240012800b0001006272696467650000140002800800080088a8"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 170.208072ms ago: executing program 2 (id=11273): r0 = socket$inet6(0xa, 0x80d, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [0xffff00, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff, 0xffffff00], 'syz_tun\x00', 'macvtap0\x00', {0xff}, {}, 0xff, 0x7, 0x2, 0x4f}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x77, 0x2, 0x1, [0x8, 0x1000, 0x40, 0x9, 0xfff8, 0x1, 0x6, 0x2, 0x6, 0x7, 0xfee2, 0x2, 0xfff1, 0x2, 0x6, 0x9], 0x3}}, @common=@ah={{0x30}, {[0x3, 0x4d6], 0x8, 0x2, 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @remote, [0xff, 0x0, 0xffffff00, 0xffff00], [0xff, 0xff000000, 0xff, 0xff], 'nr0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x6c, 0x1, 0x8}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x0, 0x2}, {0x1, 0x5}}}}, {{@ipv6={@private1, @remote, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0xff, 0x0, 0xff000000], 'vcan0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x84, 0x2, 0x1, 0x40}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x4, 0x0, [0xfffe, 0xd, 0x5, 0x7, 0x0, 0x5, 0x6, 0xf, 0x200, 0x1, 0x8, 0x0, 0x2, 0x2, 0x98a, 0x3], 0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010004000000fbe7df2501000000080001064f80a8c01f1515ef53bb59529c811900001400048005000300010000000500030006000000080002000200000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0xc040814}, 0x800) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}}, 0x40) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000006c0)={0x1c, 0x0, 0x11d, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x48094) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r11, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) 154.25813ms ago: executing program 0 (id=11274): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x450, 0xffffffff, 0x3b8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1f0, 0x218, 0x0, {0x100000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0x7ff, 0x298e, 0x1, 0x9, 0x3, 0x81, 0x0, 0x80, 0x20}, {0x6}}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x3, 0x1, 0x4], 0x0, 0x2}, {0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4], 0x3, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket(0x1e, 0x4, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4041) (async) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x134, 0x1, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_NAT_DST={0x0, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MINIP={0x0, 0x4, @local}, @CTA_NAT_V6_MINIP={0x0, 0x4, @remote}, @CTA_NAT_V6_MINIP={0x0, 0x4, @private0}]}, @CTA_NAT_DST={0xe8, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x1c, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0xfffffffffffffc20, 0x1, @multicast1}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x36}}]}]}, 0x134}}, 0x20040091) (async) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6}]}}}]}, 0x40}}, 0x0) 98.593352ms ago: executing program 4 (id=11275): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newtaction={0x14, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="62afbcf72be12f300800000000fbffff04cc886371faffffff6196ef1844", 0x1e}, {}], 0x2}, 0x800) (async) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000e401000000440004800500030005000000050003000100000005000300050000002000030001000000050003000500000055fe03000200000005000300000000000500030080ff000008000200020000000800010003"], 0x68}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001e000100fdffffff0000000002000000010000070000000014000900766c616e300000000000000000000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x44}}, 0x0) 98.454991ms ago: executing program 3 (id=11276): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 8.571032ms ago: executing program 0 (id=11277): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000126bd7000fddbdf25110000000c000180080003000200000044000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006e69637666300000000000000000000008000300030000001400020077673000"/48], 0x64}, 0x1, 0x0, 0x0, 0x80000}, 0x2000c895) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000) 0s ago: executing program 1 (id=11278): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (fail_nth: 11) kernel console output (not intermixed with test programs): allmulticast mode [ 808.180435][ T4055] gretap13: entered promiscuous mode [ 808.185794][ T4055] gretap13: entered allmulticast mode [ 808.192235][ T4055] bond24: entered promiscuous mode [ 808.198191][ T4055] bond24: entered allmulticast mode [ 808.204338][ T4055] vlan4: entered promiscuous mode [ 808.210428][ T4055] vlan4: entered allmulticast mode [ 808.215715][ T4055] bond25: entered promiscuous mode [ 808.221654][ T4055] gretap14: entered promiscuous mode [ 808.228078][ T4055] gretap14: entered allmulticast mode [ 808.233624][ T4055] mac80211_hwsim hwsim52 wlan11: entered promiscuous mode [ 808.241353][ T4055] mac80211_hwsim hwsim52 wlan11: entered allmulticast mode [ 808.249700][ T4055] syzkaller1: entered promiscuous mode [ 808.255170][ T4055] syzkaller1: entered allmulticast mode [ 808.262766][ T5941] C speed is unknown, defaulting to 1000 [ 808.270323][ T5941] syz2: Port: 1 Link DOWN [ 808.302193][ T4082] dvmrp0: entered allmulticast mode [ 808.310550][ T3901] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.319858][ T3901] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 34684 - 0 [ 808.328990][ T3901] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.339173][ T3901] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 34684 - 0 [ 808.348687][ T5941] C speed is unknown, defaulting to 1000 [ 808.415401][ T3901] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.447152][ T3901] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 34684 - 0 [ 808.470360][ T3901] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.479615][ T3901] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 34684 - 0 [ 808.499151][ T4087] FAULT_INJECTION: forcing a failure. [ 808.499151][ T4087] name failslab, interval 1, probability 0, space 0, times 0 [ 808.515941][ T4087] CPU: 0 UID: 0 PID: 4087 Comm: syz.3.9629 Not tainted syzkaller #0 PREEMPT(full) [ 808.515968][ T4087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 808.515978][ T4087] Call Trace: [ 808.515986][ T4087] [ 808.515995][ T4087] dump_stack_lvl+0xe8/0x150 [ 808.516025][ T4087] should_fail_ex+0x412/0x560 [ 808.516057][ T4087] should_failslab+0xa8/0x100 [ 808.516082][ T4087] __kmalloc_noprof+0xe8/0x760 [ 808.516104][ T4087] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 808.516129][ T4087] tomoyo_realpath_from_path+0xe3/0x5d0 [ 808.516150][ T4087] ? tomoyo_domain+0xd7/0x130 [ 808.516175][ T4087] ? tomoyo_path_number_perm+0x219/0x630 [ 808.516200][ T4087] tomoyo_path_number_perm+0x246/0x630 [ 808.516226][ T4087] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 808.516251][ T4087] ? __lock_acquire+0x6b5/0x2cf0 [ 808.516293][ T4087] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 808.516336][ T4087] ? __fget_files+0x2a/0x420 [ 808.516358][ T4087] ? __fget_files+0x2a/0x420 [ 808.516375][ T4087] ? __fget_files+0x3a0/0x420 [ 808.516392][ T4087] ? __fget_files+0x2a/0x420 [ 808.516424][ T4087] security_file_ioctl+0xc3/0x2a0 [ 808.516451][ T4087] __se_sys_ioctl+0x47/0x170 [ 808.516475][ T4087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.516496][ T4087] do_syscall_64+0x15f/0xf80 [ 808.516518][ T4087] ? trace_irq_disable+0x3b/0x140 [ 808.516541][ T4087] ? clear_bhb_loop+0x40/0x90 [ 808.516564][ T4087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.516583][ T4087] RIP: 0033:0x7f7e0399cdd9 [ 808.516601][ T4087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.516616][ T4087] RSP: 002b:00007f7e0489f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 808.516635][ T4087] RAX: ffffffffffffffda RBX: 00007f7e03c15fa0 RCX: 00007f7e0399cdd9 [ 808.516648][ T4087] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000004 [ 808.516660][ T4087] RBP: 00007f7e0489f090 R08: 0000000000000000 R09: 0000000000000000 [ 808.516671][ T4087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.516682][ T4087] R13: 00007f7e03c16038 R14: 00007f7e03c15fa0 R15: 00007ffe743fc648 [ 808.516712][ T4087] [ 808.740274][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 808.771038][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 808.777883][ T1314] clip:clip_start_xmit: skb_dst(skb) == NULL [ 808.791388][ T4087] ERROR: Out of memory at tomoyo_realpath_from_path. [ 808.802253][ T4093] netlink: 'syz.0.9631': attribute type 21 has an invalid length. [ 808.825308][ T4095] netlink: 'syz.2.9633': attribute type 4 has an invalid length. [ 808.842479][ T4096] netlink: zone id is out of range [ 808.847055][ T4095] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9633'. [ 808.848752][ T4096] netlink: zone id is out of range [ 808.864610][ T4096] netlink: zone id is out of range [ 808.870519][ T4096] netlink: zone id is out of range [ 808.877342][ T4096] netlink: zone id is out of range [ 808.882778][ T4096] netlink: zone id is out of range [ 808.889395][ T4096] netlink: zone id is out of range [ 808.894607][ T4096] netlink: zone id is out of range [ 808.901791][ T4096] netlink: zone id is out of range [ 808.907952][ T4096] netlink: zone id is out of range [ 808.953320][ T4093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9631'. [ 809.097383][ T4102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9630'. [ 809.130196][ T4104] netlink: 'syz.0.9635': attribute type 8 has an invalid length. [ 809.147246][ T4104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9635'. [ 809.154430][ T4102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9630'. [ 809.315229][ T4113] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap15 [ 809.454038][ T4124] ip6t_srh: unknown srh invflags 4000 [ 809.538160][ T4128] netlink: 'syz.3.9645': attribute type 10 has an invalid length. [ 809.547772][ T4128] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 809.689308][ T4140] netlink: 'syz.3.9648': attribute type 8 has an invalid length. [ 810.456995][T31833] syzkaller1: tun_net_xmit 90 [ 811.214048][ T4249] netlink: 'syz.0.9672': attribute type 8 has an invalid length. [ 811.215576][ T4251] __nla_validate_parse: 9 callbacks suppressed [ 811.215592][ T4251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9674'. [ 811.256477][ T4249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9672'. [ 811.291593][ T4254] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9675'. [ 811.317171][ T4251] netlink: 'syz.1.9674': attribute type 1 has an invalid length. [ 811.355935][ T4254] netlink: 'syz.2.9675': attribute type 28 has an invalid length. [ 811.395208][ T4254] netlink: 'syz.2.9675': attribute type 3 has an invalid length. [ 811.430044][ T4254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9675'. [ 811.562274][ T4268] batadv0: entered allmulticast mode [ 811.775079][ T4282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9682'. [ 811.804606][ T4282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9682'. [ 811.984275][ T4300] netlink: 'syz.0.9688': attribute type 8 has an invalid length. [ 812.003430][ T4300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9688'. [ 812.249866][ T4312] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9691'. [ 812.532233][ T4328] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9695'. [ 812.827562][ T4347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9699'. [ 812.894791][ T4350] syzkaller0: entered promiscuous mode [ 812.903054][ T4352] netlink: 'syz.4.9701': attribute type 8 has an invalid length. [ 812.914342][ T4350] syzkaller0: entered allmulticast mode [ 813.824923][ T4400] netlink: 'syz.2.9713': attribute type 8 has an invalid length. [ 813.916554][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5140 ms [ 813.924643][ C0] lec:lec_tx_timeout: lec0 [ 814.079819][ T4405] syzkaller0: entered promiscuous mode [ 814.115912][ T4405] syzkaller0: entered allmulticast mode [ 814.185824][ T4405] geneve5: entered promiscuous mode [ 814.202186][ T4405] geneve5: entered allmulticast mode [ 814.363847][ T4423] mac80211_hwsim hwsim11 pimreg: entered promiscuous mode [ 814.374314][ T4423] mac80211_hwsim hwsim11 pimreg: entered allmulticast mode [ 814.691225][ T4442] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap16 [ 815.086951][ T4468] syzkaller0: entered promiscuous mode [ 815.102142][ T4468] syzkaller0: entered allmulticast mode [ 815.235914][ T4476] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 815.263007][ T4481] netlink: 'syz.1.9729': attribute type 30 has an invalid length. [ 815.272292][ T4480] netlink: 'syz.1.9729': attribute type 30 has an invalid length. [ 815.294179][ T4479] netlink: 'syz.4.9728': attribute type 5 has an invalid length. [ 816.290289][ T4548] __nla_validate_parse: 11 callbacks suppressed [ 816.290311][ T4548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9747'. [ 816.404042][ T4557] validate_nla: 1 callbacks suppressed [ 816.404062][ T4557] netlink: 'syz.0.9749': attribute type 8 has an invalid length. [ 816.455744][ T4557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9749'. [ 816.610784][ T4564] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9752'. [ 816.627237][ T4543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9747'. [ 816.667049][ T4562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9751'. [ 816.677696][ T4548] lo: Caught tx_queue_len zero misconfig [ 817.292486][ T4601] FAULT_INJECTION: forcing a failure. [ 817.292486][ T4601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.307474][ T4601] CPU: 0 UID: 0 PID: 4601 Comm: syz.4.9764 Not tainted syzkaller #0 PREEMPT(full) [ 817.307499][ T4601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 817.307510][ T4601] Call Trace: [ 817.307518][ T4601] [ 817.307526][ T4601] dump_stack_lvl+0xe8/0x150 [ 817.307560][ T4601] should_fail_ex+0x412/0x560 [ 817.307593][ T4601] _copy_from_user+0x2d/0xb0 [ 817.307617][ T4601] ___sys_recvmsg+0x175/0x590 [ 817.307644][ T4601] ? __pfx____sys_recvmsg+0x10/0x10 [ 817.307669][ T4601] ? __fget_files+0x2a/0x420 [ 817.307706][ T4601] ? __fget_files+0x3a0/0x420 [ 817.307735][ T4601] do_recvmmsg+0x334/0x800 [ 817.307765][ T4601] ? __pfx_do_recvmmsg+0x10/0x10 [ 817.307797][ T4601] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 817.307840][ T4601] __x64_sys_recvmmsg+0x198/0x250 [ 817.307865][ T4601] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 817.307894][ T4601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.307915][ T4601] do_syscall_64+0x15f/0xf80 [ 817.307938][ T4601] ? trace_irq_disable+0x3b/0x140 [ 817.307962][ T4601] ? clear_bhb_loop+0x40/0x90 [ 817.307985][ T4601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.308003][ T4601] RIP: 0033:0x7f9c93b9cdd9 [ 817.308021][ T4601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.308036][ T4601] RSP: 002b:00007f9c949a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 817.308056][ T4601] RAX: ffffffffffffffda RBX: 00007f9c93e15fa0 RCX: 00007f9c93b9cdd9 [ 817.308070][ T4601] RDX: 0000000000000002 RSI: 0000200000002880 RDI: 0000000000000003 [ 817.308082][ T4601] RBP: 00007f9c949a4090 R08: 0000000000000000 R09: 0000000000000000 [ 817.308093][ T4601] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 817.308104][ T4601] R13: 00007f9c93e16038 R14: 00007f9c93e15fa0 R15: 00007ffd8e89c078 [ 817.308145][ T4601] [ 817.557542][ T4609] raw_sendmsg: syz.3.9765 forgot to set AF_INET. Fix it! [ 817.672367][ T4616] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 818.388545][ T4651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9778'. [ 818.605708][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9783'. [ 818.644863][ T4663] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9782'. [ 818.732378][ T4667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9786'. [ 818.750259][ T4665] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9784'. [ 818.806252][ T4667] bond37: Invalid ad_actor_system MAC address. [ 818.812721][ T4667] bond37: option ad_actor_system: invalid value (1) [ 818.825658][ T4667] bond37 (unregistering): Released all slaves [ 818.882083][ T4665] veth13: entered promiscuous mode [ 819.330384][ T4708] netlink: 'syz.2.9801': attribute type 8 has an invalid length. [ 819.339668][ T4707] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap21 [ 819.842055][ T4735] gre2: entered promiscuous mode [ 820.493961][ T4782] FAULT_INJECTION: forcing a failure. [ 820.493961][ T4782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.519242][ T4782] CPU: 0 UID: 0 PID: 4782 Comm: syz.4.9821 Not tainted syzkaller #0 PREEMPT(full) [ 820.519270][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 820.519282][ T4782] Call Trace: [ 820.519289][ T4782] [ 820.519297][ T4782] dump_stack_lvl+0xe8/0x150 [ 820.519330][ T4782] should_fail_ex+0x412/0x560 [ 820.519365][ T4782] _copy_to_iter+0x589/0x17d0 [ 820.519398][ T4782] ? __pfx__copy_to_iter+0x10/0x10 [ 820.519414][ T4782] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 820.519434][ T4782] ? lockdep_hardirqs_on+0x7a/0x110 [ 820.519457][ T4782] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 820.519478][ T4782] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 820.519502][ T4782] __skb_datagram_iter+0xf8/0x980 [ 820.519524][ T4782] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 820.519552][ T4782] skb_copy_datagram_iter+0xb5/0x240 [ 820.519576][ T4782] netlink_recvmsg+0x2c3/0xa50 [ 820.519605][ T4782] ? __pfx_netlink_recvmsg+0x10/0x10 [ 820.519624][ T4782] ? __lock_acquire+0x6b5/0x2cf0 [ 820.519648][ T4782] ? aa_sock_msg_perm+0xf1/0x1b0 [ 820.519667][ T4782] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 820.519688][ T4782] ? security_socket_recvmsg+0x7e/0x2c0 [ 820.519709][ T4782] ? __pfx_netlink_recvmsg+0x10/0x10 [ 820.519726][ T4782] sock_recvmsg+0x172/0x1b0 [ 820.519752][ T4782] ____sys_recvmsg+0x1e6/0x4a0 [ 820.519782][ T4782] ? __pfx_____sys_recvmsg+0x10/0x10 [ 820.519819][ T4782] ? import_iovec+0x73/0xa0 [ 820.519843][ T4782] ___sys_recvmsg+0x215/0x590 [ 820.519870][ T4782] ? __pfx____sys_recvmsg+0x10/0x10 [ 820.519895][ T4782] ? __fget_files+0x2a/0x420 [ 820.519931][ T4782] ? __fget_files+0x3a0/0x420 [ 820.519958][ T4782] do_recvmmsg+0x334/0x800 [ 820.519993][ T4782] ? __pfx_do_recvmmsg+0x10/0x10 [ 820.520024][ T4782] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 820.520063][ T4782] __x64_sys_recvmmsg+0x198/0x250 [ 820.520088][ T4782] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 820.520118][ T4782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.520139][ T4782] do_syscall_64+0x15f/0xf80 [ 820.520162][ T4782] ? trace_irq_disable+0x3b/0x140 [ 820.520186][ T4782] ? clear_bhb_loop+0x40/0x90 [ 820.520209][ T4782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.520227][ T4782] RIP: 0033:0x7f9c93b9cdd9 [ 820.520246][ T4782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.520261][ T4782] RSP: 002b:00007f9c949a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 820.520282][ T4782] RAX: ffffffffffffffda RBX: 00007f9c93e15fa0 RCX: 00007f9c93b9cdd9 [ 820.520296][ T4782] RDX: 0000000000000002 RSI: 0000200000002880 RDI: 0000000000000003 [ 820.520308][ T4782] RBP: 00007f9c949a4090 R08: 0000000000000000 R09: 0000000000000000 [ 820.520319][ T4782] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 820.520330][ T4782] R13: 00007f9c93e16038 R14: 00007f9c93e15fa0 R15: 00007ffd8e89c078 [ 820.520360][ T4782] [ 821.121540][ T4807] netlink: 'syz.0.9828': attribute type 1 has an invalid length. [ 821.275596][ T4807] 8021q: adding VLAN 0 to HW filter on device bond28 [ 821.390072][ T4815] bond28: (slave gretap22): making interface the new active one [ 821.404561][ T4815] bond28: (slave gretap22): Enslaving as an active interface with an up link [ 821.444589][ T4824] vlan3: entered promiscuous mode [ 821.714898][ T4842] netlink: 'syz.2.9841': attribute type 16 has an invalid length. [ 821.757570][ T4842] __nla_validate_parse: 6 callbacks suppressed [ 821.757590][ T4842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9841'. [ 821.792278][ T4844] sctp: [Deprecated]: syz.0.9842 (pid 4844) Use of int in maxseg socket option. [ 821.792278][ T4844] Use struct sctp_assoc_value instead [ 821.796671][ T4848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9844'. [ 822.279595][ T4882] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9855'. [ 822.406143][ T4888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9858'. [ 822.588663][ T4900] tipc: Enabled bearer , priority 0 [ 822.821388][ T4931] tipc: Failed to remove unknown binding: 66,0,0/10463914:3926735183/3926735185 [ 822.833691][ T4931] tipc: Failed to remove unknown binding: 66,0,0/10463914:3926735183/3926735184 [ 822.844224][ T4931] tipc: Failed to remove unknown binding: 66,0,0/10463914:3926735183/3926735185 [ 822.853624][ T4931] tipc: Failed to remove unknown binding: 66,0,0/10463914:3926735183/3926735184 [ 822.980241][ T4937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9873'. [ 822.990769][ T4937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9873'. [ 823.002136][ T4937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9873'. [ 823.154022][ T4940] Cannot find del_set index 4 as target [ 825.563391][ T4900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 826.111844][ T4974] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap23 [ 826.166177][ T4972] syzkaller0: entered promiscuous mode [ 826.180086][ T4972] syzkaller0: entered allmulticast mode [ 826.222237][ T4972] geneve3: entered promiscuous mode [ 826.235317][ T4972] geneve3: entered allmulticast mode [ 826.302463][ T4982] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9886'. [ 826.331942][ T4988] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9886'. [ 826.346724][ T4981] bond33: Unable to set up delay as MII monitoring is disabled [ 826.356193][ T4981] bond33 (unregistering): Released all slaves [ 826.418532][ T4991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9888'. [ 827.001947][ T5021] netlink: 'syz.3.9896': attribute type 1 has an invalid length. [ 827.013051][ T5018] __nla_validate_parse: 3 callbacks suppressed [ 827.013069][ T5018] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9897'. [ 827.024892][ T5021] netlink: 228 bytes leftover after parsing attributes in process `syz.3.9896'. [ 827.057178][ T5018] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 827.084911][ T5018] net_ratelimit: 49 callbacks suppressed [ 827.084930][ T5018] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 827.247850][ T5029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9899'. [ 827.663974][ T5054] syzkaller1: entered promiscuous mode [ 827.685774][ T5054] syzkaller1: entered allmulticast mode [ 827.714488][ T29] audit: type=1107 audit(1777043883.757:9): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 827.723155][ T5054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9909'. [ 827.760081][ T5058] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9911'. [ 827.782887][ T5062] netlink: 'syz.1.9913': attribute type 12 has an invalid length. [ 827.870957][ T5061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9912'. [ 827.892708][ T5061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9912'. [ 827.937129][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9914'. [ 827.994238][ T5065] veth0_macvtap: left promiscuous mode [ 828.048980][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9919'. [ 828.143810][ T5087] H: renamed from dummy0 (while UP) [ 828.199928][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9922'. [ 828.282392][ T5090] macvlan2: entered allmulticast mode [ 828.298285][ T5090] vlan1: entered allmulticast mode [ 828.313236][ T5090] veth0_vlan: entered allmulticast mode [ 828.945860][ T5140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.011187][ T5144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 829.018536][ T5144] IPv6: NLM_F_CREATE should be set when creating new route [ 829.474220][ T5183] bond21: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 829.502176][ T5183] bond21 (unregistering): Released all slaves [ 829.734519][ T5203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 829.778554][ T5208] macvlan0: left promiscuous mode [ 829.791894][ T5208] netlink: 'syz.1.9959': attribute type 1 has an invalid length. [ 829.815798][ T5208] netlink: 'syz.1.9959': attribute type 2 has an invalid length. [ 829.828195][ T5203] openvswitch: netlink: Message has 7 unknown bytes. [ 829.894056][ T5223] bridge: RTM_NEWNEIGH with invalid ether address [ 829.923975][ T5223] bridge: RTM_NEWNEIGH with invalid ether address [ 830.682828][ T5268] netlink: 'syz.0.9978': attribute type 32 has an invalid length. [ 831.696031][ T5339] netlink: 'syz.1.9998': attribute type 11 has an invalid length. [ 831.763745][ T5340] netlink: 'syz.4.9997': attribute type 1 has an invalid length. [ 831.805846][ T5346] vlan1: entered promiscuous mode [ 831.841602][ T5348] netlink: 'syz.2.10002': attribute type 3 has an invalid length. [ 832.153161][ T5365] __nla_validate_parse: 35 callbacks suppressed [ 832.153184][ T5365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10008'. [ 832.218471][ T5365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10008'. [ 832.589803][ T5389] bond29 (unregistering): Released all slaves [ 832.712354][ T5400] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 832.863605][ T5412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10022'. [ 833.245224][ T5435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10031'. [ 833.282591][ T5435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10031'. [ 833.459520][ T5451] netlink: 'syz.0.10038': attribute type 1 has an invalid length. [ 833.545122][ T5457] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap24 [ 833.779182][ T5470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10043'. [ 833.819394][ T5471] : (slave bridge_slave_1): Releasing backup interface [ 833.833739][ T5471] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 833.864850][ T5470] macsec1: entered promiscuous mode [ 833.872321][ T5470] macsec1: entered allmulticast mode [ 833.879726][ T5470] bridge0: entered allmulticast mode [ 833.888208][ T5470] bridge0: port 1(macsec1) entered blocking state [ 833.895630][ T5470] bridge0: port 1(macsec1) entered disabled state [ 833.910259][ T5470] bridge0: left allmulticast mode [ 833.952337][ T5474] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10045'. [ 834.160815][ T5490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10048'. [ 834.300731][ T5499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10053'. [ 834.495381][ T5497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10051'. [ 834.610672][ T5524] netlink: 'syz.1.10058': attribute type 4 has an invalid length. [ 834.630057][ T5524] netlink: 'syz.1.10058': attribute type 14 has an invalid length. [ 834.979353][ T5548] ip6tnl0: Caught tx_queue_len zero misconfig [ 835.003173][ T5548] pim6reg: entered allmulticast mode [ 835.181167][ T5556] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap17 [ 835.538790][ T5566] xt_hashlimit: size too large, truncated to 1048576 [ 836.012333][ T5588] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap18 [ 836.068040][ T5593] netlink: 'syz.1.10081': attribute type 8 has an invalid length. [ 836.678071][ T5640] netlink: 'syz.3.10097': attribute type 8 has an invalid length. [ 836.691684][ T5636] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap19 [ 837.285395][ T5674] vlan3: entered promiscuous mode [ 837.444448][ T5689] __nla_validate_parse: 9 callbacks suppressed [ 837.444469][ T5689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10110'. [ 837.462703][ T5689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10110'. [ 837.509583][ T5693] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap23 [ 837.904356][ T5722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10120'. [ 838.012664][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10124'. [ 838.030791][ T5728] SET target dimension over the limit! [ 838.098272][ T5726] bridge16: entered promiscuous mode [ 838.103757][ T5726] bridge16: entered allmulticast mode [ 838.121820][ T5733] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10126'. [ 838.129057][ T5726] team0: Port device bridge16 added [ 838.175490][ T5726] bridge0: port 1(gretap0) entered blocking state [ 838.225233][ T5726] bridge0: port 1(gretap0) entered disabled state [ 838.260886][ T5726] gretap0: entered allmulticast mode [ 838.279363][ T5726] gretap0: entered promiscuous mode [ 838.512390][ T5753] netlink: 'syz.2.10133': attribute type 25 has an invalid length. [ 838.675057][ T5763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10136'. [ 838.880651][ T5774] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10141'. [ 838.901983][ T5775] netlink: 'syz.2.10139': attribute type 1 has an invalid length. [ 838.929272][ T5774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10141'. [ 838.958941][ T5778] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10139'. [ 838.973246][ T5774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10141'. [ 839.047382][ T5774] bond31: option arp_validate: invalid value (134217728) [ 839.061876][ T5774] bond31 (unregistering): Released all slaves [ 839.395530][ T5810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 839.862242][ T5852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 840.440120][ T5932] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 840.456187][ T5932] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 840.563535][ T5944] x_tables: duplicate underflow at hook 3 [ 840.690171][ T5956] IPv6: NLM_F_CREATE should be specified when creating new route [ 840.945795][ T5972] gretap20: entered promiscuous mode [ 841.018545][ T5972] syzkaller1: entered promiscuous mode [ 841.049685][ T5972] syzkaller1: entered allmulticast mode [ 841.229811][ T5989] netlink: 'syz.2.10190': attribute type 2 has an invalid length. [ 841.254559][ T5989] netlink: 'syz.2.10190': attribute type 1 has an invalid length. [ 841.279575][ T5987] can: request_module (can-proto-0) failed. [ 841.472282][ T5999] 8021q: adding VLAN 0 to HW filter on device bond22 [ 841.517580][ T6003] 8021q: adding VLAN 0 to HW filter on device bond22 [ 841.528910][ T6003] bond22: (slave vti1): The slave device specified does not support setting the MAC address [ 841.549683][ T6003] bond22: (slave vti1): Error -95 calling set_mac_address [ 842.015002][ T6038] nbd: nbd64 already in use [ 842.741524][ T6074] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 843.178437][ T6105] __nla_validate_parse: 25 callbacks suppressed [ 843.178461][ T6105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10223'. [ 843.467983][ T6119] netlink: 'syz.0.10226': attribute type 1 has an invalid length. [ 843.476064][ T6119] netlink: 'syz.0.10226': attribute type 3 has an invalid length. [ 843.493494][ T6119] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10226'. [ 843.524069][ T6119] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 843.600893][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10228'. [ 843.610374][ T6123] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 843.671431][ T6125] sctp: [Deprecated]: syz.1.10229 (pid 6125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 843.671431][ T6125] Use struct sctp_sack_info instead [ 844.086198][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10236'. [ 844.127714][ T6152] Cannot find del_set index 4 as target [ 844.134603][ T6152] Cannot find del_set index 4 as target [ 844.285452][ T6160] bond0: Master is either lo or non-ether device [ 844.369420][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10242'. [ 845.933486][ T6087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 845.943946][ T6106] netlink: 'syz.2.10222': attribute type 1 has an invalid length. [ 845.954543][ T6106] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10222'. [ 846.488045][ T6209] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 846.517449][ T6206] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10259'. [ 846.584447][ T6215] IPv6: NLM_F_CREATE should be specified when creating new route [ 846.626682][ T6213] syzkaller0: entered promiscuous mode [ 846.649205][ T6213] syzkaller0: entered allmulticast mode [ 847.656099][ T6244] netlink: 'syz.1.10268': attribute type 4 has an invalid length. [ 848.505328][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10269'. [ 848.515532][ T6248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10269'. [ 849.420422][ T6201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 849.627611][ T6257] FAULT_INJECTION: forcing a failure. [ 849.627611][ T6257] name failslab, interval 1, probability 0, space 0, times 0 [ 849.629353][ T6255] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.10271'. [ 849.665435][ T6255] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 849.693519][ T6257] CPU: 1 UID: 0 PID: 6257 Comm: syz.2.10273 Not tainted syzkaller #0 PREEMPT(full) [ 849.693566][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 849.693588][ T6257] Call Trace: [ 849.693603][ T6257] [ 849.693620][ T6257] dump_stack_lvl+0xe8/0x150 [ 849.693654][ T6257] should_fail_ex+0x412/0x560 [ 849.693686][ T6257] should_failslab+0xa8/0x100 [ 849.693712][ T6257] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 849.693733][ T6257] ? __alloc_skb+0x186/0x7d0 [ 849.693750][ T6257] ? __alloc_skb+0x1d0/0x7d0 [ 849.693765][ T6257] ? __local_bh_enable_ip+0xd0/0x130 [ 849.693793][ T6257] __alloc_skb+0x1d0/0x7d0 [ 849.693815][ T6257] inet6_netconf_get_devconf+0x42e/0x920 [ 849.693836][ T6257] ? __local_bh_enable_ip+0xd0/0x130 [ 849.693866][ T6257] ? __pfx_inet6_netconf_get_devconf+0x10/0x10 [ 849.693904][ T6257] ? __pfx_inet6_netconf_get_devconf+0x10/0x10 [ 849.693924][ T6257] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 849.693954][ T6257] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 849.693980][ T6257] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 849.694004][ T6257] ? ref_tracker_free+0x693/0x840 [ 849.694026][ T6257] ? __pfx_ref_tracker_free+0x10/0x10 [ 849.694053][ T6257] netlink_rcv_skb+0x232/0x4b0 [ 849.694074][ T6257] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 849.694102][ T6257] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 849.694133][ T6257] ? netlink_deliver_tap+0x2e/0x1b0 [ 849.694151][ T6257] ? netlink_deliver_tap+0x2e/0x1b0 [ 849.694182][ T6257] netlink_unicast+0x75c/0x8e0 [ 849.694218][ T6257] netlink_sendmsg+0x813/0xb40 [ 849.694247][ T6257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.694269][ T6257] ? aa_sock_msg_perm+0xf1/0x1b0 [ 849.694290][ T6257] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 849.694315][ T6257] ____sys_sendmsg+0x972/0x9f0 [ 849.694336][ T6257] ? __might_fault+0xaf/0x130 [ 849.694362][ T6257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 849.694391][ T6257] ? import_iovec+0x73/0xa0 [ 849.694419][ T6257] ___sys_sendmsg+0x2a5/0x360 [ 849.694444][ T6257] ? __pfx____sys_sendmsg+0x10/0x10 [ 849.694499][ T6257] ? __fget_files+0x2a/0x420 [ 849.694517][ T6257] ? __fget_files+0x3a0/0x420 [ 849.694546][ T6257] __x64_sys_sendmsg+0x1bd/0x2a0 [ 849.694569][ T6257] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 849.694599][ T6257] ? __pfx_ksys_write+0x10/0x10 [ 849.694631][ T6257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.694651][ T6257] do_syscall_64+0x15f/0xf80 [ 849.694675][ T6257] ? trace_irq_disable+0x3b/0x140 [ 849.694699][ T6257] ? clear_bhb_loop+0x40/0x90 [ 849.694720][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.694738][ T6257] RIP: 0033:0x7fa29af9cdd9 [ 849.694756][ T6257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.694771][ T6257] RSP: 002b:00007fa29bec1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.694792][ T6257] RAX: ffffffffffffffda RBX: 00007fa29b215fa0 RCX: 00007fa29af9cdd9 [ 849.694805][ T6257] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 849.694818][ T6257] RBP: 00007fa29bec1090 R08: 0000000000000000 R09: 0000000000000000 [ 849.694829][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.694841][ T6257] R13: 00007fa29b216038 R14: 00007fa29b215fa0 R15: 00007ffc1bcf3058 [ 849.694871][ T6257] [ 850.089365][ T6269] netlink: 175008 bytes leftover after parsing attributes in process `syz.0.10276'. [ 850.200292][ T6275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10280'. [ 850.270232][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10280'. [ 850.306942][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10280'. [ 850.359885][ T6272] bond26: Unable to set up delay as MII monitoring is disabled [ 850.400573][ T6272] bond26 (unregistering): Released all slaves [ 850.447843][ T6297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.702489][ T6310] FAULT_INJECTION: forcing a failure. [ 850.702489][ T6310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.728202][ T6310] CPU: 0 UID: 0 PID: 6310 Comm: syz.0.10290 Not tainted syzkaller #0 PREEMPT(full) [ 850.728230][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 850.728242][ T6310] Call Trace: [ 850.728250][ T6310] [ 850.728258][ T6310] dump_stack_lvl+0xe8/0x150 [ 850.728292][ T6310] should_fail_ex+0x412/0x560 [ 850.728326][ T6310] _copy_to_user+0x31/0xb0 [ 850.728350][ T6310] simple_read_from_buffer+0xe1/0x170 [ 850.728375][ T6310] proc_fail_nth_read+0x1bb/0x230 [ 850.728399][ T6310] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 850.728423][ T6310] ? rw_verify_area+0x2a6/0x4d0 [ 850.728445][ T6310] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 850.728466][ T6310] vfs_read+0x20c/0xa70 [ 850.728494][ T6310] ? __pfx___mutex_lock+0x10/0x10 [ 850.728521][ T6310] ? __pfx_vfs_read+0x10/0x10 [ 850.728545][ T6310] ? __fget_files+0x2a/0x420 [ 850.728568][ T6310] ? __fget_files+0x3a0/0x420 [ 850.728586][ T6310] ? __fget_files+0x2a/0x420 [ 850.728614][ T6310] ksys_read+0x150/0x270 [ 850.728639][ T6310] ? __pfx_ksys_read+0x10/0x10 [ 850.728670][ T6310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.728691][ T6310] do_syscall_64+0x15f/0xf80 [ 850.728714][ T6310] ? trace_irq_disable+0x3b/0x140 [ 850.728739][ T6310] ? clear_bhb_loop+0x40/0x90 [ 850.728761][ T6310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.728776][ T6310] RIP: 0033:0x7fd43ff5d60e [ 850.728794][ T6310] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 850.728809][ T6310] RSP: 002b:00007fd440ecdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 850.728828][ T6310] RAX: ffffffffffffffda RBX: 00007fd440ece6c0 RCX: 00007fd43ff5d60e [ 850.728841][ T6310] RDX: 000000000000000f RSI: 00007fd440ece0a0 RDI: 0000000000000004 [ 850.728853][ T6310] RBP: 00007fd440ece090 R08: 0000000000000000 R09: 0000000000000000 [ 850.728864][ T6310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.728874][ T6310] R13: 00007fd440216038 R14: 00007fd440215fa0 R15: 00007fff6df69538 [ 850.728903][ T6310] [ 850.768020][ T6314] xt_bpf: check failed: parse error [ 850.885547][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10293'. [ 851.068136][ T6324] ipt_ECN: cannot use operation on non-tcp rule [ 851.085203][ T6325] openvswitch: netlink: Message has -2 unknown bytes. [ 851.408099][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10302'. [ 851.542239][ T6356] syzkaller0: entered promiscuous mode [ 851.552134][ T6356] syzkaller0: entered allmulticast mode [ 851.962975][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10305'. [ 852.023238][ T6367] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap25 [ 852.399731][ T6382] netlink: 'syz.4.10310': attribute type 1 has an invalid length. [ 852.543840][ T6382] 8021q: adding VLAN 0 to HW filter on device bond34 [ 852.609545][ T6400] netlink: 'syz.3.10316': attribute type 8 has an invalid length. [ 852.839475][ T6419] netlink: 'syz.4.10322': attribute type 8 has an invalid length. [ 852.989660][ T6422] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 853.115456][ T6435] netlink: 'syz.4.10327': attribute type 8 has an invalid length. [ 853.175301][ T6438] x_tables: duplicate underflow at hook 1 [ 853.660222][ T6475] __nla_validate_parse: 8 callbacks suppressed [ 853.660240][ T6475] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10343'. [ 853.692715][ T6474] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10343'. [ 853.725509][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10345'. [ 854.171859][ T6506] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10356'. [ 854.209199][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10356'. [ 854.413897][ T6528] netlink: 'syz.1.10363': attribute type 83 has an invalid length. [ 854.443853][ T6530] dvmrp0: entered allmulticast mode [ 854.560652][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10366'. [ 854.642291][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10366'. [ 854.785902][ T6555] sctp: [Deprecated]: syz.2.10375 (pid 6555) Use of int in maxseg socket option. [ 854.785902][ T6555] Use struct sctp_assoc_value instead [ 854.901456][ T6562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10378'. [ 855.148813][ T6583] geneve4: entered promiscuous mode [ 855.154111][ T6583] geneve4: entered allmulticast mode [ 855.204228][ T6131] lec:lec_start_xmit: lec0:No lecd attached [ 855.267049][ T6590] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 855.400700][ T6604] netlink: 'syz.2.10391': attribute type 8 has an invalid length. [ 855.409719][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10391'. [ 855.487987][ T6610] netlink: 372 bytes leftover after parsing attributes in process `syz.2.10393'. [ 858.047808][ T6567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 858.271680][ T6620] netlink: 'syz.1.10396': attribute type 1 has an invalid length. [ 858.296098][ T6624] FAULT_INJECTION: forcing a failure. [ 858.296098][ T6624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.389352][ T6624] CPU: 1 UID: 0 PID: 6624 Comm: syz.2.10397 Not tainted syzkaller #0 PREEMPT(full) [ 858.389377][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 858.389388][ T6624] Call Trace: [ 858.389396][ T6624] [ 858.389405][ T6624] dump_stack_lvl+0xe8/0x150 [ 858.389438][ T6624] should_fail_ex+0x412/0x560 [ 858.389471][ T6624] _copy_from_user+0x2d/0xb0 [ 858.389493][ T6624] do_ipv6_setsockopt+0x25c/0x3150 [ 858.389511][ T6624] ? get_pid_task+0x20/0x1f0 [ 858.389540][ T6624] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 858.389560][ T6624] ? get_pid_task+0x20/0x1f0 [ 858.389579][ T6624] ? get_pid_task+0x20/0x1f0 [ 858.389596][ T6624] ? get_pid_task+0x20/0x1f0 [ 858.389625][ T6624] ? __lock_acquire+0x6b5/0x2cf0 [ 858.389669][ T6624] ? aa_sk_perm+0x6d5/0x900 [ 858.389696][ T6624] ? __fget_files+0x2a/0x420 [ 858.389719][ T6624] ? __pfx_aa_sk_perm+0x10/0x10 [ 858.389747][ T6624] ? __fget_files+0x2a/0x420 [ 858.389780][ T6624] ? aa_sock_opt_perm+0xff/0x1a0 [ 858.389801][ T6624] ipv6_setsockopt+0x59/0x170 [ 858.389819][ T6624] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 858.389845][ T6624] do_sock_setsockopt+0x17c/0x1b0 [ 858.389868][ T6624] __x64_sys_setsockopt+0x13d/0x1b0 [ 858.389889][ T6624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.389909][ T6624] do_syscall_64+0x15f/0xf80 [ 858.389932][ T6624] ? trace_irq_disable+0x3b/0x140 [ 858.389955][ T6624] ? clear_bhb_loop+0x40/0x90 [ 858.389975][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.389993][ T6624] RIP: 0033:0x7fa29af9cdd9 [ 858.390010][ T6624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.390025][ T6624] RSP: 002b:00007fa29bec1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 858.390043][ T6624] RAX: ffffffffffffffda RBX: 00007fa29b215fa0 RCX: 00007fa29af9cdd9 [ 858.390056][ T6624] RDX: 000000000000002c RSI: 0000000000000029 RDI: 0000000000000003 [ 858.390067][ T6624] RBP: 00007fa29bec1090 R08: 0000000000000108 R09: 0000000000000000 [ 858.390077][ T6624] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 858.390089][ T6624] R13: 00007fa29b216038 R14: 00007fa29b215fa0 R15: 00007ffc1bcf3058 [ 858.390118][ T6624] [ 858.687593][ T6635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 858.741751][ T6644] netlink: 'syz.1.10402': attribute type 8 has an invalid length. [ 858.755955][ T6644] __nla_validate_parse: 2 callbacks suppressed [ 858.755972][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10402'. [ 858.986986][ T6671] netlink: 'syz.1.10406': attribute type 9 has an invalid length. [ 859.138978][ T6682] FAULT_INJECTION: forcing a failure. [ 859.138978][ T6682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.153530][ T6682] CPU: 0 UID: 0 PID: 6682 Comm: syz.3.10414 Not tainted syzkaller #0 PREEMPT(full) [ 859.153556][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 859.153567][ T6682] Call Trace: [ 859.153575][ T6682] [ 859.153584][ T6682] dump_stack_lvl+0xe8/0x150 [ 859.153618][ T6682] should_fail_ex+0x412/0x560 [ 859.153651][ T6682] _copy_from_user+0x2d/0xb0 [ 859.153673][ T6682] do_ipv6_mcast_group_source+0x24a/0x4c0 [ 859.153698][ T6682] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 859.153729][ T6682] ? __lock_acquire+0x6b5/0x2cf0 [ 859.153761][ T6682] ? look_up_lock_class+0x57/0x110 [ 859.153785][ T6682] ? register_lock_class+0x31/0x2e0 [ 859.153815][ T6682] ? __lock_acquire+0x6b5/0x2cf0 [ 859.153848][ T6682] ? aa_file_perm+0x192/0x15e0 [ 859.153896][ T6682] ? do_ipv6_setsockopt+0x851/0x3150 [ 859.153919][ T6682] ? __local_bh_enable_ip+0xd0/0x130 [ 859.153954][ T6682] do_ipv6_setsockopt+0x16e9/0x3150 [ 859.153972][ T6682] ? get_pid_task+0x20/0x1f0 [ 859.154001][ T6682] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 859.154018][ T6682] ? get_pid_task+0x20/0x1f0 [ 859.154037][ T6682] ? get_pid_task+0x20/0x1f0 [ 859.154054][ T6682] ? get_pid_task+0x20/0x1f0 [ 859.154085][ T6682] ? __lock_acquire+0x6b5/0x2cf0 [ 859.154132][ T6682] ? aa_sk_perm+0x6d5/0x900 [ 859.154164][ T6682] ? __fget_files+0x2a/0x420 [ 859.154189][ T6682] ? __pfx_aa_sk_perm+0x10/0x10 [ 859.154218][ T6682] ? __fget_files+0x2a/0x420 [ 859.154234][ T6682] ? aa_sock_opt_perm+0xff/0x1a0 [ 859.154256][ T6682] ipv6_setsockopt+0x59/0x170 [ 859.154275][ T6682] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 859.154303][ T6682] do_sock_setsockopt+0x17c/0x1b0 [ 859.154329][ T6682] __x64_sys_setsockopt+0x13d/0x1b0 [ 859.154350][ T6682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.154371][ T6682] do_syscall_64+0x15f/0xf80 [ 859.154394][ T6682] ? trace_irq_disable+0x3b/0x140 [ 859.154418][ T6682] ? clear_bhb_loop+0x40/0x90 [ 859.154441][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.154460][ T6682] RIP: 0033:0x7f7e0399cdd9 [ 859.154478][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.154494][ T6682] RSP: 002b:00007f7e0489f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 859.154515][ T6682] RAX: ffffffffffffffda RBX: 00007f7e03c15fa0 RCX: 00007f7e0399cdd9 [ 859.154528][ T6682] RDX: 000000000000002c RSI: 0000000000000029 RDI: 0000000000000003 [ 859.154539][ T6682] RBP: 00007f7e0489f090 R08: 0000000000000108 R09: 0000000000000000 [ 859.154551][ T6682] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 859.154563][ T6682] R13: 00007f7e03c16038 R14: 00007f7e03c15fa0 R15: 00007ffe743fc648 [ 859.154594][ T6682] [ 859.830209][ T6712] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10426'. [ 859.868592][ T6712] netlink: 43 bytes leftover after parsing attributes in process `syz.0.10426'. [ 859.890866][ T6712] netlink: 'syz.0.10426': attribute type 5 has an invalid length. [ 859.910256][ T6712] netlink: 43 bytes leftover after parsing attributes in process `syz.0.10426'. [ 859.917625][ T6717] FAULT_INJECTION: forcing a failure. [ 859.917625][ T6717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.961020][ T6717] CPU: 1 UID: 0 PID: 6717 Comm: syz.2.10428 Not tainted syzkaller #0 PREEMPT(full) [ 859.961048][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 859.961059][ T6717] Call Trace: [ 859.961066][ T6717] [ 859.961075][ T6717] dump_stack_lvl+0xe8/0x150 [ 859.961109][ T6717] should_fail_ex+0x412/0x560 [ 859.961139][ T6717] _copy_to_user+0x31/0xb0 [ 859.961162][ T6717] simple_read_from_buffer+0xe1/0x170 [ 859.961184][ T6717] proc_fail_nth_read+0x1bb/0x230 [ 859.961205][ T6717] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 859.961226][ T6717] ? rw_verify_area+0x2a6/0x4d0 [ 859.961246][ T6717] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 859.961266][ T6717] vfs_read+0x20c/0xa70 [ 859.961291][ T6717] ? __pfx___mutex_lock+0x10/0x10 [ 859.961316][ T6717] ? __pfx_vfs_read+0x10/0x10 [ 859.961336][ T6717] ? __fget_files+0x2a/0x420 [ 859.961358][ T6717] ? __fget_files+0x3a0/0x420 [ 859.961374][ T6717] ? __fget_files+0x2a/0x420 [ 859.961399][ T6717] ksys_read+0x150/0x270 [ 859.961423][ T6717] ? __pfx_ksys_read+0x10/0x10 [ 859.961451][ T6717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.961470][ T6717] do_syscall_64+0x15f/0xf80 [ 859.961493][ T6717] ? trace_irq_disable+0x3b/0x140 [ 859.961515][ T6717] ? clear_bhb_loop+0x40/0x90 [ 859.961537][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.961554][ T6717] RIP: 0033:0x7fa29af5d60e [ 859.961571][ T6717] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 859.961587][ T6717] RSP: 002b:00007fa29bec0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 859.961605][ T6717] RAX: ffffffffffffffda RBX: 00007fa29bec16c0 RCX: 00007fa29af5d60e [ 859.961617][ T6717] RDX: 000000000000000f RSI: 00007fa29bec10a0 RDI: 0000000000000004 [ 859.961629][ T6717] RBP: 00007fa29bec1090 R08: 0000000000000000 R09: 0000000000000000 [ 859.961640][ T6717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.961651][ T6717] R13: 00007fa29b216038 R14: 00007fa29b215fa0 R15: 00007ffc1bcf3058 [ 859.961683][ T6717] [ 860.034271][ T6718] veth0_macvtap: left promiscuous mode [ 860.328415][ T6741] netlink: 'syz.1.10434': attribute type 8 has an invalid length. [ 860.343385][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10434'. [ 860.383627][ T6746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10437'. [ 860.538623][ T6755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10440'. [ 860.621184][ T6762] netlink: 'syz.2.10442': attribute type 11 has an invalid length. [ 860.634610][ T6762] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.10442'. [ 860.956648][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 860.964774][ C0] lec:lec_tx_timeout: lec0 [ 861.300800][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10459'. [ 861.328675][ T6816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 861.402780][ T6820] netlink: 'syz.1.10462': attribute type 16 has an invalid length. [ 861.407850][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10461'. [ 861.411973][ T6820] netlink: 'syz.1.10462': attribute type 17 has an invalid length. [ 861.469959][ T6820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 861.491541][ T6822] netlink: 'syz.2.10463': attribute type 1 has an invalid length. [ 861.551601][ T6822] 8021q: adding VLAN 0 to HW filter on device bond23 [ 861.704064][ T6834] 8021q: adding VLAN 0 to HW filter on device bond24 [ 861.842070][ T6842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 862.185602][ T6871] netlink: 'syz.4.10474': attribute type 32 has an invalid length. [ 862.242553][ T6871] bond35: Setting coupled_control to off (0) [ 863.834507][ T6941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.843485][ T6943] __nla_validate_parse: 8 callbacks suppressed [ 863.843503][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10499'. [ 863.861018][T13426] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.872910][T13426] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.882065][T13426] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.892108][T13426] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.217850][ T6878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 865.412514][ T6966] FAULT_INJECTION: forcing a failure. [ 865.412514][ T6966] name failslab, interval 1, probability 0, space 0, times 0 [ 865.439384][ T6966] CPU: 1 UID: 0 PID: 6966 Comm: syz.2.10509 Not tainted syzkaller #0 PREEMPT(full) [ 865.439410][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 865.439422][ T6966] Call Trace: [ 865.439430][ T6966] [ 865.439438][ T6966] dump_stack_lvl+0xe8/0x150 [ 865.439471][ T6966] should_fail_ex+0x412/0x560 [ 865.439504][ T6966] should_failslab+0xa8/0x100 [ 865.439530][ T6966] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 865.439553][ T6966] ? __kasan_kmalloc+0x93/0xb0 [ 865.439576][ T6966] ? __request_module+0x2ec/0x630 [ 865.439594][ T6966] ? __kmalloc_cache_noprof+0x31c/0x660 [ 865.439619][ T6966] kstrdup+0x42/0x100 [ 865.439646][ T6966] __request_module+0x2ec/0x630 [ 865.439665][ T6966] ? rtnl_link_ops_get+0x23/0x250 [ 865.439683][ T6966] ? __pfx___request_module+0x10/0x10 [ 865.439713][ T6966] ? rtnl_link_ops_get+0x23/0x250 [ 865.439730][ T6966] ? rtnl_link_ops_get+0x23/0x250 [ 865.439750][ T6966] ? rtnl_link_ops_get+0x215/0x250 [ 865.439772][ T6966] rtnl_newlink+0x60a/0x1bb0 [ 865.439791][ T6966] ? kasan_save_track+0x3e/0x80 [ 865.439811][ T6966] ? kasan_save_free_info+0x46/0x50 [ 865.439827][ T6966] ? __kasan_slab_free+0x5c/0x80 [ 865.439850][ T6966] ? __netlink_deliver_tap+0x5ad/0x850 [ 865.439868][ T6966] ? netlink_deliver_tap+0x19c/0x1b0 [ 865.439884][ T6966] ? netlink_unicast+0x730/0x8e0 [ 865.439907][ T6966] ? netlink_sendmsg+0x813/0xb40 [ 865.439926][ T6966] ? __pfx_rtnl_newlink+0x10/0x10 [ 865.439942][ T6966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.439996][ T6966] ? kasan_quarantine_put+0xbb/0x1f0 [ 865.440015][ T6966] ? lockdep_hardirqs_on+0x7a/0x110 [ 865.440043][ T6966] ? nlmon_xmit+0xb0/0x100 [ 865.440066][ T6966] ? kmem_cache_free+0x182/0x650 [ 865.440098][ T6966] ? __lock_acquire+0x6b5/0x2cf0 [ 865.440127][ T6966] ? __dev_queue_xmit+0x2b6/0x3950 [ 865.440151][ T6966] ? __local_bh_enable_ip+0xd0/0x130 [ 865.440173][ T6966] ? lockdep_hardirqs_on+0x7a/0x110 [ 865.440193][ T6966] ? __dev_queue_xmit+0x2b6/0x3950 [ 865.440211][ T6966] ? __local_bh_enable_ip+0xd0/0x130 [ 865.440233][ T6966] ? __dev_queue_xmit+0x2b6/0x3950 [ 865.440256][ T6966] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 865.440293][ T6966] ? __pfx_rtnl_newlink+0x10/0x10 [ 865.440308][ T6966] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 865.440344][ T6966] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 865.440367][ T6966] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 865.440390][ T6966] ? ref_tracker_free+0x693/0x840 [ 865.440411][ T6966] ? __pfx_ref_tracker_free+0x10/0x10 [ 865.440438][ T6966] netlink_rcv_skb+0x232/0x4b0 [ 865.440457][ T6966] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 865.440483][ T6966] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 865.440510][ T6966] ? netlink_deliver_tap+0x2e/0x1b0 [ 865.440527][ T6966] ? netlink_deliver_tap+0x2e/0x1b0 [ 865.440548][ T6966] netlink_unicast+0x75c/0x8e0 [ 865.440583][ T6966] netlink_sendmsg+0x813/0xb40 [ 865.440611][ T6966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.440631][ T6966] ? aa_sock_msg_perm+0xf1/0x1b0 [ 865.440651][ T6966] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 865.440674][ T6966] ____sys_sendmsg+0x972/0x9f0 [ 865.440693][ T6966] ? __might_fault+0xaf/0x130 [ 865.440720][ T6966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 865.440746][ T6966] ? import_iovec+0x73/0xa0 [ 865.440770][ T6966] ___sys_sendmsg+0x2a5/0x360 [ 865.440786][ T6966] ? __lock_acquire+0x6b5/0x2cf0 [ 865.440814][ T6966] ? __pfx____sys_sendmsg+0x10/0x10 [ 865.440865][ T6966] ? __fget_files+0x2a/0x420 [ 865.440884][ T6966] ? __fget_files+0x3a0/0x420 [ 865.440911][ T6966] __x64_sys_sendmsg+0x1bd/0x2a0 [ 865.440931][ T6966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 865.440956][ T6966] ? __pfx_ksys_write+0x10/0x10 [ 865.440984][ T6966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.441004][ T6966] do_syscall_64+0x15f/0xf80 [ 865.441026][ T6966] ? trace_irq_disable+0x3b/0x140 [ 865.441049][ T6966] ? clear_bhb_loop+0x40/0x90 [ 865.441071][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.441088][ T6966] RIP: 0033:0x7fa29af9cdd9 [ 865.441106][ T6966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.441122][ T6966] RSP: 002b:00007fa29bec1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.441142][ T6966] RAX: ffffffffffffffda RBX: 00007fa29b215fa0 RCX: 00007fa29af9cdd9 [ 865.441155][ T6966] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000004 [ 865.441167][ T6966] RBP: 00007fa29bec1090 R08: 0000000000000000 R09: 0000000000000000 [ 865.441179][ T6966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.441190][ T6966] R13: 00007fa29b216038 R14: 00007fa29b215fa0 R15: 00007ffc1bcf3058 [ 865.441219][ T6966] [ 866.154056][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10518'. [ 866.175259][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10518'. [ 866.188321][ T6998] batadv_slave_1: entered promiscuous mode [ 866.250854][ T6996] batadv_slave_1: left promiscuous mode [ 866.387820][ T7003] netlink: 'syz.0.10522': attribute type 13 has an invalid length. [ 866.413497][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10522'. [ 866.445912][ T7003] netlink: 'syz.0.10522': attribute type 13 has an invalid length. [ 866.483200][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10522'. [ 866.487469][ T7020] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10528'. [ 866.502745][ T7021] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10528'. [ 866.521933][ T7021] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10528'. [ 866.669029][ T7026] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10530'. [ 866.692756][ T7026] netlink: 320 bytes leftover after parsing attributes in process `syz.3.10530'. [ 866.970405][ T7042] netlink: 'syz.3.10535': attribute type 11 has an invalid length. [ 867.103545][ T7052] batadv_slave_1: entered promiscuous mode [ 867.202991][ T7051] batadv_slave_1: left promiscuous mode [ 867.463761][ T7079] netlink: 'syz.1.10546': attribute type 10 has an invalid length. [ 868.571329][ T7124] C speed is unknown, defaulting to 1000 [ 868.749987][ T7143] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 868.928435][ T7113] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 868.947403][ T7113] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 869.032003][ T7154] __nla_validate_parse: 7 callbacks suppressed [ 869.032024][ T7154] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10564'. [ 869.305679][ T7167] digital: digital_start_poll: Unknown protocol [ 869.362574][ T7173] netlink: 'syz.3.10571': attribute type 8 has an invalid length. [ 869.388637][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10571'. [ 869.587593][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10574'. [ 869.610514][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10574'. [ 869.896076][ T7197] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004 [ 869.919048][ T7197] IPVS: Unknown mcast interface: pim6reg1 [ 870.111088][ T7209] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10582'. [ 870.164821][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 870.172649][ T1314] clip:clip_start_xmit: skb_dst(skb) == NULL [ 870.187880][ T7211] digital: digital_start_poll: Unknown protocol [ 870.209918][ T7213] netlink: 'syz.4.10584': attribute type 8 has an invalid length. [ 870.219146][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10584'. [ 870.523857][ T7236] --map-set only usable from mangle table [ 870.568620][ T7244] FAULT_INJECTION: forcing a failure. [ 870.568620][ T7244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.582796][ T7244] CPU: 1 UID: 0 PID: 7244 Comm: syz.2.10590 Not tainted syzkaller #0 PREEMPT(full) [ 870.582822][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 870.582834][ T7244] Call Trace: [ 870.582842][ T7244] [ 870.582851][ T7244] dump_stack_lvl+0xe8/0x150 [ 870.582884][ T7244] should_fail_ex+0x412/0x560 [ 870.582915][ T7244] _copy_from_user+0x2d/0xb0 [ 870.582937][ T7244] do_ipv6_setsockopt+0x25c/0x3150 [ 870.582968][ T7244] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 870.582987][ T7244] ? kstrtouint+0x6e/0xe0 [ 870.583006][ T7244] ? aa_label_sk_perm+0x532/0x6e0 [ 870.583022][ T7244] ? get_pid_task+0x20/0x1f0 [ 870.583038][ T7244] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 870.583052][ T7244] ? get_pid_task+0x20/0x1f0 [ 870.583063][ T7244] ? get_pid_task+0x20/0x1f0 [ 870.583073][ T7244] ? get_pid_task+0x20/0x1f0 [ 870.583089][ T7244] ? __lock_acquire+0x6b5/0x2cf0 [ 870.583120][ T7244] ? aa_sk_perm+0x6d5/0x900 [ 870.583136][ T7244] ipv6_setsockopt+0x59/0x170 [ 870.583150][ T7244] rawv6_setsockopt+0x276/0x5f0 [ 870.583162][ T7244] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 870.583172][ T7244] ? aa_sock_opt_perm+0xff/0x1a0 [ 870.583183][ T7244] ? sock_common_setsockopt+0x36/0xc0 [ 870.583197][ T7244] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 870.583212][ T7244] do_sock_setsockopt+0x17c/0x1b0 [ 870.583226][ T7244] __x64_sys_setsockopt+0x13d/0x1b0 [ 870.583238][ T7244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.583249][ T7244] do_syscall_64+0x15f/0xf80 [ 870.583264][ T7244] ? trace_irq_disable+0x3b/0x140 [ 870.583277][ T7244] ? clear_bhb_loop+0x40/0x90 [ 870.583290][ T7244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.583300][ T7244] RIP: 0033:0x7fa29af9cdd9 [ 870.583311][ T7244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.583321][ T7244] RSP: 002b:00007fa29bec1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 870.583333][ T7244] RAX: ffffffffffffffda RBX: 00007fa29b215fa0 RCX: 00007fa29af9cdd9 [ 870.583341][ T7244] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 870.583349][ T7244] RBP: 00007fa29bec1090 R08: 0000000000000370 R09: 0000000000000000 [ 870.583355][ T7244] R10: 0000200000000d40 R11: 0000000000000246 R12: 0000000000000001 [ 870.583362][ T7244] R13: 00007fa29b216038 R14: 00007fa29b215fa0 R15: 00007ffc1bcf3058 [ 870.583378][ T7244] [ 870.988669][ T7252] 8021q: VLANs not supported on ip6gre0 [ 871.324001][ T7266] netlink: 'syz.3.10596': attribute type 8 has an invalid length. [ 871.332743][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10596'. [ 873.380432][ T7221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 873.393608][ T7206] netlink: 220 bytes leftover after parsing attributes in process `syz.0.10581'. [ 873.753589][ T7300] --map-set only usable from mangle table [ 873.955675][ T7318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10613'. [ 874.143229][ T7326] vlan1: entered promiscuous mode [ 874.223073][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10617'. [ 874.254660][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10617'. [ 874.274011][ T7334] netlink: 'syz.3.10619': attribute type 6 has an invalid length. [ 874.287660][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10619'. [ 874.290410][ T7330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10616'. [ 874.299951][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10619'. [ 874.314131][ T7330] netlink: 92 bytes leftover after parsing attributes in process `syz.1.10616'. [ 874.325292][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10619'. [ 874.336063][ T7330] netlink: 'syz.1.10616': attribute type 1 has an invalid length. [ 874.369254][ T7336] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap26 [ 874.497240][ T7344] sctp: [Deprecated]: syz.0.10623 (pid 7344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 874.497240][ T7344] Use struct sctp_sack_info instead [ 874.569777][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10626'. [ 874.571950][ T7351] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10625'. [ 874.616610][ T7354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.859954][ T7371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 874.898054][ T7375] sctp: [Deprecated]: syz.2.10632 (pid 7375) Use of int in max_burst socket option deprecated. [ 874.898054][ T7375] Use struct sctp_assoc_value instead [ 875.019937][ T7382] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap24 [ 875.024617][ T7387] Cannot find del_set index 2 as target [ 875.036851][ T7387] FAULT_INJECTION: forcing a failure. [ 875.036851][ T7387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.063507][ T7387] CPU: 1 UID: 0 PID: 7387 Comm: syz.1.10639 Not tainted syzkaller #0 PREEMPT(full) [ 875.063534][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 875.063545][ T7387] Call Trace: [ 875.063553][ T7387] [ 875.063561][ T7387] dump_stack_lvl+0xe8/0x150 [ 875.063595][ T7387] should_fail_ex+0x412/0x560 [ 875.063629][ T7387] _copy_to_user+0x31/0xb0 [ 875.063653][ T7387] simple_read_from_buffer+0xe1/0x170 [ 875.063678][ T7387] proc_fail_nth_read+0x1bb/0x230 [ 875.063703][ T7387] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 875.063727][ T7387] ? rw_verify_area+0x2a6/0x4d0 [ 875.063749][ T7387] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 875.063771][ T7387] vfs_read+0x20c/0xa70 [ 875.063798][ T7387] ? __pfx___mutex_lock+0x10/0x10 [ 875.063825][ T7387] ? __pfx_vfs_read+0x10/0x10 [ 875.063858][ T7387] ? __fget_files+0x2a/0x420 [ 875.063882][ T7387] ? __fget_files+0x3a0/0x420 [ 875.063900][ T7387] ? __fget_files+0x2a/0x420 [ 875.063927][ T7387] ksys_read+0x150/0x270 [ 875.063951][ T7387] ? __pfx_ksys_read+0x10/0x10 [ 875.063981][ T7387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.064002][ T7387] do_syscall_64+0x15f/0xf80 [ 875.064026][ T7387] ? trace_irq_disable+0x3b/0x140 [ 875.064050][ T7387] ? clear_bhb_loop+0x40/0x90 [ 875.064073][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.064091][ T7387] RIP: 0033:0x7f0f9815d60e [ 875.064109][ T7387] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 875.064123][ T7387] RSP: 002b:00007f0f99028fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 875.064147][ T7387] RAX: ffffffffffffffda RBX: 00007f0f990296c0 RCX: 00007f0f9815d60e [ 875.064160][ T7387] RDX: 000000000000000f RSI: 00007f0f990290a0 RDI: 0000000000000005 [ 875.064171][ T7387] RBP: 00007f0f99029090 R08: 0000000000000000 R09: 0000000000000000 [ 875.064182][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.064193][ T7387] R13: 00007f0f98416038 R14: 00007f0f98415fa0 R15: 00007ffcd4a05fe8 [ 875.064222][ T7387] [ 875.293671][ T7393] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 875.306203][ T7393] tipc: Enabled bearer , priority 0 [ 875.369043][ T7400] syzkaller0: entered promiscuous mode [ 875.395314][ T7400] syzkaller0: entered allmulticast mode [ 875.463600][ T7402] ip6erspan1: entered allmulticast mode [ 875.502839][ T7389] tipc: Resetting bearer [ 875.585920][ T7389] tipc: Disabling bearer [ 875.705331][ T7410] 8021q: VLANs not supported on ip_vti0 [ 875.798027][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10648'. [ 875.823768][ T7417] netlink: 'syz.0.10648': attribute type 1 has an invalid length. [ 875.859588][ T7424] netlink: 'syz.3.10650': attribute type 8 has an invalid length. [ 875.890374][ T7426] --map-set only usable from mangle table [ 875.895004][ T7425] netlink: 'syz.0.10648': attribute type 1 has an invalid length. [ 875.916327][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 875.924411][ C0] lec:lec_tx_timeout: lec0 [ 875.968816][ T7428] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap27 [ 876.795431][ T7476] bond36: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 876.830463][ T7476] bond36 (unregistering): Released all slaves [ 877.679945][ T7524] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap25 [ 877.922564][ T7539] bond38: option miimon: invalid value (18446744073709551585) [ 877.957345][ T7539] bond38: option miimon: allowed values 0 - 2147483647 [ 877.981602][ T7539] bond38 (unregistering): Released all slaves [ 878.317864][ T7563] macvtap0: entered promiscuous mode [ 878.333524][ T7563] vlan0: entered promiscuous mode [ 878.345590][ T7563] macvtap0: entered allmulticast mode [ 878.355647][ T7563] vlan0: entered allmulticast mode [ 878.538923][ T7590] ip6erspan1: entered allmulticast mode [ 878.839533][ T7608] netlink: 'syz.0.10707': attribute type 9 has an invalid length. [ 879.190926][ T7635] IPv6: sit4: Disabled Multicast RS [ 879.212971][ T7639] netlink: 'syz.2.10715': attribute type 1 has an invalid length. [ 879.243519][ T7639] netlink: 'syz.2.10715': attribute type 7 has an invalid length. [ 879.273969][ T7639] netlink: 'syz.2.10715': attribute type 8 has an invalid length. [ 879.295834][ T7639] __nla_validate_parse: 11 callbacks suppressed [ 879.295851][ T7639] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10715'. [ 879.527888][ T7660] netlink: 'syz.2.10722': attribute type 83 has an invalid length. [ 879.551824][ T7659] syzkaller0: entered promiscuous mode [ 879.558561][ T7659] syzkaller0: entered allmulticast mode [ 879.629920][ T7661] bond26: Removing last arp target with arp_interval on [ 879.653814][ T7673] --map-set only usable from mangle table [ 879.782842][ T7683] Unsupported ieee802154 address type: 0 [ 879.794356][ T7683] Unsupported ieee802154 address type: 0 [ 879.961963][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10729'. [ 880.284432][ T7702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10732'. [ 880.348924][ T7703] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10732'. [ 883.702738][ T7728] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10740'. [ 883.756129][ T7732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10743'. [ 883.913957][ T7743] netlink: 'syz.0.10747': attribute type 1 has an invalid length. [ 884.075641][ T7757] C: renamed from lo (while UP) [ 884.082382][ T7757] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 884.098346][ T7758] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 884.291241][ T7768] netlink: 'syz.0.10755': attribute type 4 has an invalid length. [ 884.319298][ T7765] netlink: 'syz.0.10755': attribute type 4 has an invalid length. [ 884.378364][ T7773] Cannot find del_set index 2 as target [ 884.479310][ T7779] netlink: 'syz.0.10759': attribute type 4 has an invalid length. [ 884.492061][ T7779] xt_hashlimit: size too large, truncated to 1048576 [ 884.698478][ T7788] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10761'. [ 884.713942][ T7788] bond0: Caught tx_queue_len zero misconfig [ 884.737899][ T7788] netlink: 'syz.1.10761': attribute type 21 has an invalid length. [ 884.758404][ T7788] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10761'. [ 884.783212][ T7788] netlink: 'syz.1.10761': attribute type 5 has an invalid length. [ 884.792019][ T7788] netlink: 'syz.1.10761': attribute type 6 has an invalid length. [ 884.802063][ T7788] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10761'. [ 885.099776][ T7811] x_tables: duplicate underflow at hook 4 [ 885.120733][ T7814] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 885.138032][ T7811] tipc: Enabling of bearer rejected, failed to enable media [ 885.251423][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10773'. [ 885.268510][ T7825] syzkaller1: entered promiscuous mode [ 885.274340][ T7825] syzkaller1: entered allmulticast mode [ 885.906915][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10783'. [ 885.954564][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10785'. [ 886.172119][ T7873] bond39: (slave bond_slave_1): Device is not bonding slave [ 886.181078][ T7873] bond39: option active_slave: invalid value (bond_slave_1) [ 886.198747][ T7873] bond39 (unregistering): Released all slaves [ 886.583582][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10796'. [ 886.654936][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10798'. [ 886.812470][ T7915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10802'. [ 886.830145][ T7915] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 887.513357][ T7964] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 887.571685][ T7964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.704570][ T7985] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10827'. [ 887.832236][ T7993] netlink: 'syz.1.10828': attribute type 1 has an invalid length. [ 887.863703][ T7993] bond39: entered promiscuous mode [ 887.870272][ T7993] bond39: entered allmulticast mode [ 887.879097][ T7993] 8021q: adding VLAN 0 to HW filter on device bond39 [ 887.911098][ T7994] macvlan4: entered promiscuous mode [ 887.919965][ T7994] macvlan4: entered allmulticast mode [ 888.230934][ T8012] vlan1: Caught tx_queue_len zero misconfig [ 888.739946][ T8035] bond40: (slave vxcan1): The slave device specified does not support setting the MAC address [ 888.756815][ T8042] xt_hashlimit: size too large, truncated to 1048576 [ 888.779503][ T8035] bond40: (slave vxcan1): Error -95 calling set_mac_address [ 888.990553][ T8054] openvswitch: netlink: Flow actions attr not present in new flow. [ 889.105055][ T8062] netlink: 'syz.4.10848': attribute type 8 has an invalid length. [ 889.519305][ T8084] 0·: renamed from hsr_slave_1 (while UP) [ 889.528736][ T8084] 0·: entered allmulticast mode [ 889.535458][ T8084] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 889.781098][ T8103] netlink: 'syz.4.10861': attribute type 8 has an invalid length. [ 889.798985][ T8103] __nla_validate_parse: 12 callbacks suppressed [ 889.799004][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10861'. [ 889.867810][ T8114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10865'. [ 889.909977][ T8105] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 889.971045][ T8117] FAULT_INJECTION: forcing a failure. [ 889.971045][ T8117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 889.990953][ T8117] CPU: 1 UID: 0 PID: 8117 Comm: syz.1.10866 Not tainted syzkaller #0 PREEMPT(full) [ 889.990981][ T8117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 889.990993][ T8117] Call Trace: [ 889.991000][ T8117] [ 889.991009][ T8117] dump_stack_lvl+0xe8/0x150 [ 889.991043][ T8117] should_fail_ex+0x412/0x560 [ 889.991077][ T8117] _copy_from_user+0x2d/0xb0 [ 889.991099][ T8117] ___sys_sendmsg+0x1c6/0x360 [ 889.991119][ T8117] ? __lock_acquire+0x6b5/0x2cf0 [ 889.991150][ T8117] ? __pfx____sys_sendmsg+0x10/0x10 [ 889.991202][ T8117] ? __fget_files+0x2a/0x420 [ 889.991221][ T8117] ? __fget_files+0x3a0/0x420 [ 889.991258][ T8117] __x64_sys_sendmsg+0x1bd/0x2a0 [ 889.991281][ T8117] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 889.991312][ T8117] ? __pfx_ksys_write+0x10/0x10 [ 889.991343][ T8117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.991363][ T8117] do_syscall_64+0x15f/0xf80 [ 889.991387][ T8117] ? trace_irq_disable+0x3b/0x140 [ 889.991428][ T8117] ? clear_bhb_loop+0x40/0x90 [ 889.991452][ T8117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.991470][ T8117] RIP: 0033:0x7f0f9819cdd9 [ 889.991488][ T8117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.991505][ T8117] RSP: 002b:00007f0f99029028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 889.991525][ T8117] RAX: ffffffffffffffda RBX: 00007f0f98415fa0 RCX: 00007f0f9819cdd9 [ 889.991539][ T8117] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 889.991551][ T8117] RBP: 00007f0f99029090 R08: 0000000000000000 R09: 0000000000000000 [ 889.991563][ T8117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.991574][ T8117] R13: 00007f0f98416038 R14: 00007f0f98415fa0 R15: 00007ffcd4a05fe8 [ 889.991605][ T8117] [ 890.439531][ T8137] xt_bpf: check failed: parse error [ 890.457324][ T8137] xt_bpf: check failed: parse error [ 890.477506][ T8137] xt_bpf: check failed: parse error [ 890.497645][ T8137] xt_bpf: check failed: parse error [ 890.523948][ T8137] xt_bpf: check failed: parse error [ 890.553207][ T8137] xt_bpf: check failed: parse error [ 890.568690][ T8137] xt_bpf: check failed: parse error [ 890.582470][ T8137] xt_bpf: check failed: parse error [ 890.590231][ T8137] xt_bpf: check failed: parse error [ 890.596050][ T8137] xt_bpf: check failed: parse error [ 890.776428][ T8145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10874'. [ 890.971770][ T8147] netlink: 'syz.3.10876': attribute type 12 has an invalid length. [ 891.003346][ T8147] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.10876'. [ 891.030822][ T8151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.083041][ T8151] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10875'. [ 891.178705][ T8158] netlink: 'syz.3.10880': attribute type 43 has an invalid length. [ 891.221145][ T8159] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10879'. [ 891.248349][ T8162] netlink: 'syz.1.10883': attribute type 15 has an invalid length. [ 891.267448][ T8159] syzkaller1: entered promiscuous mode [ 891.274166][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10882'. [ 891.295136][ T8159] syzkaller1: entered allmulticast mode [ 891.303124][ T8165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10882'. [ 891.422191][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10884'. [ 891.551170][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10882'. [ 891.715017][ T8187] batadv_slave_0: left allmulticast mode [ 891.963893][ T8196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.023325][ T8196] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 892.355272][ T8215] SET target dimension over the limit! [ 892.660883][ T8235] netlink: 'syz.0.10904': attribute type 1 has an invalid length. [ 892.683012][ T8235] veth0_to_bond: left allmulticast mode [ 892.714216][ T8239] netlink: 'syz.1.10905': attribute type 8 has an invalid length. [ 892.792350][ T8235] bond31 (unregistering): Released all slaves [ 893.132269][ T8256] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 893.420904][ T8270] netlink: 'syz.0.10913': attribute type 7 has an invalid length. [ 893.431023][ T8270] netlink: 'syz.0.10913': attribute type 8 has an invalid length. [ 893.904087][ T8291] FAULT_INJECTION: forcing a failure. [ 893.904087][ T8291] name failslab, interval 1, probability 0, space 0, times 0 [ 893.967052][ T8291] CPU: 1 UID: 0 PID: 8291 Comm: syz.0.10920 Not tainted syzkaller #0 PREEMPT(full) [ 893.967080][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 893.967091][ T8291] Call Trace: [ 893.967099][ T8291] [ 893.967107][ T8291] dump_stack_lvl+0xe8/0x150 [ 893.967141][ T8291] should_fail_ex+0x412/0x560 [ 893.967174][ T8291] should_failslab+0xa8/0x100 [ 893.967199][ T8291] __kmalloc_noprof+0xe8/0x760 [ 893.967221][ T8291] ? pfkey_add+0x1500/0x2df0 [ 893.967247][ T8291] pfkey_add+0x1500/0x2df0 [ 893.967274][ T8291] ? kasan_quarantine_put+0x14f/0x1f0 [ 893.967303][ T8291] ? __pfx_pfkey_add+0x10/0x10 [ 893.967338][ T8291] pfkey_sendmsg+0xc56/0x1120 [ 893.967356][ T8291] ? unwind_next_frame+0xa6/0x2550 [ 893.967392][ T8291] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 893.967439][ T8291] ? aa_sock_msg_perm+0xf1/0x1b0 [ 893.967461][ T8291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 893.967487][ T8291] ____sys_sendmsg+0x972/0x9f0 [ 893.967507][ T8291] ? __might_fault+0xaf/0x130 [ 893.967538][ T8291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.967568][ T8291] ? import_iovec+0x73/0xa0 [ 893.967592][ T8291] ___sys_sendmsg+0x2a5/0x360 [ 893.967612][ T8291] ? __lock_acquire+0x6b5/0x2cf0 [ 893.967643][ T8291] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.967701][ T8291] ? __fget_files+0x2a/0x420 [ 893.967720][ T8291] ? __fget_files+0x3a0/0x420 [ 893.967749][ T8291] __x64_sys_sendmsg+0x1bd/0x2a0 [ 893.967773][ T8291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 893.967802][ T8291] ? __pfx_ksys_write+0x10/0x10 [ 893.967833][ T8291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.967853][ T8291] do_syscall_64+0x15f/0xf80 [ 893.967878][ T8291] ? trace_irq_disable+0x3b/0x140 [ 893.967902][ T8291] ? clear_bhb_loop+0x40/0x90 [ 893.967924][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.967942][ T8291] RIP: 0033:0x7fd43ff9cdd9 [ 893.967961][ T8291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.967975][ T8291] RSP: 002b:00007fd440ece028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.967995][ T8291] RAX: ffffffffffffffda RBX: 00007fd440215fa0 RCX: 00007fd43ff9cdd9 [ 893.968008][ T8291] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 893.968020][ T8291] RBP: 00007fd440ece090 R08: 0000000000000000 R09: 0000000000000000 [ 893.968038][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.968049][ T8291] R13: 00007fd440216038 R14: 00007fd440215fa0 R15: 00007fff6df69538 [ 893.968082][ T8291] [ 894.712072][ T5854] block nbd4: Receive control failed (result -32) [ 895.113431][ T8324] __nla_validate_parse: 21 callbacks suppressed [ 895.113453][ T8324] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10928'. [ 895.137780][ T8319] FAULT_INJECTION: forcing a failure. [ 895.137780][ T8319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.168005][ T8319] CPU: 0 UID: 0 PID: 8319 Comm: syz.4.10927 Not tainted syzkaller #0 PREEMPT(full) [ 895.168031][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 895.168042][ T8319] Call Trace: [ 895.168050][ T8319] [ 895.168061][ T8319] dump_stack_lvl+0xe8/0x150 [ 895.168096][ T8319] should_fail_ex+0x412/0x560 [ 895.168129][ T8319] _copy_to_iter+0x404/0x17d0 [ 895.168164][ T8319] ? __pfx__copy_to_iter+0x10/0x10 [ 895.168184][ T8319] ? _copy_to_iter+0x4d2/0x17d0 [ 895.168199][ T8319] ? __lock_acquire+0x6b5/0x2cf0 [ 895.168226][ T8319] ? iov_iter_zero+0x270/0x16d0 [ 895.168253][ T8319] __skb_datagram_iter+0xf8/0x980 [ 895.168277][ T8319] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 895.168306][ T8319] skb_copy_datagram_iter+0xb5/0x240 [ 895.168332][ T8319] tun_do_read+0x1a93/0x2910 [ 895.168380][ T8319] ? __pfx_tun_do_read+0x10/0x10 [ 895.168403][ T8319] ? aa_file_perm+0x192/0x15e0 [ 895.168426][ T8319] ? tun_get+0x1c/0x2f0 [ 895.168451][ T8319] ? tun_get+0x1c/0x2f0 [ 895.168477][ T8319] ? __pfx_default_wake_function+0x10/0x10 [ 895.168506][ T8319] ? tun_get+0x1c/0x2f0 [ 895.168530][ T8319] ? tun_get+0x1c/0x2f0 [ 895.168560][ T8319] tun_chr_read_iter+0x13b/0x260 [ 895.168590][ T8319] do_iter_readv_writev+0x619/0x8c0 [ 895.168617][ T8319] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 895.168645][ T8319] ? bpf_lsm_file_permission+0x9/0x20 [ 895.168668][ T8319] ? security_file_permission+0x75/0x260 [ 895.168695][ T8319] ? rw_verify_area+0x2a6/0x4d0 [ 895.168739][ T8319] vfs_readv+0x288/0x840 [ 895.168773][ T8319] ? __pfx_vfs_readv+0x10/0x10 [ 895.168814][ T8319] ? __fget_files+0x2a/0x420 [ 895.168837][ T8319] ? __fget_files+0x3a0/0x420 [ 895.168854][ T8319] ? __fget_files+0x2a/0x420 [ 895.168881][ T8319] do_readv+0x154/0x2e0 [ 895.168909][ T8319] ? __pfx_do_readv+0x10/0x10 [ 895.168944][ T8319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.168964][ T8319] do_syscall_64+0x15f/0xf80 [ 895.168989][ T8319] ? trace_irq_disable+0x3b/0x140 [ 895.169012][ T8319] ? clear_bhb_loop+0x40/0x90 [ 895.169035][ T8319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.169054][ T8319] RIP: 0033:0x7f9c93b9cdd9 [ 895.169071][ T8319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.169086][ T8319] RSP: 002b:00007f9c949a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 895.169106][ T8319] RAX: ffffffffffffffda RBX: 00007f9c93e15fa0 RCX: 00007f9c93b9cdd9 [ 895.169119][ T8319] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000004 [ 895.169131][ T8319] RBP: 00007f9c949a4090 R08: 0000000000000000 R09: 0000000000000000 [ 895.169142][ T8319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.169154][ T8319] R13: 00007f9c93e16038 R14: 00007f9c93e15fa0 R15: 00007ffd8e89c078 [ 895.169184][ T8319] [ 895.610124][ T8328] --map-set only usable from mangle table [ 896.160232][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10937'. [ 896.610831][ T8379] netlink: 'syz.2.10942': attribute type 1 has an invalid length. [ 896.658570][ T8383] Cannot find del_set index 2 as target [ 896.661410][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10942'. [ 896.683721][ T8379] macvlan1: entered promiscuous mode [ 896.690137][ T8379] macvlan1: entered allmulticast mode [ 896.718428][ T8385] syzkaller0: entered promiscuous mode [ 896.724081][ T8385] syzkaller0: entered allmulticast mode [ 896.745832][ T8385] geneve5: entered promiscuous mode [ 896.751991][ T8385] geneve5: entered allmulticast mode [ 897.024949][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10949'. [ 897.034496][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10949'. [ 897.971103][ T8416] netlink: 'syz.1.10952': attribute type 39 has an invalid length. [ 899.094545][ T8350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 899.418716][ T8453] netlink: 'syz.0.10965': attribute type 1 has an invalid length. [ 899.616951][ T8470] netlink: 492 bytes leftover after parsing attributes in process `syz.2.10971'. [ 899.637272][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10971'. [ 899.660526][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10971'. [ 900.308378][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10979'. [ 900.333692][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10979'. [ 900.782772][ T8513] netlink: 'syz.1.10985': attribute type 1 has an invalid length. [ 900.801184][ T8515] FAULT_INJECTION: forcing a failure. [ 900.801184][ T8515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.849958][ T8515] CPU: 1 UID: 0 PID: 8515 Comm: syz.3.10986 Not tainted syzkaller #0 PREEMPT(full) [ 900.849985][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 900.849997][ T8515] Call Trace: [ 900.850005][ T8515] [ 900.850013][ T8515] dump_stack_lvl+0xe8/0x150 [ 900.850047][ T8515] should_fail_ex+0x412/0x560 [ 900.850081][ T8515] _copy_from_user+0x2d/0xb0 [ 900.850104][ T8515] __copy_msghdr+0x3c5/0x5b0 [ 900.850130][ T8515] ___sys_sendmsg+0x213/0x360 [ 900.850149][ T8515] ? __lock_acquire+0x6b5/0x2cf0 [ 900.850181][ T8515] ? __pfx____sys_sendmsg+0x10/0x10 [ 900.850236][ T8515] ? __fget_files+0x2a/0x420 [ 900.850255][ T8515] ? __fget_files+0x3a0/0x420 [ 900.850283][ T8515] __x64_sys_sendmsg+0x1bd/0x2a0 [ 900.850307][ T8515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 900.850338][ T8515] ? __pfx_ksys_write+0x10/0x10 [ 900.850369][ T8515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.850389][ T8515] do_syscall_64+0x15f/0xf80 [ 900.850413][ T8515] ? trace_irq_disable+0x3b/0x140 [ 900.850437][ T8515] ? clear_bhb_loop+0x40/0x90 [ 900.850460][ T8515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.850478][ T8515] RIP: 0033:0x7f7e0399cdd9 [ 900.850496][ T8515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.850512][ T8515] RSP: 002b:00007f7e0489f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.850533][ T8515] RAX: ffffffffffffffda RBX: 00007f7e03c15fa0 RCX: 00007f7e0399cdd9 [ 900.850545][ T8515] RDX: 0000000000000040 RSI: 00002000000052c0 RDI: 0000000000000006 [ 900.850557][ T8515] RBP: 00007f7e0489f090 R08: 0000000000000000 R09: 0000000000000000 [ 900.850569][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.850580][ T8515] R13: 00007f7e03c16038 R14: 00007f7e03c15fa0 R15: 00007ffe743fc648 [ 900.850609][ T8515] [ 901.165236][ T8529] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 901.587691][ T8555] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10999'. [ 901.598495][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10999'. [ 901.922217][ T8568] FAULT_INJECTION: forcing a failure. [ 901.922217][ T8568] name failslab, interval 1, probability 0, space 0, times 0 [ 901.956728][ T8568] CPU: 1 UID: 0 PID: 8568 Comm: syz.0.11002 Not tainted syzkaller #0 PREEMPT(full) [ 901.956754][ T8568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 901.956765][ T8568] Call Trace: [ 901.956773][ T8568] [ 901.956781][ T8568] dump_stack_lvl+0xe8/0x150 [ 901.956814][ T8568] should_fail_ex+0x412/0x560 [ 901.956849][ T8568] should_failslab+0xa8/0x100 [ 901.956876][ T8568] __kmalloc_noprof+0xe8/0x760 [ 901.956899][ T8568] ? sock_kmalloc+0xd6/0x160 [ 901.956925][ T8568] sock_kmalloc+0xd6/0x160 [ 901.956949][ T8568] ____sys_sendmsg+0x1c2/0x9f0 [ 901.956979][ T8568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 901.957010][ T8568] ? import_iovec+0x73/0xa0 [ 901.957031][ T8568] ___sys_sendmsg+0x2a5/0x360 [ 901.957049][ T8568] ? __lock_acquire+0x6b5/0x2cf0 [ 901.957077][ T8568] ? __pfx____sys_sendmsg+0x10/0x10 [ 901.957128][ T8568] ? __fget_files+0x2a/0x420 [ 901.957146][ T8568] ? __fget_files+0x3a0/0x420 [ 901.957173][ T8568] __x64_sys_sendmsg+0x1bd/0x2a0 [ 901.957196][ T8568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 901.957225][ T8568] ? __pfx_ksys_write+0x10/0x10 [ 901.957255][ T8568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.957275][ T8568] do_syscall_64+0x15f/0xf80 [ 901.957299][ T8568] ? trace_irq_disable+0x3b/0x140 [ 901.957322][ T8568] ? clear_bhb_loop+0x40/0x90 [ 901.957345][ T8568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.957370][ T8568] RIP: 0033:0x7fd43ff9cdd9 [ 901.957386][ T8568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.957400][ T8568] RSP: 002b:00007fd440ece028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.957418][ T8568] RAX: ffffffffffffffda RBX: 00007fd440215fa0 RCX: 00007fd43ff9cdd9 [ 901.957432][ T8568] RDX: 0000000000000040 RSI: 00002000000052c0 RDI: 0000000000000006 [ 901.957444][ T8568] RBP: 00007fd440ece090 R08: 0000000000000000 R09: 0000000000000000 [ 901.957454][ T8568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.957465][ T8568] R13: 00007fd440216038 R14: 00007fd440215fa0 R15: 00007fff6df69538 [ 901.957493][ T8568] [ 902.478283][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11009'. [ 902.520821][ T8588] Cannot find del_set index 2 as target [ 902.647570][ T8593] netlink: 67 bytes leftover after parsing attributes in process `syz.2.11012'. [ 902.850394][ T8603] FAULT_INJECTION: forcing a failure. [ 902.850394][ T8603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.890162][ T8603] CPU: 0 UID: 0 PID: 8603 Comm: syz.4.11015 Not tainted syzkaller #0 PREEMPT(full) [ 902.890189][ T8603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 902.890199][ T8603] Call Trace: [ 902.890207][ T8603] [ 902.890215][ T8603] dump_stack_lvl+0xe8/0x150 [ 902.890250][ T8603] should_fail_ex+0x412/0x560 [ 902.890283][ T8603] _copy_from_user+0x2d/0xb0 [ 902.890305][ T8603] ____sys_sendmsg+0x308/0x9f0 [ 902.890343][ T8603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 902.890371][ T8603] ? import_iovec+0x73/0xa0 [ 902.890394][ T8603] ___sys_sendmsg+0x2a5/0x360 [ 902.890410][ T8603] ? __lock_acquire+0x6b5/0x2cf0 [ 902.890438][ T8603] ? __pfx____sys_sendmsg+0x10/0x10 [ 902.890489][ T8603] ? __fget_files+0x2a/0x420 [ 902.890506][ T8603] ? __fget_files+0x3a0/0x420 [ 902.890534][ T8603] __x64_sys_sendmsg+0x1bd/0x2a0 [ 902.890556][ T8603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 902.890584][ T8603] ? __pfx_ksys_write+0x10/0x10 [ 902.890615][ T8603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.890635][ T8603] do_syscall_64+0x15f/0xf80 [ 902.890659][ T8603] ? trace_irq_disable+0x3b/0x140 [ 902.890682][ T8603] ? clear_bhb_loop+0x40/0x90 [ 902.890705][ T8603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.890723][ T8603] RIP: 0033:0x7f9c93b9cdd9 [ 902.890740][ T8603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.890756][ T8603] RSP: 002b:00007f9c949a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.890775][ T8603] RAX: ffffffffffffffda RBX: 00007f9c93e15fa0 RCX: 00007f9c93b9cdd9 [ 902.890788][ T8603] RDX: 0000000000000040 RSI: 00002000000052c0 RDI: 0000000000000006 [ 902.890800][ T8603] RBP: 00007f9c949a4090 R08: 0000000000000000 R09: 0000000000000000 [ 902.890811][ T8603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.890822][ T8603] R13: 00007f9c93e16038 R14: 00007f9c93e15fa0 R15: 00007ffd8e89c078 [ 902.890851][ T8603] [ 903.123970][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11018'. [ 903.133828][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11018'. [ 903.265888][ T8613] netlink: 'syz.4.11019': attribute type 2 has an invalid length. [ 903.292377][ T8613] netlink: 'syz.4.11019': attribute type 3 has an invalid length. [ 903.304633][ T8613] netlink: 'syz.4.11019': attribute type 1 has an invalid length. [ 903.315782][ T8613] netlink: 204 bytes leftover after parsing attributes in process `syz.4.11019'. [ 903.356203][ T8618] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11022'. [ 903.582872][ T8630] FAULT_INJECTION: forcing a failure. [ 903.582872][ T8630] name failslab, interval 1, probability 0, space 0, times 0 [ 903.608617][ T8630] CPU: 1 UID: 0 PID: 8630 Comm: syz.2.11029 Not tainted syzkaller #0 PREEMPT(full) [ 903.608640][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 903.608651][ T8630] Call Trace: [ 903.608658][ T8630] [ 903.608665][ T8630] dump_stack_lvl+0xe8/0x150 [ 903.608697][ T8630] should_fail_ex+0x412/0x560 [ 903.608731][ T8630] should_failslab+0xa8/0x100 [ 903.608757][ T8630] __kmalloc_noprof+0xe8/0x760 [ 903.608780][ T8630] ? ip_options_get+0x51/0x4c0 [ 903.608798][ T8630] ? look_up_lock_class+0x57/0x110 [ 903.608825][ T8630] ip_options_get+0x51/0x4c0 [ 903.608844][ T8630] ? __lock_acquire+0x6b5/0x2cf0 [ 903.608872][ T8630] ip_cmsg_send+0x591/0xa70 [ 903.608906][ T8630] udp_sendmsg+0xbf2/0x21a0 [ 903.608940][ T8630] ? __pfx_udp_sendmsg+0x10/0x10 [ 903.608965][ T8630] ? ip4_datagram_release_cb+0x978/0xbe0 [ 903.608990][ T8630] ? reacquire_held_locks+0x104/0x190 [ 903.609006][ T8630] ? release_sock+0x2f/0x260 [ 903.609033][ T8630] ? inet_sendmsg+0x14f/0x370 [ 903.609050][ T8630] ? inet_sendmsg+0x14f/0x370 [ 903.609066][ T8630] ? __local_bh_enable_ip+0xd0/0x130 [ 903.609088][ T8630] ? lockdep_hardirqs_on+0x7a/0x110 [ 903.609106][ T8630] ? inet_sendmsg+0x14f/0x370 [ 903.609121][ T8630] ? __local_bh_enable_ip+0xd0/0x130 [ 903.609141][ T8630] ? inet_sendmsg+0x29c/0x370 [ 903.609161][ T8630] ____sys_sendmsg+0x80a/0x9f0 [ 903.609184][ T8630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 903.609208][ T8630] ? import_iovec+0x73/0xa0 [ 903.609230][ T8630] ___sys_sendmsg+0x2a5/0x360 [ 903.609245][ T8630] ? __lock_acquire+0x6b5/0x2cf0 [ 903.609269][ T8630] ? __pfx____sys_sendmsg+0x10/0x10 [ 903.609312][ T8630] ? __fget_files+0x2a/0x420 [ 903.609327][ T8630] ? __fget_files+0x3a0/0x420 [ 903.609349][ T8630] __x64_sys_sendmsg+0x1bd/0x2a0 [ 903.609368][ T8630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 903.609391][ T8630] ? __pfx_ksys_write+0x10/0x10 [ 903.609416][ T8630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.609432][ T8630] do_syscall_64+0x15f/0xf80 [ 903.609451][ T8630] ? trace_irq_disable+0x3b/0x140 [ 903.609471][ T8630] ? clear_bhb_loop+0x40/0x90 [ 903.609488][ T8630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.609503][ T8630] RIP: 0033:0x7fa29af9cdd9 [ 903.609523][ T8630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.609535][ T8630] RSP: 002b:00007fa29bec1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.609552][ T8630] RAX: ffffffffffffffda RBX: 00007fa29b215fa0 RCX: 00007fa29af9cdd9 [ 903.609563][ T8630] RDX: 0000000000000040 RSI: 00002000000052c0 RDI: 0000000000000006 [ 903.609573][ T8630] RBP: 00007fa29bec1090 R08: 0000000000000000 R09: 0000000000000000 [ 903.609583][ T8630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.609592][ T8630] R13: 00007fa29b216038 R14: 00007fa29b215fa0 R15: 00007ffc1bcf3058 [ 903.609616][ T8630] [ 904.061711][ T8644] --map-set only usable from mangle table [ 904.083435][ T8643] C speed is unknown, defaulting to 1000 [ 904.364884][ T8666] FAULT_INJECTION: forcing a failure. [ 904.364884][ T8666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.378972][ T8666] CPU: 1 UID: 0 PID: 8666 Comm: syz.4.11042 Not tainted syzkaller #0 PREEMPT(full) [ 904.378999][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 904.379011][ T8666] Call Trace: [ 904.379018][ T8666] [ 904.379027][ T8666] dump_stack_lvl+0xe8/0x150 [ 904.379061][ T8666] should_fail_ex+0x412/0x560 [ 904.379096][ T8666] _copy_to_user+0x31/0xb0 [ 904.379119][ T8666] simple_read_from_buffer+0xe1/0x170 [ 904.379146][ T8666] proc_fail_nth_read+0x1bb/0x230 [ 904.379169][ T8666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 904.379194][ T8666] ? rw_verify_area+0x2a6/0x4d0 [ 904.379213][ T8666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 904.379235][ T8666] vfs_read+0x20c/0xa70 [ 904.379263][ T8666] ? __pfx___mutex_lock+0x10/0x10 [ 904.379290][ T8666] ? __pfx_vfs_read+0x10/0x10 [ 904.379314][ T8666] ? __fget_files+0x2a/0x420 [ 904.379338][ T8666] ? __fget_files+0x3a0/0x420 [ 904.379355][ T8666] ? __fget_files+0x2a/0x420 [ 904.379383][ T8666] ksys_read+0x150/0x270 [ 904.379408][ T8666] ? __pfx_ksys_read+0x10/0x10 [ 904.379439][ T8666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.379467][ T8666] do_syscall_64+0x15f/0xf80 [ 904.379491][ T8666] ? trace_irq_disable+0x3b/0x140 [ 904.379515][ T8666] ? clear_bhb_loop+0x40/0x90 [ 904.379538][ T8666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.379556][ T8666] RIP: 0033:0x7f9c93b5d60e [ 904.379578][ T8666] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 904.379593][ T8666] RSP: 002b:00007f9c949a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 904.379613][ T8666] RAX: ffffffffffffffda RBX: 00007f9c949a46c0 RCX: 00007f9c93b5d60e [ 904.379627][ T8666] RDX: 000000000000000f RSI: 00007f9c949a40a0 RDI: 0000000000000007 [ 904.379638][ T8666] RBP: 00007f9c949a4090 R08: 0000000000000000 R09: 0000000000000000 [ 904.379650][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.379661][ T8666] R13: 00007f9c93e16038 R14: 00007f9c93e15fa0 R15: 00007ffd8e89c078 [ 904.379693][ T8666] [ 904.982036][ T8684] erspan0: entered promiscuous mode [ 905.025117][ T8686] netlink: 'syz.4.11050': attribute type 4 has an invalid length. [ 905.414011][ T8712] __nla_validate_parse: 8 callbacks suppressed [ 905.414029][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11057'. [ 905.519402][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11057'. [ 905.546211][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11057'. [ 905.592640][ T8715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11059'. [ 906.422433][ T8759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11073'. [ 906.489738][ T8764] syzkaller1: entered promiscuous mode [ 906.499405][ T8764] syzkaller1: entered allmulticast mode [ 906.540767][ T8764] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 906.552617][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11074'. [ 906.741655][ T8779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11077'. [ 906.801380][ T8786] FAULT_INJECTION: forcing a failure. [ 906.801380][ T8786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.832699][ T8786] CPU: 0 UID: 0 PID: 8786 Comm: syz.1.11080 Not tainted syzkaller #0 PREEMPT(full) [ 906.832725][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 906.832737][ T8786] Call Trace: [ 906.832745][ T8786] [ 906.832754][ T8786] dump_stack_lvl+0xe8/0x150 [ 906.832788][ T8786] should_fail_ex+0x412/0x560 [ 906.832822][ T8786] _copy_from_user+0x2d/0xb0 [ 906.832845][ T8786] br_dev_siocdevprivate+0x118/0x1630 [ 906.832869][ T8786] ? __pfx___mutex_trylock_common+0x10/0x10 [ 906.832894][ T8786] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 906.832916][ T8786] ? trace_contention_end+0x3d/0x140 [ 906.832940][ T8786] ? tomoyo_path_number_perm+0x219/0x630 [ 906.832969][ T8786] ? do_vfs_ioctl+0x1166/0x1530 [ 906.832997][ T8786] ? dev_ioctl+0x83c/0x1150 [ 906.833023][ T8786] ? full_name_hash+0x92/0xe0 [ 906.833048][ T8786] dev_ifsioc+0xb6b/0x1330 [ 906.833076][ T8786] ? dev_load+0x21/0x1f0 [ 906.833102][ T8786] dev_ioctl+0x84c/0x1150 [ 906.833130][ T8786] sock_ioctl+0x75f/0x7f0 [ 906.833154][ T8786] ? __pfx_sock_ioctl+0x10/0x10 [ 906.833177][ T8786] ? __fget_files+0x3a0/0x420 [ 906.833195][ T8786] ? __fget_files+0x2a/0x420 [ 906.833214][ T8786] ? bpf_lsm_file_ioctl+0x9/0x20 [ 906.833242][ T8786] ? __pfx_sock_ioctl+0x10/0x10 [ 906.833264][ T8786] __se_sys_ioctl+0xfc/0x170 [ 906.833287][ T8786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.833305][ T8786] do_syscall_64+0x15f/0xf80 [ 906.833328][ T8786] ? trace_irq_disable+0x3b/0x140 [ 906.833350][ T8786] ? clear_bhb_loop+0x40/0x90 [ 906.833380][ T8786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.833398][ T8786] RIP: 0033:0x7f0f9819cdd9 [ 906.833416][ T8786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.833431][ T8786] RSP: 002b:00007f0f99029028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 906.833450][ T8786] RAX: ffffffffffffffda RBX: 00007f0f98415fa0 RCX: 00007f0f9819cdd9 [ 906.833463][ T8786] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000004 [ 906.833475][ T8786] RBP: 00007f0f99029090 R08: 0000000000000000 R09: 0000000000000000 [ 906.833487][ T8786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.833498][ T8786] R13: 00007f0f98416038 R14: 00007f0f98415fa0 R15: 00007ffcd4a05fe8 [ 906.833530][ T8786] [ 907.333984][ T8801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11085'. [ 907.498770][ T8810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11088'. [ 907.517136][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11088'. [ 907.660316][ T8817] 8021q: VLANs not supported on ip_vti0 [ 907.884581][ T8830] FAULT_INJECTION: forcing a failure. [ 907.884581][ T8830] name failslab, interval 1, probability 0, space 0, times 0 [ 907.910615][ T8830] CPU: 1 UID: 0 PID: 8830 Comm: syz.1.11097 Not tainted syzkaller #0 PREEMPT(full) [ 907.910641][ T8830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 907.910652][ T8830] Call Trace: [ 907.910658][ T8830] [ 907.910666][ T8830] dump_stack_lvl+0xe8/0x150 [ 907.910696][ T8830] should_fail_ex+0x412/0x560 [ 907.910727][ T8830] should_failslab+0xa8/0x100 [ 907.910750][ T8830] __kvmalloc_node_noprof+0x178/0x8a0 [ 907.910771][ T8830] ? nf_hook_entries_grow+0x288/0x720 [ 907.910798][ T8830] nf_hook_entries_grow+0x288/0x720 [ 907.910833][ T8830] __nf_register_net_hook+0x2c9/0x930 [ 907.910864][ T8830] nf_register_net_hook+0xb2/0x190 [ 907.910885][ T8830] nf_register_net_hooks+0x44/0x1b0 [ 907.910910][ T8830] nf_ct_netns_do_get+0x212/0x5c0 [ 907.910936][ T8830] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 907.910954][ T8830] ? rcu_is_watching+0x15/0xb0 [ 907.910973][ T8830] ? __bitmap_set+0x12f/0x170 [ 907.910998][ T8830] ? nf_ct_netns_get+0xe9/0x320 [ 907.911022][ T8830] nft_ct_get_init+0x5bf/0x9c0 [ 907.911055][ T8830] nf_tables_newrule+0x17ac/0x28b0 [ 907.911096][ T8830] ? __pfx_nf_tables_newrule+0x10/0x10 [ 907.911118][ T8830] ? nfnl_pernet+0x23/0x240 [ 907.911143][ T8830] ? nfnl_pernet+0x23/0x240 [ 907.911178][ T8830] ? __nla_parse+0x40/0x60 [ 907.911205][ T8830] nfnetlink_rcv+0x123e/0x27b0 [ 907.911273][ T8830] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 907.911317][ T8830] ? ref_tracker_free+0x693/0x840 [ 907.911370][ T8830] ? __netlink_deliver_tap+0x807/0x850 [ 907.911400][ T8830] ? netlink_deliver_tap+0x2e/0x1b0 [ 907.911419][ T8830] ? netlink_deliver_tap+0x2e/0x1b0 [ 907.911444][ T8830] netlink_unicast+0x75c/0x8e0 [ 907.911481][ T8830] netlink_sendmsg+0x813/0xb40 [ 907.911512][ T8830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.911535][ T8830] ? aa_sock_msg_perm+0xf1/0x1b0 [ 907.911557][ T8830] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 907.911582][ T8830] ____sys_sendmsg+0x972/0x9f0 [ 907.911600][ T8830] ? __might_fault+0xaf/0x130 [ 907.911625][ T8830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 907.911655][ T8830] ? import_iovec+0x73/0xa0 [ 907.911680][ T8830] ___sys_sendmsg+0x2a5/0x360 [ 907.911700][ T8830] ? __lock_acquire+0x6b5/0x2cf0 [ 907.911732][ T8830] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.911792][ T8830] ? __fget_files+0x2a/0x420 [ 907.911809][ T8830] ? __fget_files+0x3a0/0x420 [ 907.911837][ T8830] __x64_sys_sendmsg+0x1bd/0x2a0 [ 907.911861][ T8830] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 907.911893][ T8830] ? __pfx_ksys_write+0x10/0x10 [ 907.911926][ T8830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.911945][ T8830] do_syscall_64+0x15f/0xf80 [ 907.911968][ T8830] ? trace_irq_disable+0x3b/0x140 [ 907.911990][ T8830] ? clear_bhb_loop+0x40/0x90 [ 907.912011][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.912028][ T8830] RIP: 0033:0x7f0f9819cdd9 [ 907.912053][ T8830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.912066][ T8830] RSP: 002b:00007f0f99029028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.912086][ T8830] RAX: ffffffffffffffda RBX: 00007f0f98415fa0 RCX: 00007f0f9819cdd9 [ 907.912099][ T8830] RDX: 0000000024004804 RSI: 0000200000000340 RDI: 0000000000000003 [ 907.912110][ T8830] RBP: 00007f0f99029090 R08: 0000000000000000 R09: 0000000000000000 [ 907.912121][ T8830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 907.912131][ T8830] R13: 00007f0f98416038 R14: 00007f0f98415fa0 R15: 00007ffcd4a05fe8 [ 907.912160][ T8830] [ 908.429410][ T8841] netlink: 'syz.4.11102': attribute type 8 has an invalid length. [ 908.473208][ T8841] bond36: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 908.487881][ T8841] bond36 (unregistering): Released all slaves [ 908.583746][ T8850] 8021q: VLANs not supported on ip6gre0 [ 908.629176][ T8852] dvmrp0: left allmulticast mode [ 908.762058][ T8859] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap16 [ 908.844292][ T8859] sock: sock_set_timeout: `syz.3.11108' (pid 8859) tries to set negative timeout [ 909.191313][ T8885] FAULT_INJECTION: forcing a failure. [ 909.191313][ T8885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.207771][ T8885] CPU: 1 UID: 0 PID: 8885 Comm: syz.0.11116 Not tainted syzkaller #0 PREEMPT(full) [ 909.207797][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 909.207807][ T8885] Call Trace: [ 909.207814][ T8885] [ 909.207821][ T8885] dump_stack_lvl+0xe8/0x150 [ 909.207854][ T8885] should_fail_ex+0x412/0x560 [ 909.207887][ T8885] _copy_from_user+0x2d/0xb0 [ 909.207908][ T8885] ___sys_sendmsg+0x1c6/0x360 [ 909.207926][ T8885] ? __lock_acquire+0x6b5/0x2cf0 [ 909.207955][ T8885] ? __pfx____sys_sendmsg+0x10/0x10 [ 909.208003][ T8885] ? __fget_files+0x2a/0x420 [ 909.208021][ T8885] ? __fget_files+0x3a0/0x420 [ 909.208040][ T8885] __x64_sys_sendmsg+0x1bd/0x2a0 [ 909.208053][ T8885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 909.208070][ T8885] ? __pfx_ksys_write+0x10/0x10 [ 909.208087][ T8885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.208098][ T8885] do_syscall_64+0x15f/0xf80 [ 909.208113][ T8885] ? trace_irq_disable+0x3b/0x140 [ 909.208127][ T8885] ? clear_bhb_loop+0x40/0x90 [ 909.208140][ T8885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.208150][ T8885] RIP: 0033:0x7fd43ff9cdd9 [ 909.208161][ T8885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.208170][ T8885] RSP: 002b:00007fd440ece028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 909.208182][ T8885] RAX: ffffffffffffffda RBX: 00007fd440215fa0 RCX: 00007fd43ff9cdd9 [ 909.208190][ T8885] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 909.208196][ T8885] RBP: 00007fd440ece090 R08: 0000000000000000 R09: 0000000000000000 [ 909.208202][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.208208][ T8885] R13: 00007fd440216038 R14: 00007fd440215fa0 R15: 00007fff6df69538 [ 909.208231][ T8885] [ 909.674606][ T8898] openvswitch: netlink: Missing key (keys=40, expected=100) [ 910.361120][ T8931] tipc: Resetting bearer [ 910.409014][ T8942] netlink: 'syz.0.11129': attribute type 5 has an invalid length. [ 910.437557][ T8942] __nla_validate_parse: 9 callbacks suppressed [ 910.437575][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11129'. [ 910.510363][ T8933] bond31: option all_slaves_active: invalid value (222) [ 910.521148][ T8933] bond31 (unregistering): Released all slaves [ 910.649852][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11134'. [ 910.668298][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11134'. [ 910.728775][ T8960] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11137'. [ 910.890498][ T8971] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11142'. [ 910.902166][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11141'. [ 911.192790][ T8987] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 911.201770][ T8987] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 911.263677][ T8989] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 911.424360][ T9001] digital: digital_start_poll: Unknown protocol [ 912.104232][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11172'. [ 912.278403][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11176'. [ 912.289234][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11176'. [ 912.584249][ T9076] --map-set only usable from mangle table [ 912.660539][ T9080] tipc: Resetting bearer [ 912.687504][ T9080] tipc: Resetting bearer [ 912.733348][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11187'. [ 913.170792][ T9112] FAULT_INJECTION: forcing a failure. [ 913.170792][ T9112] name failslab, interval 1, probability 0, space 0, times 0 [ 913.185686][ T9112] CPU: 1 UID: 0 PID: 9112 Comm: syz.3.11197 Not tainted syzkaller #0 PREEMPT(full) [ 913.185712][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 913.185723][ T9112] Call Trace: [ 913.185730][ T9112] [ 913.185738][ T9112] dump_stack_lvl+0xe8/0x150 [ 913.185771][ T9112] should_fail_ex+0x412/0x560 [ 913.185803][ T9112] should_failslab+0xa8/0x100 [ 913.185829][ T9112] __kmalloc_cache_noprof+0x88/0x660 [ 913.185852][ T9112] ? rtnl_newlink+0x136/0x1bb0 [ 913.185873][ T9112] rtnl_newlink+0x136/0x1bb0 [ 913.185901][ T9112] ? __pfx_rtnl_newlink+0x10/0x10 [ 913.185925][ T9112] ? __lock_acquire+0x6b5/0x2cf0 [ 913.185951][ T9112] ? __lock_acquire+0x6b5/0x2cf0 [ 913.185984][ T9112] ? unwind_next_frame+0xa6/0x2550 [ 913.186017][ T9112] ? unwind_next_frame+0xa6/0x2550 [ 913.186038][ T9112] ? is_bpf_text_address+0x26/0x2b0 [ 913.186071][ T9112] ? is_bpf_text_address+0x26/0x2b0 [ 913.186101][ T9112] ? __lock_acquire+0x6b5/0x2cf0 [ 913.186129][ T9112] ? kernel_text_address+0xa5/0xe0 [ 913.186151][ T9112] ? __kernel_text_address+0xd/0x30 [ 913.186171][ T9112] ? unwind_get_return_address+0x4d/0x90 [ 913.186188][ T9112] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 913.186213][ T9112] ? arch_stack_walk+0xfb/0x150 [ 913.186245][ T9112] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 913.186283][ T9112] ? __pfx_rtnl_newlink+0x10/0x10 [ 913.186300][ T9112] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 913.186325][ T9112] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 913.186347][ T9112] ? netlink_sendmsg+0x5d4/0xb40 [ 913.186369][ T9112] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 913.186395][ T9112] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 913.186424][ T9112] ? __lock_acquire+0x6b5/0x2cf0 [ 913.186462][ T9112] netlink_rcv_skb+0x232/0x4b0 [ 913.186482][ T9112] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 913.186510][ T9112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 913.186543][ T9112] ? netlink_deliver_tap+0x2e/0x1b0 [ 913.186561][ T9112] ? netlink_deliver_tap+0x2e/0x1b0 [ 913.186586][ T9112] netlink_unicast+0x75c/0x8e0 [ 913.186623][ T9112] netlink_sendmsg+0x813/0xb40 [ 913.186652][ T9112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.186675][ T9112] ? aa_sock_msg_perm+0xf1/0x1b0 [ 913.186696][ T9112] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 913.186722][ T9112] ____sys_sendmsg+0x972/0x9f0 [ 913.186742][ T9112] ? __might_fault+0xaf/0x130 [ 913.186769][ T9112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 913.186798][ T9112] ? import_iovec+0x73/0xa0 [ 913.186822][ T9112] ___sys_sendmsg+0x2a5/0x360 [ 913.186839][ T9112] ? __lock_acquire+0x6b5/0x2cf0 [ 913.186867][ T9112] ? __pfx____sys_sendmsg+0x10/0x10 [ 913.186922][ T9112] ? __fget_files+0x2a/0x420 [ 913.186940][ T9112] ? __fget_files+0x3a0/0x420 [ 913.186969][ T9112] __x64_sys_sendmsg+0x1bd/0x2a0 [ 913.186999][ T9112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 913.187029][ T9112] ? __pfx_ksys_write+0x10/0x10 [ 913.187059][ T9112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.187080][ T9112] do_syscall_64+0x15f/0xf80 [ 913.187105][ T9112] ? trace_irq_disable+0x3b/0x140 [ 913.187129][ T9112] ? clear_bhb_loop+0x40/0x90 [ 913.187152][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.187169][ T9112] RIP: 0033:0x7f7e0399cdd9 [ 913.187187][ T9112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.187202][ T9112] RSP: 002b:00007f7e0489f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.187221][ T9112] RAX: ffffffffffffffda RBX: 00007f7e03c15fa0 RCX: 00007f7e0399cdd9 [ 913.187233][ T9112] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 913.187243][ T9112] RBP: 00007f7e0489f090 R08: 0000000000000000 R09: 0000000000000000 [ 913.187253][ T9112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.187264][ T9112] R13: 00007f7e03c16038 R14: 00007f7e03c15fa0 R15: 00007ffe743fc648 [ 913.187293][ T9112] [ 913.644759][ T9118] netlink: 'syz.1.11198': attribute type 1 has an invalid length. [ 913.715822][ T9118] netlink: 'syz.1.11198': attribute type 1 has an invalid length. [ 914.067032][ T9145] Cannot find del_set index 2 as target [ 914.302363][ T9156] FAULT_INJECTION: forcing a failure. [ 914.302363][ T9156] name failslab, interval 1, probability 0, space 0, times 0 [ 914.344194][ T9156] CPU: 1 UID: 0 PID: 9156 Comm: syz.3.11211 Not tainted syzkaller #0 PREEMPT(full) [ 914.344221][ T9156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 914.344232][ T9156] Call Trace: [ 914.344239][ T9156] [ 914.344247][ T9156] dump_stack_lvl+0xe8/0x150 [ 914.344281][ T9156] should_fail_ex+0x412/0x560 [ 914.344315][ T9156] should_failslab+0xa8/0x100 [ 914.344341][ T9156] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 914.344365][ T9156] ? __alloc_skb+0x1d0/0x7d0 [ 914.344381][ T9156] ? __local_bh_enable_ip+0xd0/0x130 [ 914.344411][ T9156] __alloc_skb+0x1d0/0x7d0 [ 914.344433][ T9156] rtmsg_ifinfo_build_skb+0x84/0x260 [ 914.344466][ T9156] rtnetlink_event+0x1b7/0x270 [ 914.344489][ T9156] notifier_call_chain+0x1ad/0x3d0 [ 914.344519][ T9156] netif_set_mtu_ext+0x5aa/0x800 [ 914.344536][ T9156] ? unwind_next_frame+0xa6/0x2550 [ 914.344562][ T9156] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 914.344590][ T9156] ? is_bpf_text_address+0x26/0x2b0 [ 914.344619][ T9156] ? validate_linkmsg+0x765/0x950 [ 914.344650][ T9156] do_setlink+0xa93/0x45a0 [ 914.344681][ T9156] ? arch_stack_walk+0xfb/0x150 [ 914.344710][ T9156] ? __pfx_do_setlink+0x10/0x10 [ 914.344732][ T9156] ? __pfx_stack_trace_save+0x10/0x10 [ 914.344777][ T9156] ? __mutex_trylock_common+0x158/0x260 [ 914.344802][ T9156] ? __pfx___mutex_trylock_common+0x10/0x10 [ 914.344826][ T9156] ? rcu_is_watching+0x15/0xb0 [ 914.344846][ T9156] ? trace_contention_end+0x3d/0x140 [ 914.344869][ T9156] ? __mutex_lock+0x319/0x1550 [ 914.344894][ T9156] ? __pfx___nla_validate_parse+0x10/0x10 [ 914.344926][ T9156] ? rtnl_newlink+0x883/0x1bb0 [ 914.344945][ T9156] ? __pfx___mutex_lock+0x10/0x10 [ 914.344980][ T9156] ? ns_capable+0x89/0xe0 [ 914.345012][ T9156] rtnl_newlink+0x14ca/0x1bb0 [ 914.345043][ T9156] ? __pfx_rtnl_newlink+0x10/0x10 [ 914.345066][ T9156] ? __lock_acquire+0x6b5/0x2cf0 [ 914.345096][ T9156] ? __lock_acquire+0x6b5/0x2cf0 [ 914.345131][ T9156] ? unwind_next_frame+0xa6/0x2550 [ 914.345158][ T9156] ? unwind_next_frame+0xa6/0x2550 [ 914.345180][ T9156] ? is_bpf_text_address+0x26/0x2b0 [ 914.345215][ T9156] ? is_bpf_text_address+0x26/0x2b0 [ 914.345244][ T9156] ? __lock_acquire+0x6b5/0x2cf0 [ 914.345272][ T9156] ? kernel_text_address+0xa5/0xe0 [ 914.345296][ T9156] ? __kernel_text_address+0xd/0x30 [ 914.345317][ T9156] ? unwind_get_return_address+0x4d/0x90 [ 914.345334][ T9156] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 914.345357][ T9156] ? arch_stack_walk+0xfb/0x150 [ 914.345392][ T9156] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 914.345433][ T9156] ? __pfx_rtnl_newlink+0x10/0x10 [ 914.345449][ T9156] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 914.345473][ T9156] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 914.345493][ T9156] ? netlink_sendmsg+0x5d4/0xb40 [ 914.345513][ T9156] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 914.345537][ T9156] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 914.345563][ T9156] ? __lock_acquire+0x6b5/0x2cf0 [ 914.345599][ T9156] netlink_rcv_skb+0x232/0x4b0 [ 914.345620][ T9156] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 914.345647][ T9156] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 914.345685][ T9156] ? netlink_deliver_tap+0x2e/0x1b0 [ 914.345704][ T9156] ? netlink_deliver_tap+0x2e/0x1b0 [ 914.345728][ T9156] netlink_unicast+0x75c/0x8e0 [ 914.345763][ T9156] netlink_sendmsg+0x813/0xb40 [ 914.345791][ T9156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.345814][ T9156] ? aa_sock_msg_perm+0xf1/0x1b0 [ 914.345833][ T9156] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 914.345857][ T9156] ____sys_sendmsg+0x972/0x9f0 [ 914.345876][ T9156] ? __might_fault+0xaf/0x130 [ 914.345902][ T9156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 914.345930][ T9156] ? import_iovec+0x73/0xa0 [ 914.345953][ T9156] ___sys_sendmsg+0x2a5/0x360 [ 914.345971][ T9156] ? __lock_acquire+0x6b5/0x2cf0 [ 914.345999][ T9156] ? __pfx____sys_sendmsg+0x10/0x10 [ 914.346056][ T9156] ? __fget_files+0x2a/0x420 [ 914.346074][ T9156] ? __fget_files+0x3a0/0x420 [ 914.346102][ T9156] __x64_sys_sendmsg+0x1bd/0x2a0 [ 914.346125][ T9156] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 914.346156][ T9156] ? __pfx_ksys_write+0x10/0x10 [ 914.346188][ T9156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.346209][ T9156] do_syscall_64+0x15f/0xf80 [ 914.346235][ T9156] ? trace_irq_disable+0x3b/0x140 [ 914.346255][ T9156] ? clear_bhb_loop+0x40/0x90 [ 914.346276][ T9156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.346294][ T9156] RIP: 0033:0x7f7e0399cdd9 [ 914.346312][ T9156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.346328][ T9156] RSP: 002b:00007f7e0489f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.346349][ T9156] RAX: ffffffffffffffda RBX: 00007f7e03c15fa0 RCX: 00007f7e0399cdd9 [ 914.346362][ T9156] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 914.346374][ T9156] RBP: 00007f7e0489f090 R08: 0000000000000000 R09: 0000000000000000 [ 914.346385][ T9156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.346396][ T9156] R13: 00007f7e03c16038 R14: 00007f7e03c15fa0 R15: 00007ffe743fc648 [ 914.346428][ T9156] [ 914.929971][ T9156] tipc: Resetting bearer [ 915.094248][ T9179] gre2: entered promiscuous mode [ 915.099961][ T9179] gre2: entered allmulticast mode [ 915.315137][ T9190] netlink: 'syz.0.11219': attribute type 2 has an invalid length. [ 915.390048][ T9190] netlink: 'syz.0.11219': attribute type 2 has an invalid length. [ 915.522436][ T9203] netlink: 'syz.2.11225': attribute type 1 has an invalid length. [ 915.728816][ T9218] __nla_validate_parse: 11 callbacks suppressed [ 915.728834][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11229'. [ 915.755125][ T9217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11231'. [ 915.774721][ T9218] gretap0: left allmulticast mode [ 915.790294][ T9218] bridge0: port 1(gretap0) entered disabled state [ 915.854979][ T9223] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 915.863543][ T9223] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 915.891252][ T9223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.011512][ T9228] netlink: 'syz.2.11235': attribute type 10 has an invalid length. [ 916.132717][ T9243] sit2: entered promiscuous mode [ 916.161650][ T9243] sit2: entered allmulticast mode [ 916.267257][ T9248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.857908][ T9269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11245'. [ 916.942711][ T9274] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11246'. [ 917.189078][ T9296] netlink: 'syz.3.11252': attribute type 1 has an invalid length. [ 917.268410][ T9300] netlink: 776 bytes leftover after parsing attributes in process `syz.2.11254'. [ 917.339483][ T9307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11258'. [ 917.407636][ T9311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11256'. [ 917.463628][ T9314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11259'. [ 917.561549][ T9319] netlink: 'syz.3.11261': attribute type 8 has an invalid length. [ 917.569883][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11261'. [ 917.727565][ T9330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11265'. [ 917.855211][ T9338] IPv6: NLM_F_REPLACE set, but no existing node found! [ 917.865253][ T9338] netlink: 'syz.2.11268': attribute type 9 has an invalid length. [ 917.873827][ T9338] netlink: 'syz.2.11268': attribute type 6 has an invalid length. [ 917.883506][ T9338] openvswitch: netlink: Flow key attr not present in new flow. [ 917.883511][ T9339] openvswitch: netlink: Flow key attr not present in new flow. [ 918.235066][ T9362] [ 918.237449][ T9362] ====================================================== [ 918.244482][ T9362] WARNING: possible circular locking dependency detected [ 918.251532][ T9362] syzkaller #0 Not tainted [ 918.255955][ T9362] ------------------------------------------------------ [ 918.262965][ T9362] syz.2.11273/9362 is trying to acquire lock: [ 918.269027][ T9362] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 918.278169][ T9362] [ 918.278169][ T9362] but task is already holding lock: [ 918.285526][ T9362] ffff888031519a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 918.294752][ T9362] [ 918.294752][ T9362] which lock already depends on the new lock. [ 918.294752][ T9362] [ 918.305156][ T9362] [ 918.305156][ T9362] the existing dependency chain (in reverse order) is: [ 918.314162][ T9362] [ 918.314162][ T9362] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 918.322154][ T9362] _raw_spin_lock_bh+0x36/0x50 [ 918.327440][ T9362] nr_rt_device_down+0x153/0x860 [ 918.332889][ T9362] nr_device_event+0x137/0x150 [ 918.338267][ T9362] notifier_call_chain+0x1ad/0x3d0 [ 918.343905][ T9362] netif_close_many+0x2ae/0x420 [ 918.349279][ T9362] netif_close+0x160/0x220 [ 918.354218][ T9362] dev_close+0x10a/0x220 [ 918.358971][ T9362] bpq_device_event+0x377/0x6a0 [ 918.364343][ T9362] notifier_call_chain+0x1ad/0x3d0 [ 918.369970][ T9362] __dev_notify_flags+0x16d/0x310 [ 918.375508][ T9362] netif_change_flags+0xe8/0x1a0 [ 918.380966][ T9362] dev_change_flags+0x130/0x270 [ 918.386338][ T9362] dev_ioctl+0x7b4/0x1150 [ 918.391199][ T9362] sock_do_ioctl+0x23e/0x320 [ 918.396312][ T9362] sock_ioctl+0x5c6/0x7f0 [ 918.401162][ T9362] __se_sys_ioctl+0xfc/0x170 [ 918.406360][ T9362] do_syscall_64+0x15f/0xf80 [ 918.411468][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.417877][ T9362] [ 918.417877][ T9362] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 918.425696][ T9362] _raw_spin_lock_bh+0x36/0x50 [ 918.430980][ T9362] nr_rt_device_down+0xbe/0x860 [ 918.436346][ T9362] nr_device_event+0x137/0x150 [ 918.441641][ T9362] notifier_call_chain+0x1ad/0x3d0 [ 918.447270][ T9362] netif_close_many+0x2ae/0x420 [ 918.452702][ T9362] netif_close+0x160/0x220 [ 918.457647][ T9362] dev_close+0x10a/0x220 [ 918.462404][ T9362] bpq_device_event+0x377/0x6a0 [ 918.467777][ T9362] notifier_call_chain+0x1ad/0x3d0 [ 918.473406][ T9362] __dev_notify_flags+0x16d/0x310 [ 918.478946][ T9362] netif_change_flags+0xe8/0x1a0 [ 918.484398][ T9362] dev_change_flags+0x130/0x270 [ 918.489773][ T9362] dev_ioctl+0x7b4/0x1150 [ 918.494629][ T9362] sock_do_ioctl+0x23e/0x320 [ 918.499737][ T9362] sock_ioctl+0x5c6/0x7f0 [ 918.504589][ T9362] __se_sys_ioctl+0xfc/0x170 [ 918.509701][ T9362] do_syscall_64+0x15f/0xf80 [ 918.514819][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.521228][ T9362] [ 918.521228][ T9362] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 918.529217][ T9362] __lock_acquire+0x15a5/0x2cf0 [ 918.534591][ T9362] lock_acquire+0x106/0x350 [ 918.539615][ T9362] _raw_spin_lock_bh+0x36/0x50 [ 918.544900][ T9362] nr_rt_ioctl+0x40c/0xf90 [ 918.549827][ T9362] sock_do_ioctl+0x101/0x320 [ 918.554937][ T9362] sock_ioctl+0x5c6/0x7f0 [ 918.559788][ T9362] __se_sys_ioctl+0xfc/0x170 [ 918.564896][ T9362] do_syscall_64+0x15f/0xf80 [ 918.570008][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.576418][ T9362] [ 918.576418][ T9362] other info that might help us debug this: [ 918.576418][ T9362] [ 918.586639][ T9362] Chain exists of: [ 918.586639][ T9362] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 918.586639][ T9362] [ 918.600474][ T9362] Possible unsafe locking scenario: [ 918.600474][ T9362] [ 918.608002][ T9362] CPU0 CPU1 [ 918.613359][ T9362] ---- ---- [ 918.618719][ T9362] lock(&nr_node->node_lock); [ 918.623480][ T9362] lock(nr_node_list_lock); [ 918.630582][ T9362] lock(&nr_node->node_lock); [ 918.637860][ T9362] lock(nr_neigh_list_lock); [ 918.642533][ T9362] [ 918.642533][ T9362] *** DEADLOCK *** [ 918.642533][ T9362] [ 918.650665][ T9362] 2 locks held by syz.2.11273/9362: [ 918.655854][ T9362] #0: ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 918.665428][ T9362] #1: ffff888031519a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 918.675099][ T9362] [ 918.675099][ T9362] stack backtrace: [ 918.681154][ T9362] CPU: 0 UID: 0 PID: 9362 Comm: syz.2.11273 Not tainted syzkaller #0 PREEMPT(full) [ 918.681176][ T9362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 918.681187][ T9362] Call Trace: [ 918.681196][ T9362] [ 918.681204][ T9362] dump_stack_lvl+0xe8/0x150 [ 918.681232][ T9362] print_circular_bug+0x2e1/0x300 [ 918.681254][ T9362] check_noncircular+0x12e/0x150 [ 918.681275][ T9362] __lock_acquire+0x15a5/0x2cf0 [ 918.681309][ T9362] ? nr_rt_ioctl+0x40c/0xf90 [ 918.681323][ T9362] lock_acquire+0x106/0x350 [ 918.681347][ T9362] ? nr_rt_ioctl+0x40c/0xf90 [ 918.681363][ T9362] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 918.681385][ T9362] ? nr_rt_ioctl+0x40c/0xf90 [ 918.681399][ T9362] _raw_spin_lock_bh+0x36/0x50 [ 918.681419][ T9362] ? nr_rt_ioctl+0x40c/0xf90 [ 918.681434][ T9362] nr_rt_ioctl+0x40c/0xf90 [ 918.681453][ T9362] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 918.681472][ T9362] ? apparmor_capable+0x126/0x170 [ 918.681497][ T9362] ? capable+0x88/0xe0 [ 918.681521][ T9362] ? nr_ioctl+0x1b1/0x3b0 [ 918.681544][ T9362] sock_do_ioctl+0x101/0x320 [ 918.681567][ T9362] ? __pfx_sock_do_ioctl+0x10/0x10 [ 918.681587][ T9362] ? do_futex+0x333/0x420 [ 918.681609][ T9362] sock_ioctl+0x5c6/0x7f0 [ 918.681629][ T9362] ? __pfx_sock_ioctl+0x10/0x10 [ 918.681649][ T9362] ? __fget_files+0x2a/0x420 [ 918.681665][ T9362] ? __fget_files+0x3a0/0x420 [ 918.681680][ T9362] ? __fget_files+0x2a/0x420 [ 918.681697][ T9362] ? bpf_lsm_file_ioctl+0x9/0x20 [ 918.681719][ T9362] ? __pfx_sock_ioctl+0x10/0x10 [ 918.681744][ T9362] __se_sys_ioctl+0xfc/0x170 [ 918.681765][ T9362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.681783][ T9362] do_syscall_64+0x15f/0xf80 [ 918.681805][ T9362] ? trace_irq_disable+0x3b/0x140 [ 918.681827][ T9362] ? clear_bhb_loop+0x40/0x90 [ 918.681845][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.681861][ T9362] RIP: 0033:0x7fa29af9cdd9 [ 918.681877][ T9362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.681892][ T9362] RSP: 002b:00007fa29bea0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 918.681910][ T9362] RAX: ffffffffffffffda RBX: 00007fa29b216090 RCX: 00007fa29af9cdd9 [ 918.681923][ T9362] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 918.681934][ T9362] RBP: 00007fa29b032d69 R08: 0000000000000000 R09: 0000000000000000 [ 918.681944][ T9362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.681954][ T9362] R13: 00007fa29b216128 R14: 00007fa29b216090 R15: 00007ffc1bcf3058 [ 918.681974][ T9362] [ 919.214421][ T6131] lec:lec_start_xmit: lec0:No lecd attached [ 924.956297][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 924.964386][ C0] lec:lec_tx_timeout: lec0