last executing test programs: 2.515162385s ago: executing program 0 (id=1870): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x60048090}, 0xc0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x2d, 0x0, 0x3, 0xb}, {0x20}, {0x76e}, {0x0, 0x2, 0x1}, {0x6, 0x8}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r5, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000004, 0x4, 0xfffffffffffffffc, 0x7, 0x9, 0x400, 0x3, 0x0, 0x36a58e4a, 0x200d, 0x2, 0x75, 0x1}}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000080)=0xb, 0x4) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f00000002c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0xd, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 2.388417661s ago: executing program 2 (id=1873): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x16}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x16}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) unshare(0x26020480) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x1005, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000101010100000000000000000a000000100002800c000280050001003a0000000c001980080002000808"], 0x30}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x2000c058) (async) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x2000c058) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000001000)={0x54, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008800}, 0x800) 2.299486922s ago: executing program 0 (id=1875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x5000}, 0x4) 2.01967123s ago: executing program 0 (id=1877): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xf29, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0x1e, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x3000, 0x24000046}, 0x0) 2.018995581s ago: executing program 2 (id=1878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2002) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000028c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf4f, 0x2c, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x6c, 0x1, @loopback, @loopback, [@routing={0x2f, 0x6, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @empty]}, @hopopts={0x3a, 0x1db, '\x00', [@generic={0x2, 0xebe, "c9ac4a70ba84646eba50f5859f31f4d9286aaa1792ed14ee4547c4956d4a971cbb5943ff64def2e0d1ded05bd5360357e2296fe1969dda8dda4c22b408f36fa9304a55e25c397d7549ced7ea2a33d05664862232e0c905d4787a86f07900b5e46bafb81c0172b1a37f80d45da7d7db810f0ce8cf826a145c82e35954006a0983dc7ea81e60c7fc155f021fd73f84c23b5a2fffed1a8a6557200050872970c9c98557b169f6da6be0c8e68640cc68607cf8aae3cd6769f0d553e7b5637b912f421157bc5e0a561ec9afe882b9555df4e2fb81b44925179b6021ad454c87a8fcd5e995696ff452611f000126d09297b3b8ed118dd6aa049f386fa0805cdbd997e6dd1622e5c9715458b79e11a9117a786b86a332ad123bbbe1854d4b4a4f1894a52b045516d73880e6be6f2ab043d75f145ebf5ea5ce7fc48fc6fef5d3668b5e68b394e596f44e08b70f966da035f95ad9fce927f6cf9431ab0e918622cb409a58effbbbd81760159a00010765b80e651d81d3850f1ea176347f1672f8d0c9f995c300c97563eeb8dd8bc9d39d40040ed36c0beb6d760f975944a7991739fa296c23c80a2f50c55d69c3741aeeac2e2ff5ba1331adee3590ffa1da2eda6406d8bfa19bc633582baa5f4e85383c6dcee60e47558f43dd6ec67522084c07b6739b391a9728cee6e86ad90c6ec699a5ff20511625e0fc207c405efd1993535116766cc2d29e427dac73da1338211d075cbc352321530b6b98346ade12f626c0be812d2eb571b0bd3c4b335d797bb37bd3826db203e3c89ded2a6d6f95f1744410a0da344329d3bd0cabbfa8e22ec43a8ae8ce43ed8facf77c4f0709e84c8f31d0612485475ae27a3302ecfc04172553c019c3c29a134ec62b4f5ae1c49674af502b2076c4d2e9ed108147135072472fd321dbbe32e15f123d7c9229ad7edc90b0ad3e1dc2ee48a7f384e0271c91c44a0a508df345fbebf9559ad6e3496593ef62139aa5723033209fd80f807638d5b24088e8cb896b499d6d872d42a8d938a77651c28cef73f00ada83257742e08c8c79aef569198542584b408ada5df6f0096ec9a6a8c78fd6d78c5c0944845a5fbcb1936e16a59f05ac6d82c6c2c99c9cae379ece8ddf805e618a61e35361cc4c83b5a07dafe2fe96c7599d6de1a3c5035c77a86b021b72d81bff0c2b6f9665840bf8c98debc219d3d75d451b60293f099ed171c5e566d2591e4bd507a51b925d09aa3ce8c7b8f56d1e35158839484e663de76545c818b0ea8646120eca0b75da4c0e648ae0d56aa168b19f48460923d8d38d3cd570a4c9d6ae1af48b28964db4d5eb89aa2845b8bdddd89f9272ad3e5d04e5624089ae1d124b0eef9ad7ebae1ea2557f946e2a824ed497d45826f26f089fabd54be895fece37564a13f716451a3cb549bece785de9ffa233c8cd10591986b5e5d2bd7349d508b6b504fff44ca31f386383b9da747d0c688bfde3725ebe669571340addd8f83157cdd04bfa060a6b9446e6231d235ecc28ff84ec9f6882bf1eefba15d7b1e47f3233a9dba73c6a027dc9be90e21892545b5d0a4402e9b69b82658b5f8a05977f4b385854814747655b0795e738723ef152b6b3199c41521c8bd86a9d3868b2a969697301b5fbca39bf541849ace04ed8b1b481a3bc80baeaece999cd09a828ae1471482a74cd5e63bb5c80c20050c053fe22fe7375267f84370f0ef1832732f1e0c49b9689d2911d1ea925db9cfce33e9b69d05f6d605e6fce75f65940136f5f55dfe7a8983a9edbc086937ec9f4100bb3e874c075f3d6caeaf46780bcc104dd83825ae45fd5a423d743d817b95e432ba28d994d65883c0532d208f6e90d951de4780b741b4810feee7d3dbd75267666b98510792533ad80bc57d3d6970d2e38504e76c6cc2cf4fb6e1358d49a1a0a30c0bc0d07d29845d9cb2371861fb9f01eb064a18f9e61a5682ef07c31ff8fb1050211fa22f01ef57f042a95756796d4c853360915e5e9c408bc09874d9bcf300c47d74a16c7b85842e22b5734bb84fb4de5dc241708408cb2b379d55be7dc8085f32fd1726a7e6c2fd58041e695596e0c2806c81906d33029c120d7c7e7f145680668fee3e5f010798364713d8c87832a51a934dcd448ac6cd35856ccc3e27c21ff9e25f1cb710d2b1796f637479fa32b003f110b0e2ac9c153941dad387a9edc7c16f50823bcd98a8618cc8735cbaa521a3d6484fc842b9185c740337838e12cf13c9efde323e8bbd33965d2bc435dcdb0cc7c26bf407063ca7a254c33800dd06b191b871fe6b2aae140d1cc1d6f22c1e5c4bc025375b77d3c4edc4cfb9dc558a9ae4814ed5dc83ad963fb590af7c109d2d35df528fa898ac5ea4db299c563fcc7d722a97d68a8e3f7771e5fff804f623ff0b2f25231bbd50ba1bc3a4d4ed857aaef212601bfdb0e183fd85f607e5cccbd4c8452b9b1e4c8376a687a59d34ac1c2dc20645a59efbc022bbd0f30999aafd2796ab3deaf29d0ce9bad1d1eda5f34dfd24cf05c8f3298566d255f75ec91919248c99abe29d5c9879758f68808f2a24dfeb386328dae00d06286a0d46b6b7ea117ad7fdbb5d9f833abf36984190a45bbeb9cd2e45af3f9077b208147e798370bd9e5373881ffa94267b82fc7cc4f11b5258cf219950a5a5732fbe10d385e9053c6fd7b5cc3098aedba588a2b619bc54e7f12228b907aea4f4544c65990baaad1b522635dfe5bb6b71721707f815d7a8ee24c8328d67b46e199c0e5c0c7fdb44b3e9defd5726317f74f4cb87909b00f1f4df8858a980a86f87d27dcf33d6d89bc4c7ec088a7270aff9470d7ef12835eddb86f7471af31e8f2cde0cf102d9c9df7cbf1064d1f61acc5897959df60a6e2861c90316c36f20cfb25d069a21a28441003ea5530e842e6112bc90d3cf67184c063bb33182b59aa49c97eee50f6141ba81518b95963b66f20a7296e911ad472e79ffa926feb2e5c5da5e97ff007445beff0c8711a90c7c7525d48e463c30997d530cab0a845ac173f399effcf6af84f50c6319a1ce3565eef74df335cab14daa748ce2037364d90a2ba428d56d5b3b602b2030ea6b721ffb19078bcfe3bbcace66fb3058745b92ff01de9ddb4dd4e0e460b090bc3983946c007e5f465cd9869cd67c5bcd5881c4557c81c69289bca96d4dc4f4cfa421547d5d5c92279b996173704616c1d50e2016efaee7acfb01c56323bad976ffb39f7d3407f7995742a63751a746e6ef6035923e4e879d92ec3e5d2390fe363270cfdadb75f1db87a71d2343229ec140cf75a25e98a298c98c22fd144b675e5fcf39115b243d8c29ab8d6f7c87a7313481fb99bdeb759072cc9a6ec5153d94298bbfdf80bc3075a503c232e3be025004d281d3478bcbdd0f5549be09fca89da7d0e34af97302607c20c464e034c6428cbe326c07615b39fc72ab6f254c7aad6102f813b9623c6a7601b6ea29f84e86999b1287bd111bfa49672c886cca6eb8786eefc96a84cb0aa04ee0334d3fe23a0cef39078bce8f22cc35eeb2fcbe22280df1209ffb05347cbc3611915e7fedbdc752c658c199b23b3346367cc5a68be6a79069a188f6a6efb2d2aaa387ebed66eeb411b9094254041932876a1120a4ae1d20dfaa8709c62828a3ee332cbbe997b6eae047bd493535a25042e1fb3f2b2933c17f6ef96c1793c0ff79fe740b9282416e5e65ef58254055e38afa2e8cec89274f4e542153896baae0e50c37c83bf1034a5b722c874652182954d271991110e43333a48fd85f9b3427915ff9bd2e3b5342858fd2d86801d1cddb55b66bda6c7df3b04ceeae4a7ce74391255ede63695046d8c27241514ceebbc0a5e6a119f7830600385c3b67583ad2e48f8517c4f31349d2d3535a71b1ba2543fca666e1a06f62ce20557ef459e419e0534feec1958cd6fb5c4413eaa1c7e7a64cb19f6a592fd74def605d69a5e6fe14ad77f60ef0424a8f6b7026c1f4b493c71b6428a826fa731022276888b0dd9fcf6dd67cfdfd2fd1765c3c5d9c5fe4d2012bf8217b9dc91b583d945f70d0df13d3b3380200f02753e86f0de109129586629db95d829235e0db826de6e17c830c1aeca17573cbf95cd18c92b8e12c57e93e189d25fe6e71c32526f82e52de09355ca7f5105a61e059d5924d227119175714b5ab610b8dfa9c53d0b4105481bd5f3d47dd6d9d0eee798d7e38644ecd4971b2663a8c628cf51016597eb2c70640a0fea463f9012eca14e957b4280866ad8490fe7c3db57cd40684dc5655bafdd28e8a24217ca96e6ea1ded591b0b8f0cc9f79059fca8c22a884fab4be708e50a38ed1c0350015f3e4326f0af07c57b31d13868167e6ae776f3203f9f03b316233a4d7045b4652b506238a9be0b68b54e6bc52cc1c0894fbfe5071616170ca4895f6636f9be5df32e09f7429c7569aa42715809969b3f8a88080f57155b4c0cbe54039fa8996c4614657a9e4c4b1eafaaf0a663c0d461380ecd907688668d119c0361c6ac486cda549521ad2702d54053e4c2747e710399e235fc8defe54c64218915598c14de35cec58f24328d950ba6548595bc4b9e6c45e3ccdaed1b1dfe9ae3e7dfa2e768d75d7408242d0c504ef2fa583703d8509e5520db9692003b34c9e4ed48aabaa6908cf599667a4ce679ccbadd440900bd917522eeecd73dc2d90446db4d7d40323ec7971477d061fbd6d1c6434c8614ef7a909f46acb4657c4828601a30b993cd9c1b14215674471fceb9777917d6b3cf6c217d453d01ae5007f7ed70f92aaddae11d2f9bcb5854c1292303c3324fef63eff0a3e7ed487310c81a23bb2f89f68a44af31ffc759827b9855fbc6b9e1321bdbed45679c14d5d72b89a7e684ca8fb434352632533b622c8b5ebd162148c301496c0a18fbf31f10e2319020f5f59e81050f21bbed6b007775bc87b3f0ef643d0294dc7db502a0a45d3c68024fad13885d0212fc96067b2de27c2ec471b201cd50f38fc777a6123931e148c4d888097e6ea4f379ff69ba12cda93b2f48ffbb7286395232a4a78094014fbf8f5b1ae3d0ac780efad2721b2996711f6c3ff54468028fc8fcab62fdd160e1e0b18a8b1726dc1bdf34c2ee35ece720716f01f495eb9adc8361e6bcd0f7fdf7a21abb2ea14ab6563f6a9e580c3e5dd0ee7dcaf5d36f04696ddae6b36039cc611020c783504fa233179397f40dee4199528bd2adf4dd0037d0709fcb0c989ed2a26b0b6d475d6c3e25ef26a87d8b25974ed4a84453df731a3d3d496a4807b5ebc5f310dfa6b72f52634cb5705cca5253899ab69035290a0e1f78d148b80c35cac0275c8a5bab51670e7aca01"}, @pad1, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}], "ab0924172f9c2a"}}}}}}, 0xf85) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000004000)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv6=@icmpv6={0x0, 0x6, "bc8a83", 0x368, 0x3a, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {[@routing={0x33, 0xc, 0x0, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x41}, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}]}], @dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x9, 0x6, "11701d", 0x40, 0x2e, 0xff, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}, [@hopopts={0x33, 0x2f, '\x00', [@generic={0x0, 0x5f, "5db8b030000843b0e5ec20ae972decef1e858c6fec45a8de7e14a31fc3325404acb951298abd824a026b48615b9fd130cd9b1ac6da9ca6c35353ace418aeed3548b133aad226d9bcd6421a437ab0d25e429a754cd8ec08794ea7f8f8821b54"}, @generic={0x9, 0x54, "d677be6f929dbd5881851de3787697c7d68d8a34c18f5e6cdd8840a01d2725b06ce87ddc42fc53070ad79a366268cd81822b92f69587d6d912a0c5fd925e618e3f482bc5479885a273074137a265482d8fe97115"}, @generic={0x4, 0xc2, "cba175f341df18a94010b8c2cc4df90c3c05be4f87007b68d849ecc07087c4400c7c261e2d24709458cd645b17591df7595478e4fa0148245f0d789b91573cd8d7a87f5ba2f5a03c1f7822a4a630149fdc980498e8d606a1f6c323a65c2566ce1d53be6221c133a05ddfd7396473a67a5b0265cfc94abdff240ce60af3fb14973c6ae00acf985862c38b0e0e416b6856304faa62c0b66e1ba1344bcb49f0439bdd1cccc50ba297546b6e3b9f732f71f9f61a80c40ba03242e91a31d3d278b3333dae"}]}, @dstopts={0x5f, 0x6, '\x00', [@ra={0x5, 0x2, 0xc98}, @jumbo={0xc2, 0x4, 0x33f}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0xd}, @calipso={0x7, 0x10, {0x0, 0x2, 0x28, 0x9, [0x7]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x0, 0x4, 0x0, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x14}, @loopback]}, @routing={0x11, 0x10, 0x1, 0xd, 0x0, [@dev={0xfe, 0x80, '\x00', 0xb}, @loopback, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1]}, @srh={0x84, 0xa, 0x4, 0x5, 0x1, 0x10, 0x6, [@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}]}}}}}, 0x39e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2002) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000028c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf4f, 0x2c, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x6c, 0x1, @loopback, @loopback, [@routing={0x2f, 0x6, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @empty]}, @hopopts={0x3a, 0x1db, '\x00', [@generic={0x2, 0xebe, "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"}, @pad1, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}], "ab0924172f9c2a"}}}}}}, 0xf85) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000004000)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv6=@icmpv6={0x0, 0x6, "bc8a83", 0x368, 0x3a, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {[@routing={0x33, 0xc, 0x0, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x41}, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}]}], @dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x9, 0x6, "11701d", 0x40, 0x2e, 0xff, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}, [@hopopts={0x33, 0x2f, '\x00', [@generic={0x0, 0x5f, "5db8b030000843b0e5ec20ae972decef1e858c6fec45a8de7e14a31fc3325404acb951298abd824a026b48615b9fd130cd9b1ac6da9ca6c35353ace418aeed3548b133aad226d9bcd6421a437ab0d25e429a754cd8ec08794ea7f8f8821b54"}, @generic={0x9, 0x54, "d677be6f929dbd5881851de3787697c7d68d8a34c18f5e6cdd8840a01d2725b06ce87ddc42fc53070ad79a366268cd81822b92f69587d6d912a0c5fd925e618e3f482bc5479885a273074137a265482d8fe97115"}, @generic={0x4, 0xc2, "cba175f341df18a94010b8c2cc4df90c3c05be4f87007b68d849ecc07087c4400c7c261e2d24709458cd645b17591df7595478e4fa0148245f0d789b91573cd8d7a87f5ba2f5a03c1f7822a4a630149fdc980498e8d606a1f6c323a65c2566ce1d53be6221c133a05ddfd7396473a67a5b0265cfc94abdff240ce60af3fb14973c6ae00acf985862c38b0e0e416b6856304faa62c0b66e1ba1344bcb49f0439bdd1cccc50ba297546b6e3b9f732f71f9f61a80c40ba03242e91a31d3d278b3333dae"}]}, @dstopts={0x5f, 0x6, '\x00', [@ra={0x5, 0x2, 0xc98}, @jumbo={0xc2, 0x4, 0x33f}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0xd}, @calipso={0x7, 0x10, {0x0, 0x2, 0x28, 0x9, [0x7]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x0, 0x4, 0x0, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x14}, @loopback]}, @routing={0x11, 0x10, 0x1, 0xd, 0x0, [@dev={0xfe, 0x80, '\x00', 0xb}, @loopback, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1]}, @srh={0x84, 0xa, 0x4, 0x5, 0x1, 0x10, 0x6, [@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}]}}}}}, 0x39e) (async) 1.833872208s ago: executing program 0 (id=1882): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r2 = getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x4a420}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x600}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'ip6erspan0\x00', 0x8}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="bb4f37d3e29ba9cefcfa754c0fe8"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.787241347s ago: executing program 4 (id=1883): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x20) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00', @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r3, 0x8937, &(0x7f00000005c0)={'dummy0\x00', @ifru_settings={0x1, 0x2, @fr_pvc_info=0x0}}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0xe22, 0x8000}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x7, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x10000}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000001c0)="28cdc3cccdcb74fd51f0c20cb31bccc52a135deee963202e", 0x18}], 0x1}}], 0x1, 0x8000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x100002, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x20000014) shutdown(r7, 0x1) 1.635307367s ago: executing program 2 (id=1886): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x7, 0x1, {{0x1a, 0x4, 0x2, 0x3c, 0x68, 0x68, 0x0, 0x16, 0x4, 0x0, @multicast2, @local, {[@noop, @timestamp_addr={0x44, 0x34, 0xf, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x20}, 0xdc56}, {@local, 0x4}, {@local, 0x2}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x7fffffff}, {@broadcast, 0xa5}]}, @generic={0x7, 0x10, "4bebe8d76243a3c54881328c465a"}, @timestamp={0x44, 0xc, 0xbc, 0x0, 0x4, [0x2, 0xe]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xd}, {0x10, 0xb}, {0x10, 0xffed}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040044}, 0x20040014) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8}, @GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008080}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32, @ANYBLOB="08000400ffffffff"], 0x28}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000580)=[{0x45, 0x7, 0x0, 0xfffff000}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf250b06b6a70000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, 0xffffffffffffffff, 0x8de91000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000600)="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", 0x5db}], 0x1, &(0x7f0000000200)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xad, 0x3, 0xb}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}}], 0x1, 0xc0) 1.211819476s ago: executing program 1 (id=1889): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414170000000000001a0000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}}, 0x0) 1.210429455s ago: executing program 0 (id=1890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000003c0)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040001}, 0x2400c000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x20203, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r3, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.120165615s ago: executing program 1 (id=1891): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711027000000000595"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.118620158s ago: executing program 1 (id=1892): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000001c98000000000000bf980000000000004c080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x409}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.075004114s ago: executing program 1 (id=1893): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x47fe, 0x4000, 0x80000001, 0x8}, 0x6) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6608000000bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0xc000) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000080)={0x8, 'wg2\x00', {'veth0_to_batadv\x00'}, 0x8000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xb400000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000001040000000000000005000000080003400000e8f60600063ffe0100009c328e4e3edea7db1e34527fab043581e31456ffbc657730e54a52383f07a82adf3db3e13e47337aa963b91f4635359eb3ecbe5e2ffd4a6d8c1ac4a420b973fa89d654174fa72e0c29f9039dcd06a953d6d3f8434f88fcbe86e987b292480480fbdf21a2e5f3d3a88fe4b161ab48a30599b0d42b2c"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, &(0x7f0000000080)=0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000002060300000000000000570d00000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000480)=""/155, &(0x7f00000000c0)=0x9b) socket$igmp6(0xa, 0x3, 0x2) 909.552369ms ago: executing program 4 (id=1894): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x3], 0x5, 0x14, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619badd4fe626289574f86d0809dc46543a7397ceafd65272d07668", 0x2a}, {&(0x7f00000048c0)="4aa6ebbaadac821a088be79aff597e399b67d0e0d8b16af93d4078939730787afd7ca85bd5aa74fab362b0585f095ee8c513e864ee7783500a577bfbf648389284cb6744ba7d2e73d9d618702e712ecd6a199286326ff22d59544afc715f8eccf9b851691d3b14dac31434bfec34c03dce1c596738e7f8a4ac186af40bad817595723a21c333b257df41c2a304d5f8d5315fd712508ae16bdaf38e6393b3937971c39c171b44fc2e9ec39572aed0bd04469e4ae3a79961", 0xb7}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000980)=""/87, 0x57}], 0x1}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x2, 0x2101, 0x0) 859.876204ms ago: executing program 3 (id=1895): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x40004}, 0x94) 833.168195ms ago: executing program 3 (id=1896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @mcast2, 0x5}, 0x1c) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001780)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 772.872898ms ago: executing program 4 (id=1897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001780)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (fail_nth: 1) 554.90275ms ago: executing program 3 (id=1898): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x2f, 0x2038, 0x4}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000240)={0x1, 'macvtap0\x00', {}, 0x7d}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000840500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 519.081491ms ago: executing program 4 (id=1899): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000ff9500000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 499.431194ms ago: executing program 2 (id=1900): r0 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x94ff}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {0x8001}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {0x0, 0xaa}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x0, 0x449b}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {0x100}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 416.002551ms ago: executing program 3 (id=1901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090040000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) 415.779204ms ago: executing program 4 (id=1902): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) write$cgroup_int(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0xd, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="a50a00000000000000000000000000009500"/33], &(0x7f0000000000)='GPL\x00'}, 0x94) 401.047242ms ago: executing program 2 (id=1903): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000001c98000000000000bf980000000000004c080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x409}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 372.604012ms ago: executing program 3 (id=1904): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce5f715f2d28290a9423debbb86f29ba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) socket$kcm(0x21, 0x2, 0x2) r1 = socket(0x28, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000d}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b4b200"/16], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xa}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r3, &(0x7f0000000400)=@phonet={0x23, 0x0, 0x1, 0x1}, 0x80) writev(r3, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x11, 0x2000000000000290, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0xfffffffffffffffe, 0xc3000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80000000000000, 0x4, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800", 0x6c}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0], 0x0, 0xf0, &(0x7f0000001100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0xda, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) connect$packet(r1, &(0x7f0000001380)={0x11, 0x15, r4, 0x1, 0x7, 0x6, @remote}, 0x14) bpf$ENABLE_STATS(0x20, &(0x7f0000000fc0), 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x73}, 0x94) select(0x40, &(0x7f00000013c0)={0xf, 0x0, 0x8, 0x9, 0x2, 0x4, 0x4, 0x8000000000000001}, 0xffffffffffffffff, 0x0, &(0x7f0000001500)={0x0, 0x2710}) 260.040095ms ago: executing program 4 (id=1905): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg1\x00', 0x2000}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 259.253962ms ago: executing program 0 (id=1906): r0 = socket$packet(0x11, 0x2, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x40) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1645d5ee5e3b"}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="b48d45ea91ac2148f0119d77a6ea650ff4810ad091629c4d540738"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x586}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x280404dd) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @val={@val={0x88a8, 0x6, 0x1, 0x4}, {0x8100, 0x4, 0x1, 0x2}}, {@canfd={0xd, {{0x1, 0x0, 0x1}, 0x24, 0x2, 0x0, 0x0, "7e89fc8b555a3d2a9e869db79e9056b65c1ad0c36d779130624064f3f99ff6c8f89953328381c1e1a10ddc53fe140de6458a8b78b5973e8b8fda4dda72d2eb93"}}}}, &(0x7f0000000280)={0x0, 0x4, [0x726, 0x66, 0x606, 0xd3c]}) getpeername$unix(r1, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) connect$rose(r1, &(0x7f0000000380)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @null}, 0x1c) recvfrom(r0, &(0x7f00000003c0)=""/180, 0xb4, 0x40010121, &(0x7f0000000480)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x80) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x11, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0xd5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x0, 0xc7, &(0x7f0000000600)=""/199, 0x40f00, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x5, 0x1ff, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x5, 0x4, 0xb, 0x9}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r2, 0x0, 0x6d, 0xbe, &(0x7f00000008c0)="393897f348be43169631365000a57086fb99e732372ed2e71a631532ad249d777ae06e273d5f268a263b8c0c7e6f2ab095338ccc8366d97d16ec583b6ec64a0b3f9275ce689900a5d0ecc5f364387007ced174186466a4c8705635c8466b89e953e8da29b9549beade76413c13", &(0x7f0000000940)=""/190, 0x3, 0x0, 0x44, 0x4b, &(0x7f0000000a00)="b740b1c1cba067132a0948fd67becd6415f96de7b55690b97527e695a6e33e64d01ba455251d4e8a1e15560748fc083777ad317adf57200c6146d0bfe7584ec52da64eeb", &(0x7f0000000a80)="8f1f93cae0ea4b243f3491081981b473c78dd1adfc3900ee0804c5b4ec9356a6c6d0ec638b099d82e9254ab3f435268e9e6a58d23f0a237bfd4c2c38dded39560ca3ed413f8feff8eae09c", 0x6ec9bc7f38a80c80, 0x0, 0x7}, 0x50) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000cc0)={@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2}, 0x0, 0x0, 0x3, 0x3}}, {&(0x7f0000000b80)=""/241, 0xf1}, &(0x7f0000000c80), 0x60}, 0xa0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d80)={'wpan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f40)={r2, 0x0, 0x1000, 0xad, &(0x7f0000000dc0)="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", &(0x7f0000001dc0)=""/173, 0x9, 0x0, 0x57, 0x1c, &(0x7f0000001e80)="93d7f54ec5189158a4bb9ba55d22de7e6ccd40a70e42fdd1a9514a5b123964611f90c5bf40a722fb7a77f47232ee5f534978d721648c84a9d2a0edbd6e0fdbb22c062512664bd4c3e0a14504eda43e6b71a615c555b804", &(0x7f0000001f00)="bfa30a865a886febaf8a6197ffd60266c4b91e638c6469941a3da6bd", 0x2, 0x0, 0x9}, 0x50) r5 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r5, &(0x7f0000001fc0)=@abs, &(0x7f0000002040)=0x6e) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0xa, &(0x7f0000002080)=0x3, 0x4) getsockopt$inet6_opts(r6, 0x29, 0xe, &(0x7f00000020c0)=""/193, &(0x7f00000021c0)=0xc1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f0000002300)={r5, &(0x7f0000002200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x80, &(0x7f0000002240)={@align=0x2, {0x5, 0x3, 0x1, 0x9}}, 0xfffffff0, &(0x7f0000002280), &(0x7f00000022c0)=0x9}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f00000024c0)={{r6, &(0x7f0000002340)=']/(.\x00', 0x430000, &(0x7f0000002380)={@align=0x6, {0x8, 0x1a, 0x6, 0xb}}, 0xffff, &(0x7f00000023c0)={@_ha_fsid}, &(0x7f0000002400)=0x5}, {[0x5, 0x8, 0x70, 0x66c]}, 0x2, 0x44, &(0x7f0000002440)=""/68}) ioctl$SIOCGETSGCNT_IN6(r8, 0x89e1, &(0x7f0000002540)={@mcast1, @loopback}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000002580)=@sack_info={0x0, 0x5, 0xfffffffd}, 0xc) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000025c0)) socket$inet6(0xa, 0xa, 0x4) 194.631974ms ago: executing program 3 (id=1907): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f0000000c800000121f", 0x2e}], 0x1}, 0x0) 169.207584ms ago: executing program 1 (id=1908): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e00000027bd70000000000004000900a800000001d78771b90bd8a3b4914783c5432d69ca5b9538a90000000300060000000000020000001f000001000000000000000002000100010000000000030d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x10) 105.334772ms ago: executing program 2 (id=1909): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$packet(0x11, 0x2, 0x300) socket$can_raw(0x1d, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616effff8007180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 1 (id=1910): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'ip6erspan0\x00', 0x8}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="bb4f37d3e29ba9cefcfa754c0fe8"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) kernel console output (not intermixed with test programs): 140.128315][ T8433] RAX: ffffffffffffffda RBX: 00007f7bd3a15fa0 RCX: 00007f7bd379c799 [ 140.128324][ T8433] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 140.128333][ T8433] RBP: 00007f7bd4664090 R08: 0000000000000000 R09: 0000000000000000 [ 140.128341][ T8433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.128349][ T8433] R13: 00007f7bd3a16038 R14: 00007f7bd3a15fa0 R15: 00007fff8c4cc2c8 [ 140.128371][ T8433] [ 141.157185][ T8456] vlan2: entered promiscuous mode [ 141.292513][ T8462] xt_bpf: check failed: parse error [ 141.499587][ T8468] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 141.520621][ T8468] netlink: 240 bytes leftover after parsing attributes in process `syz.3.842'. [ 141.733641][ T8485] sctp: [Deprecated]: syz.1.846 (pid 8485) Use of int in max_burst socket option deprecated. [ 141.733641][ T8485] Use struct sctp_assoc_value instead [ 142.049280][ T8494] syzkaller1: entered promiscuous mode [ 142.057875][ T8494] syzkaller1: entered allmulticast mode [ 142.070205][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 142.095868][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 142.500893][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.855'. [ 142.554923][ T8506] vlan3: entered promiscuous mode [ 142.913758][ T8528] netlink: 'syz.4.862': attribute type 1 has an invalid length. [ 142.917005][ T8530] netlink: 'syz.1.861': attribute type 30 has an invalid length. [ 142.929351][ T8530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.861'. [ 142.968861][ T8536] netlink: 211792 bytes leftover after parsing attributes in process `syz.1.861'. [ 142.989941][ T8528] bond3: entered promiscuous mode [ 143.004225][ T8528] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.041181][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 143.051003][ T8528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'. [ 143.065531][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 143.072978][ T8530] bond3: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 143.147632][ T8530] bond3 (unregistering): Released all slaves [ 143.190875][ T8528] bond3: entered allmulticast mode [ 143.220310][ T8528] bond3: (slave bridge3): making interface the new active one [ 143.241469][ T8528] bridge3: entered promiscuous mode [ 143.249215][ T8528] bridge3: entered allmulticast mode [ 143.256883][ T8528] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 143.443689][ T8561] FAULT_INJECTION: forcing a failure. [ 143.443689][ T8561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.472800][ T8561] CPU: 1 UID: 0 PID: 8561 Comm: syz.2.868 Not tainted syzkaller #0 PREEMPT(full) [ 143.472826][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.472836][ T8561] Call Trace: [ 143.472842][ T8561] [ 143.472849][ T8561] dump_stack_lvl+0xe8/0x150 [ 143.472877][ T8561] should_fail_ex+0x412/0x560 [ 143.472902][ T8561] _copy_from_user+0x2d/0xb0 [ 143.472929][ T8561] ___sys_sendmsg+0x1c6/0x360 [ 143.472950][ T8561] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.472994][ T8561] ? __fget_files+0x2a/0x420 [ 143.473015][ T8561] ? __fget_files+0x3a0/0x420 [ 143.473047][ T8561] __x64_sys_sendmsg+0x1bd/0x2a0 [ 143.473066][ T8561] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.473088][ T8561] ? __pfx_ksys_write+0x10/0x10 [ 143.473114][ T8561] do_syscall_64+0x14d/0xf80 [ 143.473136][ T8561] ? trace_irq_disable+0x3b/0x150 [ 143.473157][ T8561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.473173][ T8561] ? clear_bhb_loop+0x40/0x90 [ 143.473194][ T8561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.473210][ T8561] RIP: 0033:0x7f7bd379c799 [ 143.473226][ T8561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.473239][ T8561] RSP: 002b:00007f7bd4643028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.473256][ T8561] RAX: ffffffffffffffda RBX: 00007f7bd3a16090 RCX: 00007f7bd379c799 [ 143.473268][ T8561] RDX: 0000000000004040 RSI: 0000200000000040 RDI: 0000000000000008 [ 143.473278][ T8561] RBP: 00007f7bd4643090 R08: 0000000000000000 R09: 0000000000000000 [ 143.473289][ T8561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.473298][ T8561] R13: 00007f7bd3a16128 R14: 00007f7bd3a16090 R15: 00007fff8c4cc2c8 [ 143.473324][ T8561] [ 143.545841][ T8567] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 143.560777][ T8562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.666648][ T8562] IPv6: NLM_F_CREATE should be set when creating new route [ 143.811441][ T8571] vlan3: entered promiscuous mode [ 143.961284][ T8578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.039522][ T8584] __nla_validate_parse: 3 callbacks suppressed [ 144.039542][ T8584] netlink: 48 bytes leftover after parsing attributes in process `syz.4.875'. [ 144.238500][ T8590] ip6gre1: entered promiscuous mode [ 144.269848][ T8590] ip6gre1: entered allmulticast mode [ 144.280361][ T8593] sctp: [Deprecated]: syz.2.881 (pid 8593) Use of int in max_burst socket option. [ 144.280361][ T8593] Use struct sctp_assoc_value instead [ 144.307932][ T8592] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 144.358170][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.881'. [ 144.370337][ T8593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.881'. [ 144.474919][ T8599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.883'. [ 144.601531][ T8603] netlink: 'syz.1.885': attribute type 10 has an invalid length. [ 144.609870][ T8603] bridge0: port 3(bond0) entered disabled state [ 144.810227][ T8607] vlan4: entered promiscuous mode [ 145.034644][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'. [ 145.358439][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 145.373667][ T8626] syzkaller0: entered promiscuous mode [ 145.386518][ T8626] syzkaller0: entered allmulticast mode [ 146.869380][ T8646] syzkaller0: entered promiscuous mode [ 146.881051][ T8646] syzkaller0: entered allmulticast mode [ 146.949029][ T8656] FAULT_INJECTION: forcing a failure. [ 146.949029][ T8656] name failslab, interval 1, probability 0, space 0, times 0 [ 146.961844][ T8656] CPU: 0 UID: 0 PID: 8656 Comm: syz.1.901 Not tainted syzkaller #0 PREEMPT(full) [ 146.961870][ T8656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 146.961881][ T8656] Call Trace: [ 146.961888][ T8656] [ 146.961896][ T8656] dump_stack_lvl+0xe8/0x150 [ 146.961925][ T8656] should_fail_ex+0x412/0x560 [ 146.961952][ T8656] should_failslab+0xa8/0x100 [ 146.961973][ T8656] ? skb_clone+0x212/0x3a0 [ 146.961991][ T8656] kmem_cache_alloc_noprof+0x87/0x650 [ 146.962008][ T8656] ? skb_scrub_packet+0x262/0x3d0 [ 146.962033][ T8656] ? __pfx_netif_rx_internal+0x10/0x10 [ 146.962061][ T8656] skb_clone+0x212/0x3a0 [ 146.962082][ T8656] bpf_clone_redirect+0x16a/0x4b0 [ 146.962112][ T8656] ? bpf_test_run+0x1d1/0x830 [ 146.962135][ T8656] bpf_prog_213b1aa3a0cf109a+0x65/0x71 [ 146.962167][ T8656] ? __pfx___schedule+0x10/0x10 [ 146.962202][ T8656] ? preempt_schedule_thunk+0x16/0x30 [ 146.962223][ T8656] ? preempt_schedule_common+0x82/0xd0 [ 146.962244][ T8656] ? bpf_test_run+0x1d1/0x830 [ 146.962269][ T8656] ? bpf_test_timer_continue+0x10c/0x320 [ 146.962296][ T8656] bpf_test_run+0x354/0x830 [ 146.962418][ T8656] ? __pfx_bpf_test_run+0x10/0x10 [ 146.962459][ T8656] ? trace_kmem_cache_alloc+0x29/0xf0 [ 146.962477][ T8656] ? slab_build_skb+0x52/0x410 [ 146.962506][ T8656] ? eth_type_trans+0x43b/0x6d0 [ 146.962538][ T8656] ? convert___skb_to_skb+0x3d/0x5b0 [ 146.962563][ T8656] bpf_prog_test_run_skb+0xd22/0x1c90 [ 146.962595][ T8656] ? __fget_files+0x2a/0x420 [ 146.962620][ T8656] ? __fget_files+0x3a0/0x420 [ 146.962642][ T8656] ? __fget_files+0x2a/0x420 [ 146.962675][ T8656] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 146.962699][ T8656] bpf_prog_test_run+0x2c7/0x340 [ 146.962720][ T8656] __sys_bpf+0x643/0x950 [ 146.962748][ T8656] ? __pfx___sys_bpf+0x10/0x10 [ 146.962788][ T8656] ? ksys_write+0x242/0x270 [ 146.962810][ T8656] ? __pfx_ksys_write+0x10/0x10 [ 146.962836][ T8656] __x64_sys_bpf+0x7c/0x90 [ 146.962861][ T8656] do_syscall_64+0x14d/0xf80 [ 146.962885][ T8656] ? trace_irq_disable+0x3b/0x150 [ 146.962908][ T8656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.962925][ T8656] ? clear_bhb_loop+0x40/0x90 [ 146.962947][ T8656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.962980][ T8656] RIP: 0033:0x7fe6c419c799 [ 146.962997][ T8656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.963011][ T8656] RSP: 002b:00007fe6c5126028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.963029][ T8656] RAX: ffffffffffffffda RBX: 00007fe6c4415fa0 RCX: 00007fe6c419c799 [ 146.963042][ T8656] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 146.963053][ T8656] RBP: 00007fe6c5126090 R08: 0000000000000000 R09: 0000000000000000 [ 146.963064][ T8656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.963074][ T8656] R13: 00007fe6c4416038 R14: 00007fe6c4415fa0 R15: 00007ffda76b6c68 [ 146.963102][ T8656] [ 147.308724][ T8658] netlink: 48 bytes leftover after parsing attributes in process `syz.3.903'. [ 151.652849][ T8689] netlink: 'syz.4.909': attribute type 61 has an invalid length. [ 151.694045][ T8695] netlink: 'syz.3.912': attribute type 1 has an invalid length. [ 151.722532][ T8695] bond2: entered promiscuous mode [ 151.733848][ T8695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.756297][ T8695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.912'. [ 151.764857][ T8698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.765349][ T8695] bond2: entered allmulticast mode [ 151.772546][ T8698] IPv6: NLM_F_CREATE should be set when creating new route [ 151.815768][ T8695] bond2: (slave bridge3): making interface the new active one [ 151.824555][ T8695] bridge3: entered promiscuous mode [ 151.831043][ T8695] bridge3: entered allmulticast mode [ 151.838227][ T8695] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 152.022092][ T8692] netlink: 'syz.1.908': attribute type 11 has an invalid length. [ 152.071913][ T8714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.915'. [ 152.508961][ T8733] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.920'. [ 152.581440][ T8749] SET target dimension over the limit! [ 152.898122][ T8714] Illegal XDP return value 689602560 on prog (id 145) dev N/A, expect packet loss! [ 152.898131][ T8755] netlink: 136 bytes leftover after parsing attributes in process `syz.1.922'. [ 153.104650][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.926'. [ 153.304924][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.929'. [ 153.499738][ T8781] netlink: 'syz.3.930': attribute type 1 has an invalid length. [ 153.631690][ T8781] bond3: (slave geneve2): making interface the new active one [ 153.653330][ T8781] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 153.741175][ T1155] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 153.784794][ T1155] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 153.813898][ T1155] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 153.862769][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.932'. [ 153.916022][ T8801] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.933'. [ 153.942892][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.932'. [ 153.977944][ T1155] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 154.027178][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.935'. [ 155.544018][ T8860] bond1: entered promiscuous mode [ 155.563747][ T8860] bond1: entered allmulticast mode [ 155.589475][ T8860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.445765][ T29] audit: type=1804 audit(1773702343.556:2): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.964" name="/newroot/188/cgroup.controllers" dev="tmpfs" ino=964 res=1 errno=0 [ 156.506778][ T29] audit: type=1800 audit(1773702343.566:3): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.964" name="cgroup.controllers" dev="tmpfs" ino=964 res=0 errno=0 [ 156.619585][ T8922] netlink: 'syz.4.968': attribute type 1 has an invalid length. [ 156.905308][ T8938] __nla_validate_parse: 12 callbacks suppressed [ 156.905328][ T8938] netlink: 48 bytes leftover after parsing attributes in process `syz.1.974'. [ 156.932110][ T8941] netlink: 256 bytes leftover after parsing attributes in process `syz.3.973'. [ 157.085050][ T8947] syzkaller1: entered promiscuous mode [ 157.108445][ T8947] syzkaller1: entered allmulticast mode [ 157.190557][ T8957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.979'. [ 157.651265][ T8978] netlink: 48 bytes leftover after parsing attributes in process `syz.4.984'. [ 157.949848][ T8999] warn_alloc: 3 callbacks suppressed [ 157.949868][ T8999] syz.2.990: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 157.991858][ T8999] CPU: 0 UID: 0 PID: 8999 Comm: syz.2.990 Not tainted syzkaller #0 PREEMPT(full) [ 157.991887][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.991900][ T8999] Call Trace: [ 157.991908][ T8999] [ 157.991916][ T8999] dump_stack_lvl+0xe8/0x150 [ 157.991950][ T8999] warn_alloc+0x249/0x340 [ 157.991974][ T8999] ? stack_trace_save+0xa9/0x100 [ 157.991994][ T8999] ? __pfx_warn_alloc+0x10/0x10 [ 157.992021][ T8999] ? kasan_save_track+0x4f/0x80 [ 157.992041][ T8999] ? kasan_save_track+0x3e/0x80 [ 157.992057][ T8999] ? __kasan_kmalloc+0x93/0xb0 [ 157.992075][ T8999] ? __kmalloc_cache_noprof+0x31c/0x660 [ 157.992093][ T8999] ? xskq_create+0x56/0x170 [ 157.992118][ T8999] ? xsk_setsockopt+0x54c/0x990 [ 157.992138][ T8999] ? do_sock_setsockopt+0x17c/0x1b0 [ 157.992165][ T8999] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 157.992192][ T8999] ? do_syscall_64+0x14d/0xf80 [ 157.992223][ T8999] __vmalloc_node_range_noprof+0x132/0x1730 [ 157.992271][ T8999] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 157.992297][ T8999] ? __kasan_kmalloc+0x93/0xb0 [ 157.992322][ T8999] vmalloc_user_noprof+0xad/0xe0 [ 157.992343][ T8999] ? xskq_create+0xbf/0x170 [ 157.992368][ T8999] xskq_create+0xbf/0x170 [ 157.992394][ T8999] xsk_init_queue+0x8a/0xe0 [ 157.992420][ T8999] xsk_setsockopt+0x54c/0x990 [ 157.992445][ T8999] ? __pfx_xsk_setsockopt+0x10/0x10 [ 157.992469][ T8999] ? __pfx_aa_sk_perm+0x10/0x10 [ 157.992496][ T8999] ? aa_sock_opt_perm+0xff/0x1a0 [ 157.992525][ T8999] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 157.992548][ T8999] ? __pfx_xsk_setsockopt+0x10/0x10 [ 157.992583][ T8999] do_sock_setsockopt+0x17c/0x1b0 [ 157.992618][ T8999] __x64_sys_setsockopt+0x13d/0x1b0 [ 157.992649][ T8999] do_syscall_64+0x14d/0xf80 [ 157.992675][ T8999] ? trace_irq_disable+0x3b/0x150 [ 157.992702][ T8999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.992721][ T8999] ? clear_bhb_loop+0x40/0x90 [ 157.992743][ T8999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.992761][ T8999] RIP: 0033:0x7f7bd379c799 [ 157.992777][ T8999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.992792][ T8999] RSP: 002b:00007f7bd4664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 157.992812][ T8999] RAX: ffffffffffffffda RBX: 00007f7bd3a15fa0 RCX: 00007f7bd379c799 [ 157.992825][ T8999] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 157.992835][ T8999] RBP: 00007f7bd3832c99 R08: 0000000000000004 R09: 0000000000000000 [ 157.992845][ T8999] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.992859][ T8999] R13: 00007f7bd3a16038 R14: 00007f7bd3a15fa0 R15: 00007fff8c4cc2c8 [ 157.992886][ T8999] [ 157.994064][ T8999] Mem-Info: [ 158.001480][ T8987] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 158.020255][ T8999] active_anon:7195 inactive_anon:0 isolated_anon:0 [ 158.020255][ T8999] active_file:3474 inactive_file:39968 isolated_file:0 [ 158.020255][ T8999] unevictable:768 dirty:324 writeback:0 [ 158.020255][ T8999] slab_reclaimable:10739 slab_unreclaimable:99298 [ 158.020255][ T8999] mapped:29660 shmem:1369 pagetables:1421 [ 158.020255][ T8999] sec_pagetables:0 bounce:0 [ 158.020255][ T8999] kernel_misc_reclaimable:0 [ 158.020255][ T8999] free:1323089 free_pcp:11148 free_cma:0 [ 158.020319][ T8999] Node 0 active_anon:28780kB inactive_anon:0kB active_file:13896kB inactive_file:159672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118640kB dirty:1296kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12916kB pagetables:5524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 158.020373][ T8999] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 158.020420][ T8999] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 158.020469][ T8999] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 158.020509][ T8999] Node 0 DMA32 free:1341456kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28780kB inactive_anon:0kB active_file:13896kB inactive_file:159672kB unevictable:1536kB writepending:1296kB zspages:0kB present:3129332kB managed:2552572kB mlocked:0kB bounce:0kB free_pcp:44588kB local_pcp:19916kB free_cma:0kB [ 158.020576][ T8999] lowmem_reserve[]: 0 0 0 0 0 [ 158.020614][ T8999] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 158.020662][ T8999] lowmem_reserve[]: 0 0 0 0 0 [ 158.020703][ T8999] Node 1 Normal free:3935540kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 158.020758][ T8999] lowmem_reserve[]: 0 0 0 0 0 [ 158.020794][ T8999] Node 0 [ 158.064456][ T9004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.079440][ T8987] syzkaller0: entered promiscuous mode [ 158.110979][ T8999] DMA: [ 158.169200][ T8987] syzkaller0: entered allmulticast mode [ 158.170711][ T8997] syzkaller1: entered promiscuous mode [ 158.196586][ T9007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.990'. [ 158.236144][ T8997] syzkaller1: entered allmulticast mode [ 158.406986][ T8999] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 158.833124][ T8999] Node 0 DMA32: 1621*4kB (UME) 1382*8kB (UME) 748*16kB (UME) 606*32kB (UME) 130*64kB (UME) 48*128kB (UME) 20*256kB (UM) 16*512kB (UME) 15*1024kB (U) 8*2048kB (UM) 301*4096kB (UM) = 1341316kB [ 158.911171][ T9019] netlink: 36 bytes leftover after parsing attributes in process `syz.1.995'. [ 158.938387][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 158.958517][ T8999] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 159.000684][ T8999] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 9*16kB (UM) 9*32kB (UM) 9*64kB (UM) 4*128kB (UM) 5*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 959*4096kB (UM) = 3935540kB [ 159.024319][ T8999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.037825][ T8999] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 159.062920][ T8999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.105084][ T9032] netlink: 256 bytes leftover after parsing attributes in process `syz.3.998'. [ 159.108775][ T8999] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 159.273008][ T8999] 47084 total pagecache pages [ 159.310864][ T8999] 0 pages in swap cache [ 159.315072][ T8999] Free swap = 124996kB [ 159.368754][ T8999] Total swap = 124996kB [ 159.372960][ T8999] 2097051 pages RAM [ 159.396100][ T8999] 0 pages HighMem/MovableOnly [ 159.419246][ T8999] 427072 pages reserved [ 159.423465][ T8999] 0 pages cma reserved [ 159.482484][ T9046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.531096][ T9043] team_slave_0: entered promiscuous mode [ 159.536986][ T9043] team_slave_1: entered promiscuous mode [ 159.597027][ T9043] vlan3: entered promiscuous mode [ 159.602112][ T9043] team0: entered promiscuous mode [ 160.085369][ T9075] xt_bpf: check failed: parse error [ 160.093018][ T9071] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1011'. [ 160.234435][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1014'. [ 160.316842][ T9091] netlink: 'syz.0.1016': attribute type 10 has an invalid length. [ 160.330021][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.337741][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.478239][ T9096] vlan3: entered promiscuous mode [ 160.822294][ T9117] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 161.265206][ T9134] netlink: 'syz.3.1030': attribute type 13 has an invalid length. [ 161.343210][ T76] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.343369][ T9134] netlink: 'syz.3.1030': attribute type 13 has an invalid length. [ 161.400323][ T76] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.431599][ T76] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.495249][ T9150] netlink: 'syz.4.1035': attribute type 1 has an invalid length. [ 161.496276][ T76] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.610300][ T9157] netlink: 'syz.0.1036': attribute type 1 has an invalid length. [ 162.094318][ T9185] SET target dimension over the limit! [ 162.259931][ T9194] vlan4: entered promiscuous mode [ 162.467827][ T9198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.470411][ T9200] __nla_validate_parse: 9 callbacks suppressed [ 162.470429][ T9200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1046'. [ 162.819469][ T9212] netlink: 'syz.2.1047': attribute type 11 has an invalid length. [ 162.827505][ T9212] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1047'. [ 162.871785][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1052'. [ 163.212785][ T9238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1058'. [ 163.278623][ T9243] sctp: [Deprecated]: syz.1.1058 (pid 9243) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.278623][ T9243] Use struct sctp_sack_info instead [ 163.327436][ T9236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.742613][ T9267] syzkaller1: entered promiscuous mode [ 163.759176][ T9267] syzkaller1: entered allmulticast mode [ 163.771840][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 163.780946][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 163.951044][ T9282] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1073'. [ 164.151535][ T9293] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.169656][ T9293] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.228873][ T9296] netlink: 'syz.1.1076': attribute type 11 has an invalid length. [ 164.253449][ T9296] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1076'. [ 164.277985][ T9293] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.289696][ T9293] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.438985][ T9293] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.462761][ T9293] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.572767][ T9293] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.583407][ T9293] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.743952][ T1002] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.756091][ T1002] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.817823][ T1002] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.829778][ T1002] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.859280][ T1002] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.868153][ T1002] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.911453][ T1002] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.920999][ T1002] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.016207][ T9319] SET target dimension over the limit! [ 165.175463][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 165.315795][ T9333] vlan4: entered promiscuous mode [ 165.333831][ T9333] gretap0: entered promiscuous mode [ 165.656685][ T9360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.663980][ T9360] IPv6: NLM_F_CREATE should be set when creating new route [ 165.751506][ T9370] netlink: 'syz.0.1096': attribute type 11 has an invalid length. [ 165.788688][ T9370] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1096'. [ 165.904812][ T9376] vlan3: entered promiscuous mode [ 166.213287][ T9391] netlink: 'syz.1.1106': attribute type 10 has an invalid length. [ 166.290297][ T9396] netlink: 'syz.3.1107': attribute type 18 has an invalid length. [ 166.794809][ T9415] syzkaller0: entered promiscuous mode [ 166.817534][ T9415] syzkaller0: entered allmulticast mode [ 167.359654][ T9446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.558198][ T9461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.642535][ T9466] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.649947][ T9466] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.681711][ T9466] bridge0: entered allmulticast mode [ 167.978852][ T9488] SET target dimension over the limit! [ 168.083066][ T9492] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 168.083388][ T9489] __nla_validate_parse: 5 callbacks suppressed [ 168.083404][ T9489] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1131'. [ 168.112220][ T9489] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1131'. [ 168.142260][ T9489] ip6gre1: entered promiscuous mode [ 168.168326][ T9489] ip6gre1: entered allmulticast mode [ 168.240671][ T9499] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.252441][ T9499] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.349209][ T9499] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.407497][ T9499] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.474288][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 168.488135][ T9515] FAULT_INJECTION: forcing a failure. [ 168.488135][ T9515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.516628][ T9499] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.545454][ T9515] CPU: 1 UID: 0 PID: 9515 Comm: syz.2.1142 Not tainted syzkaller #0 PREEMPT(full) [ 168.545479][ T9515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.545490][ T9515] Call Trace: [ 168.545496][ T9515] [ 168.545504][ T9515] dump_stack_lvl+0xe8/0x150 [ 168.545532][ T9515] should_fail_ex+0x412/0x560 [ 168.545558][ T9515] _copy_to_user+0x31/0xb0 [ 168.545585][ T9515] simple_read_from_buffer+0xe1/0x170 [ 168.545612][ T9515] proc_fail_nth_read+0x1bb/0x230 [ 168.545637][ T9515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.545663][ T9515] ? rw_verify_area+0x2a6/0x4d0 [ 168.545679][ T9515] ? tun_chr_write_iter+0xe0/0x200 [ 168.545701][ T9515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.545724][ T9515] vfs_read+0x20c/0xa70 [ 168.545740][ T9515] ? fdget_pos+0x246/0x320 [ 168.545768][ T9515] ? __pfx___mutex_lock+0x10/0x10 [ 168.545791][ T9515] ? __pfx_vfs_read+0x10/0x10 [ 168.545808][ T9515] ? __fget_files+0x2a/0x420 [ 168.545834][ T9515] ? __fget_files+0x3a0/0x420 [ 168.545855][ T9515] ? __fget_files+0x2a/0x420 [ 168.545884][ T9515] ksys_read+0x150/0x270 [ 168.545903][ T9515] ? __pfx_ksys_read+0x10/0x10 [ 168.545934][ T9515] do_syscall_64+0x14d/0xf80 [ 168.545955][ T9515] ? trace_irq_disable+0x3b/0x150 [ 168.545977][ T9515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.545993][ T9515] ? clear_bhb_loop+0x40/0x90 [ 168.546013][ T9515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.546030][ T9515] RIP: 0033:0x7f7bd375cfce [ 168.546047][ T9515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 168.546061][ T9515] RSP: 002b:00007f7bd4663fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.546080][ T9515] RAX: ffffffffffffffda RBX: 00007f7bd46646c0 RCX: 00007f7bd375cfce [ 168.546092][ T9515] RDX: 000000000000000f RSI: 00007f7bd46640a0 RDI: 0000000000000003 [ 168.546103][ T9515] RBP: 00007f7bd4664090 R08: 0000000000000000 R09: 0000000000000000 [ 168.546113][ T9515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.546122][ T9515] R13: 00007f7bd3a16038 R14: 00007f7bd3a15fa0 R15: 00007fff8c4cc2c8 [ 168.546150][ T9515] [ 168.778946][ T9499] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.884203][ T9499] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.894111][ T9499] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.912359][ T9513] syz.3.1141 (9513) used greatest stack depth: 17472 bytes left [ 169.139916][ T85] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.153693][ T9533] netlink: 'syz.1.1146': attribute type 10 has an invalid length. [ 169.162046][ T85] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.207225][ T85] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.215886][ T85] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.389468][ T9545] FAULT_INJECTION: forcing a failure. [ 169.389468][ T9545] name failslab, interval 1, probability 0, space 0, times 0 [ 169.402257][ T9545] CPU: 0 UID: 0 PID: 9545 Comm: syz.1.1151 Not tainted syzkaller #0 PREEMPT(full) [ 169.402280][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.402290][ T9545] Call Trace: [ 169.402296][ T9545] [ 169.402304][ T9545] dump_stack_lvl+0xe8/0x150 [ 169.402332][ T9545] should_fail_ex+0x412/0x560 [ 169.402358][ T9545] should_failslab+0xa8/0x100 [ 169.402379][ T9545] ? skb_clone+0x212/0x3a0 [ 169.402396][ T9545] kmem_cache_alloc_noprof+0x87/0x650 [ 169.402413][ T9545] ? skb_scrub_packet+0x262/0x3d0 [ 169.402438][ T9545] ? __pfx_netif_rx_internal+0x10/0x10 [ 169.402466][ T9545] skb_clone+0x212/0x3a0 [ 169.402487][ T9545] bpf_clone_redirect+0x16a/0x4b0 [ 169.402518][ T9545] ? bpf_test_run+0x1d1/0x830 [ 169.402540][ T9545] bpf_prog_213b1aa3a0cf109a+0x65/0x71 [ 169.402560][ T9545] ? __lock_acquire+0x6b5/0x2cf0 [ 169.402602][ T9545] ? ktime_get+0x45/0x200 [ 169.402621][ T9545] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 169.402640][ T9545] ? lockdep_hardirqs_on+0x7a/0x110 [ 169.402664][ T9545] ? ktime_get+0x45/0x200 [ 169.402677][ T9545] ? seqcount_lockdep_reader_access+0xea/0x100 [ 169.402694][ T9545] ? bpf_test_run+0x1d1/0x830 [ 169.402719][ T9545] ? bpf_test_timer_continue+0x10c/0x320 [ 169.402744][ T9545] bpf_test_run+0x354/0x830 [ 169.402785][ T9545] ? __pfx_bpf_test_run+0x10/0x10 [ 169.402815][ T9545] ? trace_kmem_cache_alloc+0x29/0xf0 [ 169.402831][ T9545] ? slab_build_skb+0x52/0x410 [ 169.402858][ T9545] ? eth_type_trans+0x43b/0x6d0 [ 169.402891][ T9545] ? convert___skb_to_skb+0x3d/0x5b0 [ 169.402915][ T9545] bpf_prog_test_run_skb+0xd22/0x1c90 [ 169.402948][ T9545] ? __fget_files+0x2a/0x420 [ 169.402971][ T9545] ? __fget_files+0x3a0/0x420 [ 169.402993][ T9545] ? __fget_files+0x2a/0x420 [ 169.403021][ T9545] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 169.403044][ T9545] bpf_prog_test_run+0x2c7/0x340 [ 169.403064][ T9545] __sys_bpf+0x643/0x950 [ 169.403090][ T9545] ? __pfx___sys_bpf+0x10/0x10 [ 169.403128][ T9545] ? ksys_write+0x242/0x270 [ 169.403149][ T9545] ? __pfx_ksys_write+0x10/0x10 [ 169.403174][ T9545] __x64_sys_bpf+0x7c/0x90 [ 169.403197][ T9545] do_syscall_64+0x14d/0xf80 [ 169.403220][ T9545] ? trace_irq_disable+0x3b/0x150 [ 169.403249][ T9545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.403267][ T9545] ? clear_bhb_loop+0x40/0x90 [ 169.403287][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.403304][ T9545] RIP: 0033:0x7fe6c419c799 [ 169.403320][ T9545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.403335][ T9545] RSP: 002b:00007fe6c5126028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.403354][ T9545] RAX: ffffffffffffffda RBX: 00007fe6c4415fa0 RCX: 00007fe6c419c799 [ 169.403367][ T9545] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 169.403378][ T9545] RBP: 00007fe6c5126090 R08: 0000000000000000 R09: 0000000000000000 [ 169.403388][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.403398][ T9545] R13: 00007fe6c4416038 R14: 00007fe6c4415fa0 R15: 00007ffda76b6c68 [ 169.403425][ T9545] [ 169.778683][ T1002] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.816268][ T1002] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.861417][ T1002] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.926686][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1153'. [ 169.976184][ T1002] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.055698][ T9554] syz.4.1153: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 170.070688][ T9554] CPU: 0 UID: 0 PID: 9554 Comm: syz.4.1153 Not tainted syzkaller #0 PREEMPT(full) [ 170.070712][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.070724][ T9554] Call Trace: [ 170.070730][ T9554] [ 170.070748][ T9554] dump_stack_lvl+0xe8/0x150 [ 170.070783][ T9554] warn_alloc+0x249/0x340 [ 170.070808][ T9554] ? stack_trace_save+0xa9/0x100 [ 170.070832][ T9554] ? __pfx_warn_alloc+0x10/0x10 [ 170.070861][ T9554] ? kasan_save_track+0x4f/0x80 [ 170.070882][ T9554] ? kasan_save_track+0x3e/0x80 [ 170.070901][ T9554] ? __kasan_kmalloc+0x93/0xb0 [ 170.070921][ T9554] ? __kmalloc_cache_noprof+0x31c/0x660 [ 170.070942][ T9554] ? xskq_create+0x56/0x170 [ 170.070966][ T9554] ? xsk_setsockopt+0x54c/0x990 [ 170.070988][ T9554] ? do_sock_setsockopt+0x17c/0x1b0 [ 170.071017][ T9554] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 170.071046][ T9554] ? do_syscall_64+0x14d/0xf80 [ 170.071078][ T9554] __vmalloc_node_range_noprof+0x132/0x1730 [ 170.071129][ T9554] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 170.071158][ T9554] ? __kasan_kmalloc+0x93/0xb0 [ 170.071186][ T9554] vmalloc_user_noprof+0xad/0xe0 [ 170.071207][ T9554] ? xskq_create+0xbf/0x170 [ 170.071233][ T9554] xskq_create+0xbf/0x170 [ 170.071260][ T9554] xsk_init_queue+0x8a/0xe0 [ 170.071287][ T9554] xsk_setsockopt+0x54c/0x990 [ 170.071311][ T9554] ? __pfx_xsk_setsockopt+0x10/0x10 [ 170.071333][ T9554] ? __pfx_aa_sk_perm+0x10/0x10 [ 170.071359][ T9554] ? aa_sock_opt_perm+0xff/0x1a0 [ 170.071388][ T9554] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 170.071411][ T9554] ? __pfx_xsk_setsockopt+0x10/0x10 [ 170.071436][ T9554] do_sock_setsockopt+0x17c/0x1b0 [ 170.071471][ T9554] __x64_sys_setsockopt+0x13d/0x1b0 [ 170.071508][ T9554] do_syscall_64+0x14d/0xf80 [ 170.071535][ T9554] ? trace_irq_disable+0x3b/0x150 [ 170.071560][ T9554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.071580][ T9554] ? clear_bhb_loop+0x40/0x90 [ 170.071606][ T9554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.071626][ T9554] RIP: 0033:0x7f5f0bf9c799 [ 170.071645][ T9554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.071663][ T9554] RSP: 002b:00007f5f0cd80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 170.071685][ T9554] RAX: ffffffffffffffda RBX: 00007f5f0c216180 RCX: 00007f5f0bf9c799 [ 170.071700][ T9554] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 170.071713][ T9554] RBP: 00007f5f0c032c99 R08: 0000000000000004 R09: 0000000000000000 [ 170.071726][ T9554] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.071747][ T9554] R13: 00007f5f0c216218 R14: 00007f5f0c216180 R15: 00007ffedf5e4248 [ 170.071780][ T9554] [ 170.071788][ T9554] Mem-Info: [ 170.298787][ T9573] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1157'. [ 170.307002][ T9554] active_anon:7363 inactive_anon:0 isolated_anon:0 [ 170.307002][ T9554] active_file:3474 inactive_file:39976 isolated_file:0 [ 170.307002][ T9554] unevictable:768 dirty:92 writeback:0 [ 170.307002][ T9554] slab_reclaimable:11241 slab_unreclaimable:100935 [ 170.307002][ T9554] mapped:32715 shmem:1385 pagetables:1478 [ 170.307002][ T9554] sec_pagetables:0 bounce:0 [ 170.307002][ T9554] kernel_misc_reclaimable:0 [ 170.307002][ T9554] free:1322232 free_pcp:8969 free_cma:0 [ 170.388022][ T9573] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1157'. [ 170.503599][ T9554] Node 0 active_anon:29852kB inactive_anon:0kB active_file:13896kB inactive_file:159704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134960kB dirty:368kB writeback:0kB shmem:4204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13284kB pagetables:5952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 170.536343][ T9554] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 170.572610][ T9554] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 170.636029][ T9554] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 170.649886][ T9554] Node 0 DMA32 free:1337528kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29652kB inactive_anon:0kB active_file:13896kB inactive_file:159704kB unevictable:1536kB writepending:368kB zspages:0kB present:3129332kB managed:2552572kB mlocked:0kB bounce:0kB free_pcp:35392kB local_pcp:15776kB free_cma:0kB [ 170.714990][ T9554] lowmem_reserve[]: 0 0 0 0 0 [ 170.720195][ T9554] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 170.793220][ T9554] lowmem_reserve[]: 0 0 0 0 0 [ 170.812159][ T9554] Node 1 Normal free:3935540kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 170.841555][ T9599] FAULT_INJECTION: forcing a failure. [ 170.841555][ T9599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.871574][ T9599] CPU: 1 UID: 0 PID: 9599 Comm: syz.2.1160 Not tainted syzkaller #0 PREEMPT(full) [ 170.871599][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.871610][ T9599] Call Trace: [ 170.871617][ T9599] [ 170.871624][ T9599] dump_stack_lvl+0xe8/0x150 [ 170.871661][ T9599] should_fail_ex+0x412/0x560 [ 170.871688][ T9599] _copy_from_user+0x2d/0xb0 [ 170.871714][ T9599] __sys_bpf+0x229/0x950 [ 170.871741][ T9599] ? __pfx___sys_bpf+0x10/0x10 [ 170.871762][ T9599] ? kmem_cache_free+0x187/0x630 [ 170.871795][ T9599] ? ksys_write+0x1fc/0x270 [ 170.871816][ T9599] ? __pfx_ksys_write+0x10/0x10 [ 170.871841][ T9599] __x64_sys_bpf+0x7c/0x90 [ 170.871863][ T9599] do_syscall_64+0x14d/0xf80 [ 170.871885][ T9599] ? trace_irq_disable+0x3b/0x150 [ 170.871908][ T9599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.871924][ T9599] ? clear_bhb_loop+0x40/0x90 [ 170.871945][ T9599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.871961][ T9599] RIP: 0033:0x7f7bd379c799 [ 170.871977][ T9599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.871991][ T9599] RSP: 002b:00007f7bd4664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.872009][ T9599] RAX: ffffffffffffffda RBX: 00007f7bd3a15fa0 RCX: 00007f7bd379c799 [ 170.872022][ T9599] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000002 [ 170.872033][ T9599] RBP: 00007f7bd4664090 R08: 0000000000000000 R09: 0000000000000000 [ 170.872043][ T9599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.872053][ T9599] R13: 00007f7bd3a16038 R14: 00007f7bd3a15fa0 R15: 00007fff8c4cc2c8 [ 170.872078][ T9599] [ 170.877165][ T9554] lowmem_reserve[]: 0 0 0 0 0 [ 171.072688][ T9554] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 171.087736][ T9554] Node 0 DMA32: 331*4kB (UM) 897*8kB (UME) 683*16kB (UME) 576*32kB (UME) 141*64kB (UME) 51*128kB (UM) 30*256kB (UM) 15*512kB (UM) 21*1024kB (UE) 11*2048kB (UME) 299*4096kB (UM) = 1337508kB [ 171.106994][ T9554] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 171.121750][ T9554] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 9*16kB (UM) 9*32kB (UM) 9*64kB (UM) 4*128kB (UM) 5*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 959*4096kB (UM) = 3935540kB [ 171.139829][ T9554] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 171.153283][ T9554] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 171.163842][ T9554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 171.174767][ T9554] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 171.185336][ T9554] 44831 total pagecache pages [ 171.190309][ T9554] 0 pages in swap cache [ 171.194514][ T9554] Free swap = 124996kB [ 171.199214][ T9554] Total swap = 124996kB [ 171.203367][ T9554] 2097051 pages RAM [ 171.207323][ T9554] 0 pages HighMem/MovableOnly [ 171.212759][ T9554] 427072 pages reserved [ 171.217151][ T9554] 0 pages cma reserved [ 171.497678][ T9616] netlink: 'syz.4.1164': attribute type 1 has an invalid length. [ 171.603077][ T9616] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.769863][ T9625] bond4: (slave geneve2): making interface the new active one [ 171.785293][ T9625] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 171.804631][ T1102] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 171.814601][ T1102] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 171.839371][ T1102] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 171.853875][ T1102] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 172.031052][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 172.070369][ T9650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1172'. [ 172.233456][ T9662] vlan4: entered promiscuous mode [ 172.318604][ T9672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1178'. [ 172.370549][ T9668] macvtap1: entered promiscuous mode [ 172.391514][ T9668] macvtap1: entered allmulticast mode [ 172.412003][ T9668] veth1_vlan: entered allmulticast mode [ 172.465107][ T9667] macvtap2: entered promiscuous mode [ 172.476434][ T9667] macvtap2: entered allmulticast mode [ 172.701696][ T9682] netlink: 'syz.3.1182': attribute type 11 has an invalid length. [ 172.730457][ T9682] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1182'. [ 173.228563][ T9723] __nla_validate_parse: 1 callbacks suppressed [ 173.228582][ T9723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1192'. [ 173.270295][ T9726] SET target dimension over the limit! [ 173.311372][ T9726] syzkaller1: entered promiscuous mode [ 173.324854][ T9726] syzkaller1: entered allmulticast mode [ 173.797037][ T9726] nbd0: detected capacity change from 0 to 63 [ 173.805853][ T5146] block nbd0: Receive control failed (result -32) [ 173.907654][ T5822] block nbd0: Receive control failed (result -32) [ 173.907898][ T5835] block nbd0: Receive control failed (result -104) [ 173.922679][ T5833] block nbd0: Receive control failed (result -32) [ 173.931793][ T50] block nbd0: Receive control failed (result -32) [ 174.489909][ T9775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.077580][ T9808] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.093947][ T9808] team0: Device macvlan2 is already an upper device of the team interface [ 175.253571][ T9821] netlink: 'syz.4.1218': attribute type 1 has an invalid length. [ 175.274668][ T9821] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1218'. [ 175.374536][ T9825] netlink: 'syz.1.1219': attribute type 1 has an invalid length. [ 175.400832][ T9825] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1219'. [ 175.507931][ T9833] vlan3: entered promiscuous mode [ 175.799268][ T9853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.520513][ T9898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.628660][ T9902] xt_bpf: check failed: parse error [ 176.670170][ T9904] pim6reg1: entered promiscuous mode [ 176.675565][ T9904] pim6reg1: entered allmulticast mode [ 176.870939][ T9913] netlink: 'syz.4.1243': attribute type 1 has an invalid length. [ 176.899761][ T9913] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1243'. [ 177.139354][ T9941] block nbd2: not configured, cannot reconfigure [ 177.288256][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'. [ 177.386528][ T9954] netlink: 'syz.2.1253': attribute type 8 has an invalid length. [ 177.781172][ T9967] wg1: left promiscuous mode [ 177.785818][ T9967] wg1: left allmulticast mode [ 177.792877][ T9978] openvswitch: netlink: IPv4 tunnel dst address is zero [ 177.826616][ T9981] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1259'. [ 177.964493][ T9967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.001117][ T9967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.119017][ T9967] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 178.126336][ T9967] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 178.161248][ T9967] bond1: left promiscuous mode [ 178.166388][ T9967] bridge2: left promiscuous mode [ 178.171633][ T9967] bond1: left allmulticast mode [ 178.177055][ T9967] bridge2: left allmulticast mode [ 178.185275][ T9967] bond2: left promiscuous mode [ 178.191895][ T9967] vlan3: left promiscuous mode [ 178.196990][ T9967] macvlan0: left promiscuous mode [ 178.205036][ T9967] ip6gre1: left promiscuous mode [ 178.210480][ T9967] ip6gre1: left allmulticast mode [ 178.237825][ T9981] ip6gre1: entered promiscuous mode [ 178.244113][ T9981] ip6gre1: entered allmulticast mode [ 178.257135][ T5965] syz0: Port: 1 Link DOWN [ 178.264541][ T1102] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.283696][ T1102] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.304889][ T85] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.318421][ T85] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.327981][ T5965] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.343763][ T1102] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.353452][ T1102] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.469301][T10005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.539107][T10010] tipc: Started in network mode [ 178.544023][T10010] tipc: Node identity c6c09b566c5e, cluster identity 4711 [ 178.552309][T10010] tipc: Enabled bearer , priority 0 [ 178.563986][T10010] tipc: Enabling of bearer rejected, already enabled [ 178.584871][T10010] tipc: Enabling of bearer rejected, already enabled [ 178.606630][T10011] tipc: Disabling bearer [ 178.747429][ T5965] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.787099][T10022] netlink: 'syz.4.1271': attribute type 1 has an invalid length. [ 178.794874][T10022] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1271'. [ 178.804383][ T5965] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.960237][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1273'. [ 178.986743][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'. [ 179.007611][T10031] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1274'. [ 179.458889][T10057] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1280'. [ 179.469056][T10057] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1280'. [ 179.508517][T10057] ip6gre1: entered promiscuous mode [ 179.513912][T10057] ip6gre1: entered allmulticast mode [ 179.672628][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.707097][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.727755][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.751256][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.902246][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 179.913623][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 180.288796][T10102] vlan3: entered promiscuous mode [ 180.355288][T10104] netlink: 'syz.1.1300': attribute type 1 has an invalid length. [ 180.372441][T10104] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1300'. [ 180.489191][T10107] netlink: 'syz.0.1301': attribute type 7 has an invalid length. [ 180.517815][T10107] netlink: 'syz.0.1301': attribute type 5 has an invalid length. [ 180.525690][T10107] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1301'. [ 180.594161][T10112] vlan3: entered promiscuous mode [ 180.634756][T10116] netlink: 'syz.3.1302': attribute type 1 has an invalid length. [ 180.721072][T10116] bond4: entered promiscuous mode [ 180.728388][T10116] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.736178][T10119] bond4: entered allmulticast mode [ 180.869923][T10116] bond4: (slave bridge6): making interface the new active one [ 180.923054][T10116] bridge6: entered promiscuous mode [ 180.936452][T10116] bridge6: entered allmulticast mode [ 180.972514][T10116] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 181.682849][T10157] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 181.796978][T10162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.957574][T10162] IPv6: Can't replace route, no match found [ 181.966636][T10162] IPv6: Can't replace route, no match found [ 182.186102][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 182.237038][T10184] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 182.342372][T10184] bridge3: entered promiscuous mode [ 182.360818][T10191] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20001 [ 182.386064][T10184] bridge3: entered allmulticast mode [ 182.448870][T10184] xt_cgroup: invalid path, errno=-2 [ 182.881895][T10222] netlink: 'syz.3.1339': attribute type 1 has an invalid length. [ 182.997880][T10222] bond5: entered promiscuous mode [ 183.003297][T10222] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.037825][T10227] bond5: entered allmulticast mode [ 183.135688][T10222] bond5: (slave bridge8): making interface the new active one [ 183.143541][T10222] bridge8: entered promiscuous mode [ 183.149102][T10222] bridge8: entered allmulticast mode [ 183.155889][T10222] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 183.319892][T10248] x_tables: duplicate entry at hook 3 [ 183.997713][T10277] syzkaller0: entered promiscuous mode [ 184.009381][T10277] syzkaller0: entered allmulticast mode [ 184.270631][T10303] netlink: 'syz.1.1357': attribute type 3 has an invalid length. [ 185.140810][T10332] __nla_validate_parse: 9 callbacks suppressed [ 185.140829][T10332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1363'. [ 185.766398][T10330] 8021q: VLANs not supported on vxcan0 [ 185.988913][T10347] vlan4: entered promiscuous mode [ 186.137748][T10356] netlink: 'syz.0.1372': attribute type 10 has an invalid length. [ 186.213656][T10362] netem: change failed [ 186.620132][T10380] syzkaller0: entered promiscuous mode [ 186.636761][T10380] syzkaller0: entered allmulticast mode [ 186.882566][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'. [ 186.906170][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1381'. [ 187.195406][ T50] Bluetooth: hci4: link tx timeout [ 187.201566][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 188.587726][T10442] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.641184][ T5833] Bluetooth: hci4: link tx timeout [ 188.646822][ T5833] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 188.655104][T10447] bond0: (slave bridge0): Releasing backup interface [ 188.707068][T10447] bridge_slave_0: left allmulticast mode [ 188.712804][T10447] bridge_slave_0: left promiscuous mode [ 188.719690][T10447] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.754435][T10447] bridge_slave_1: left allmulticast mode [ 188.769085][T10447] bridge_slave_1: left promiscuous mode [ 188.776419][T10447] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.797935][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1401'. [ 188.833593][T10447] bond0: (slave bond_slave_0): Releasing backup interface [ 188.843473][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'. [ 188.891291][T10447] bond0: (slave bond_slave_1): Releasing backup interface [ 188.914310][T10447] team_slave_0: left promiscuous mode [ 188.930926][T10447] team0: Port device team_slave_0 removed [ 188.938417][T10447] team_slave_1: left promiscuous mode [ 188.955012][T10447] team0: Port device team_slave_1 removed [ 188.969311][T10447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.977771][T10447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.987496][T10447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.994970][T10447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.004926][T10447] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.135809][T10467] syzkaller0: entered promiscuous mode [ 189.141914][T10467] syzkaller0: entered allmulticast mode [ 189.153513][T10476] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.164195][T10476] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.226269][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 190.426138][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.495411][T10508] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1411'. [ 190.525436][T10476] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.535552][T10476] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.627612][T10476] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.638875][T10476] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.736974][T10476] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.757206][T10476] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.975590][ T76] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.006035][ T76] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.039183][ T76] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.056696][ T76] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.110126][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.125665][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.164147][ T76] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.183364][ T76] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.205575][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'. [ 191.217754][T10544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.237330][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'. [ 191.257269][T10544] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1419'. [ 191.266814][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'. [ 191.385008][T10551] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1421'. [ 191.501276][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'. [ 191.577106][T10556] macvlan2: entered allmulticast mode [ 191.590570][T10556] hsr0: entered allmulticast mode [ 191.595738][T10556] hsr_slave_0: entered allmulticast mode [ 191.721878][T10560] syzkaller0: entered promiscuous mode [ 191.730583][T10560] syzkaller0: entered allmulticast mode [ 191.764977][T10572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.772310][T10572] IPv6: NLM_F_CREATE should be set when creating new route [ 192.193468][T10602] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1431'. [ 193.410426][T10626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1438'. [ 193.423219][T10626] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1438'. [ 193.849087][T10649] netlink: 'syz.0.1443': attribute type 3 has an invalid length. [ 193.944757][T10654] vlan3: entered promiscuous mode [ 194.155103][T10667] SET target dimension over the limit! [ 194.285432][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.368470][T10683] netlink: 'syz.1.1454': attribute type 1 has an invalid length. [ 194.652068][T10687] bond1: entered promiscuous mode [ 194.686946][T10687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.781567][T10701] netlink: 'syz.3.1459': attribute type 1 has an invalid length. [ 195.085552][T10730] netlink: 'syz.2.1467': attribute type 11 has an invalid length. [ 195.103725][T10730] netlink: 'syz.2.1467': attribute type 23 has an invalid length. [ 195.520219][T10753] __nla_validate_parse: 6 callbacks suppressed [ 195.520239][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1478'. [ 195.600628][T10753] vlan3: entered promiscuous mode [ 195.660884][T10757] vlan4: entered promiscuous mode [ 195.762961][T10766] FAULT_INJECTION: forcing a failure. [ 195.762961][T10766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.806149][T10766] CPU: 1 UID: 0 PID: 10766 Comm: syz.4.1483 Not tainted syzkaller #0 PREEMPT(full) [ 195.806177][T10766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.806187][T10766] Call Trace: [ 195.806193][T10766] [ 195.806200][T10766] dump_stack_lvl+0xe8/0x150 [ 195.806256][T10766] should_fail_ex+0x412/0x560 [ 195.806289][T10766] _copy_from_iter+0x1d3/0x1670 [ 195.806315][T10766] ? rcu_is_watching+0x15/0xb0 [ 195.806345][T10766] ? __pfx__copy_from_iter+0x10/0x10 [ 195.806375][T10766] ? netlink_sendmsg+0x650/0xb40 [ 195.806396][T10766] ? skb_put+0x11b/0x210 [ 195.806423][T10766] netlink_sendmsg+0x6c0/0xb40 [ 195.806454][T10766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.806478][T10766] ? aa_sock_msg_perm+0xf1/0x1b0 [ 195.806501][T10766] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.806522][T10766] ____sys_sendmsg+0x972/0x9f0 [ 195.806548][T10766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.806570][T10766] ? import_iovec+0x73/0xa0 [ 195.806595][T10766] ___sys_sendmsg+0x2a5/0x360 [ 195.806614][T10766] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.806659][T10766] ? __fget_files+0x2a/0x420 [ 195.806682][T10766] ? __fget_files+0x3a0/0x420 [ 195.806712][T10766] __x64_sys_sendmsg+0x1bd/0x2a0 [ 195.806732][T10766] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.806758][T10766] ? __pfx_ksys_write+0x10/0x10 [ 195.806785][T10766] do_syscall_64+0x14d/0xf80 [ 195.806808][T10766] ? trace_irq_disable+0x3b/0x150 [ 195.806829][T10766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.806847][T10766] ? clear_bhb_loop+0x40/0x90 [ 195.806868][T10766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.806885][T10766] RIP: 0033:0x7f5f0bf9c799 [ 195.806912][T10766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.806926][T10766] RSP: 002b:00007f5f0cdc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.806951][T10766] RAX: ffffffffffffffda RBX: 00007f5f0c215fa0 RCX: 00007f5f0bf9c799 [ 195.806964][T10766] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 195.806975][T10766] RBP: 00007f5f0cdc2090 R08: 0000000000000000 R09: 0000000000000000 [ 195.806986][T10766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.806995][T10766] R13: 00007f5f0c216038 R14: 00007f5f0c215fa0 R15: 00007ffedf5e4248 [ 195.807020][T10766] [ 196.303205][T10786] netlink: 'syz.1.1489': attribute type 11 has an invalid length. [ 196.336119][T10786] netlink: 'syz.1.1489': attribute type 23 has an invalid length. [ 196.347818][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 196.353885][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 196.354302][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 196.359981][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 196.412093][T10786] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1489'. [ 196.490596][T10792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1491'. [ 196.877074][T10815] vlan3: entered promiscuous mode [ 197.269064][T10842] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1507'. [ 197.344467][T10845] netlink: 'syz.0.1508': attribute type 11 has an invalid length. [ 197.353934][T10845] netlink: 'syz.0.1508': attribute type 23 has an invalid length. [ 197.364370][T10845] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1508'. [ 197.649776][T10855] netlink: 'syz.0.1514': attribute type 1 has an invalid length. [ 197.683708][T10855] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1514'. [ 197.793320][T10866] netlink: 'syz.1.1519': attribute type 10 has an invalid length. [ 197.964870][T10875] xt_CT: No such helper "pptp" [ 198.098093][T10884] netlink: 'syz.4.1524': attribute type 11 has an invalid length. [ 198.114067][T10884] netlink: 'syz.4.1524': attribute type 23 has an invalid length. [ 198.123279][T10884] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1524'. [ 198.294611][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 198.304259][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 198.551137][T10905] SET target dimension over the limit! [ 198.678370][T10909] xt_bpf: check failed: parse error [ 198.683924][T10911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1535'. [ 199.063662][T10930] netlink: 'syz.2.1538': attribute type 11 has an invalid length. [ 199.096073][T10930] netlink: 'syz.2.1538': attribute type 23 has an invalid length. [ 199.283957][T10945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.575740][T10960] FAULT_INJECTION: forcing a failure. [ 199.575740][T10960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.633398][T10960] CPU: 0 UID: 0 PID: 10960 Comm: syz.3.1549 Not tainted syzkaller #0 PREEMPT(full) [ 199.633424][T10960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.633435][T10960] Call Trace: [ 199.633443][T10960] [ 199.633451][T10960] dump_stack_lvl+0xe8/0x150 [ 199.633480][T10960] should_fail_ex+0x412/0x560 [ 199.633507][T10960] _copy_from_user+0x2d/0xb0 [ 199.633533][T10960] ___sys_recvmsg+0x175/0x590 [ 199.633550][T10960] ? __lock_acquire+0x6b5/0x2cf0 [ 199.633582][T10960] ? __pfx____sys_recvmsg+0x10/0x10 [ 199.633633][T10960] do_recvmmsg+0x334/0x800 [ 199.633659][T10960] ? __pfx_do_recvmmsg+0x10/0x10 [ 199.633688][T10960] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 199.633727][T10960] __x64_sys_recvmmsg+0x198/0x250 [ 199.633749][T10960] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 199.633778][T10960] do_syscall_64+0x14d/0xf80 [ 199.633801][T10960] ? trace_irq_disable+0x3b/0x150 [ 199.633824][T10960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.633841][T10960] ? clear_bhb_loop+0x40/0x90 [ 199.633862][T10960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.633879][T10960] RIP: 0033:0x7f58a9b9c799 [ 199.633895][T10960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.633909][T10960] RSP: 002b:00007f58aab38028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 199.633929][T10960] RAX: ffffffffffffffda RBX: 00007f58a9e15fa0 RCX: 00007f58a9b9c799 [ 199.633941][T10960] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 199.633954][T10960] RBP: 00007f58aab38090 R08: 0000000000000000 R09: 0000000000000000 [ 199.633964][T10960] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 199.633974][T10960] R13: 00007f58a9e16038 R14: 00007f58a9e15fa0 R15: 00007ffcfa842318 [ 199.634002][T10960] [ 199.897078][T10971] vlan3: entered promiscuous mode [ 200.162429][T10986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.364630][T10998] SET target dimension over the limit! [ 200.449578][T11002] xt_bpf: check failed: parse error [ 200.632214][T11020] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.681420][T11024] netlink: 'syz.4.1575': attribute type 9 has an invalid length. [ 200.701566][T11024] __nla_validate_parse: 6 callbacks suppressed [ 200.701583][T11024] netlink: 211864 bytes leftover after parsing attributes in process `syz.4.1575'. [ 200.804892][T11031] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1578'. [ 200.836508][T11031] netlink: 'syz.3.1578': attribute type 7 has an invalid length. [ 200.844514][T11031] netlink: 'syz.3.1578': attribute type 8 has an invalid length. [ 200.854184][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 200.922764][T11035] geneve3: entered promiscuous mode [ 200.934591][T11035] geneve3: entered allmulticast mode [ 200.956907][T11037] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1581'. [ 201.050638][T11042] netlink: 'syz.0.1583': attribute type 10 has an invalid length. [ 201.060916][T11042] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.068252][T11042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.075853][T11042] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.083216][T11042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.097884][T11042] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 201.171676][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1584'. [ 201.369539][T11060] vlan4: entered promiscuous mode [ 201.423347][T11064] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1592'. [ 201.435800][T11062] veth3: entered promiscuous mode [ 201.552386][T11066] FAULT_INJECTION: forcing a failure. [ 201.552386][T11066] name failslab, interval 1, probability 0, space 0, times 0 [ 201.584375][T11066] CPU: 0 UID: 0 PID: 11066 Comm: syz.4.1594 Not tainted syzkaller #0 PREEMPT(full) [ 201.584401][T11066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.584412][T11066] Call Trace: [ 201.584419][T11066] [ 201.584427][T11066] dump_stack_lvl+0xe8/0x150 [ 201.584455][T11066] should_fail_ex+0x412/0x560 [ 201.584482][T11066] should_failslab+0xa8/0x100 [ 201.584502][T11066] __kmalloc_noprof+0xe8/0x760 [ 201.584520][T11066] ? ____sys_recvmsg+0x363/0x4a0 [ 201.584538][T11066] ? iovec_from_user+0x87/0x250 [ 201.584568][T11066] iovec_from_user+0x87/0x250 [ 201.584597][T11066] __import_iovec+0x163/0x7e0 [ 201.584631][T11066] import_iovec+0x73/0xa0 [ 201.584659][T11066] ___sys_recvmsg+0x4bd/0x590 [ 201.584675][T11066] ? __lock_acquire+0x6b5/0x2cf0 [ 201.584701][T11066] ? __pfx____sys_recvmsg+0x10/0x10 [ 201.584753][T11066] do_recvmmsg+0x334/0x800 [ 201.584779][T11066] ? __pfx_do_recvmmsg+0x10/0x10 [ 201.584808][T11066] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 201.584849][T11066] __x64_sys_recvmmsg+0x198/0x250 [ 201.584871][T11066] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 201.584900][T11066] do_syscall_64+0x14d/0xf80 [ 201.584923][T11066] ? trace_irq_disable+0x3b/0x150 [ 201.584946][T11066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.584963][T11066] ? clear_bhb_loop+0x40/0x90 [ 201.584983][T11066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.585038][T11066] RIP: 0033:0x7f5f0bf9c799 [ 201.585054][T11066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.585069][T11066] RSP: 002b:00007f5f0cdc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 201.585088][T11066] RAX: ffffffffffffffda RBX: 00007f5f0c215fa0 RCX: 00007f5f0bf9c799 [ 201.585100][T11066] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 201.585111][T11066] RBP: 00007f5f0cdc2090 R08: 0000000000000000 R09: 0000000000000000 [ 201.585121][T11066] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 201.585131][T11066] R13: 00007f5f0c216038 R14: 00007f5f0c215fa0 R15: 00007ffedf5e4248 [ 201.585158][T11066] [ 202.003448][T11084] netlink: 'syz.3.1599': attribute type 1 has an invalid length. [ 202.036057][T11084] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1599'. [ 202.112146][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1601'. [ 202.148990][T11089] vlan3: entered promiscuous mode [ 202.365071][T11106] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1607'. [ 202.390799][T11109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1606'. [ 202.476903][T11113] ip6gre1: entered promiscuous mode [ 202.482382][T11113] ip6gre1: entered allmulticast mode [ 202.748148][T11121] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 203.110524][T11135] FAULT_INJECTION: forcing a failure. [ 203.110524][T11135] name failslab, interval 1, probability 0, space 0, times 0 [ 203.123472][T11135] CPU: 0 UID: 0 PID: 11135 Comm: syz.3.1617 Not tainted syzkaller #0 PREEMPT(full) [ 203.123496][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.123507][T11135] Call Trace: [ 203.123515][T11135] [ 203.123523][T11135] dump_stack_lvl+0xe8/0x150 [ 203.123552][T11135] should_fail_ex+0x412/0x560 [ 203.123579][T11135] should_failslab+0xa8/0x100 [ 203.123602][T11135] __kmalloc_cache_noprof+0x88/0x660 [ 203.123623][T11135] ? l2tp_tunnel_create+0x92/0x3e0 [ 203.123651][T11135] l2tp_tunnel_create+0x92/0x3e0 [ 203.123676][T11135] l2tp_nl_cmd_tunnel_create+0x2b1/0x970 [ 203.123693][T11135] ? rcu_is_watching+0x15/0xb0 [ 203.123719][T11135] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 203.123740][T11135] ? __nla_parse+0x40/0x60 [ 203.123768][T11135] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 203.123787][T11135] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 203.123813][T11135] genl_family_rcv_msg_doit+0x22a/0x330 [ 203.123839][T11135] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 203.123871][T11135] ? bpf_lsm_capable+0x9/0x20 [ 203.123893][T11135] ? security_capable+0x7e/0x2c0 [ 203.123920][T11135] genl_rcv_msg+0x61c/0x7a0 [ 203.123952][T11135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 203.123970][T11135] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 203.123989][T11135] ? __lock_acquire+0x6b5/0x2cf0 [ 203.124022][T11135] netlink_rcv_skb+0x232/0x4b0 [ 203.124046][T11135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 203.124065][T11135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.124105][T11135] ? down_read+0x272/0x2e0 [ 203.124121][T11135] ? genl_rcv+0xd/0x40 [ 203.124139][T11135] genl_rcv+0x28/0x40 [ 203.124154][T11135] netlink_unicast+0x80f/0x9b0 [ 203.124184][T11135] ? __pfx_netlink_unicast+0x10/0x10 [ 203.124207][T11135] ? netlink_sendmsg+0x650/0xb40 [ 203.124229][T11135] ? skb_put+0x11b/0x210 [ 203.124257][T11135] netlink_sendmsg+0x813/0xb40 [ 203.124289][T11135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.124316][T11135] ? aa_sock_msg_perm+0xf1/0x1b0 [ 203.124339][T11135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.124362][T11135] ____sys_sendmsg+0x972/0x9f0 [ 203.124388][T11135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.124418][T11135] ? import_iovec+0x73/0xa0 [ 203.124447][T11135] ___sys_sendmsg+0x2a5/0x360 [ 203.124471][T11135] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.124523][T11135] ? __fget_files+0x2a/0x420 [ 203.124547][T11135] ? __fget_files+0x3a0/0x420 [ 203.124580][T11135] __x64_sys_sendmsg+0x1bd/0x2a0 [ 203.124599][T11135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.124626][T11135] ? __pfx_ksys_write+0x10/0x10 [ 203.124656][T11135] do_syscall_64+0x14d/0xf80 [ 203.124679][T11135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.124697][T11135] ? clear_bhb_loop+0x40/0x90 [ 203.124718][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.124736][T11135] RIP: 0033:0x7f58a9b9c799 [ 203.124752][T11135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.124766][T11135] RSP: 002b:00007f58aab38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.124785][T11135] RAX: ffffffffffffffda RBX: 00007f58a9e15fa0 RCX: 00007f58a9b9c799 [ 203.124798][T11135] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 203.124809][T11135] RBP: 00007f58aab38090 R08: 0000000000000000 R09: 0000000000000000 [ 203.124820][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.124830][T11135] R13: 00007f58a9e16038 R14: 00007f58a9e15fa0 R15: 00007ffcfa842318 [ 203.124859][T11135] [ 203.726406][T11138] netlink: 'syz.1.1619': attribute type 1 has an invalid length. [ 203.861721][T11138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.888702][ T2408] block nbd0: Connection timed out, retrying (0/5 alive) [ 203.897860][ T2408] block nbd0: Connection timed out, retrying (0/5 alive) [ 203.904962][ T2408] block nbd0: Connection timed out, retrying (0/5 alive) [ 203.913005][ T2408] block nbd0: Connection timed out, retrying (0/5 alive) [ 203.922396][ T25] block nbd0: Dead connection, failed to find a fallback [ 203.933361][ T25] block nbd0: shutting down sockets [ 203.941228][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.952530][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 203.961139][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.971034][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 203.982090][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.992173][T11148] bond3: (slave ip6gretap1): making interface the new active one [ 203.999994][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 204.008232][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.018791][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 204.028172][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.039013][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 204.048888][ T5837] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.062971][ T5837] Buffer I/O error on dev nbd0, logical block 1, async page read [ 204.071627][ T5837] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.081375][T11148] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 204.081722][ T5837] Buffer I/O error on dev nbd0, logical block 2, async page read [ 204.101857][ T5837] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.111819][ T5837] Buffer I/O error on dev nbd0, logical block 3, async page read [ 204.120427][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.130588][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 204.138795][ T5837] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.149626][ T5837] Buffer I/O error on dev nbd0, logical block 1, async page read [ 204.159030][ T5837] ldm_validate_partition_table(): Disk read failed. [ 204.166949][ T5837] Dev nbd0: unable to read RDB block 0 [ 204.173003][ T5837] nbd0: unable to read partition table [ 204.202945][ T5837] ldm_validate_partition_table(): Disk read failed. [ 204.220411][ T5837] Dev nbd0: unable to read RDB block 0 [ 204.237094][ T5837] nbd0: unable to read partition table [ 204.278003][ T5837] block nbd0: NBD_DISCONNECT [ 204.285587][ T5837] block nbd0: Send disconnect failed -32 [ 204.301801][ T5837] block nbd0: Send disconnect failed -32 [ 204.314282][ T5837] block nbd0: Send disconnect failed -32 [ 204.332637][ T5837] block nbd0: Send disconnect failed -32 [ 204.345190][ T5837] block nbd0: Send disconnect failed -32 [ 204.620401][T11151] bridge0: left allmulticast mode [ 204.632889][T11159] syz_tun: entered promiscuous mode [ 204.647623][T11159] syz_tun: entered allmulticast mode [ 204.752163][T11166] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.765899][T11166] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.778050][T11166] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 204.949110][T11166] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.974063][T11174] netlink: 'syz.1.1629': attribute type 11 has an invalid length. [ 204.984336][T11166] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.996470][T11174] netlink: 'syz.1.1629': attribute type 23 has an invalid length. [ 205.004495][T11166] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 205.139401][T11166] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.174841][T11166] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.190384][T11189] FAULT_INJECTION: forcing a failure. [ 205.190384][T11189] name failslab, interval 1, probability 0, space 0, times 0 [ 205.223514][T11189] CPU: 0 UID: 0 PID: 11189 Comm: syz.3.1631 Not tainted syzkaller #0 PREEMPT(full) [ 205.223541][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.223551][T11189] Call Trace: [ 205.223558][T11189] [ 205.223566][T11189] dump_stack_lvl+0xe8/0x150 [ 205.223603][T11189] should_fail_ex+0x412/0x560 [ 205.223629][T11189] should_failslab+0xa8/0x100 [ 205.223653][T11189] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 205.223672][T11189] ? __alloc_skb+0x186/0x7d0 [ 205.223694][T11189] ? __alloc_skb+0x1d0/0x7d0 [ 205.223715][T11189] ? __local_bh_enable_ip+0xd0/0x130 [ 205.223739][T11189] __alloc_skb+0x1d0/0x7d0 [ 205.223766][T11189] netlink_sendmsg+0x5d4/0xb40 [ 205.223799][T11189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.223825][T11189] ? aa_sock_msg_perm+0xf1/0x1b0 [ 205.223848][T11189] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.223869][T11189] ____sys_sendmsg+0x972/0x9f0 [ 205.223894][T11189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.223917][T11189] ? import_iovec+0x73/0xa0 [ 205.223945][T11189] ___sys_sendmsg+0x2a5/0x360 [ 205.223967][T11189] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.224014][T11189] ? __fget_files+0x2a/0x420 [ 205.224037][T11189] ? __fget_files+0x3a0/0x420 [ 205.224068][T11189] __x64_sys_sendmsg+0x1bd/0x2a0 [ 205.224088][T11189] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.224112][T11189] ? __pfx_ksys_write+0x10/0x10 [ 205.224140][T11189] do_syscall_64+0x14d/0xf80 [ 205.224164][T11189] ? trace_irq_disable+0x3b/0x150 [ 205.224187][T11189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.224204][T11189] ? clear_bhb_loop+0x40/0x90 [ 205.224224][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.224241][T11189] RIP: 0033:0x7f58a9b9c799 [ 205.224257][T11189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.224272][T11189] RSP: 002b:00007f58aaaf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.224290][T11189] RAX: ffffffffffffffda RBX: 00007f58a9e16180 RCX: 00007f58a9b9c799 [ 205.224303][T11189] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 205.224314][T11189] RBP: 00007f58aaaf6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.224324][T11189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.224334][T11189] R13: 00007f58a9e16218 R14: 00007f58a9e16180 R15: 00007ffcfa842318 [ 205.224361][T11189] [ 205.251498][T11166] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 205.539993][T11166] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.568422][T11166] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.621005][T11166] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 205.897527][ T76] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.905742][ T76] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 205.948376][ T76] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 205.980991][ T85] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.993871][ T85] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 206.012428][ T85] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.038684][T11202] vlan3: entered allmulticast mode [ 206.044021][T11202] team0: entered allmulticast mode [ 206.059307][ T85] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.078134][ T85] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 206.098582][ T85] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.144915][ T76] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.156224][T11207] netlink: 'syz.0.1640': attribute type 10 has an invalid length. [ 206.165534][ T76] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 206.184851][ T76] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.212916][T11207] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.220239][T11207] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.384852][T11217] SET target dimension over the limit! [ 206.397081][T11216] __nla_validate_parse: 13 callbacks suppressed [ 206.397100][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1645'. [ 206.415704][T11213] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.426126][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.434601][T11213] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.531745][T11213] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.546127][T11213] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.672103][T11228] netlink: 'syz.3.1647': attribute type 1 has an invalid length. [ 206.688119][T11213] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.706141][T11213] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.754407][T11231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1647'. [ 206.824821][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1647'. [ 206.842733][T11228] bond7: entered promiscuous mode [ 206.848389][T11228] 8021q: adding VLAN 0 to HW filter on device bond7 [ 206.855549][T11231] bond7: entered allmulticast mode [ 206.864168][T11213] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.877839][T11213] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.897485][T11233] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1649'. [ 206.942806][T11244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 206.958640][T11228] bond7: (slave bridge11): making interface the new active one [ 206.969754][T11228] bridge11: entered promiscuous mode [ 206.975346][T11228] bridge11: entered allmulticast mode [ 206.983399][T11228] bond7: (slave bridge11): Enslaving as an active interface with an up link [ 206.993318][T11233] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1649'. [ 207.025376][T11239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1651'. [ 207.037674][T11239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1651'. [ 207.062003][T11239] veth1: entered promiscuous mode [ 207.089057][T11239] veth1: left promiscuous mode [ 207.190293][ T1086] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.200358][ T1086] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.226461][ T1086] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.237310][ T1086] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.255434][ T1086] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.265119][ T1086] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.289299][T11259] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.297525][ T85] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.306521][ T85] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.392858][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1659'. [ 207.458289][T11269] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1661'. [ 207.758575][T11285] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.766153][T11287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.775816][T11285] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.843239][T11285] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.854563][T11285] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.925001][T11285] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.954487][T11285] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.989576][T11298] FAULT_INJECTION: forcing a failure. [ 207.989576][T11298] name failslab, interval 1, probability 0, space 0, times 0 [ 208.002436][T11298] CPU: 1 UID: 0 PID: 11298 Comm: syz.4.1675 Not tainted syzkaller #0 PREEMPT(full) [ 208.002458][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 208.002467][T11298] Call Trace: [ 208.002473][T11298] [ 208.002481][T11298] dump_stack_lvl+0xe8/0x150 [ 208.002508][T11298] should_fail_ex+0x412/0x560 [ 208.002535][T11298] should_failslab+0xa8/0x100 [ 208.002556][T11298] ? skb_clone+0x212/0x3a0 [ 208.002573][T11298] kmem_cache_alloc_noprof+0x87/0x650 [ 208.002590][T11298] ? __netlink_lookup+0xc6/0x8b0 [ 208.002620][T11298] skb_clone+0x212/0x3a0 [ 208.002640][T11298] __netlink_deliver_tap+0x404/0x850 [ 208.002673][T11298] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.002695][T11298] netlink_deliver_tap+0x19c/0x1b0 [ 208.002718][T11298] netlink_unicast+0x7e3/0x9b0 [ 208.002743][T11298] ? __pfx_netlink_unicast+0x10/0x10 [ 208.002764][T11298] ? netlink_sendmsg+0x650/0xb40 [ 208.002781][T11298] ? skb_put+0x11b/0x210 [ 208.002805][T11298] netlink_sendmsg+0x813/0xb40 [ 208.002833][T11298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.002866][T11298] ? aa_sock_msg_perm+0xf1/0x1b0 [ 208.002888][T11298] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.002908][T11298] ____sys_sendmsg+0x972/0x9f0 [ 208.002933][T11298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.002956][T11298] ? import_iovec+0x73/0xa0 [ 208.002982][T11298] ___sys_sendmsg+0x2a5/0x360 [ 208.003004][T11298] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.003051][T11298] ? __fget_files+0x2a/0x420 [ 208.003073][T11298] ? __fget_files+0x3a0/0x420 [ 208.003102][T11298] __x64_sys_sendmsg+0x1bd/0x2a0 [ 208.003120][T11298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.003146][T11298] ? __pfx_ksys_write+0x10/0x10 [ 208.003176][T11298] do_syscall_64+0x14d/0xf80 [ 208.003199][T11298] ? trace_irq_disable+0x3b/0x150 [ 208.003222][T11298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.003239][T11298] ? clear_bhb_loop+0x40/0x90 [ 208.003256][T11298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.003271][T11298] RIP: 0033:0x7f5f0bf9c799 [ 208.003286][T11298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.003300][T11298] RSP: 002b:00007f5f0cdc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.003321][T11298] RAX: ffffffffffffffda RBX: 00007f5f0c215fa0 RCX: 00007f5f0bf9c799 [ 208.003334][T11298] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 0000000000000007 [ 208.003346][T11298] RBP: 00007f5f0cdc2090 R08: 0000000000000000 R09: 0000000000000000 [ 208.003355][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.003363][T11298] R13: 00007f5f0c216038 R14: 00007f5f0c215fa0 R15: 00007ffedf5e4248 [ 208.003389][T11298] [ 208.465041][T11307] ip6tnl2: entered allmulticast mode [ 208.491428][T11285] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.515056][T11285] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.671809][T11322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.912023][T11340] netlink: 'syz.4.1691': attribute type 10 has an invalid length. [ 208.920259][T11340] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.927770][T11340] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.980311][T11340] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.987594][T11340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.995875][T11340] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.003117][T11340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.010841][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.033645][T11340] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 209.155082][T11348] syzkaller0: entered promiscuous mode [ 209.181245][T11348] syzkaller0: entered allmulticast mode [ 209.241615][T11356] syzkaller0: entered promiscuous mode [ 209.247249][T11356] syzkaller0: entered allmulticast mode [ 209.275105][T11360] netlink: 'syz.1.1697': attribute type 11 has an invalid length. [ 209.293893][T11360] netlink: 'syz.1.1697': attribute type 23 has an invalid length. [ 211.007962][T11403] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.019532][T11403] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.039141][T11403] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 211.121694][T11410] FAULT_INJECTION: forcing a failure. [ 211.121694][T11410] name failslab, interval 1, probability 0, space 0, times 0 [ 211.156174][T11410] CPU: 1 UID: 0 PID: 11410 Comm: syz.2.1715 Not tainted syzkaller #0 PREEMPT(full) [ 211.156193][T11410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.156199][T11410] Call Trace: [ 211.156204][T11410] [ 211.156209][T11410] dump_stack_lvl+0xe8/0x150 [ 211.156228][T11410] should_fail_ex+0x412/0x560 [ 211.156244][T11410] should_failslab+0xa8/0x100 [ 211.156257][T11410] ? skb_clone+0x212/0x3a0 [ 211.156267][T11410] kmem_cache_alloc_noprof+0x87/0x650 [ 211.156277][T11410] ? __netlink_lookup+0xc6/0x8b0 [ 211.156295][T11410] skb_clone+0x212/0x3a0 [ 211.156306][T11410] __netlink_deliver_tap+0x404/0x850 [ 211.156324][T11410] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.156337][T11410] netlink_deliver_tap+0x19c/0x1b0 [ 211.156350][T11410] netlink_unicast+0x7e3/0x9b0 [ 211.156365][T11410] ? __pfx_netlink_unicast+0x10/0x10 [ 211.156378][T11410] ? netlink_sendmsg+0x650/0xb40 [ 211.156389][T11410] ? skb_put+0x11b/0x210 [ 211.156404][T11410] netlink_sendmsg+0x813/0xb40 [ 211.156421][T11410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.156436][T11410] ? aa_sock_msg_perm+0xf1/0x1b0 [ 211.156449][T11410] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.156461][T11410] ____sys_sendmsg+0x972/0x9f0 [ 211.156475][T11410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.156488][T11410] ? import_iovec+0x73/0xa0 [ 211.156504][T11410] ___sys_sendmsg+0x2a5/0x360 [ 211.156517][T11410] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.156542][T11410] ? __fget_files+0x2a/0x420 [ 211.156555][T11410] ? __fget_files+0x3a0/0x420 [ 211.156573][T11410] __x64_sys_sendmsg+0x1bd/0x2a0 [ 211.156584][T11410] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.156597][T11410] ? __pfx_ksys_write+0x10/0x10 [ 211.156613][T11410] do_syscall_64+0x14d/0xf80 [ 211.156627][T11410] ? trace_irq_disable+0x3b/0x150 [ 211.156640][T11410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.156650][T11410] ? clear_bhb_loop+0x40/0x90 [ 211.156664][T11410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.156674][T11410] RIP: 0033:0x7f7bd379c799 [ 211.156683][T11410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.156692][T11410] RSP: 002b:00007f7bd4664028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.156704][T11410] RAX: ffffffffffffffda RBX: 00007f7bd3a15fa0 RCX: 00007f7bd379c799 [ 211.156710][T11410] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 211.156717][T11410] RBP: 00007f7bd4664090 R08: 0000000000000000 R09: 0000000000000000 [ 211.156723][T11410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.156728][T11410] R13: 00007f7bd3a16038 R14: 00007f7bd3a15fa0 R15: 00007fff8c4cc2c8 [ 211.156743][T11410] [ 211.444970][T11403] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.459524][T11403] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.472798][T11403] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 211.479669][T11417] __nla_validate_parse: 10 callbacks suppressed [ 211.479688][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1716'. [ 211.573345][T11403] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.586770][T11403] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.616304][T11403] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 211.655532][ T5822] block nbd0: Wrong magic (0x0) [ 211.827936][T11403] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.848791][T11403] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.863372][T11403] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 211.878056][T11433] openvswitch: netlink: Actions may not be safe on all matching packets [ 211.979840][ T1002] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.993044][ T1002] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 212.032087][ T1002] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.072234][T11440] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1725'. [ 212.100527][ T1002] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.113373][ T1002] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 212.122373][ T1002] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.151139][ T1002] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.162664][T11444] netlink: 'syz.4.1728': attribute type 3 has an invalid length. [ 212.170667][ T1002] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 212.179104][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1728'. [ 212.195162][ T1002] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.213760][ T1002] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.232501][ T1002] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 212.250952][ T1002] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.306744][ T76] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.314953][ T76] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.359666][ T1102] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.375816][ T1102] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.447686][ T76] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.461106][T11461] FAULT_INJECTION: forcing a failure. [ 212.461106][T11461] name failslab, interval 1, probability 0, space 0, times 0 [ 212.466950][ T76] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.490790][T11461] CPU: 0 UID: 0 PID: 11461 Comm: syz.4.1734 Not tainted syzkaller #0 PREEMPT(full) [ 212.490814][T11461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.490825][T11461] Call Trace: [ 212.490831][T11461] [ 212.490839][T11461] dump_stack_lvl+0xe8/0x150 [ 212.490868][T11461] should_fail_ex+0x412/0x560 [ 212.490892][T11461] should_failslab+0xa8/0x100 [ 212.490914][T11461] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 212.490935][T11461] ? __alloc_skb+0x1d0/0x7d0 [ 212.490957][T11461] ? __local_bh_enable_ip+0xd0/0x130 [ 212.490982][T11461] __alloc_skb+0x1d0/0x7d0 [ 212.491005][T11461] ? netlink_ack_tlv_len+0x6c/0x210 [ 212.491029][T11461] netlink_ack+0x146/0xa50 [ 212.491049][T11461] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.491069][T11461] ? __lock_acquire+0x6b5/0x2cf0 [ 212.491101][T11461] netlink_rcv_skb+0x2b6/0x4b0 [ 212.491125][T11461] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.491153][T11461] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.491192][T11461] ? down_read+0x272/0x2e0 [ 212.491206][T11461] ? genl_rcv+0xd/0x40 [ 212.491224][T11461] genl_rcv+0x28/0x40 [ 212.491239][T11461] netlink_unicast+0x80f/0x9b0 [ 212.491268][T11461] ? __pfx_netlink_unicast+0x10/0x10 [ 212.491291][T11461] ? netlink_sendmsg+0x650/0xb40 [ 212.491311][T11461] ? skb_put+0x11b/0x210 [ 212.491338][T11461] netlink_sendmsg+0x813/0xb40 [ 212.491369][T11461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.491395][T11461] ? aa_sock_msg_perm+0xf1/0x1b0 [ 212.491419][T11461] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.491441][T11461] ____sys_sendmsg+0x972/0x9f0 [ 212.491466][T11461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.491491][T11461] ? import_iovec+0x73/0xa0 [ 212.491518][T11461] ___sys_sendmsg+0x2a5/0x360 [ 212.491540][T11461] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.491589][T11461] ? __fget_files+0x2a/0x420 [ 212.491611][T11461] ? __fget_files+0x3a0/0x420 [ 212.491641][T11461] __x64_sys_sendmsg+0x1bd/0x2a0 [ 212.491659][T11461] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.491683][T11461] ? __pfx_ksys_write+0x10/0x10 [ 212.491709][T11461] do_syscall_64+0x14d/0xf80 [ 212.491731][T11461] ? trace_irq_disable+0x3b/0x150 [ 212.491752][T11461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.491767][T11461] ? clear_bhb_loop+0x40/0x90 [ 212.491790][T11461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.491805][T11461] RIP: 0033:0x7f5f0bf9c799 [ 212.491820][T11461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.491833][T11461] RSP: 002b:00007f5f0cdc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.491850][T11461] RAX: ffffffffffffffda RBX: 00007f5f0c215fa0 RCX: 00007f5f0bf9c799 [ 212.491863][T11461] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 212.491872][T11461] RBP: 00007f5f0cdc2090 R08: 0000000000000000 R09: 0000000000000000 [ 212.491880][T11461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.491890][T11461] R13: 00007f5f0c216038 R14: 00007f5f0c215fa0 R15: 00007ffedf5e4248 [ 212.491917][T11461] [ 212.525514][ T1102] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.811480][ T1102] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.920339][T11480] netlink: 'syz.2.1735': attribute type 11 has an invalid length. [ 212.959096][T11480] netlink: 'syz.2.1735': attribute type 23 has an invalid length. [ 213.026204][T11480] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1735'. [ 213.629501][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 213.659735][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 213.914123][T11524] netlink: 'syz.2.1756': attribute type 1 has an invalid length. [ 213.928667][T11524] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1756'. [ 214.071257][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1758'. [ 214.087522][T11526] bond2: (slave veth5): Enslaving as an active interface with a down link [ 214.172402][T11530] team_slave_0 (unregistering): left promiscuous mode [ 214.183211][T11530] team0: Port device team_slave_0 removed [ 214.235604][T11526] bond2: (slave veth7): Enslaving as an active interface with a down link [ 214.372810][T11546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1762'. [ 214.397337][T11546] vlan3: entered promiscuous mode [ 214.403211][T11546] batadv0: entered promiscuous mode [ 214.505754][T11548] syzkaller0: entered promiscuous mode [ 214.511690][T11548] syzkaller0: entered allmulticast mode [ 214.595639][T11554] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 214.648799][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'. [ 216.354705][T11570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.893320][T11567] netlink: 'syz.4.1767': attribute type 1 has an invalid length. [ 216.927868][T11567] __nla_validate_parse: 2 callbacks suppressed [ 216.927889][T11567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1767'. [ 216.947889][T11567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1767'. [ 216.964773][T11567] macvlan0: entered promiscuous mode [ 216.970660][T11567] macvlan0: entered allmulticast mode [ 216.977388][T11567] bond0: entered promiscuous mode [ 216.983295][T11567] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 216.993867][T11567] bond0: left promiscuous mode [ 217.088066][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1777'. [ 217.232367][ T1086] bond0 (unregistering): Released all slaves [ 217.258573][T11601] netlink: 'syz.1.1779': attribute type 1 has an invalid length. [ 217.268737][T11601] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1779'. [ 217.522718][T11611] netlink: 'syz.2.1783': attribute type 1 has an invalid length. [ 217.560428][T11611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.608106][T11611] bond2: (slave gretap1): making interface the new active one [ 217.617378][T11611] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 217.705760][T11615] vlan3: entered promiscuous mode [ 217.725170][T11621] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1787'. [ 217.823361][T11621] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1787'. [ 217.838317][T11621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1787'. [ 217.841243][T11627] netlink: 'syz.3.1788': attribute type 1 has an invalid length. [ 217.910465][T11627] bond8: entered promiscuous mode [ 217.918976][T11627] 8021q: adding VLAN 0 to HW filter on device bond8 [ 217.967872][T11631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.971163][T11627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1788'. [ 217.984728][T11627] bond8: entered allmulticast mode [ 218.092218][T11627] bond8: (slave bridge14): making interface the new active one [ 218.112130][T11627] bridge14: entered promiscuous mode [ 218.120271][T11627] bridge14: entered allmulticast mode [ 218.128595][T11627] bond8: (slave bridge14): Enslaving as an active interface with an up link [ 218.155432][T11642] netlink: 'syz.4.1795': attribute type 1 has an invalid length. [ 218.176061][T11642] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1795'. [ 218.375049][T11656] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1799'. [ 218.444305][T11660] xt_bpf: check failed: parse error [ 218.732516][T11677] vlan4: entered promiscuous mode [ 218.904622][T11691] netlink: 'syz.2.1810': attribute type 33 has an invalid length. [ 219.085218][T11695] raw_sendmsg: syz.1.1814 forgot to set AF_INET. Fix it! [ 219.103275][T11698] FAULT_INJECTION: forcing a failure. [ 219.103275][T11698] name failslab, interval 1, probability 0, space 0, times 0 [ 219.118929][T11698] CPU: 0 UID: 0 PID: 11698 Comm: syz.0.1815 Not tainted syzkaller #0 PREEMPT(full) [ 219.118954][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.118964][T11698] Call Trace: [ 219.118971][T11698] [ 219.118978][T11698] dump_stack_lvl+0xe8/0x150 [ 219.119007][T11698] should_fail_ex+0x412/0x560 [ 219.119033][T11698] should_failslab+0xa8/0x100 [ 219.119066][T11698] __kmalloc_noprof+0xe8/0x760 [ 219.119085][T11698] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 219.119111][T11698] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 219.119130][T11698] ? __dev_queue_xmit+0x28b/0x3870 [ 219.119153][T11698] genl_family_rcv_msg_doit+0xd9/0x330 [ 219.119172][T11698] ? __asan_memcpy+0x40/0x70 [ 219.119191][T11698] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 219.119221][T11698] ? apparmor_capable+0x126/0x170 [ 219.119249][T11698] ? bpf_lsm_capable+0x9/0x20 [ 219.119270][T11698] ? security_capable+0x7e/0x2c0 [ 219.119296][T11698] genl_rcv_msg+0x61c/0x7a0 [ 219.119319][T11698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.119337][T11698] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 219.119361][T11698] ? __lock_acquire+0x6b5/0x2cf0 [ 219.119392][T11698] netlink_rcv_skb+0x232/0x4b0 [ 219.119416][T11698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.119435][T11698] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.119472][T11698] ? down_read+0x272/0x2e0 [ 219.119488][T11698] ? genl_rcv+0xd/0x40 [ 219.119506][T11698] genl_rcv+0x28/0x40 [ 219.119522][T11698] netlink_unicast+0x80f/0x9b0 [ 219.119549][T11698] ? __pfx_netlink_unicast+0x10/0x10 [ 219.119571][T11698] ? netlink_sendmsg+0x650/0xb40 [ 219.119592][T11698] ? skb_put+0x11b/0x210 [ 219.119619][T11698] netlink_sendmsg+0x813/0xb40 [ 219.119649][T11698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.119675][T11698] ? aa_sock_msg_perm+0xf1/0x1b0 [ 219.119697][T11698] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.119719][T11698] ____sys_sendmsg+0x972/0x9f0 [ 219.119744][T11698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.119770][T11698] ? import_iovec+0x73/0xa0 [ 219.119797][T11698] ___sys_sendmsg+0x2a5/0x360 [ 219.119820][T11698] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.119868][T11698] ? __fget_files+0x2a/0x420 [ 219.119891][T11698] ? __fget_files+0x3a0/0x420 [ 219.119925][T11698] __x64_sys_sendmsg+0x1bd/0x2a0 [ 219.119944][T11698] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.119971][T11698] ? __pfx_ksys_write+0x10/0x10 [ 219.120001][T11698] do_syscall_64+0x14d/0xf80 [ 219.120023][T11698] ? trace_irq_disable+0x3b/0x150 [ 219.120052][T11698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.120070][T11698] ? clear_bhb_loop+0x40/0x90 [ 219.120091][T11698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.120109][T11698] RIP: 0033:0x7f55a619c799 [ 219.120125][T11698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.120139][T11698] RSP: 002b:00007f55a70f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.120157][T11698] RAX: ffffffffffffffda RBX: 00007f55a6415fa0 RCX: 00007f55a619c799 [ 219.120170][T11698] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 219.120181][T11698] RBP: 00007f55a70f1090 R08: 0000000000000000 R09: 0000000000000000 [ 219.120191][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.120201][T11698] R13: 00007f55a6416038 R14: 00007f55a6415fa0 R15: 00007fff7eb33448 [ 219.120229][T11698] [ 219.872743][T11723] vlan4: entered promiscuous mode [ 220.140437][T11734] tipc: Enabled bearer , priority 0 [ 220.162587][T11733] tipc: Disabling bearer [ 220.691863][T11768] FAULT_INJECTION: forcing a failure. [ 220.691863][T11768] name failslab, interval 1, probability 0, space 0, times 0 [ 220.736553][T11768] CPU: 0 UID: 0 PID: 11768 Comm: syz.4.1841 Not tainted syzkaller #0 PREEMPT(full) [ 220.736577][T11768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.736588][T11768] Call Trace: [ 220.736595][T11768] [ 220.736603][T11768] dump_stack_lvl+0xe8/0x150 [ 220.736632][T11768] should_fail_ex+0x412/0x560 [ 220.736660][T11768] should_failslab+0xa8/0x100 [ 220.736683][T11768] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 220.736703][T11768] ? __alloc_skb+0x1d0/0x7d0 [ 220.736724][T11768] ? __local_bh_enable_ip+0xd0/0x130 [ 220.736751][T11768] __alloc_skb+0x1d0/0x7d0 [ 220.736778][T11768] netlink_dump+0x1ef/0xe80 [ 220.736812][T11768] ? __pfx_netlink_dump+0x10/0x10 [ 220.736849][T11768] ? genl_start+0x499/0x6c0 [ 220.736873][T11768] __netlink_dump_start+0x5cb/0x7e0 [ 220.736904][T11768] genl_family_rcv_msg_dumpit+0x213/0x310 [ 220.736926][T11768] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 220.736949][T11768] ? genl_get_cmd+0x82e/0x960 [ 220.736971][T11768] ? __pfx_genl_start+0x10/0x10 [ 220.736986][T11768] ? __pfx_genl_dumpit+0x10/0x10 [ 220.737003][T11768] ? __pfx_genl_done+0x10/0x10 [ 220.737024][T11768] ? __dev_queue_xmit+0x28b/0x3870 [ 220.737050][T11768] genl_rcv_msg+0x5e8/0x7a0 [ 220.737074][T11768] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.737091][T11768] ? __pfx_macsec_dump_txsc+0x10/0x10 [ 220.737108][T11768] ? __lock_acquire+0x6b5/0x2cf0 [ 220.737139][T11768] netlink_rcv_skb+0x232/0x4b0 [ 220.737163][T11768] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.737182][T11768] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.737221][T11768] ? down_read+0x272/0x2e0 [ 220.737237][T11768] ? genl_rcv+0xd/0x40 [ 220.737256][T11768] genl_rcv+0x28/0x40 [ 220.737272][T11768] netlink_unicast+0x80f/0x9b0 [ 220.737301][T11768] ? __pfx_netlink_unicast+0x10/0x10 [ 220.737323][T11768] ? netlink_sendmsg+0x650/0xb40 [ 220.737344][T11768] ? skb_put+0x11b/0x210 [ 220.737374][T11768] netlink_sendmsg+0x813/0xb40 [ 220.737406][T11768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.737432][T11768] ? aa_sock_msg_perm+0xf1/0x1b0 [ 220.737456][T11768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.737478][T11768] ____sys_sendmsg+0x972/0x9f0 [ 220.737503][T11768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.737530][T11768] ? import_iovec+0x73/0xa0 [ 220.737558][T11768] ___sys_sendmsg+0x2a5/0x360 [ 220.737581][T11768] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.737632][T11768] ? __fget_files+0x2a/0x420 [ 220.737654][T11768] ? __fget_files+0x3a0/0x420 [ 220.737688][T11768] __x64_sys_sendmsg+0x1bd/0x2a0 [ 220.737708][T11768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.737734][T11768] ? __pfx_ksys_write+0x10/0x10 [ 220.737763][T11768] do_syscall_64+0x14d/0xf80 [ 220.737786][T11768] ? trace_irq_disable+0x3b/0x150 [ 220.737809][T11768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.737826][T11768] ? clear_bhb_loop+0x40/0x90 [ 220.737846][T11768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.737863][T11768] RIP: 0033:0x7f5f0bf9c799 [ 220.737879][T11768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.737894][T11768] RSP: 002b:00007f5f0cdc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.737912][T11768] RAX: ffffffffffffffda RBX: 00007f5f0c215fa0 RCX: 00007f5f0bf9c799 [ 220.737924][T11768] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 0000000000000007 [ 220.737935][T11768] RBP: 00007f5f0cdc2090 R08: 0000000000000000 R09: 0000000000000000 [ 220.737950][T11768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.737960][T11768] R13: 00007f5f0c216038 R14: 00007f5f0c215fa0 R15: 00007ffedf5e4248 [ 220.737988][T11768] [ 221.102213][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 221.327796][T11781] xt_bpf: check failed: parse error [ 221.445862][T11788] netlink: 'syz.1.1849': attribute type 10 has an invalid length. [ 221.462026][T11788] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 221.472838][T11788] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 221.482552][T11788] team0: Failed to send options change via netlink (err -105) [ 221.490682][T11788] team0: Port device netdevsim0 added [ 221.497842][T11779] netlink: 'syz.2.1846': attribute type 4 has an invalid length. [ 221.623325][T11797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.029659][T11820] netlink: 'syz.4.1862': attribute type 5 has an invalid length. [ 222.248551][T11826] __nla_validate_parse: 10 callbacks suppressed [ 222.248570][T11826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1864'. [ 222.379430][T11835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1867'. [ 222.397847][T11835] vlan4: entered promiscuous mode [ 222.543186][T11841] bpq0: entered promiscuous mode [ 222.548469][T11841] bpq0: entered allmulticast mode [ 222.556986][T11841] netlink: 'syz.0.1870': attribute type 11 has an invalid length. [ 222.565171][T11841] netlink: 'syz.0.1870': attribute type 23 has an invalid length. [ 222.573539][T11841] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1870'. [ 222.644640][T11845] SET target dimension over the limit! [ 222.713901][T11849] FAULT_INJECTION: forcing a failure. [ 222.713901][T11849] name failslab, interval 1, probability 0, space 0, times 0 [ 222.729918][T11849] CPU: 0 UID: 0 PID: 11849 Comm: syz.4.1874 Not tainted syzkaller #0 PREEMPT(full) [ 222.729943][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.729954][T11849] Call Trace: [ 222.729960][T11849] [ 222.729968][T11849] dump_stack_lvl+0xe8/0x150 [ 222.729995][T11849] should_fail_ex+0x412/0x560 [ 222.730020][T11849] should_failslab+0xa8/0x100 [ 222.730042][T11849] __kmalloc_noprof+0xe8/0x760 [ 222.730060][T11849] ? bpf_test_init+0x9f/0x150 [ 222.730083][T11849] bpf_test_init+0x9f/0x150 [ 222.730107][T11849] bpf_prog_test_run_flow_dissector+0x209/0x610 [ 222.730141][T11849] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 222.730166][T11849] ? __fget_files+0x2a/0x420 [ 222.730189][T11849] ? __fget_files+0x2a/0x420 [ 222.730210][T11849] ? __fget_files+0x3a0/0x420 [ 222.730230][T11849] ? __fget_files+0x2a/0x420 [ 222.730251][T11849] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 222.730271][T11849] bpf_prog_test_run+0x2c7/0x340 [ 222.730287][T11849] __sys_bpf+0x643/0x950 [ 222.730308][T11849] ? __pfx___sys_bpf+0x10/0x10 [ 222.730339][T11849] ? ksys_write+0x242/0x270 [ 222.730355][T11849] ? __pfx_ksys_write+0x10/0x10 [ 222.730375][T11849] __x64_sys_bpf+0x7c/0x90 [ 222.730393][T11849] do_syscall_64+0x14d/0xf80 [ 222.730413][T11849] ? trace_irq_disable+0x3b/0x150 [ 222.730431][T11849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.730445][T11849] ? clear_bhb_loop+0x40/0x90 [ 222.730461][T11849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.730474][T11849] RIP: 0033:0x7f5f0bf9c799 [ 222.730513][T11849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.730525][T11849] RSP: 002b:00007f5f0cdc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.730540][T11849] RAX: ffffffffffffffda RBX: 00007f5f0c215fa0 RCX: 00007f5f0bf9c799 [ 222.730550][T11849] RDX: 0000000000000024 RSI: 0000200000000180 RDI: 000000000000000a [ 222.730559][T11849] RBP: 00007f5f0cdc2090 R08: 0000000000000000 R09: 0000000000000000 [ 222.730567][T11849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.730575][T11849] R13: 00007f5f0c216038 R14: 00007f5f0c215fa0 R15: 00007ffedf5e4248 [ 222.730596][T11849] [ 223.116807][T11863] syzkaller1: entered promiscuous mode [ 223.125834][T11863] syzkaller1: entered allmulticast mode [ 223.161960][T11868] vlan4: entered promiscuous mode [ 223.196855][T11870] syzkaller1: left promiscuous mode [ 223.202113][T11870] syzkaller1: left allmulticast mode [ 223.318880][T11875] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.340952][T11875] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.395405][T11880] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1885'. [ 223.410171][T11875] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.420568][T11875] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.470632][T11875] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.480546][T11875] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.523269][T11875] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.538324][T11875] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.613934][ T48] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.622549][ T48] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.650164][ T48] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.666919][ T48] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.713787][ T85] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.722481][ T85] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.737110][ T48] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.746699][ T48] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.269351][T11917] FAULT_INJECTION: forcing a failure. [ 224.269351][T11917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.284618][T11917] CPU: 1 UID: 0 PID: 11917 Comm: syz.4.1897 Not tainted syzkaller #0 PREEMPT(full) [ 224.284641][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.284650][T11917] Call Trace: [ 224.284656][T11917] [ 224.284663][T11917] dump_stack_lvl+0xe8/0x150 [ 224.284690][T11917] should_fail_ex+0x412/0x560 [ 224.284714][T11917] _copy_from_user+0x2d/0xb0 [ 224.284737][T11917] ___sys_sendmsg+0x1c6/0x360 [ 224.284758][T11917] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.284799][T11917] ? __fget_files+0x2a/0x420 [ 224.284822][T11917] ? __fget_files+0x3a0/0x420 [ 224.284853][T11917] __x64_sys_sendmsg+0x1bd/0x2a0 [ 224.284872][T11917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.284897][T11917] ? __pfx_ksys_write+0x10/0x10 [ 224.284924][T11917] do_syscall_64+0x14d/0xf80 [ 224.284947][T11917] ? trace_irq_disable+0x3b/0x150 [ 224.284969][T11917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.284986][T11917] ? clear_bhb_loop+0x40/0x90 [ 224.285006][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.285022][T11917] RIP: 0033:0x7f5f0bf9c799 [ 224.285039][T11917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.285053][T11917] RSP: 002b:00007f5f0cdc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.285071][T11917] RAX: ffffffffffffffda RBX: 00007f5f0c215fa0 RCX: 00007f5f0bf9c799 [ 224.285084][T11917] RDX: 0000000020000010 RSI: 0000200000000540 RDI: 0000000000000003 [ 224.285094][T11917] RBP: 00007f5f0cdc2090 R08: 0000000000000000 R09: 0000000000000000 [ 224.285105][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.285115][T11917] R13: 00007f5f0c216038 R14: 00007f5f0c215fa0 R15: 00007ffedf5e4248 [ 224.285142][T11917] [ 224.488080][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1898'. [ 224.497710][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1898'. [ 224.576978][T11923] xt_bpf: check failed: parse error [ 224.770128][T11932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.827524][T11934] syzkaller0: entered promiscuous mode [ 224.833187][T11934] syzkaller0: entered allmulticast mode [ 224.898139][T11941] netlink: 'syz.3.1907': attribute type 10 has an invalid length. [ 225.061829][T11948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1909'. [ 225.631474][T11936] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 225.643404][T11936] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 225.651822][T11936] CPU: 0 UID: 0 PID: 11936 Comm: syz.0.1906 Not tainted syzkaller #0 PREEMPT(full) [ 225.661272][T11936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.671325][T11936] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 225.677039][T11936] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 d9 4e 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 225.696638][T11936] RSP: 0018:ffffc90004a6f8e8 EFLAGS: 00010207 [ 225.702724][T11936] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000000000080000 [ 225.710712][T11936] RDX: ffffc90005ae1000 RSI: 00000000000001a9 RDI: 00000000000001aa [ 225.718780][T11936] RBP: ffff88805b2e8a00 R08: ffff8880276b1e80 R09: 0000000000000008 [ 225.727536][T11936] R10: 000000000000000f R11: 0000000000000002 R12: dffffc0000000000 [ 225.735507][T11936] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff9200094df3c [ 225.743488][T11936] FS: 00007f55a70f16c0(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 225.752634][T11936] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.759219][T11936] CR2: 00007fe6c5105d58 CR3: 00000000302f6000 CR4: 00000000003526f0 [ 225.767188][T11936] Call Trace: [ 225.770460][T11936] [ 225.773381][T11936] ? __alloc_skb+0x4e5/0x7d0 [ 225.777967][T11936] ? skb_put+0x11b/0x210 [ 225.782206][T11936] rose_write_internal+0x1256/0x1b60 [ 225.787592][T11936] ? lockdep_hardirqs_on+0x7a/0x110 [ 225.792821][T11936] ? __pfx_rose_write_internal+0x10/0x10 [ 225.798631][T11936] ? timer_delete+0x245/0x340 [ 225.803318][T11936] rose_release+0x25b/0x510 [ 225.807820][T11936] sock_close+0xc3/0x240 [ 225.812144][T11936] ? __pfx_sock_close+0x10/0x10 [ 225.817364][T11936] __fput+0x44f/0xa70 [ 225.821368][T11936] task_work_run+0x1d9/0x270 [ 225.825968][T11936] ? __pfx_task_work_run+0x10/0x10 [ 225.831177][T11936] ? task_work_add+0x395/0x440 [ 225.835956][T11936] ? __pfx_task_work_add+0x10/0x10 [ 225.841100][T11936] get_signal+0x11eb/0x1330 [ 225.845714][T11936] arch_do_signal_or_restart+0xbc/0x830 [ 225.851304][T11936] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 225.857484][T11936] exit_to_user_mode_loop+0x86/0x480 [ 225.862766][T11936] ? rcu_is_watching+0x15/0xb0 [ 225.867551][T11936] do_syscall_64+0x32d/0xf80 [ 225.872162][T11936] ? trace_irq_disable+0x3b/0x150 [ 225.877181][T11936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.883259][T11936] ? clear_bhb_loop+0x40/0x90 [ 225.887945][T11936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.893836][T11936] RIP: 0033:0x7f55a619c799 [ 225.898269][T11936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.917967][T11936] RSP: 002b:00007f55a70f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 225.926409][T11936] RAX: 0000000000000000 RBX: 00007f55a6415fa0 RCX: 00007f55a619c799 [ 225.934409][T11936] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000006 [ 225.942387][T11936] RBP: 00007f55a6232c99 R08: 0000000000000000 R09: 0000000000000000 [ 225.950357][T11936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.958466][T11936] R13: 00007f55a6416038 R14: 00007f55a6415fa0 R15: 00007fff7eb33448 [ 225.966454][T11936] [ 225.969481][T11936] Modules linked in: [ 225.974361][T11936] ---[ end trace 0000000000000000 ]--- [ 225.986877][T11936] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 225.992966][T11936] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 d9 4e 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 226.012925][T11936] RSP: 0018:ffffc90004a6f8e8 EFLAGS: 00010207 [ 226.019116][T11936] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000000000080000 [ 226.027217][T11936] RDX: ffffc90005ae1000 RSI: 00000000000001a9 RDI: 00000000000001aa [ 226.036778][T11936] RBP: ffff88805b2e8a00 R08: ffff8880276b1e80 R09: 0000000000000008 [ 226.045113][T11936] R10: 000000000000000f R11: 0000000000000002 R12: dffffc0000000000 [ 226.053387][T11936] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff9200094df3c [ 226.061483][T11936] FS: 00007f55a70f16c0(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 226.070542][T11936] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.077343][T11936] CR2: 00007fe6c41e9e80 CR3: 00000000302f6000 CR4: 00000000003526f0 [ 226.085372][T11936] Kernel panic - not syncing: Fatal exception [ 226.091622][T11936] Kernel Offset: disabled [ 226.095942][T11936] Rebooting in 86400 seconds..