last executing test programs: 2.141578089s ago: executing program 3 (id=14805): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.021860897s ago: executing program 4 (id=14807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) tee(r0, r0, 0x8, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0900000800270000ebed0000000000000000000500180101000000"], 0x3c}}, 0x884) close(r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x77e7, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x10}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x20000700}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4e) 1.98846215s ago: executing program 3 (id=14808): r0 = socket$inet(0x2, 0x2, 0x5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd700e000000001400000018000180140002006e657464657673696d30000000000000050019000000000308001500f1ffff01050018"], 0x44}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 1.397707326s ago: executing program 4 (id=14815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) 1.367564736s ago: executing program 1 (id=14816): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x150, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x4, 0x8}, 0x0, 0x34ff, 0x2, 0x1, 0xbe}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "7919d8c1a084855cc312bc04f13fdf4bc5cca4"}}]}, 0x150}}, 0x804) 1.273818746s ago: executing program 4 (id=14818): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.225304392s ago: executing program 1 (id=14819): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a020000000014000380080001400000000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xf4}}, 0x8000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/55, &(0x7f0000000080)=0x37) r2 = socket$phonet(0x23, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a310000000044000400200001000a004e2400000044fe800000000000000000000000000014f80f0000200002000a000000fffffffcff02000000000000000000000000000100000000404c81e0bc9a6bf1801a150de0d46473df4b96ee0adf6ca9ff9e3e3db05eb5fe479399cc5f84a20abe9a7d6e7edb9560134a127dcbaaa726bd07efed41e2b161645d5d127d105830df596aeb9a13808bf412b8689605d1e21caf25a0e5d6f2f70c3b"], 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0xf4, r5, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendto$phonet(r2, &(0x7f0000000140)="6b1b7477af85a3e7600b4521fce2e6b549b100a4e25b1e49c7f636412fbed4358a5919a24fb13868e35d067d11af495835334dff3957b3f7e97520e41bc95d8919a5f003321a161e860b5314651e0e2d1765786ef71405ae210eb7f3d423612a9aac7330cc267a9825cd36a1f4e79586269922706715e46dbf339182120ae4deed28b5e3e47cbabbfaa5599ed72a200f729373089cdd3b567cbe732bc65ed9eca812c7de6d2955f16e19c002a5ce3a8259e1b18317017380bf8d2d28af622602e5f914de5336", 0xc6, 0x4020, &(0x7f0000000240)={0x23, 0xfc, 0x1, 0x8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r6, 0x300, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfd}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4004800) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000480)={0x1d, r9}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000000), 0x4) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7b}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xffff, 0x9}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x64}}, 0x1) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="000000000000000009000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.223051249s ago: executing program 0 (id=14820): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) close(r1) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}}, 0x10) 1.097940052s ago: executing program 4 (id=14822): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xe4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x24}}, 0x0) 1.083297315s ago: executing program 0 (id=14823): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000016c0)={@mcast1, 0x0, 0x0, 0x2, 0x0, 0x9, 0xa}, &(0x7f0000001700)=0x20) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x11) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x5, 0x8000, 0xfffffff9, 0xf, 0xfffffe01, 0x1, 0x5, r10}, &(0x7f00000000c0)=0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r11, {0x0, 0x4a614906322818f7}, {0xffff, 0x7}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@loopback, 0x63, r11}) 936.256892ms ago: executing program 2 (id=14824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x1, 0xfff8, 0x7, 0x8, 0x200}, {0x20, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 884.889478ms ago: executing program 1 (id=14825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg$unix(r3, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 831.807044ms ago: executing program 0 (id=14826): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005"], 0xe4}}, 0x0) 758.751292ms ago: executing program 2 (id=14827): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7", 0x48}], 0x1}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x3fe, 0x0, 0x13, {[@window={0xb, 0x3}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x42) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20c0}, 0x0) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 722.313128ms ago: executing program 1 (id=14828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 642.19974ms ago: executing program 3 (id=14829): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="080005000b"], 0x24}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000700)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="30003300c0a00a56eaffffffffff080211000000505050505050730000008c10e9010ff21b52d554122eabbf8af5bbcb100b19e914579fd5ec2ed530b08f2972581ad8759c09208000aa0f709f152f9b9d0622fa405b8ebf90b3de11f395a7a4f6d37e9d908d0581b14681eb2945105bf3648e6c3f82c6a854b8d9c54d3f3185fcc9dda7f6fce4e5659bcef03736d53346d0d23da1bac8921582f82dfcbc98fd60725ab22a45fcfcbe45"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffef8, &(0x7f0000001140)={&(0x7f0000001500)=ANY=[@ANYBLOB="34f30000050000002400128008000100677265001800028006000300010000000400120006000e0000000000", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x8) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x20, 0x20, 0x81, 0x8, {{0x19, 0x4, 0x2, 0x1, 0x64, 0x64, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xb3, 0x1, 0x6, [{@loopback, 0x8}, {@local, 0x8}]}, @generic={0x7, 0x3, "ee"}, @timestamp_addr={0x44, 0x24, 0x56, 0x1, 0x3, [{@empty, 0x10000}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x7fffffff}]}, @timestamp={0x44, 0xc, 0x35, 0x0, 0x9, [0x7, 0x80000000]}, @generic={0x7, 0x3, '\x00'}, @ra={0x94, 0x4}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) (async) shutdown(r9, 0x1) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0x64, 0x4, 0x300, 0x100000c, 0x0, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x1, 0x4, 0x1, 0x9], 0x3, 0x4}, {0x1, [0x4, 0x0, 0x1, 0x4, 0x4, 0x6], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'wlan0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x7f, {0x80000000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 553.954815ms ago: executing program 2 (id=14830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 464.889954ms ago: executing program 1 (id=14831): bpf$MAP_CREATE(0x0, 0x0, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010027bf7000fbdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="3a03219f46ee21a70daa6cf9668ccea32309686e91555b84df980ded2876d28351ac1bc61842761fa2c4a74eba3f1b8417f7b7a8db1a9ed3b8cf20eecc047a4fccc04fb1e61585945491e95c23ad909a05d5bda315a3b09b9223bf8cf8419d4a09794556b772c9464919c5732e13361bf33f6750966810a521885c408dfc15695622fbfd3a16f0bc3b967633c4f6c7ac29d6fd70f6ea2118e7f9f6c8cf210b2ae971e4fa4085d9"], 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xffffffff, 0x3, 0x0, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 422.099613ms ago: executing program 3 (id=14832): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 408.17515ms ago: executing program 4 (id=14833): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) close(r1) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}}, 0x10) 329.67152ms ago: executing program 2 (id=14834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x3c, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}, @TCA_HHF_EVICT_TIMEOUT={0x0, 0x6, 0xdf}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x0, 0x3, 0x80}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xffff95fa}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 261.446123ms ago: executing program 3 (id=14835): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x3fe, 0x0, 0x13, {[@window={0xb, 0x3}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x42) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20c0}, 0x0) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 227.690391ms ago: executing program 0 (id=14836): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0xfffffffd, 0x2000000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x12) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r1, 0x0, 0x0) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 208.258755ms ago: executing program 2 (id=14837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x1, 0xfff8, 0x7, 0x8, 0x200}, {0x20, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 94.404365ms ago: executing program 3 (id=14838): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 93.738707ms ago: executing program 0 (id=14839): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x400, 0x70bd26, 0x5, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x20000041) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x2) 34.403829ms ago: executing program 4 (id=14840): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7", 0x48}], 0x1}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x3fe, 0x0, 0x13, {[@window={0xb, 0x3}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x42) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20c0}, 0x0) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 657.655µs ago: executing program 1 (id=14841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 423.955µs ago: executing program 0 (id=14842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x8, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x6, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 2 (id=14843): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): ous mode [ 698.313451][ T3768] syzkaller1: entered allmulticast mode [ 698.395611][ T3774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13256'. [ 698.563115][ T3784] tipc: Enabling of bearer rejected, already enabled [ 698.686834][ T3788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13261'. [ 699.165520][ T3820] syzkaller0: entered promiscuous mode [ 699.171403][ T3820] syzkaller0: entered allmulticast mode [ 699.491029][ T3839] "syz.4.13281" (3839) uses obsolete ecb(arc4) skcipher [ 699.938389][ T5875] Bluetooth: hci0: command tx timeout [ 700.389296][ T3897] syzkaller0: entered promiscuous mode [ 700.394898][ T3897] syzkaller0: entered allmulticast mode [ 700.616619][ T3910] tipc: Enabled bearer , priority 0 [ 700.624595][ T3910] syzkaller0: entered promiscuous mode [ 700.630589][ T3910] syzkaller0: entered allmulticast mode [ 700.665850][ T3910] tipc: Resetting bearer [ 700.688940][ T3908] tipc: Resetting bearer [ 700.736042][ T3908] tipc: Disabling bearer [ 700.768365][ T3455] net_ratelimit: 42 callbacks suppressed [ 700.768384][ T3455] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 700.808328][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 700.816431][ C1] lec:lec_tx_timeout: lec0 [ 700.821103][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 700.828167][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 700.835570][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 700.898544][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 701.008709][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 701.122684][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 701.194354][ T3929] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 701.248496][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 701.379256][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 701.511568][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 701.628793][ T12] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 702.537106][ T3999] IPv6: NLM_F_CREATE should be specified when creating new route [ 702.836940][ T4009] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 702.855501][ T4020] tipc: Enabling of bearer rejected, already enabled [ 702.970505][ T4024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13340'. [ 702.980351][ T4024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13340'. [ 703.253069][ T4040] netlink: 'syz.0.13344': attribute type 29 has an invalid length. [ 703.272303][ T4040] netlink: 'syz.0.13344': attribute type 29 has an invalid length. [ 703.290481][ T4040] netlink: 500 bytes leftover after parsing attributes in process `syz.0.13344'. [ 704.290318][ T4079] tipc: Enabling of bearer rejected, already enabled [ 704.330231][ T4085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13353'. [ 704.572222][ T4096] netlink: 'syz.3.13358': attribute type 2 has an invalid length. [ 704.615649][ T4096] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13358'. [ 704.645554][ T4096] nbd: must specify at least one socket [ 705.404414][ T4153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13377'. [ 705.484966][ T4156] netlink: 220 bytes leftover after parsing attributes in process `syz.0.13378'. [ 705.500391][ T4156] netlink: 220 bytes leftover after parsing attributes in process `syz.0.13378'. [ 705.848334][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 705.856517][ C1] lec:lec_tx_timeout: lec0 [ 705.862231][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 705.868954][ T59] net_ratelimit: 37 callbacks suppressed [ 705.868970][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 705.998810][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 706.018414][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 706.025586][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 706.108393][ T12] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 706.230929][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 706.349696][ T3439] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 706.480063][ T3439] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 706.598504][ T3439] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 706.740604][ T4230] syzkaller0: entered promiscuous mode [ 706.746424][ T4230] syzkaller0: entered allmulticast mode [ 706.758430][ T3455] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 706.778890][ T4230] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 708.304029][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13438'. [ 708.546237][ T4313] tipc: Enabling of bearer rejected, already enabled [ 708.715073][ T4323] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.13446'. [ 709.651978][ T4368] netlink: 'syz.4.13462': attribute type 1 has an invalid length. [ 709.662816][ T4368] netlink: 'syz.4.13462': attribute type 1 has an invalid length. [ 710.575647][ T4414] tipc: Enabling of bearer rejected, already enabled [ 710.868296][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 710.876404][ C1] lec:lec_tx_timeout: lec0 [ 710.881731][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 710.999655][ T3439] net_ratelimit: 36 callbacks suppressed [ 710.999674][ T3439] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 711.160454][ T4441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13484'. [ 711.220617][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 711.227829][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 711.237307][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 711.337206][ T4448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13487'. [ 711.348788][T31391] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 711.459302][ T12] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 711.533252][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13490'. [ 711.543812][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13490'. [ 711.687740][ T4450] lo speed is unknown, defaulting to 1000 [ 711.698418][ T12] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 711.812282][ T4460] dvmrp1: entered allmulticast mode [ 711.828730][ T12] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 711.948753][ T12] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 711.979702][ T4465] tipc: Enabling of bearer rejected, already enabled [ 712.005847][ T4465] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 712.118372][T31391] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 712.203067][ T4474] syzkaller0: entered promiscuous mode [ 712.208943][ T4474] syzkaller0: entered allmulticast mode [ 712.543494][ T4487] lo: left allmulticast mode [ 712.571481][ T4487] tunl0: left allmulticast mode [ 712.606203][ T4487] gre0: left allmulticast mode [ 712.639494][ T4487] gretap0: left allmulticast mode [ 712.729448][ T4487] erspan0: left allmulticast mode [ 712.764859][ T4487] ip_vti0: left allmulticast mode [ 712.790238][ T4487] ip6_vti0: left allmulticast mode [ 712.807056][ T4487] sit0: left allmulticast mode [ 712.845530][ T4487] ip6tnl0: left allmulticast mode [ 713.004191][ T4487] ip6gre0: left allmulticast mode [ 713.031891][ T4487] ip6gretap0: left allmulticast mode [ 713.139758][ T4487] nlmon0: left allmulticast mode [ 713.170152][ T4487] caif0: left allmulticast mode [ 713.175478][ T4487] batadv0: left allmulticast mode [ 713.187764][ T4487] veth0: left allmulticast mode [ 713.194916][ T4487] veth1: left allmulticast mode [ 713.200300][ T4487] wg0: left allmulticast mode [ 713.205290][ T4487] wg1: left allmulticast mode [ 713.211075][ T4487] wg2: left allmulticast mode [ 713.216002][ T4487] veth0_to_bridge: left allmulticast mode [ 713.222654][ T4487] bridge_slave_0: left allmulticast mode [ 713.228715][ T4487] veth1_to_bridge: left allmulticast mode [ 713.233503][ T4500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13504'. [ 713.234913][ T4487] bridge_slave_1: left allmulticast mode [ 713.252208][ T4487] veth1_to_bond: left allmulticast mode [ 713.260102][ T4487] veth0_to_team: left allmulticast mode [ 713.265890][ T4487] team_slave_0: left allmulticast mode [ 713.271942][ T4487] veth1_to_team: left allmulticast mode [ 713.277749][ T4487] team_slave_1: left allmulticast mode [ 713.284059][ T4487] veth0_to_batadv: left allmulticast mode [ 713.290147][ T4487] batadv_slave_0: left allmulticast mode [ 713.297110][ T4487] veth1_to_batadv: left allmulticast mode [ 713.304357][ T4487] batadv_slave_1: left allmulticast mode [ 713.311490][ T4487] xfrm0: left allmulticast mode [ 713.318576][ T4487] veth1_virt_wifi: left allmulticast mode [ 713.334774][ T4487] veth0_virt_wifi: left allmulticast mode [ 713.344912][ T4487] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 713.352851][ T4487] veth1_vlan: left allmulticast mode [ 713.358861][ T4487] vlan1: left allmulticast mode [ 713.364127][ T4487] macvlan1: left allmulticast mode [ 713.370736][ T4487] ipvlan0: left allmulticast mode [ 713.376022][ T4487] ipvlan1: left allmulticast mode [ 713.382632][ T4487] veth1_macvtap: left allmulticast mode [ 713.388906][ T4487] macvtap0: left allmulticast mode [ 713.394496][ T4487] geneve0: left allmulticast mode [ 713.401468][ T4487] geneve1: left allmulticast mode [ 713.406860][ T4487] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 713.414019][ T4487] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 713.421451][ T4487] geneve2: left allmulticast mode [ 713.426739][ T4487] gretap1: left allmulticast mode [ 713.431976][ T4487] bridge1: left allmulticast mode [ 713.437087][ T4487] bridge2: left allmulticast mode [ 713.442284][ T4487] veth2: left allmulticast mode [ 713.447224][ T4487] veth3: left allmulticast mode [ 713.452314][ T4487] sit1: left allmulticast mode [ 713.457248][ T4487] gre1: left allmulticast mode [ 713.462151][ T4487] batadv1: left allmulticast mode [ 713.467309][ T4487] bond1: left allmulticast mode [ 713.472344][ T4487] syztnl1: left allmulticast mode [ 713.477536][ T4487] mac80211_hwsim hwsim15 wlan2: left allmulticast mode [ 713.485279][ T4487] vxlan0: left allmulticast mode [ 713.490451][ T4487] vlan2: left allmulticast mode [ 713.495310][ T4487] bond0: left allmulticast mode [ 713.500349][ T4487] bond_slave_0: left allmulticast mode [ 713.505833][ T4487] bond_slave_1: left allmulticast mode [ 713.512644][ T4487] syztnl0: left allmulticast mode [ 713.518400][ T4487] veth0_macvtap: left allmulticast mode [ 713.524101][ T4487] macvtap1: left allmulticast mode [ 713.532513][ T4487] geneve3: left allmulticast mode [ 713.552102][ T4487] bond2: left promiscuous mode [ 713.556922][ T4487] bond3: left promiscuous mode [ 713.579176][ T4487] vlan0: left allmulticast mode [ 713.584078][ T4487] veth0_vlan: left allmulticast mode [ 713.590372][ T4487] vlan0: left promiscuous mode [ 713.595840][ T4487] macvtap2: left promiscuous mode [ 713.601485][ T4487] macvtap2: left allmulticast mode [ 713.702165][ T4487] bridge7: left allmulticast mode [ 713.707531][ T4487] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 713.714969][ T4487] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 713.723460][ T4487] veth13: left promiscuous mode [ 713.741085][ T4487] veth15: left promiscuous mode [ 713.803463][T31391] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.832861][T31391] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 713.859145][T31391] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 713.889686][ T4508] syzkaller0 speed is unknown, defaulting to 1000 [ 713.921332][T31391] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.944249][T31391] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 713.969072][T31391] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 713.995968][ T4508] syzkaller0 speed is unknown, defaulting to 1000 [ 714.012957][T31391] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.034232][T31391] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 714.052644][T31391] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 714.066368][ T4508] syzkaller0 speed is unknown, defaulting to 1000 [ 714.074283][T31391] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.093543][T31391] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 714.107486][ T4508] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 714.115600][T31391] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 714.200491][ T4508] syzkaller0 speed is unknown, defaulting to 1000 [ 714.219216][ T4508] syzkaller0 speed is unknown, defaulting to 1000 [ 714.249890][ T4508] syzkaller0 speed is unknown, defaulting to 1000 [ 714.257933][ T4508] syzkaller0 speed is unknown, defaulting to 1000 [ 714.291156][ T4508] syzkaller0 speed is unknown, defaulting to 1000 [ 714.620195][ T4535] lo: entered allmulticast mode [ 714.631218][ T4535] lo: left allmulticast mode [ 714.649332][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13515'. [ 714.933766][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13519'. [ 715.028529][ T4547] netlink: 260 bytes leftover after parsing attributes in process `syz.3.13519'. [ 715.320694][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13526'. [ 716.036736][ T4599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13533'. [ 716.047779][ T4600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13534'. [ 716.427493][ C1] net_ratelimit: 11 callbacks suppressed [ 716.427515][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 716.440348][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 716.451110][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13538'. [ 716.605091][ T4629] tipc: Enabling of bearer rejected, already enabled [ 716.658242][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 716.666285][ C1] lec:lec_tx_timeout: lec0 [ 716.671021][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 717.458442][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 717.465555][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 717.618861][ T4663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13550'. [ 717.753811][ T4675] tipc: Enabling of bearer rejected, already enabled [ 717.955000][ T4685] tipc: Enabling of bearer rejected, already enabled [ 717.964583][ T4684] syzkaller0: entered allmulticast mode [ 717.971590][ T4680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.984795][ T4680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.996607][ T4680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.498510][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 718.505773][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 718.553332][ T4718] tipc: Enabled bearer , priority 0 [ 718.570641][ T4718] syzkaller0: entered promiscuous mode [ 718.576141][ T4718] syzkaller0: entered allmulticast mode [ 718.712418][ T4717] tipc: Resetting bearer [ 718.753477][ T4717] tipc: Disabling bearer [ 718.795514][ T4734] syzkaller1: entered promiscuous mode [ 718.819563][ T4734] syzkaller1: entered allmulticast mode [ 719.127087][ T4754] netlink: 'syz.2.13583': attribute type 27 has an invalid length. [ 719.166316][ T4754] netlink: 'syz.2.13583': attribute type 4 has an invalid length. [ 719.180227][ T4754] netlink: 144 bytes leftover after parsing attributes in process `syz.2.13583'. [ 719.538542][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 719.545688][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 719.576028][ T4778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13592'. [ 720.538094][ T4835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13612'. [ 720.558825][ T4835] batadv0 (unregistering): left promiscuous mode [ 720.578387][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 720.585575][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 720.975830][ T4849] syzkaller0: entered promiscuous mode [ 720.981828][ T4849] syzkaller0: entered allmulticast mode [ 721.176080][ T4858] lo: entered allmulticast mode [ 721.181929][ T4858] tunl0: entered allmulticast mode [ 721.198685][ T4858] gre0: entered allmulticast mode [ 721.353800][ T4858] erspan0: entered allmulticast mode [ 721.389391][ T4858] ip_vti0: entered allmulticast mode [ 721.413135][ T4858] ip6_vti0: entered allmulticast mode [ 721.438893][ T4858] sit0: entered allmulticast mode [ 721.480444][ T4858] ip6tnl0: entered allmulticast mode [ 721.530905][ T4858] ip6gre0: entered allmulticast mode [ 721.541732][ T4858] ip6gretap0: entered allmulticast mode [ 721.554654][ T4858] bond0: left promiscuous mode [ 721.559768][ T4858] bond_slave_0: left promiscuous mode [ 721.565562][ T4858] bond_slave_1: left promiscuous mode [ 721.571629][ T4858] bond0: entered allmulticast mode [ 721.576912][ T4858] bond_slave_0: entered allmulticast mode [ 721.582995][ T4858] bond_slave_1: entered allmulticast mode [ 721.606696][ T4858] team0: entered allmulticast mode [ 721.613049][ T4858] team_slave_0: entered allmulticast mode [ 721.618408][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 721.619112][ T4858] team_slave_1: entered allmulticast mode [ 721.625958][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 721.639447][ T4858] nlmon0: entered allmulticast mode [ 721.649805][ T4858] caif0: entered allmulticast mode [ 721.655333][ T4858] veth0: entered allmulticast mode [ 721.665364][ T4858] veth1: entered allmulticast mode [ 721.675980][ T4858] wg0: entered allmulticast mode [ 721.698338][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 721.706376][ C1] lec:lec_tx_timeout: lec0 [ 721.711542][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 721.719148][ T4858] wg1: entered allmulticast mode [ 721.729028][ T4858] wg2: entered allmulticast mode [ 721.735978][ T4858] veth0_to_bridge: entered allmulticast mode [ 721.748892][ T4858] bridge_slave_0: entered allmulticast mode [ 721.766712][ T4858] veth1_to_bridge: entered allmulticast mode [ 721.777567][ T4858] bridge_slave_1: entered allmulticast mode [ 721.786467][ T4858] veth0_to_bond: entered allmulticast mode [ 721.797246][ T4858] veth1_to_bond: entered allmulticast mode [ 721.808780][ T4858] veth0_to_team: entered allmulticast mode [ 721.820160][ T4858] veth1_to_team: entered allmulticast mode [ 721.831931][ T4858] veth0_to_batadv: entered allmulticast mode [ 721.841488][ T4858] batadv_slave_0: entered allmulticast mode [ 721.850412][ T4858] xfrm0: entered allmulticast mode [ 721.857998][ T4858] veth0_to_hsr: entered allmulticast mode [ 721.875445][ T4858] hsr_slave_0: entered allmulticast mode [ 721.895390][ T4858] veth1_to_hsr: entered allmulticast mode [ 721.905819][ T4858] hsr_slave_1: entered allmulticast mode [ 721.915161][ T4858] hsr0: entered allmulticast mode [ 721.925471][ T4858] veth1_virt_wifi: entered allmulticast mode [ 721.936633][ T4858] veth0_virt_wifi: entered allmulticast mode [ 721.943866][ T4858] net veth1_virt_wifi .: entered allmulticast mode [ 721.951145][ T4858] veth1_vlan: entered allmulticast mode [ 721.960934][ T4858] veth0_vlan: entered allmulticast mode [ 721.979557][ T4858] ªªªªªª: entered allmulticast mode [ 721.985051][ T4858] vlan1: entered allmulticast mode [ 721.991846][ T4858] macvlan0: entered allmulticast mode [ 722.032111][ T4858] macvlan1: entered allmulticast mode [ 722.070743][ T4858] ipvlan0: entered allmulticast mode [ 722.076443][ T4858] ipvlan1: entered allmulticast mode [ 722.087533][ T4858] veth1_macvtap: entered allmulticast mode [ 722.097392][ T4858] veth0_macvtap: entered allmulticast mode [ 722.112074][ T4858] macvtap0: entered allmulticast mode [ 722.139763][ T4858] geneve0: entered allmulticast mode [ 722.152575][ T4858] geneve1: entered allmulticast mode [ 722.165073][ T4858] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 722.182473][ T4858] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 722.225709][ T4858] vxcan2: entered allmulticast mode [ 722.234550][ T4858] vxcan3: entered allmulticast mode [ 722.243824][ T4858] bridge1: entered allmulticast mode [ 722.249425][ T4858] veth2: entered allmulticast mode [ 722.255084][ T4858] veth3: left promiscuous mode [ 722.266008][ T4858] bridge2: entered allmulticast mode [ 722.271627][ T4858] vxcan4: entered allmulticast mode [ 722.277241][ T4858] ip6tnl1: entered allmulticast mode [ 722.286036][ T4858] xfrm1: entered allmulticast mode [ 722.291718][ T4858] veth4: entered allmulticast mode [ 722.297028][ T4858] veth5: entered allmulticast mode [ 722.302570][ T4858] syztnl2: entered allmulticast mode [ 722.307999][ T4858] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 722.315664][ T4858] erspan1: entered allmulticast mode [ 722.321837][ T4858] sit1: entered allmulticast mode [ 722.331496][ T4858] gretap1: left promiscuous mode [ 722.340653][ T4858] ip6gre1: entered allmulticast mode [ 722.350262][ T4858] bridge3: entered allmulticast mode [ 722.355832][ T4858] : entered allmulticast mode [ 722.361982][ T4858] syztnl0: entered allmulticast mode [ 722.367513][ T4858] ip6tnl2: entered allmulticast mode [ 722.373782][ T4858] mac80211_hwsim hwsim6 pim6reg0: entered allmulticast mode [ 722.381760][ T4858] ip6tnl3: entered allmulticast mode [ 722.387354][ T4858] bond1: entered allmulticast mode [ 722.392747][ T4858] macvlan2: entered allmulticast mode [ 722.399511][ T4858] ipvlan2: entered allmulticast mode [ 722.408513][ T4858] macvlan3: entered allmulticast mode [ 722.414215][ T4858] ip6tnl4: entered allmulticast mode [ 722.421521][ T4858] macsec1: entered allmulticast mode [ 722.427053][ T4858] gretap2: left promiscuous mode [ 722.436626][ T4858] @: entered allmulticast mode [ 722.449431][ T4858] ;: entered allmulticast mode [ 722.454468][ T4858] ipip0: entered allmulticast mode [ 722.460090][ T4858] ip6gre2: entered allmulticast mode [ 722.469734][ T4858] ip6erspan0: entered allmulticast mode [ 722.475891][ T4858] gtp0: entered allmulticast mode [ 722.485928][ T4858] bond2: entered allmulticast mode [ 722.492706][ T4858] gretap0: entered allmulticast mode [ 722.502052][ T4858] netdevsim netdevsim0 eth0: entered allmulticast mode [ 722.509305][ T4858] netdevsim netdevsim0 eth1: entered allmulticast mode [ 722.517433][ T4858] netdevsim netdevsim0 eth2: entered allmulticast mode [ 722.524699][ T4858] netdevsim netdevsim0 eth3: entered allmulticast mode [ 722.531818][ T4858] bond3: entered allmulticast mode [ 722.537023][ T4858] veth6: entered allmulticast mode [ 722.542541][ T4858] veth7: entered allmulticast mode [ 722.548629][ T4858] sit2: entered allmulticast mode [ 722.574107][ T4858] geneve2: entered allmulticast mode [ 722.582601][ T4858] bond4: entered allmulticast mode [ 722.588795][ T4858] bond5: entered allmulticast mode [ 722.593996][ T4858] bridge4: entered allmulticast mode [ 722.606923][ T4858] ip6tnl5: entered allmulticast mode [ 722.612607][ T4858] veth8: entered allmulticast mode [ 722.617985][ T4858] veth9: entered allmulticast mode [ 722.624928][ T4858] bridge5: entered allmulticast mode [ 722.636508][ T4858] bridge6: entered allmulticast mode [ 722.650138][ T4858] sit3: entered allmulticast mode [ 722.656913][ T4858] bridge0: entered allmulticast mode [ 722.662520][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 722.662707][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 722.682339][ T4858] veth10: entered allmulticast mode [ 722.687958][ T4858] veth11: entered allmulticast mode [ 722.694422][ T4858] bridge7: entered allmulticast mode [ 722.704162][ T4858] veth12: entered allmulticast mode [ 722.709888][ T4858] veth13: entered allmulticast mode [ 722.715501][ T4858] veth14: entered allmulticast mode [ 722.721154][ T4858] veth15: entered allmulticast mode [ 722.726786][ T4858] veth16: entered allmulticast mode [ 722.732811][ T4858] veth17: entered allmulticast mode [ 722.739086][ T4858] veth18: entered allmulticast mode [ 722.744475][ T4858] veth19: entered allmulticast mode [ 722.751031][ T4858] veth20: entered allmulticast mode [ 722.756410][ T4858] veth21: entered allmulticast mode [ 722.765655][ T4858] bond6: left promiscuous mode [ 722.771706][ T4858] bridge8: left promiscuous mode [ 722.776849][ T4858] bond6: entered allmulticast mode [ 722.782365][ T4858] bridge8: entered allmulticast mode [ 722.808736][ T4858] bond7: entered allmulticast mode [ 722.814820][ T4858] gre1: entered allmulticast mode [ 722.823652][ T4858] gre2: entered allmulticast mode [ 722.833801][ T4858] bridge9: entered allmulticast mode [ 722.849249][ T4858] bridge10: entered allmulticast mode [ 722.860219][ T4858] bridge11: entered allmulticast mode [ 722.872712][ T4858] bond8: entered allmulticast mode [ 722.877872][ T4858] veth23: entered allmulticast mode [ 722.893849][ T4858] veth22: entered allmulticast mode [ 722.900485][ T4858] veth23: left promiscuous mode [ 722.907954][ T4858] bridge12: entered allmulticast mode [ 722.919059][ T4858] bridge13: entered allmulticast mode [ 722.930590][ T4858] bridge14: entered allmulticast mode [ 722.940795][ T4858] bridge15: entered allmulticast mode [ 722.956234][ T4858] gre3: entered allmulticast mode [ 723.005142][ T4858] vxlan0: entered allmulticast mode [ 723.019681][ T4858] bond9: entered allmulticast mode [ 723.027660][ T4858] ip6gre3: entered allmulticast mode [ 723.036077][ T4858] veth24: entered allmulticast mode [ 723.041768][ T4858] veth25: entered allmulticast mode [ 723.047250][ T4858] veth26: entered allmulticast mode [ 723.052738][ T4858] veth27: entered allmulticast mode [ 723.059414][ T4858] bridge16: entered allmulticast mode [ 723.068837][ T4858] veth28: entered allmulticast mode [ 723.074301][ T4858] veth29: entered allmulticast mode [ 723.080480][ T4858] bond10: entered allmulticast mode [ 723.089317][ T4858] bond11: entered allmulticast mode [ 723.094551][ T4858] geneve3: entered allmulticast mode [ 723.111022][ T4858] bridge17: entered allmulticast mode [ 723.119888][ T4858] bond12: entered allmulticast mode [ 723.125350][ T4858] gretap3: entered allmulticast mode [ 723.131818][ T4858] gretap3: left promiscuous mode [ 723.146321][ T4858] gre4: entered allmulticast mode [ 723.207207][ T4858] bond13: entered allmulticast mode [ 723.247783][ T4858] vlan0: left promiscuous mode [ 723.258562][ T4858] bond14: left promiscuous mode [ 723.263677][ T4858] gretap4: left promiscuous mode [ 723.274332][ T4858] bond15: entered allmulticast mode [ 723.279822][ T4858] ip6gretap1: entered allmulticast mode [ 723.285518][ T4858] veth31: entered allmulticast mode [ 723.293963][ T4858] veth30: entered allmulticast mode [ 723.302162][ T4858] veth31: left promiscuous mode [ 723.308919][ T4858] veth32: entered allmulticast mode [ 723.314398][ T4858] veth33: entered allmulticast mode [ 723.319836][ T4858] syztnl1: entered allmulticast mode [ 723.325289][ T4858] gtp1: entered allmulticast mode [ 723.331191][ T4858] gre5: entered allmulticast mode [ 723.366772][ T4869] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 723.408188][ T4884] netlink: 'syz.0.13625': attribute type 1 has an invalid length. [ 723.452086][ T36] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.479211][ T36] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.487940][ T36] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 723.497025][ T36] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.506018][ T36] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.514583][ T36] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 723.647561][ T4884] 8021q: adding VLAN 0 to HW filter on device bond16 [ 723.671224][ T36] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.688772][ T36] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.698551][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 723.705643][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 723.708243][ T36] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 723.721130][ T36] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.729535][ T36] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.737938][ T36] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 723.877120][ T4903] tipc: Enabling of bearer rejected, failed to enable media [ 724.411263][ T4934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13640'. [ 724.494282][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13640'. [ 724.738422][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 724.745606][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 725.101845][ T4948] tipc: Enabled bearer , priority 0 [ 725.139843][ T4948] syzkaller0: entered promiscuous mode [ 725.145716][ T4954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13648'. [ 725.154239][ T4948] syzkaller0: entered allmulticast mode [ 725.207464][ T4947] tipc: Resetting bearer [ 725.259299][ T4947] tipc: Disabling bearer [ 725.495714][ T4970] tipc: Enabling of bearer rejected, already enabled [ 725.657870][ T4977] tipc: Enabling of bearer rejected, failed to enable media [ 725.778476][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 725.785635][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 726.316122][ T5008] tipc: Enabling of bearer rejected, already enabled [ 726.382683][ T5006] syzkaller0: entered promiscuous mode [ 726.388345][ T5006] syzkaller0: entered allmulticast mode [ 726.718246][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 726.726324][ C1] lec:lec_tx_timeout: lec0 [ 726.731987][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 726.754852][ T5014] netlink: 'syz.3.13665': attribute type 39 has an invalid length. [ 726.823637][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 726.830864][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 727.858481][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 727.865554][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 728.908441][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 728.915483][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 729.083806][ T4953] Set syz1 is full, maxelem 65536 reached [ 729.156501][ T5025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13667'. [ 729.263236][ T5019] tipc: Enabling of bearer rejected, already enabled [ 729.272918][ T5020] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 729.281264][ T5020] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 729.377325][ T5025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13667'. [ 729.528073][ T5037] tipc: Enabling of bearer rejected, already enabled [ 729.542797][ T5032] tipc: Enabling of bearer rejected, already enabled [ 729.616372][ T5034] netlink: 156 bytes leftover after parsing attributes in process `syz.4.13670'. [ 729.659929][ T5045] tipc: Enabling of bearer rejected, already enabled [ 729.682870][ T5032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13669'. [ 729.837881][ T5055] netlink: 'syz.3.13675': attribute type 8 has an invalid length. [ 729.867325][ T5061] tipc: Enabling of bearer rejected, already enabled [ 729.938380][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 729.945474][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 730.001383][ T5065] tipc: Enabling of bearer rejected, already enabled [ 730.170019][ T5078] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 730.301284][ T5087] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 730.409772][ T5094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13687'. [ 730.519711][ T5097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13691'. [ 730.523670][ T5082] lo speed is unknown, defaulting to 1000 [ 730.596297][ T5099] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 730.604040][ T5101] netlink: 'syz.1.13693': attribute type 1 has an invalid length. [ 730.673729][ T5101] bond13 (unregistering): Released all slaves [ 730.763490][ T5106] ip6tnl3: entered promiscuous mode [ 730.787824][ T5106] ip6tnl3: entered allmulticast mode [ 730.792726][ T5105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.846580][ T5082] syzkaller0 speed is unknown, defaulting to 1000 [ 730.949915][ T5112] tipc: Enabling of bearer rejected, already enabled [ 731.031278][ T5116] tipc: Enabling of bearer rejected, already enabled [ 731.449939][ T5136] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13703'. [ 731.738260][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 731.746351][ C1] lec:lec_tx_timeout: lec0 [ 731.751365][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 731.959216][ T5162] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 732.000128][ T5162] tipc: Resetting bearer [ 732.010524][ T5165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13714'. [ 732.028395][ C1] net_ratelimit: 2 callbacks suppressed [ 732.028411][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 732.041105][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 732.237759][ T5186] netlink: 'syz.0.13722': attribute type 10 has an invalid length. [ 732.533688][ T5206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13731'. [ 732.729526][ T5218] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 732.779642][ T5222] openvswitch: netlink: Unknown key attributes 2 [ 732.831122][ T5225] Set syz1 is full, maxelem 6117 reached [ 733.058447][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 733.065551][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 733.613916][ T5280] netem: change failed [ 734.098409][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 734.105559][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 734.139352][ T5313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13781'. [ 734.217699][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13782'. [ 734.233084][ T5318] bridge_slave_1: default FDB implementation only supports local addresses [ 734.249941][ T5308] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13778'. [ 734.451438][ T5325] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 734.469839][ T5325] tipc: Resetting bearer [ 735.069621][ T5359] tipc: Enabling of bearer rejected, already enabled [ 735.138442][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 735.145846][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 736.349398][ T5448] netlink: 96 bytes leftover after parsing attributes in process `syz.3.13837'. [ 736.366123][ T5449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 736.768565][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 736.776663][ C1] lec:lec_tx_timeout: lec0 [ 736.781667][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 737.218500][ C1] net_ratelimit: 2 callbacks suppressed [ 737.218520][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 737.231402][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 737.672969][ T5534] tipc: Enabling of bearer rejected, already enabled [ 737.733239][ T5532] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13869'. [ 738.262638][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 738.269920][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 739.122692][ T5569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13877'. [ 739.298451][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 739.305720][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 739.335302][ T5581] tipc: Enabling of bearer rejected, already enabled [ 739.473514][ T5592] netlink: 'syz.4.13890': attribute type 1 has an invalid length. [ 739.509883][ T5592] 8021q: adding VLAN 0 to HW filter on device bond6 [ 739.570671][ T5592] 8021q: adding VLAN 0 to HW filter on device bond6 [ 739.577844][ T5592] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 739.590979][ T5592] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 739.920562][ T5621] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13900'. [ 739.931056][ T5621] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ0 [ 740.338471][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 740.345791][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 740.642324][ T5660] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13910'. [ 740.728020][ T5668] syzkaller0: entered promiscuous mode [ 740.753654][ T5668] syzkaller0: entered allmulticast mode [ 740.799586][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13915'. [ 741.098079][ T5697] netlink: 'syz.4.13920': attribute type 39 has an invalid length. [ 741.388509][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 741.395806][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 741.617188][ T5722] netem: change failed [ 741.788500][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 741.796590][ C1] lec:lec_tx_timeout: lec0 [ 741.801535][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 741.964695][ T5738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13936'. [ 742.180687][ T5753] tipc: Enabling of bearer rejected, already enabled [ 742.230442][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13944'. [ 742.418445][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 742.425718][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 742.614525][ T5772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13949'. [ 742.883631][ T5784] tipc: Enabled bearer , priority 0 [ 742.902392][ T5784] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 742.926965][ T5788] netlink: 'syz.2.13957': attribute type 1 has an invalid length. [ 743.035537][ T5788] 8021q: adding VLAN 0 to HW filter on device bond12 [ 743.053639][ T5791] tipc: Resetting bearer [ 743.082716][ T5792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13958'. [ 743.158741][ T5783] tipc: Disabling bearer [ 743.376428][ T5815] tipc: Enabling of bearer rejected, already enabled [ 743.463520][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 743.470815][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 743.774941][ T5833] lo: entered allmulticast mode [ 743.783100][ T5833] lo: left allmulticast mode [ 744.434077][ T5857] netlink: 156 bytes leftover after parsing attributes in process `syz.1.13983'. [ 744.498511][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 744.505807][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 745.179631][ T5902] netem: change failed [ 745.538792][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 745.546088][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 745.625454][ T5958] scsi_nl_rcv_msg: discarding partial skb [ 746.525260][ T6013] netem: change failed [ 746.578449][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 746.585783][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 746.710261][ T6024] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 746.806219][ T6028] tipc: Enabling of bearer rejected, already enabled [ 746.818352][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 746.826458][ C1] lec:lec_tx_timeout: lec0 [ 746.831643][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 746.900642][ T6032] lo: entered allmulticast mode [ 746.910795][ T6031] lo: left allmulticast mode [ 747.065507][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 747.073557][ T6041] netlink: 'syz.2.14028': attribute type 1 has an invalid length. [ 747.157643][ T6041] 8021q: adding VLAN 0 to HW filter on device bond13 [ 747.210811][ T6056] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 747.317617][ T6062] tipc: Enabling of bearer rejected, already enabled [ 747.376690][ T6067] tipc: Enabling of bearer rejected, already enabled [ 747.392827][ T6067] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 747.578072][ T6075] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 747.596474][ T43] lo speed is unknown, defaulting to 1000 [ 747.629274][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 747.636618][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 747.975754][ T6094] tipc: Enabling of bearer rejected, already enabled [ 748.002851][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14051'. [ 748.230522][ T6107] syzkaller0: entered promiscuous mode [ 748.241359][ T6107] syzkaller0: entered allmulticast mode [ 748.362809][ T6120] tipc: Enabling of bearer rejected, already enabled [ 748.649440][ T6133] netem: change failed [ 748.658563][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 748.665860][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 748.771992][ T6140] tipc: Enabling of bearer rejected, already enabled [ 748.836180][ T6142] wg2: left allmulticast mode [ 748.896401][ T6142] wg2: entered promiscuous mode [ 748.902204][ T6142] wg2: entered allmulticast mode [ 749.218343][ T5875] Bluetooth: hci0: command tx timeout [ 749.282850][ T6171] netlink: 'syz.1.14084': attribute type 1 has an invalid length. [ 749.344512][ T6171] 8021q: adding VLAN 0 to HW filter on device bond14 [ 749.398881][ T6180] syzkaller0: entered promiscuous mode [ 749.404830][ T6180] syzkaller0: entered allmulticast mode [ 749.464349][ T6171] bond14: (slave gretap5): making interface the new active one [ 749.476123][ T6171] bond14: (slave gretap5): Enslaving as an active interface with an up link [ 749.698599][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 749.705917][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 749.753777][ T6198] tipc: Enabled bearer , priority 0 [ 749.771869][ T6198] syzkaller0: entered promiscuous mode [ 749.789404][ T6198] syzkaller0: entered allmulticast mode [ 749.821584][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14091'. [ 749.831134][ T6181] lo speed is unknown, defaulting to 1000 [ 749.848828][ T6198] tipc: Resetting bearer [ 749.864251][ T6197] tipc: Resetting bearer [ 749.901949][ T6197] tipc: Disabling bearer [ 750.021371][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14094'. [ 750.022051][ T6203] vlan5: entered promiscuous mode [ 750.035927][ T6203] bond15: entered promiscuous mode [ 750.041672][ T6203] vlan5: entered allmulticast mode [ 750.047134][ T6203] bond15: entered allmulticast mode [ 750.066528][ T6206] bond15: (slave geneve5): refused to change device type [ 750.120748][ T6210] 8021q: adding VLAN 0 to HW filter on device bond17 [ 750.207042][ T6211] bond17: (slave macvlan4): Enslaving as a backup interface with a down link [ 750.259988][ T6181] syzkaller0 speed is unknown, defaulting to 1000 [ 750.401337][ T6225] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 750.738478][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 750.745769][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 750.811407][ T6243] tipc: Enabling of bearer rejected, already enabled [ 750.823225][ T6243] netem: change failed [ 751.037291][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14113'. [ 751.531066][ T6285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14126'. [ 751.838586][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 751.846623][ C1] lec:lec_tx_timeout: lec0 [ 751.851277][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 751.944711][ T6312] ip6gre1: entered allmulticast mode [ 752.003992][ T6315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14139'. [ 752.015484][ T6317] netlink: 'syz.1.14137': attribute type 10 has an invalid length. [ 752.091813][ T6318] syzkaller0: entered promiscuous mode [ 752.109449][ T6318] syzkaller0: entered allmulticast mode [ 752.188846][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14139'. [ 752.251946][ T6328] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 752.485208][ T6344] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 752.507868][ T6351] netlink: 'syz.0.14152': attribute type 1 has an invalid length. [ 752.567588][ T6351] 8021q: adding VLAN 0 to HW filter on device bond18 [ 752.805758][ T6366] tipc: Enabled bearer , priority 0 [ 752.818446][ C1] net_ratelimit: 2 callbacks suppressed [ 752.818463][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 752.831392][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 752.850239][ T6371] syzkaller0: entered promiscuous mode [ 752.855859][ T6371] syzkaller0: entered allmulticast mode [ 752.863350][ T6366] syzkaller0: entered promiscuous mode [ 752.870730][ T6366] syzkaller0: entered allmulticast mode [ 753.019848][ T6366] tipc: Resetting bearer [ 753.052753][ T6364] tipc: Resetting bearer [ 753.091622][ T6364] tipc: Disabling bearer [ 753.414160][ T6373] lo speed is unknown, defaulting to 1000 [ 753.638348][ T6373] syzkaller0 speed is unknown, defaulting to 1000 [ 753.815074][ T6411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14179'. [ 753.858627][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 753.865901][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 754.484860][ T6445] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14193'. [ 754.898460][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 754.905670][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 755.393160][ T6482] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14208'. [ 755.948467][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 755.955764][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 756.129857][ T6535] tipc: Enabling of bearer rejected, failed to enable media [ 756.210986][ T6542] syzkaller0: entered promiscuous mode [ 756.216512][ T6542] syzkaller0: entered allmulticast mode [ 756.710494][ T6572] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 756.749870][ T6575] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14247'. [ 756.771734][ T6576] netlink: 96 bytes leftover after parsing attributes in process `syz.2.14246'. [ 756.868631][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 756.876743][ C1] lec:lec_tx_timeout: lec0 [ 756.882268][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 756.962305][ T6584] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14249'. [ 756.978626][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 756.985950][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 757.080719][ T6587] syzkaller0: entered promiscuous mode [ 757.094584][ T6587] syzkaller0: entered allmulticast mode [ 757.423149][ T6607] tipc: Enabling of bearer rejected, failed to enable media [ 757.438324][ T6611] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14261'. [ 757.440392][ T6607] syzkaller0: entered promiscuous mode [ 757.488858][ T6607] syzkaller0: entered allmulticast mode [ 757.968392][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14270'. [ 758.018463][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 758.025870][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 758.065211][ T6643] syzkaller0: entered promiscuous mode [ 758.074172][ T6643] syzkaller0: entered allmulticast mode [ 758.141620][ T6649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14274'. [ 758.496621][ T6623] lo speed is unknown, defaulting to 1000 [ 758.523632][ T6669] tipc: Enabling of bearer rejected, failed to enable media [ 758.761817][ T6681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14284'. [ 758.986727][ T6691] syzkaller0: entered promiscuous mode [ 758.994656][ T6691] syzkaller0: entered allmulticast mode [ 759.025824][ T6691] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 759.058484][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 759.065846][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 759.164969][ T6623] syzkaller0 speed is unknown, defaulting to 1000 [ 759.574503][ T6719] tipc: Enabling of bearer rejected, failed to enable media [ 760.033162][ T6746] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 760.098566][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 760.105828][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 760.162742][ T6750] netlink: 'syz.4.14309': attribute type 1 has an invalid length. [ 760.370845][ T6750] 8021q: adding VLAN 0 to HW filter on device bond7 [ 760.487676][ T6756] bond7: (slave geneve2): making interface the new active one [ 760.561254][ T6756] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 760.590579][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.614865][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.641996][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.816190][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.009606][ T6784] tipc: Enabling of bearer rejected, already enabled [ 761.094414][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14322'. [ 761.138449][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 761.145759][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 761.218162][ T6796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.454129][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14333'. [ 761.562965][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14332'. [ 761.632789][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14337'. [ 761.930812][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14344'. [ 762.091112][ T6852] tipc: Enabling of bearer rejected, failed to enable media [ 762.111194][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14350'. [ 762.139366][ T6855] netlink: 'syz.4.14347': attribute type 39 has an invalid length. [ 762.178468][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 762.185778][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 762.350566][ T6869] netlink: 'syz.3.14357': attribute type 27 has an invalid length. [ 762.361703][ T6866] tipc: Enabled bearer , priority 0 [ 762.376661][ T6869] netlink: 'syz.3.14357': attribute type 4 has an invalid length. [ 762.389137][ T6866] syzkaller0: entered promiscuous mode [ 762.394629][ T6866] syzkaller0: entered allmulticast mode [ 762.408709][ T6869] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14357'. [ 762.410712][ T6866] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 762.436989][ T6871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14358'. [ 762.509842][ T6874] tipc: Resetting bearer [ 762.538069][ T6863] tipc: Resetting bearer [ 762.629077][ T6863] tipc: Disabling bearer [ 762.658222][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 762.666380][ C1] lec:lec_tx_timeout: lec0 [ 762.671815][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 762.961574][ T6887] tipc: Enabling of bearer rejected, failed to enable media [ 762.995843][ T6887] syzkaller0: entered promiscuous mode [ 763.018323][ T6887] syzkaller0: entered allmulticast mode [ 763.102588][ T6897] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14367'. [ 763.218487][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 763.225812][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 763.291538][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14373'. [ 763.553583][ T6925] tipc: Enabling of bearer rejected, already enabled [ 763.657037][ T6933] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 764.003868][ T6954] siw: device registration error -23 [ 764.258513][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 764.265949][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 764.456001][ T6972] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 764.484121][ T6975] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 764.718881][ T6986] tipc: Enabling of bearer rejected, already enabled [ 764.865371][ T6991] syzkaller0: entered promiscuous mode [ 764.884351][ T6991] syzkaller0: entered allmulticast mode [ 764.945737][ T7000] tipc: Enabling of bearer rejected, failed to enable media [ 765.229879][ T7015] tipc: Enabling of bearer rejected, already enabled [ 765.298535][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 765.305880][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 765.351335][ T7002] lo speed is unknown, defaulting to 1000 [ 765.552575][ T7002] syzkaller0 speed is unknown, defaulting to 1000 [ 765.882602][ T7042] syzkaller0: entered promiscuous mode [ 765.890461][ T7042] syzkaller0: entered allmulticast mode [ 766.175006][ T7058] __nla_validate_parse: 6 callbacks suppressed [ 766.175025][ T7058] netlink: 88 bytes leftover after parsing attributes in process `syz.3.14430'. [ 766.348500][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 766.355892][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 766.556804][ T7069] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14435'. [ 766.620156][ T7075] FAULT_INJECTION: forcing a failure. [ 766.620156][ T7075] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 766.639777][ T7075] CPU: 1 UID: 0 PID: 7075 Comm: syz.1.14437 Not tainted syzkaller #0 PREEMPT(full) [ 766.639803][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 766.639816][ T7075] Call Trace: [ 766.639824][ T7075] [ 766.639833][ T7075] dump_stack_lvl+0x189/0x250 [ 766.639859][ T7075] ? __pfx____ratelimit+0x10/0x10 [ 766.639889][ T7075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.639908][ T7075] ? __pfx__printk+0x10/0x10 [ 766.639934][ T7075] ? __might_fault+0xb0/0x130 [ 766.639967][ T7075] should_fail_ex+0x414/0x560 [ 766.639993][ T7075] _copy_from_user+0x2d/0xb0 [ 766.640023][ T7075] ___sys_sendmsg+0x158/0x2a0 [ 766.640056][ T7075] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.640122][ T7075] ? __fget_files+0x2a/0x420 [ 766.640146][ T7075] ? __fget_files+0x3a0/0x420 [ 766.640181][ T7075] __x64_sys_sendmsg+0x19b/0x260 [ 766.640213][ T7075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 766.640253][ T7075] ? __pfx_ksys_write+0x10/0x10 [ 766.640278][ T7075] ? do_syscall_64+0xbe/0xfa0 [ 766.640343][ T7075] do_syscall_64+0xfa/0xfa0 [ 766.640381][ T7075] ? lockdep_hardirqs_on+0x9c/0x150 [ 766.640414][ T7075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.640435][ T7075] ? clear_bhb_loop+0x60/0xb0 [ 766.640462][ T7075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.640483][ T7075] RIP: 0033:0x7f50b4f8eec9 [ 766.640503][ T7075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.640522][ T7075] RSP: 002b:00007f50b5dc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.640546][ T7075] RAX: ffffffffffffffda RBX: 00007f50b51e5fa0 RCX: 00007f50b4f8eec9 [ 766.640562][ T7075] RDX: 0000000004028044 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 766.640576][ T7075] RBP: 00007f50b5dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 766.640590][ T7075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.640602][ T7075] R13: 00007f50b51e6038 R14: 00007f50b51e5fa0 R15: 00007fff3dd53428 [ 766.640639][ T7075] [ 767.061293][ T7085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14440'. [ 767.198964][ T7091] FAULT_INJECTION: forcing a failure. [ 767.198964][ T7091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.202525][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14444'. [ 767.232956][ T7091] CPU: 0 UID: 0 PID: 7091 Comm: syz.0.14443 Not tainted syzkaller #0 PREEMPT(full) [ 767.232981][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 767.232992][ T7091] Call Trace: [ 767.232999][ T7091] [ 767.233007][ T7091] dump_stack_lvl+0x189/0x250 [ 767.233031][ T7091] ? __pfx____ratelimit+0x10/0x10 [ 767.233058][ T7091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 767.233077][ T7091] ? __pfx__printk+0x10/0x10 [ 767.233096][ T7091] ? __might_fault+0xb0/0x130 [ 767.233127][ T7091] should_fail_ex+0x414/0x560 [ 767.233151][ T7091] _copy_from_user+0x2d/0xb0 [ 767.233179][ T7091] __sys_bind+0x199/0x3e0 [ 767.233204][ T7091] ? __pfx___sys_bind+0x10/0x10 [ 767.233238][ T7091] ? __pfx_ksys_write+0x10/0x10 [ 767.233264][ T7091] __x64_sys_bind+0x7a/0x90 [ 767.233285][ T7091] do_syscall_64+0xfa/0xfa0 [ 767.233307][ T7091] ? lockdep_hardirqs_on+0x9c/0x150 [ 767.233331][ T7091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.233345][ T7091] ? clear_bhb_loop+0x60/0xb0 [ 767.233363][ T7091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.233377][ T7091] RIP: 0033:0x7f5558b8eec9 [ 767.233391][ T7091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.233403][ T7091] RSP: 002b:00007f5559ad3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 767.233419][ T7091] RAX: ffffffffffffffda RBX: 00007f5558de5fa0 RCX: 00007f5558b8eec9 [ 767.233431][ T7091] RDX: 0000000000000018 RSI: 00002000000014c0 RDI: 0000000000000004 [ 767.233440][ T7091] RBP: 00007f5559ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 767.233449][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.233458][ T7091] R13: 00007f5558de6038 R14: 00007f5558de5fa0 R15: 00007ffd9d6667a8 [ 767.233483][ T7091] [ 767.398549][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 767.424668][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 767.483816][ T7095] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 767.698246][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 767.706286][ C1] lec:lec_tx_timeout: lec0 [ 767.711342][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 767.753255][ T7114] nbd: nbd1 already in use [ 767.765019][ T7114] bridge_slave_0: entered allmulticast mode [ 767.783430][ T7097] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14448'. [ 767.800021][ T7118] netlink: 'syz.4.14452': attribute type 12 has an invalid length. [ 767.838039][ T7118] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14452'. [ 767.887485][ T7113] siw: device registration error -23 [ 767.943654][ T7117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.008683][ T7117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.084641][ T7126] FAULT_INJECTION: forcing a failure. [ 768.084641][ T7126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.098186][ T7126] CPU: 0 UID: 0 PID: 7126 Comm: syz.3.14454 Not tainted syzkaller #0 PREEMPT(full) [ 768.098213][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 768.098237][ T7126] Call Trace: [ 768.098245][ T7126] [ 768.098253][ T7126] dump_stack_lvl+0x189/0x250 [ 768.098278][ T7126] ? __pfx____ratelimit+0x10/0x10 [ 768.098306][ T7126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 768.098325][ T7126] ? __pfx__printk+0x10/0x10 [ 768.098345][ T7126] ? __might_fault+0xb0/0x130 [ 768.098378][ T7126] should_fail_ex+0x414/0x560 [ 768.098404][ T7126] _copy_from_user+0x2d/0xb0 [ 768.098432][ T7126] __sys_bpf+0x1e3/0x860 [ 768.098461][ T7126] ? __pfx___sys_bpf+0x10/0x10 [ 768.098511][ T7126] ? ksys_write+0x22a/0x250 [ 768.098534][ T7126] ? __pfx_ksys_write+0x10/0x10 [ 768.098561][ T7126] __x64_sys_bpf+0x7c/0x90 [ 768.098585][ T7126] do_syscall_64+0xfa/0xfa0 [ 768.098612][ T7126] ? lockdep_hardirqs_on+0x9c/0x150 [ 768.098641][ T7126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.098661][ T7126] ? clear_bhb_loop+0x60/0xb0 [ 768.098684][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.098703][ T7126] RIP: 0033:0x7f8b04d8eec9 [ 768.098720][ T7126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.098737][ T7126] RSP: 002b:00007f8b05c81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 768.098757][ T7126] RAX: ffffffffffffffda RBX: 00007f8b04fe5fa0 RCX: 00007f8b04d8eec9 [ 768.098771][ T7126] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 768.098784][ T7126] RBP: 00007f8b05c81090 R08: 0000000000000000 R09: 0000000000000000 [ 768.098796][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.098808][ T7126] R13: 00007f8b04fe6038 R14: 00007f8b04fe5fa0 R15: 00007ffe8b485718 [ 768.098842][ T7126] [ 768.103784][ T7130] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 768.121807][ T7131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.382994][ T7122] lo speed is unknown, defaulting to 1000 [ 768.417233][ T7137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14457'. [ 768.426783][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 768.427144][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 768.623490][ T7143] tipc: Enabling of bearer rejected, failed to enable media [ 768.640600][ T7143] syzkaller0: entered promiscuous mode [ 768.654274][ T7143] syzkaller0: entered allmulticast mode [ 768.769669][ T7122] syzkaller0 speed is unknown, defaulting to 1000 [ 768.930984][ T7160] FAULT_INJECTION: forcing a failure. [ 768.930984][ T7160] name failslab, interval 1, probability 0, space 0, times 1 [ 768.947995][ T7160] CPU: 1 UID: 0 PID: 7160 Comm: syz.0.14467 Not tainted syzkaller #0 PREEMPT(full) [ 768.948023][ T7160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 768.948035][ T7160] Call Trace: [ 768.948043][ T7160] [ 768.948051][ T7160] dump_stack_lvl+0x189/0x250 [ 768.948077][ T7160] ? __pfx____ratelimit+0x10/0x10 [ 768.948106][ T7160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 768.948126][ T7160] ? __pfx__printk+0x10/0x10 [ 768.948151][ T7160] ? __pfx___might_resched+0x10/0x10 [ 768.948199][ T7160] should_fail_ex+0x414/0x560 [ 768.948225][ T7160] should_failslab+0xa8/0x100 [ 768.948249][ T7160] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 768.948271][ T7160] ? __alloc_skb+0x112/0x2d0 [ 768.948318][ T7160] __alloc_skb+0x112/0x2d0 [ 768.948348][ T7160] netlink_sendmsg+0x5c6/0xb30 [ 768.948388][ T7160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.948419][ T7160] ? aa_sock_msg_perm+0xf1/0x1d0 [ 768.948448][ T7160] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 768.948476][ T7160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.948501][ T7160] __sock_sendmsg+0x21c/0x270 [ 768.948528][ T7160] ____sys_sendmsg+0x505/0x830 [ 768.948565][ T7160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 768.948605][ T7160] ? import_iovec+0x74/0xa0 [ 768.948639][ T7160] ___sys_sendmsg+0x21f/0x2a0 [ 768.948690][ T7160] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.948765][ T7160] ? __fget_files+0x2a/0x420 [ 768.948790][ T7160] ? __fget_files+0x3a0/0x420 [ 768.948828][ T7160] __x64_sys_sendmsg+0x19b/0x260 [ 768.948864][ T7160] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 768.948907][ T7160] ? __pfx_ksys_write+0x10/0x10 [ 768.948935][ T7160] ? do_syscall_64+0xbe/0xfa0 [ 768.948970][ T7160] do_syscall_64+0xfa/0xfa0 [ 768.949000][ T7160] ? lockdep_hardirqs_on+0x9c/0x150 [ 768.949031][ T7160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.949052][ T7160] ? clear_bhb_loop+0x60/0xb0 [ 768.949090][ T7160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.949109][ T7160] RIP: 0033:0x7f5558b8eec9 [ 768.949146][ T7160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.949164][ T7160] RSP: 002b:00007f5559ad3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.949220][ T7160] RAX: ffffffffffffffda RBX: 00007f5558de5fa0 RCX: 00007f5558b8eec9 [ 768.949237][ T7160] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 768.949250][ T7160] RBP: 00007f5559ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 768.949263][ T7160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.949275][ T7160] R13: 00007f5558de6038 R14: 00007f5558de5fa0 R15: 00007ffd9d6667a8 [ 768.949312][ T7160] [ 769.287260][ T7162] siw: device registration error -23 [ 769.292202][ T7167] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.14469'. [ 769.458661][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 769.466097][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 769.506053][ T7175] siw: device registration error -23 [ 769.549953][ T7179] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 769.663868][ T7183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14477'. [ 769.714076][ T7185] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 769.772282][ T7187] netlink: 216 bytes leftover after parsing attributes in process `syz.0.14480'. [ 770.335506][ T7208] tipc: Enabling of bearer rejected, failed to enable media [ 770.498529][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 770.505792][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 770.958080][ T7237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 771.026470][ T7225] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 771.523204][ T7257] __nla_validate_parse: 2 callbacks suppressed [ 771.523224][ T7257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14499'. [ 771.538871][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 771.539266][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 771.589144][ T7262] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14499'. [ 771.611570][ T7260] Cannot find add_set index 1 as target [ 771.623595][ T7260] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 771.876225][ T7273] tipc: Enabling of bearer rejected, failed to enable media [ 772.268149][ T7304] tipc: Enabling of bearer rejected, already enabled [ 772.357403][ T7303] netlink: 'syz.1.14514': attribute type 1 has an invalid length. [ 772.467638][ T7317] FAULT_INJECTION: forcing a failure. [ 772.467638][ T7317] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 772.526714][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14518'. [ 772.549357][ T7317] CPU: 0 UID: 0 PID: 7317 Comm: syz.0.14517 Not tainted syzkaller #0 PREEMPT(full) [ 772.549387][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 772.549400][ T7317] Call Trace: [ 772.549408][ T7317] [ 772.549418][ T7317] dump_stack_lvl+0x189/0x250 [ 772.549456][ T7317] ? __pfx____ratelimit+0x10/0x10 [ 772.549484][ T7317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 772.549504][ T7317] ? __pfx__printk+0x10/0x10 [ 772.549526][ T7317] ? fs_reclaim_acquire+0x7d/0x100 [ 772.549560][ T7317] should_fail_ex+0x414/0x560 [ 772.549587][ T7317] prepare_alloc_pages+0x213/0x610 [ 772.549621][ T7317] __alloc_frozen_pages_noprof+0x123/0x370 [ 772.549653][ T7317] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 772.549699][ T7317] alloc_pages_mpol+0x232/0x4a0 [ 772.549728][ T7317] alloc_pages_noprof+0xa9/0x190 [ 772.549753][ T7317] pte_alloc_one+0x21/0x170 [ 772.549776][ T7317] __pte_alloc+0x25/0x1a0 [ 772.549807][ T7317] __handle_mm_fault+0x49b3/0x5440 [ 772.549844][ T7317] ? __pfx___handle_mm_fault+0x10/0x10 [ 772.549892][ T7317] ? find_vma+0xe7/0x160 [ 772.549912][ T7317] ? __pfx_find_vma+0x10/0x10 [ 772.549933][ T7317] handle_mm_fault+0x40a/0x8e0 [ 772.549965][ T7317] do_user_addr_fault+0x764/0x1380 [ 772.550011][ T7317] exc_page_fault+0x82/0x100 [ 772.550043][ T7317] asm_exc_page_fault+0x26/0x30 [ 772.550061][ T7317] RIP: 0010:__put_user_4+0xd/0x20 [ 772.550090][ T7317] Code: 66 89 01 31 c9 0f 01 ca e9 90 6c 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 772.550107][ T7317] RSP: 0018:ffffc90002e97978 EFLAGS: 00050206 [ 772.550125][ T7317] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000000 [ 772.550138][ T7317] RDX: dffffc0000000000 RSI: ffffffff8d9c68e1 RDI: ffffffff8bc03b60 [ 772.550152][ T7317] RBP: ffffc90002e97af0 R08: 0000000000000000 R09: ffffffff820c2450 [ 772.550166][ T7317] R10: 000000000000894b R11: 0000000000000000 R12: 0000000000000000 [ 772.550177][ T7317] R13: ffffffff8f59c568 R14: 1ffff920005d2f34 R15: ffff88803216f2c0 [ 772.550199][ T7317] ? __might_fault+0xb0/0x130 [ 772.550228][ T7317] sk_ioctl+0x406/0x600 [ 772.550250][ T7317] ? __se_sys_ioctl+0x47/0x170 [ 772.550278][ T7317] ? do_syscall_64+0xfa/0xfa0 [ 772.550328][ T7317] ? __pfx_sk_ioctl+0x10/0x10 [ 772.550390][ T7317] inet_ioctl+0x416/0x4c0 [ 772.550421][ T7317] ? __pfx_inet_ioctl+0x10/0x10 [ 772.550471][ T7317] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 772.550497][ T7317] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 772.550526][ T7317] sock_do_ioctl+0xdc/0x300 [ 772.550553][ T7317] ? __pfx_sock_do_ioctl+0x10/0x10 [ 772.550596][ T7317] sock_ioctl+0x576/0x790 [ 772.550621][ T7317] ? __pfx_sock_ioctl+0x10/0x10 [ 772.550648][ T7317] ? __fget_files+0x3a0/0x420 [ 772.550673][ T7317] ? __fget_files+0x2a/0x420 [ 772.550703][ T7317] ? bpf_lsm_file_ioctl+0x9/0x20 [ 772.550724][ T7317] ? __pfx_sock_ioctl+0x10/0x10 [ 772.550745][ T7317] __se_sys_ioctl+0xf9/0x170 [ 772.550782][ T7317] do_syscall_64+0xfa/0xfa0 [ 772.550812][ T7317] ? lockdep_hardirqs_on+0x9c/0x150 [ 772.550844][ T7317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.550865][ T7317] ? clear_bhb_loop+0x60/0xb0 [ 772.550899][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.550919][ T7317] RIP: 0033:0x7f5558b8eec9 [ 772.550936][ T7317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.550955][ T7317] RSP: 002b:00007f5559ad3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.550975][ T7317] RAX: ffffffffffffffda RBX: 00007f5558de5fa0 RCX: 00007f5558b8eec9 [ 772.550991][ T7317] RDX: 0000200000000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 772.551005][ T7317] RBP: 00007f5559ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 772.551018][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.551031][ T7317] R13: 00007f5558de6038 R14: 00007f5558de5fa0 R15: 00007ffd9d6667a8 [ 772.551068][ T7317] [ 772.619025][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 772.805752][ T7327] tipc: Enabling of bearer rejected, failed to enable media [ 772.806340][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 772.812250][ T7327] syzkaller0: entered promiscuous mode [ 772.817231][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 772.820435][ T7327] syzkaller0: entered allmulticast mode [ 772.825106][ C1] lec:lec_tx_timeout: lec0 [ 772.828285][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 772.853126][ T7329] ipt_ECN: cannot use operation on non-tcp rule [ 773.143227][ T7346] FAULT_INJECTION: forcing a failure. [ 773.143227][ T7346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.157164][ T7346] CPU: 0 UID: 0 PID: 7346 Comm: syz.0.14526 Not tainted syzkaller #0 PREEMPT(full) [ 773.157193][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 773.157206][ T7346] Call Trace: [ 773.157214][ T7346] [ 773.157223][ T7346] dump_stack_lvl+0x189/0x250 [ 773.157249][ T7346] ? __pfx____ratelimit+0x10/0x10 [ 773.157279][ T7346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 773.157301][ T7346] ? __pfx__printk+0x10/0x10 [ 773.157323][ T7346] ? __might_fault+0xb0/0x130 [ 773.157358][ T7346] should_fail_ex+0x414/0x560 [ 773.157385][ T7346] _copy_from_iter+0x1de/0x1790 [ 773.157421][ T7346] ? rcu_is_watching+0x15/0xb0 [ 773.157442][ T7346] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 773.157467][ T7346] ? __pfx__copy_from_iter+0x10/0x10 [ 773.157496][ T7346] ? __build_skb_around+0x257/0x3e0 [ 773.157528][ T7346] ? netlink_sendmsg+0x642/0xb30 [ 773.157553][ T7346] ? skb_put+0x11b/0x210 [ 773.157584][ T7346] netlink_sendmsg+0x6b2/0xb30 [ 773.157623][ T7346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.157655][ T7346] ? aa_sock_msg_perm+0xf1/0x1d0 [ 773.157684][ T7346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 773.157713][ T7346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.157742][ T7346] __sock_sendmsg+0x21c/0x270 [ 773.157768][ T7346] ____sys_sendmsg+0x505/0x830 [ 773.157805][ T7346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 773.157864][ T7346] ? import_iovec+0x74/0xa0 [ 773.157896][ T7346] ___sys_sendmsg+0x21f/0x2a0 [ 773.157927][ T7346] ? __pfx____sys_sendmsg+0x10/0x10 [ 773.157994][ T7346] ? __fget_files+0x2a/0x420 [ 773.158016][ T7346] ? __fget_files+0x3a0/0x420 [ 773.158062][ T7346] __x64_sys_sendmsg+0x19b/0x260 [ 773.158092][ T7346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 773.158129][ T7346] ? __pfx_ksys_write+0x10/0x10 [ 773.158156][ T7346] ? do_syscall_64+0xbe/0xfa0 [ 773.158186][ T7346] do_syscall_64+0xfa/0xfa0 [ 773.158212][ T7346] ? lockdep_hardirqs_on+0x9c/0x150 [ 773.158238][ T7346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.158256][ T7346] ? clear_bhb_loop+0x60/0xb0 [ 773.158278][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.158295][ T7346] RIP: 0033:0x7f5558b8eec9 [ 773.158311][ T7346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.158326][ T7346] RSP: 002b:00007f5559ad3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.158345][ T7346] RAX: ffffffffffffffda RBX: 00007f5558de5fa0 RCX: 00007f5558b8eec9 [ 773.158358][ T7346] RDX: 0000000004028044 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 773.158369][ T7346] RBP: 00007f5559ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 773.158380][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.158391][ T7346] R13: 00007f5558de6038 R14: 00007f5558de5fa0 R15: 00007ffd9d6667a8 [ 773.158422][ T7346] [ 773.530205][ T7352] FAULT_INJECTION: forcing a failure. [ 773.530205][ T7352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.550138][ T7352] CPU: 1 UID: 0 PID: 7352 Comm: syz.3.14528 Not tainted syzkaller #0 PREEMPT(full) [ 773.550168][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 773.550181][ T7352] Call Trace: [ 773.550190][ T7352] [ 773.550199][ T7352] dump_stack_lvl+0x189/0x250 [ 773.550226][ T7352] ? __pfx____ratelimit+0x10/0x10 [ 773.550257][ T7352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 773.550279][ T7352] ? __pfx__printk+0x10/0x10 [ 773.550318][ T7352] ? __might_fault+0xb0/0x130 [ 773.550355][ T7352] should_fail_ex+0x414/0x560 [ 773.550383][ T7352] _copy_from_iter+0x1de/0x1790 [ 773.550420][ T7352] ? rcu_is_watching+0x15/0xb0 [ 773.550442][ T7352] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 773.550469][ T7352] ? __pfx__copy_from_iter+0x10/0x10 [ 773.550499][ T7352] ? __build_skb_around+0x257/0x3e0 [ 773.550531][ T7352] ? netlink_sendmsg+0x642/0xb30 [ 773.550557][ T7352] ? skb_put+0x11b/0x210 [ 773.550590][ T7352] netlink_sendmsg+0x6b2/0xb30 [ 773.550630][ T7352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.550664][ T7352] ? aa_sock_msg_perm+0xf1/0x1d0 [ 773.550693][ T7352] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 773.550723][ T7352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.550753][ T7352] __sock_sendmsg+0x21c/0x270 [ 773.550780][ T7352] ____sys_sendmsg+0x505/0x830 [ 773.550819][ T7352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 773.550862][ T7352] ? import_iovec+0x74/0xa0 [ 773.550897][ T7352] ___sys_sendmsg+0x21f/0x2a0 [ 773.550931][ T7352] ? __pfx____sys_sendmsg+0x10/0x10 [ 773.551005][ T7352] ? __fget_files+0x2a/0x420 [ 773.551030][ T7352] ? __fget_files+0x3a0/0x420 [ 773.551075][ T7352] __x64_sys_sendmsg+0x19b/0x260 [ 773.551110][ T7352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 773.551153][ T7352] ? __pfx_ksys_write+0x10/0x10 [ 773.551181][ T7352] ? do_syscall_64+0xbe/0xfa0 [ 773.551218][ T7352] do_syscall_64+0xfa/0xfa0 [ 773.551248][ T7352] ? lockdep_hardirqs_on+0x9c/0x150 [ 773.551279][ T7352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.551301][ T7352] ? clear_bhb_loop+0x60/0xb0 [ 773.551327][ T7352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.551348][ T7352] RIP: 0033:0x7f8b04d8eec9 [ 773.551367][ T7352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.551385][ T7352] RSP: 002b:00007f8b05c81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.551419][ T7352] RAX: ffffffffffffffda RBX: 00007f8b04fe5fa0 RCX: 00007f8b04d8eec9 [ 773.551434][ T7352] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 773.551447][ T7352] RBP: 00007f8b05c81090 R08: 0000000000000000 R09: 0000000000000000 [ 773.551460][ T7352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.551471][ T7352] R13: 00007f8b04fe6038 R14: 00007f8b04fe5fa0 R15: 00007ffe8b485718 [ 773.551516][ T7352] [ 773.834874][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 773.842162][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 773.915855][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14532'. [ 773.921992][ T7353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.035968][ T7364] FAULT_INJECTION: forcing a failure. [ 774.035968][ T7364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.038658][ T7353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.050043][ T7364] CPU: 1 UID: 0 PID: 7364 Comm: syz.0.14535 Not tainted syzkaller #0 PREEMPT(full) [ 774.050070][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 774.050083][ T7364] Call Trace: [ 774.050091][ T7364] [ 774.050100][ T7364] dump_stack_lvl+0x189/0x250 [ 774.050127][ T7364] ? __pfx____ratelimit+0x10/0x10 [ 774.050158][ T7364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.050180][ T7364] ? __pfx__printk+0x10/0x10 [ 774.050202][ T7364] ? __might_fault+0xb0/0x130 [ 774.050238][ T7364] should_fail_ex+0x414/0x560 [ 774.050266][ T7364] _copy_from_iter+0x1de/0x1790 [ 774.050330][ T7364] ? __pfx__copy_from_iter+0x10/0x10 [ 774.050358][ T7364] ? alloc_pages_noprof+0xbe/0x190 [ 774.050386][ T7364] ? skb_page_frag_refill+0x199/0x320 [ 774.050417][ T7364] kcm_sendmsg+0xf00/0x2ad0 [ 774.050499][ T7364] ? __pfx_kcm_sendmsg+0x10/0x10 [ 774.050535][ T7364] ? __lock_acquire+0xab9/0xd20 [ 774.050570][ T7364] ? aa_sock_msg_perm+0xf1/0x1d0 [ 774.050606][ T7364] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 774.050640][ T7364] ? __pfx_kcm_sendmsg+0x10/0x10 [ 774.050673][ T7364] __sock_sendmsg+0x21c/0x270 [ 774.050704][ T7364] sock_write_iter+0x279/0x360 [ 774.050733][ T7364] ? __pfx_sock_write_iter+0x10/0x10 [ 774.050774][ T7364] ? bpf_lsm_file_permission+0x9/0x20 [ 774.050808][ T7364] ? security_file_permission+0x75/0x290 [ 774.050845][ T7364] vfs_write+0x5c9/0xb30 [ 774.050878][ T7364] ? __pfx_sock_write_iter+0x10/0x10 [ 774.050903][ T7364] ? __pfx_vfs_write+0x10/0x10 [ 774.050944][ T7364] ? __fget_files+0x2a/0x420 [ 774.050987][ T7364] ksys_write+0x145/0x250 [ 774.051016][ T7364] ? __pfx_ksys_write+0x10/0x10 [ 774.051054][ T7364] ? do_syscall_64+0xbe/0xfa0 [ 774.051096][ T7364] do_syscall_64+0xfa/0xfa0 [ 774.051131][ T7364] ? lockdep_hardirqs_on+0x9c/0x150 [ 774.051167][ T7364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.051192][ T7364] ? clear_bhb_loop+0x60/0xb0 [ 774.051222][ T7364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.051246][ T7364] RIP: 0033:0x7f5558b8eec9 [ 774.051267][ T7364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.051288][ T7364] RSP: 002b:00007f5559ad3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 774.051314][ T7364] RAX: ffffffffffffffda RBX: 00007f5558de5fa0 RCX: 00007f5558b8eec9 [ 774.051332][ T7364] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000004 [ 774.051348][ T7364] RBP: 00007f5559ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 774.051364][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.051377][ T7364] R13: 00007f5558de6038 R14: 00007f5558de5fa0 R15: 00007ffd9d6667a8 [ 774.051421][ T7364] [ 774.415212][ T7382] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.14539'. [ 774.424709][ T7381] tipc: Enabling of bearer rejected, failed to enable media [ 774.436570][ T7381] syzkaller0: entered promiscuous mode [ 774.442191][ T7381] syzkaller0: entered allmulticast mode [ 774.553114][ T7388] netlink: 'syz.1.14542': attribute type 1 has an invalid length. [ 774.562035][ T7388] netlink: 220 bytes leftover after parsing attributes in process `syz.1.14542'. [ 774.572488][ T7388] netlink: 'syz.1.14542': attribute type 1 has an invalid length. [ 774.642673][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14544'. [ 774.898624][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 774.905829][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 775.111963][ T7415] FAULT_INJECTION: forcing a failure. [ 775.111963][ T7415] name failslab, interval 1, probability 0, space 0, times 0 [ 775.124883][ T7415] CPU: 0 UID: 0 PID: 7415 Comm: syz.2.14552 Not tainted syzkaller #0 PREEMPT(full) [ 775.124912][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 775.124926][ T7415] Call Trace: [ 775.124935][ T7415] [ 775.124943][ T7415] dump_stack_lvl+0x189/0x250 [ 775.124969][ T7415] ? __pfx____ratelimit+0x10/0x10 [ 775.125001][ T7415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 775.125022][ T7415] ? __pfx__printk+0x10/0x10 [ 775.125046][ T7415] ? __lock_acquire+0xab9/0xd20 [ 775.125086][ T7415] should_fail_ex+0x414/0x560 [ 775.125113][ T7415] should_failslab+0xa8/0x100 [ 775.125140][ T7415] kmem_cache_alloc_noprof+0x73/0x3c0 [ 775.125162][ T7415] ? skb_clone+0x212/0x3a0 [ 775.125199][ T7415] skb_clone+0x212/0x3a0 [ 775.125246][ T7415] __netlink_deliver_tap+0x404/0x850 [ 775.125286][ T7415] ? netlink_deliver_tap+0x2e/0x1b0 [ 775.125314][ T7415] netlink_deliver_tap+0x19c/0x1b0 [ 775.125341][ T7415] netlink_unicast+0x7fa/0x9e0 [ 775.125374][ T7415] ? __pfx_netlink_unicast+0x10/0x10 [ 775.125399][ T7415] ? netlink_sendmsg+0x642/0xb30 [ 775.125422][ T7415] ? skb_put+0x11b/0x210 [ 775.125452][ T7415] netlink_sendmsg+0x805/0xb30 [ 775.125489][ T7415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.125518][ T7415] ? aa_sock_msg_perm+0xf1/0x1d0 [ 775.125546][ T7415] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 775.125573][ T7415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.125600][ T7415] __sock_sendmsg+0x21c/0x270 [ 775.125624][ T7415] ____sys_sendmsg+0x505/0x830 [ 775.125679][ T7415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.125725][ T7415] ? import_iovec+0x74/0xa0 [ 775.125761][ T7415] ___sys_sendmsg+0x21f/0x2a0 [ 775.125795][ T7415] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.125867][ T7415] ? __fget_files+0x2a/0x420 [ 775.125899][ T7415] ? __fget_files+0x3a0/0x420 [ 775.125936][ T7415] __x64_sys_sendmsg+0x19b/0x260 [ 775.125970][ T7415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 775.126013][ T7415] ? __pfx_ksys_write+0x10/0x10 [ 775.126039][ T7415] ? do_syscall_64+0xbe/0xfa0 [ 775.126075][ T7415] do_syscall_64+0xfa/0xfa0 [ 775.126104][ T7415] ? lockdep_hardirqs_on+0x9c/0x150 [ 775.126134][ T7415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.126155][ T7415] ? clear_bhb_loop+0x60/0xb0 [ 775.126181][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.126201][ T7415] RIP: 0033:0x7fe74e78eec9 [ 775.126219][ T7415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.126237][ T7415] RSP: 002b:00007fe74f59d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.126260][ T7415] RAX: ffffffffffffffda RBX: 00007fe74e9e5fa0 RCX: 00007fe74e78eec9 [ 775.126275][ T7415] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 775.126288][ T7415] RBP: 00007fe74f59d090 R08: 0000000000000000 R09: 0000000000000000 [ 775.126300][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.126312][ T7415] R13: 00007fe74e9e6038 R14: 00007fe74e9e5fa0 R15: 00007ffff3782be8 [ 775.126349][ T7415] [ 775.527250][ T7419] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14555'. [ 775.553133][ T7419] netlink: 'syz.1.14555': attribute type 6 has an invalid length. [ 775.589155][ T7419] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 775.767616][ T7437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14561'. [ 775.938865][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 775.946199][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 776.079612][ T7460] FAULT_INJECTION: forcing a failure. [ 776.079612][ T7460] name failslab, interval 1, probability 0, space 0, times 0 [ 776.128002][ T7460] CPU: 1 UID: 0 PID: 7460 Comm: syz.1.14567 Not tainted syzkaller #0 PREEMPT(full) [ 776.128029][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 776.128041][ T7460] Call Trace: [ 776.128048][ T7460] [ 776.128057][ T7460] dump_stack_lvl+0x189/0x250 [ 776.128082][ T7460] ? __pfx____ratelimit+0x10/0x10 [ 776.128110][ T7460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 776.128130][ T7460] ? __pfx__printk+0x10/0x10 [ 776.128156][ T7460] ? __pfx___might_resched+0x10/0x10 [ 776.128189][ T7460] ? fs_reclaim_acquire+0x7d/0x100 [ 776.128219][ T7460] should_fail_ex+0x414/0x560 [ 776.128245][ T7460] should_failslab+0xa8/0x100 [ 776.128268][ T7460] kmem_cache_alloc_noprof+0x73/0x3c0 [ 776.128287][ T7460] ? ptlock_alloc+0x20/0x70 [ 776.128313][ T7460] ptlock_alloc+0x20/0x70 [ 776.128334][ T7460] pte_alloc_one+0x7d/0x170 [ 776.128356][ T7460] __do_fault+0xd1/0x390 [ 776.128383][ T7460] __handle_mm_fault+0x1847/0x5440 [ 776.128420][ T7460] ? __pfx___handle_mm_fault+0x10/0x10 [ 776.128462][ T7460] ? __pfx___might_resched+0x10/0x10 [ 776.128498][ T7460] handle_mm_fault+0x40a/0x8e0 [ 776.128529][ T7460] __get_user_pages+0x1699/0x2ce0 [ 776.128557][ T7460] ? __lock_acquire+0xab9/0xd20 [ 776.128620][ T7460] __gup_longterm_locked+0xde4/0x1660 [ 776.128652][ T7460] ? sanity_check_pinned_pages+0x1241/0x1300 [ 776.128682][ T7460] ? gup_fast_fallback+0x195f/0x2010 [ 776.128706][ T7460] gup_fast_fallback+0x1e6a/0x2010 [ 776.128736][ T7460] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 776.128780][ T7460] ? __pfx_gup_fast_fallback+0x10/0x10 [ 776.128809][ T7460] ? rcu_is_watching+0x15/0xb0 [ 776.128829][ T7460] ? rcu_is_watching+0x15/0xb0 [ 776.128846][ T7460] ? is_valid_gup_args+0x11f/0x200 [ 776.128867][ T7460] ? pin_user_pages_fast+0x4d/0xb0 [ 776.128889][ T7460] rds_info_getsockopt+0x1fb/0x470 [ 776.128926][ T7460] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 776.128956][ T7460] ? __might_fault+0xb0/0x130 [ 776.128981][ T7460] ? rds_getsockopt+0x2d4/0x500 [ 776.129004][ T7460] ? __pfx_rds_getsockopt+0x10/0x10 [ 776.129029][ T7460] do_sock_getsockopt+0x36f/0x450 [ 776.129061][ T7460] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 776.129088][ T7460] ? do_syscall_64+0xa0/0xfa0 [ 776.129116][ T7460] ? __fget_files+0x2a/0x420 [ 776.129139][ T7460] ? __fget_files+0x3a0/0x420 [ 776.129161][ T7460] ? __fget_files+0x2a/0x420 [ 776.129192][ T7460] __x64_sys_getsockopt+0x1a5/0x250 [ 776.129219][ T7460] ? do_syscall_64+0xa0/0xfa0 [ 776.129249][ T7460] ? do_syscall_64+0xa0/0xfa0 [ 776.129282][ T7460] do_syscall_64+0xfa/0xfa0 [ 776.129310][ T7460] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.129340][ T7460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.129359][ T7460] ? clear_bhb_loop+0x60/0xb0 [ 776.129383][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.129401][ T7460] RIP: 0033:0x7f50b4f8eec9 [ 776.129418][ T7460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.129434][ T7460] RSP: 002b:00007f50b5da1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 776.129454][ T7460] RAX: ffffffffffffffda RBX: 00007f50b51e6090 RCX: 00007f50b4f8eec9 [ 776.129468][ T7460] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 776.129480][ T7460] RBP: 00007f50b5da1090 R08: 0000200000000000 R09: 0000000000000000 [ 776.129492][ T7460] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 776.129504][ T7460] R13: 00007f50b51e6128 R14: 00007f50b51e6090 R15: 00007fff3dd53428 [ 776.129538][ T7460] [ 776.592342][ T7468] tipc: Enabling of bearer rejected, failed to enable media [ 776.978785][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 776.986111][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 777.342594][ T7497] tipc: Enabling of bearer rejected, failed to enable media [ 777.352617][ T7497] syzkaller0: entered promiscuous mode [ 777.359490][ T7497] syzkaller0: entered allmulticast mode [ 777.499379][ T7503] siw: device registration error -23 [ 777.539949][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14590'. [ 777.858291][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 777.866333][ C1] lec:lec_tx_timeout: lec0 [ 777.874875][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 777.982750][ T7536] FAULT_INJECTION: forcing a failure. [ 777.982750][ T7536] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 778.018030][ T7536] CPU: 0 UID: 0 PID: 7536 Comm: syz.4.14598 Not tainted syzkaller #0 PREEMPT(full) [ 778.018059][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 778.018072][ T7536] Call Trace: [ 778.018080][ T7536] [ 778.018089][ T7536] dump_stack_lvl+0x189/0x250 [ 778.018115][ T7536] ? __pfx____ratelimit+0x10/0x10 [ 778.018146][ T7536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.018167][ T7536] ? __pfx__printk+0x10/0x10 [ 778.018195][ T7536] ? fs_reclaim_acquire+0x7d/0x100 [ 778.018232][ T7536] should_fail_ex+0x414/0x560 [ 778.018260][ T7536] prepare_alloc_pages+0x213/0x610 [ 778.018296][ T7536] __alloc_frozen_pages_noprof+0x123/0x370 [ 778.018329][ T7536] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 778.018367][ T7536] ? policy_nodemask+0x27c/0x720 [ 778.018398][ T7536] alloc_pages_mpol+0x232/0x4a0 [ 778.018428][ T7536] folio_alloc_mpol_noprof+0x39/0x70 [ 778.018455][ T7536] shmem_alloc_and_add_folio+0x447/0xf60 [ 778.018483][ T7536] ? filemap_get_entry+0xad/0x2f0 [ 778.018511][ T7536] ? filemap_get_entry+0xad/0x2f0 [ 778.018535][ T7536] ? filemap_get_entry+0xad/0x2f0 [ 778.018567][ T7536] ? shmem_huge_global_enabled+0x174/0x3a0 [ 778.018600][ T7536] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 778.018628][ T7536] ? shmem_allowable_huge_orders+0x414/0x420 [ 778.018669][ T7536] shmem_get_folio_gfp+0x59d/0x1660 [ 778.018719][ T7536] shmem_fault+0x179/0x390 [ 778.018752][ T7536] __do_fault+0x138/0x390 [ 778.018782][ T7536] __handle_mm_fault+0x1847/0x5440 [ 778.018823][ T7536] ? __pfx___handle_mm_fault+0x10/0x10 [ 778.018867][ T7536] ? __pfx___might_resched+0x10/0x10 [ 778.018906][ T7536] handle_mm_fault+0x40a/0x8e0 [ 778.018940][ T7536] __get_user_pages+0x1699/0x2ce0 [ 778.018969][ T7536] ? __lock_acquire+0xab9/0xd20 [ 778.019039][ T7536] __gup_longterm_locked+0xde4/0x1660 [ 778.019089][ T7536] ? sanity_check_pinned_pages+0x1241/0x1300 [ 778.019122][ T7536] ? gup_fast_fallback+0x195f/0x2010 [ 778.019144][ T7536] gup_fast_fallback+0x1e6a/0x2010 [ 778.019175][ T7536] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 778.019223][ T7536] ? __pfx_gup_fast_fallback+0x10/0x10 [ 778.019246][ T7536] ? rcu_is_watching+0x15/0xb0 [ 778.019267][ T7536] ? rcu_is_watching+0x15/0xb0 [ 778.019284][ T7536] ? is_valid_gup_args+0x11f/0x200 [ 778.019305][ T7536] ? pin_user_pages_fast+0x4d/0xb0 [ 778.019327][ T7536] rds_info_getsockopt+0x1fb/0x470 [ 778.019364][ T7536] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 778.019395][ T7536] ? __might_fault+0xb0/0x130 [ 778.019421][ T7536] ? rds_getsockopt+0x2d4/0x500 [ 778.019442][ T7536] ? __pfx_rds_getsockopt+0x10/0x10 [ 778.019468][ T7536] do_sock_getsockopt+0x36f/0x450 [ 778.019501][ T7536] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 778.019527][ T7536] ? do_syscall_64+0xa0/0xfa0 [ 778.019554][ T7536] ? __fget_files+0x2a/0x420 [ 778.019577][ T7536] ? __fget_files+0x3a0/0x420 [ 778.019599][ T7536] ? __fget_files+0x2a/0x420 [ 778.019630][ T7536] __x64_sys_getsockopt+0x1a5/0x250 [ 778.019657][ T7536] ? do_syscall_64+0xa0/0xfa0 [ 778.019687][ T7536] ? do_syscall_64+0xa0/0xfa0 [ 778.019725][ T7536] do_syscall_64+0xfa/0xfa0 [ 778.019753][ T7536] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.019781][ T7536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.019801][ T7536] ? clear_bhb_loop+0x60/0xb0 [ 778.019843][ T7536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.019862][ T7536] RIP: 0033:0x7f3725b8eec9 [ 778.019880][ T7536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.019898][ T7536] RSP: 002b:00007f3726a4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 778.019920][ T7536] RAX: ffffffffffffffda RBX: 00007f3725de6090 RCX: 00007f3725b8eec9 [ 778.019934][ T7536] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 778.019948][ T7536] RBP: 00007f3726a4e090 R08: 0000200000000000 R09: 0000000000000000 [ 778.019962][ T7536] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 778.019974][ T7536] R13: 00007f3725de6128 R14: 00007f3725de6090 R15: 00007ffd342522a8 [ 778.020011][ T7536] [ 778.028860][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 778.422152][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 778.565975][ T7543] syzkaller1: entered promiscuous mode [ 778.572270][ T7543] syzkaller1: entered allmulticast mode [ 778.699622][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14603'. [ 778.856734][ T7553] tipc: Enabling of bearer rejected, already enabled [ 778.873377][ T7554] tipc: Enabling of bearer rejected, already enabled [ 778.903144][ T7556] syzkaller0: entered promiscuous mode [ 778.909183][ T7556] syzkaller0: entered allmulticast mode [ 779.009272][ T7558] tipc: Enabling of bearer rejected, already enabled [ 779.058522][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 779.065806][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 779.106516][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14611'. [ 779.498037][ T7592] tipc: Enabled bearer , priority 0 [ 779.520471][ T7592] syzkaller0: entered promiscuous mode [ 779.528611][ T7592] syzkaller0: entered allmulticast mode [ 779.535821][ T7593] tipc: Enabling of bearer rejected, already enabled [ 779.559175][ T7592] tipc: Resetting bearer [ 779.618371][ T7590] tipc: Resetting bearer [ 779.724603][ T7590] tipc: Disabling bearer [ 779.755507][ T7610] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.14630'. [ 779.785748][ T7610] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.14630'. [ 780.098459][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 780.105706][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 780.790422][ T7661] block nbd6: Unsupported socket: should be TCP or UNIX. [ 780.802294][ T7654] netlink: 666 bytes leftover after parsing attributes in process `syz.4.14644'. [ 780.863383][ T7655] block nbd7: Unsupported socket: should be TCP or UNIX. [ 781.064669][ T7672] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14649'. [ 781.138727][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 781.145991][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 781.602269][ T7693] syzkaller0: entered promiscuous mode [ 781.607787][ T7693] syzkaller0: entered allmulticast mode [ 781.633829][ T7696] FAULT_INJECTION: forcing a failure. [ 781.633829][ T7696] name failslab, interval 1, probability 0, space 0, times 0 [ 781.655928][ T7696] CPU: 0 UID: 0 PID: 7696 Comm: syz.3.14657 Not tainted syzkaller #0 PREEMPT(full) [ 781.655952][ T7696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 781.655963][ T7696] Call Trace: [ 781.655970][ T7696] [ 781.655978][ T7696] dump_stack_lvl+0x189/0x250 [ 781.656001][ T7696] ? __pfx____ratelimit+0x10/0x10 [ 781.656029][ T7696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.656048][ T7696] ? __pfx__printk+0x10/0x10 [ 781.656064][ T7696] ? genl_rcv+0x28/0x40 [ 781.656081][ T7696] ? ____sys_sendmsg+0x505/0x830 [ 781.656106][ T7696] ? __x64_sys_sendmsg+0x19b/0x260 [ 781.656144][ T7696] should_fail_ex+0x414/0x560 [ 781.656169][ T7696] should_failslab+0xa8/0x100 [ 781.656193][ T7696] kmem_cache_alloc_noprof+0x73/0x3c0 [ 781.656212][ T7696] ? skb_clone+0x212/0x3a0 [ 781.656245][ T7696] skb_clone+0x212/0x3a0 [ 781.656276][ T7696] __netlink_deliver_tap+0x404/0x850 [ 781.656319][ T7696] ? netlink_deliver_tap+0x2e/0x1b0 [ 781.656346][ T7696] netlink_deliver_tap+0x19c/0x1b0 [ 781.656372][ T7696] netlink_sendskb+0x68/0x140 [ 781.656397][ T7696] netlink_unicast+0x397/0x9e0 [ 781.656416][ T7696] ? __asan_memcpy+0x40/0x70 [ 781.656452][ T7696] ? __pfx_netlink_unicast+0x10/0x10 [ 781.656484][ T7696] netlink_rcv_skb+0x28c/0x470 [ 781.656505][ T7696] ? __lock_acquire+0xab9/0xd20 [ 781.656531][ T7696] ? __pfx_genl_rcv_msg+0x10/0x10 [ 781.656551][ T7696] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 781.656595][ T7696] ? down_read+0x1ad/0x2e0 [ 781.656617][ T7696] genl_rcv+0x28/0x40 [ 781.656633][ T7696] netlink_unicast+0x82f/0x9e0 [ 781.656664][ T7696] ? __pfx_netlink_unicast+0x10/0x10 [ 781.656692][ T7696] ? netlink_sendmsg+0x642/0xb30 [ 781.656715][ T7696] ? skb_put+0x11b/0x210 [ 781.656743][ T7696] netlink_sendmsg+0x805/0xb30 [ 781.656778][ T7696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.656806][ T7696] ? aa_sock_msg_perm+0xf1/0x1d0 [ 781.656832][ T7696] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 781.656857][ T7696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.656883][ T7696] __sock_sendmsg+0x21c/0x270 [ 781.656907][ T7696] ____sys_sendmsg+0x505/0x830 [ 781.656940][ T7696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 781.656977][ T7696] ? import_iovec+0x74/0xa0 [ 781.657007][ T7696] ___sys_sendmsg+0x21f/0x2a0 [ 781.657036][ T7696] ? __pfx____sys_sendmsg+0x10/0x10 [ 781.657103][ T7696] ? __fget_files+0x2a/0x420 [ 781.657124][ T7696] ? __fget_files+0x3a0/0x420 [ 781.657158][ T7696] __x64_sys_sendmsg+0x19b/0x260 [ 781.657188][ T7696] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 781.657233][ T7696] ? do_syscall_64+0xbe/0xfa0 [ 781.657265][ T7696] do_syscall_64+0xfa/0xfa0 [ 781.657296][ T7696] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.657323][ T7696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.657341][ T7696] ? clear_bhb_loop+0x60/0xb0 [ 781.657363][ T7696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.657380][ T7696] RIP: 0033:0x7f8b04d8eec9 [ 781.657397][ T7696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.657412][ T7696] RSP: 002b:00007f8b05c81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.657432][ T7696] RAX: ffffffffffffffda RBX: 00007f8b04fe5fa0 RCX: 00007f8b04d8eec9 [ 781.657445][ T7696] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 781.657456][ T7696] RBP: 00007f8b05c81090 R08: 0000000000000000 R09: 0000000000000000 [ 781.657467][ T7696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.657477][ T7696] R13: 00007f8b04fe6038 R14: 00007f8b04fe5fa0 R15: 00007ffe8b485718 [ 781.657509][ T7696] [ 782.178706][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 782.185965][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 782.299934][ T7703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14661'. [ 782.371882][ T7711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.710535][ T7740] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.14667'. [ 782.732563][ T7738] syzkaller1: entered promiscuous mode [ 782.751167][ T7738] syzkaller1: entered allmulticast mode [ 782.981196][ T7748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14674'. [ 783.039368][ T7752] netlink: 'syz.3.14676': attribute type 1 has an invalid length. [ 783.049551][ T7752] netlink: 'syz.3.14676': attribute type 2 has an invalid length. [ 783.068729][ T7753] lo: entered allmulticast mode [ 783.073796][ T7753] tunl0: entered allmulticast mode [ 783.101361][ T7753] gre0: entered allmulticast mode [ 783.106555][ T7753] gretap0: entered allmulticast mode [ 783.114020][ T7753] erspan0: entered allmulticast mode [ 783.120705][ T7753] ip_vti0: entered allmulticast mode [ 783.127301][ T7753] sit0: entered allmulticast mode [ 783.133090][ T7753] ip6tnl0: entered allmulticast mode [ 783.140140][ T7753] ip6gre0: entered allmulticast mode [ 783.145571][ T7753] syz_tun: entered allmulticast mode [ 783.151448][ T7753] ip6gretap0: entered allmulticast mode [ 783.157637][ T7753] vcan0: entered allmulticast mode [ 783.163391][ T7753] bond0: entered allmulticast mode [ 783.168952][ T7753] bond_slave_0: entered allmulticast mode [ 783.174907][ T7753] bond_slave_1: entered allmulticast mode [ 783.182769][ T7753] dummy0: entered allmulticast mode [ 783.189050][ T7753] nlmon0: entered allmulticast mode [ 783.194515][ T7753] batadv0: entered allmulticast mode [ 783.200201][ T7753] wg1: entered allmulticast mode [ 783.205420][ T7753] wg2: entered allmulticast mode [ 783.210785][ T7753] veth0_to_bridge: entered allmulticast mode [ 783.217080][ T7753] bridge_slave_0: entered allmulticast mode [ 783.223333][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 783.231599][ T7753] veth1_to_bridge: entered allmulticast mode [ 783.238583][ T7753] bridge_slave_1: entered allmulticast mode [ 783.244975][ T7753] veth0_to_bond: entered allmulticast mode [ 783.252010][ T7753] veth1_to_bond: entered allmulticast mode [ 783.258417][ T7753] veth0_to_team: entered allmulticast mode [ 783.264551][ T7753] team_slave_0: entered allmulticast mode [ 783.270777][ T7753] veth1_to_team: entered allmulticast mode [ 783.276874][ T7753] team_slave_1: entered allmulticast mode [ 783.283256][ T7753] veth0_to_batadv: entered allmulticast mode [ 783.289744][ T7753] batadv_slave_0: entered allmulticast mode [ 783.295927][ T7753] xfrm0: entered allmulticast mode [ 783.301747][ T7753] veth0_to_hsr: entered allmulticast mode [ 783.307796][ T7753] hsr_slave_0: entered allmulticast mode [ 783.314053][ T7753] hsr0: entered allmulticast mode [ 783.319330][ T7753] veth1_virt_wifi: entered allmulticast mode [ 783.325449][ T7753] veth0_virt_wifi: entered allmulticast mode [ 783.331674][ T7753] veth1_macvtap: entered allmulticast mode [ 783.337742][ T7753] veth0_macvtap: entered allmulticast mode [ 783.344282][ T7753] macsec0: entered allmulticast mode [ 783.349910][ T7753] geneve0: entered allmulticast mode [ 783.355382][ T7753] geneve1: entered allmulticast mode [ 783.362914][ T7753] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 783.371107][ T7753] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 783.378923][ T7753] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 783.386626][ T7753] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 783.396090][ T7753] mac80211_hwsim hwsim11 ÿ: entered allmulticast mode [ 783.403348][ T7753] bridge1: entered allmulticast mode [ 783.409252][ T7753] erspan1: entered allmulticast mode [ 783.415057][ T7753] bridge2: entered allmulticast mode [ 783.420572][ T7753] bridge3: entered allmulticast mode [ 783.426048][ T7753] syztnl2: entered allmulticast mode [ 783.431702][ T7753] ipip0: entered allmulticast mode [ 783.437155][ T7753] ip6tnl1: entered allmulticast mode [ 783.442934][ T7753] veth2: entered allmulticast mode [ 783.451059][ T7753] veth3: entered allmulticast mode [ 783.456344][ T7753] gretap1: entered allmulticast mode [ 783.461841][ T7753] bond1: entered allmulticast mode [ 783.467218][ T7753] ip6erspan0: entered allmulticast mode [ 783.473567][ T7753] ip6tnl2: entered allmulticast mode [ 783.479280][ T7753] syztnl0: entered allmulticast mode [ 783.484839][ T7753] : entered allmulticast mode [ 783.490104][ T7753] ipvlan0: entered allmulticast mode [ 783.495671][ T7753] gtp0: entered allmulticast mode [ 783.503235][ T7753] macsec1: entered allmulticast mode [ 783.509405][ T7753] macsec2: entered allmulticast mode [ 783.515674][ T7753] mac80211_hwsim hwsim10 t: entered allmulticast mode [ 783.523202][ T7753] bond2: entered allmulticast mode [ 783.529048][ T7753] ip6gretap1: entered allmulticast mode [ 783.535017][ T7753] ip6tnl3: entered allmulticast mode [ 783.541297][ T7753] ip6tnl4: entered allmulticast mode [ 783.547377][ T7753] gtp1: entered allmulticast mode [ 783.554412][ T7753] bond3: entered allmulticast mode [ 783.561638][ T7753] bridge4: entered allmulticast mode [ 783.567398][ T7753] gre1: entered allmulticast mode [ 783.572799][ T7753] : entered allmulticast mode [ 783.577931][ T7753] veth0: entered allmulticast mode [ 783.583611][ T7753] veth1: entered allmulticast mode [ 783.589744][ T7753] @: entered allmulticast mode [ 783.594821][ T7753] veth4: entered allmulticast mode [ 783.600658][ T7753] veth5: entered allmulticast mode [ 783.606147][ T7753] veth6: entered allmulticast mode [ 783.611792][ T7753] veth7: entered allmulticast mode [ 783.617210][ T7753] bridge0: entered allmulticast mode [ 783.623614][ T7753] bridge5: entered allmulticast mode [ 783.629350][ T7753] bridge6: entered allmulticast mode [ 783.634913][ T7753] bridge7: entered allmulticast mode [ 783.640677][ T7753] veth8: entered allmulticast mode [ 783.646126][ T7753] veth9: entered allmulticast mode [ 783.652090][ T7753] vlan0: entered allmulticast mode [ 783.657549][ T7753] wireguard0: entered allmulticast mode [ 783.663548][ T7753] veth10: entered allmulticast mode [ 783.669259][ T7753] veth11: entered allmulticast mode [ 783.674809][ T7753] bridge8: entered allmulticast mode [ 783.680917][ T7753] veth12: entered allmulticast mode [ 783.686468][ T7753] veth13: entered allmulticast mode [ 783.692141][ T7753] gre2: entered allmulticast mode [ 783.697451][ T7753] bond4: entered allmulticast mode [ 783.702646][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 783.702674][ C1] lec:lec_tx_timeout: lec0 [ 783.711123][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 783.722987][ T7753] bridge9: entered allmulticast mode [ 783.723046][ T7776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14684'. [ 783.728692][ T7753] gre3: entered allmulticast mode [ 783.742960][ T7753] gre4: entered allmulticast mode [ 783.748100][ T7753] bond5: entered allmulticast mode [ 783.753581][ T7753] veth14: entered allmulticast mode [ 783.759071][ T7753] veth15: entered allmulticast mode [ 783.764536][ T7753] veth16: entered allmulticast mode [ 783.770021][ T7753] veth17: entered allmulticast mode [ 783.775419][ T7753] veth18: entered allmulticast mode [ 783.781381][ T7753] veth19: entered allmulticast mode [ 783.786742][ T7753] veth20: entered allmulticast mode [ 783.792155][ T7753] veth21: entered allmulticast mode [ 783.797762][ T7753] gre5: entered allmulticast mode [ 783.805163][ T7753] bridge10: entered allmulticast mode [ 783.815361][ T7753] bond6: entered allmulticast mode [ 783.824486][ T7753] bond7: entered allmulticast mode [ 783.831098][ T7753] geneve2: entered allmulticast mode [ 783.942072][ T3586] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.968838][ T3586] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.016367][ T3586] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.048645][ T3586] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.111628][ T7787] FAULT_INJECTION: forcing a failure. [ 784.111628][ T7787] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 784.205424][ T7787] CPU: 0 UID: 0 PID: 7787 Comm: syz.2.14687 Not tainted syzkaller #0 PREEMPT(full) [ 784.205450][ T7787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 784.205461][ T7787] Call Trace: [ 784.205469][ T7787] [ 784.205476][ T7787] dump_stack_lvl+0x189/0x250 [ 784.205499][ T7787] ? __pfx____ratelimit+0x10/0x10 [ 784.205525][ T7787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.205544][ T7787] ? __pfx__printk+0x10/0x10 [ 784.205564][ T7787] ? fs_reclaim_acquire+0x7d/0x100 [ 784.205598][ T7787] should_fail_ex+0x414/0x560 [ 784.205622][ T7787] prepare_alloc_pages+0x213/0x610 [ 784.205654][ T7787] __alloc_frozen_pages_noprof+0x123/0x370 [ 784.205684][ T7787] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 784.205707][ T7787] ? css_rstat_updated+0x23a/0x4f0 [ 784.205732][ T7787] ? policy_nodemask+0x27c/0x720 [ 784.205759][ T7787] alloc_pages_mpol+0x232/0x4a0 [ 784.205786][ T7787] folio_alloc_mpol_noprof+0x39/0x70 [ 784.205810][ T7787] shmem_alloc_and_add_folio+0x447/0xf60 [ 784.205834][ T7787] ? filemap_get_entry+0xad/0x2f0 [ 784.205858][ T7787] ? filemap_get_entry+0xad/0x2f0 [ 784.205879][ T7787] ? filemap_get_entry+0xad/0x2f0 [ 784.205907][ T7787] ? shmem_huge_global_enabled+0x174/0x3a0 [ 784.205936][ T7787] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 784.205960][ T7787] ? shmem_allowable_huge_orders+0x414/0x420 [ 784.205996][ T7787] shmem_get_folio_gfp+0x59d/0x1660 [ 784.206034][ T7787] shmem_fault+0x179/0x390 [ 784.206063][ T7787] __do_fault+0x138/0x390 [ 784.206098][ T7787] __handle_mm_fault+0x1847/0x5440 [ 784.206132][ T7787] ? __pfx___handle_mm_fault+0x10/0x10 [ 784.206164][ T7787] ? follow_page_pte+0x7ef/0x13e0 [ 784.206195][ T7787] handle_mm_fault+0x40a/0x8e0 [ 784.206225][ T7787] __get_user_pages+0x1699/0x2ce0 [ 784.206251][ T7787] ? __lock_acquire+0xab9/0xd20 [ 784.206311][ T7787] __gup_longterm_locked+0x123f/0x1660 [ 784.206343][ T7787] ? sanity_check_pinned_pages+0x1241/0x1300 [ 784.206374][ T7787] ? gup_fast_fallback+0x195f/0x2010 [ 784.206394][ T7787] gup_fast_fallback+0x1e6a/0x2010 [ 784.206422][ T7787] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 784.206467][ T7787] ? __pfx_gup_fast_fallback+0x10/0x10 [ 784.206487][ T7787] ? rcu_is_watching+0x15/0xb0 [ 784.206508][ T7787] ? rcu_is_watching+0x15/0xb0 [ 784.206523][ T7787] ? is_valid_gup_args+0x11f/0x200 [ 784.206544][ T7787] ? pin_user_pages_fast+0x4d/0xb0 [ 784.206564][ T7787] rds_info_getsockopt+0x1fb/0x470 [ 784.206599][ T7787] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 784.206628][ T7787] ? __might_fault+0xb0/0x130 [ 784.206652][ T7787] ? rds_getsockopt+0x2d4/0x500 [ 784.206672][ T7787] ? __pfx_rds_getsockopt+0x10/0x10 [ 784.206696][ T7787] do_sock_getsockopt+0x36f/0x450 [ 784.206725][ T7787] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 784.206751][ T7787] ? do_syscall_64+0xa0/0xfa0 [ 784.206778][ T7787] ? __fget_files+0x2a/0x420 [ 784.206799][ T7787] ? __fget_files+0x3a0/0x420 [ 784.206820][ T7787] ? __fget_files+0x2a/0x420 [ 784.206849][ T7787] __x64_sys_getsockopt+0x1a5/0x250 [ 784.206875][ T7787] ? do_syscall_64+0xa0/0xfa0 [ 784.206904][ T7787] ? do_syscall_64+0xa0/0xfa0 [ 784.206935][ T7787] do_syscall_64+0xfa/0xfa0 [ 784.206961][ T7787] ? lockdep_hardirqs_on+0x9c/0x150 [ 784.206988][ T7787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.207006][ T7787] ? clear_bhb_loop+0x60/0xb0 [ 784.207028][ T7787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.207046][ T7787] RIP: 0033:0x7fe74e78eec9 [ 784.207063][ T7787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.207084][ T7787] RSP: 002b:00007fe74f57c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 784.207103][ T7787] RAX: ffffffffffffffda RBX: 00007fe74e9e6090 RCX: 00007fe74e78eec9 [ 784.207116][ T7787] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 784.207128][ T7787] RBP: 00007fe74f57c090 R08: 0000200000000000 R09: 0000000000000000 [ 784.207140][ T7787] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 784.207152][ T7787] R13: 00007fe74e9e6128 R14: 00007fe74e9e6090 R15: 00007ffff3782be8 [ 784.207183][ T7787] [ 784.228528][ T7783] veth0: entered promiscuous mode [ 784.259352][ C1] net_ratelimit: 1 callbacks suppressed [ 784.259370][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 784.259717][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 784.351790][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14685'. [ 784.715146][ T7788] veth0 (unregistering): left promiscuous mode [ 784.881453][ T7811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14695'. [ 785.283837][ T7835] netlink: 'syz.1.14704': attribute type 25 has an invalid length. [ 785.298447][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 785.305714][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 785.562589][ T7850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.584117][ T7854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14710'. [ 785.651482][ T7850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.686217][ T7860] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 785.740715][ T7865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.838076][ T7873] netlink: 'syz.2.14718': attribute type 25 has an invalid length. [ 785.911823][ T7876] syzkaller0: entered promiscuous mode [ 785.917417][ T7876] syzkaller0: entered allmulticast mode [ 786.085849][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14723'. [ 786.096815][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14723'. [ 786.110875][ T7889] sch_fq: defrate 0 ignored. [ 786.201900][ T7893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14726'. [ 786.338583][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 786.345868][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 786.393576][ T7903] netlink: 'syz.0.14729': attribute type 7 has an invalid length. [ 786.402173][ T7905] syzkaller0: entered promiscuous mode [ 786.407709][ T7905] syzkaller0: entered allmulticast mode [ 786.422516][ T7903] netlink: 140 bytes leftover after parsing attributes in process `syz.0.14729'. [ 786.812695][ T7926] syzkaller0: entered promiscuous mode [ 786.818484][ T7926] syzkaller0: entered allmulticast mode [ 786.913827][ T7928] netlink: 'syz.3.14741': attribute type 1 has an invalid length. [ 787.000317][ T7928] bond16: entered promiscuous mode [ 787.005838][ T7928] 8021q: adding VLAN 0 to HW filter on device bond16 [ 787.378570][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 787.385828][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 787.451452][ T7963] syzkaller1: entered promiscuous mode [ 787.461214][ T7963] syzkaller1: entered allmulticast mode [ 787.689140][ T7970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.761902][ T7970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.804373][ T7976] syzkaller1: entered promiscuous mode [ 787.810498][ T7976] syzkaller1: entered allmulticast mode [ 787.829361][ T7970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.122332][ T7983] __nla_validate_parse: 4 callbacks suppressed [ 788.122351][ T7983] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14760'. [ 788.189680][ T7986] netem: change failed [ 788.418551][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 788.425854][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 788.454734][ T7997] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 788.606727][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14767'. [ 788.718218][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 788.726411][ C1] lec:lec_tx_timeout: lec0 [ 788.737606][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 788.896828][ T8027] FAULT_INJECTION: forcing a failure. [ 788.896828][ T8027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.912614][ T8027] CPU: 0 UID: 0 PID: 8027 Comm: syz.2.14774 Not tainted syzkaller #0 PREEMPT(full) [ 788.912641][ T8027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 788.912653][ T8027] Call Trace: [ 788.912660][ T8027] [ 788.912676][ T8027] dump_stack_lvl+0x189/0x250 [ 788.912700][ T8027] ? __pfx____ratelimit+0x10/0x10 [ 788.912728][ T8027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 788.912748][ T8027] ? __pfx__printk+0x10/0x10 [ 788.912780][ T8027] should_fail_ex+0x414/0x560 [ 788.912806][ T8027] _copy_to_user+0x31/0xb0 [ 788.912836][ T8027] simple_read_from_buffer+0xe1/0x170 [ 788.912863][ T8027] proc_fail_nth_read+0x1b3/0x220 [ 788.912896][ T8027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 788.912929][ T8027] ? rw_verify_area+0x2a6/0x4d0 [ 788.912948][ T8027] ? __lock_acquire+0xab9/0xd20 [ 788.912973][ T8027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 788.913013][ T8027] vfs_read+0x1fd/0xa30 [ 788.913031][ T8027] ? fdget_pos+0x247/0x320 [ 788.913058][ T8027] ? __pfx___mutex_lock+0x10/0x10 [ 788.913076][ T8027] ? __pfx_vfs_read+0x10/0x10 [ 788.913097][ T8027] ? __fget_files+0x2a/0x420 [ 788.913123][ T8027] ? __fget_files+0x3a0/0x420 [ 788.913143][ T8027] ? __fget_files+0x2a/0x420 [ 788.913175][ T8027] ksys_read+0x145/0x250 [ 788.913195][ T8027] ? __pfx_ksys_read+0x10/0x10 [ 788.913217][ T8027] ? do_syscall_64+0xbe/0xfa0 [ 788.913248][ T8027] do_syscall_64+0xfa/0xfa0 [ 788.913274][ T8027] ? lockdep_hardirqs_on+0x9c/0x150 [ 788.913302][ T8027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.913318][ T8027] ? clear_bhb_loop+0x60/0xb0 [ 788.913337][ T8027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.913353][ T8027] RIP: 0033:0x7fe74e78d8dc [ 788.913370][ T8027] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 788.913386][ T8027] RSP: 002b:00007fe74f59d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 788.913406][ T8027] RAX: ffffffffffffffda RBX: 00007fe74e9e5fa0 RCX: 00007fe74e78d8dc [ 788.913419][ T8027] RDX: 000000000000000f RSI: 00007fe74f59d0a0 RDI: 0000000000000004 [ 788.913430][ T8027] RBP: 00007fe74f59d090 R08: 0000000000000000 R09: 0000000000000000 [ 788.913441][ T8027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 788.913451][ T8027] R13: 00007fe74e9e6038 R14: 00007fe74e9e5fa0 R15: 00007ffff3782be8 [ 788.913482][ T8027] [ 789.212320][ T8025] netlink: 164 bytes leftover after parsing attributes in process `syz.1.14772'. [ 789.276867][ T8033] netlink: 'syz.4.14777': attribute type 10 has an invalid length. [ 789.294055][ T8033] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14777'. [ 789.325164][ T8033] geneve0: left allmulticast mode [ 789.358984][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14777'. [ 789.361275][ T8033] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 789.407269][ T8038] syzkaller0: entered promiscuous mode [ 789.423745][ T8038] syzkaller0: entered allmulticast mode [ 789.458447][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 789.465732][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 789.613031][ T8049] tipc: Enabling of bearer rejected, failed to enable media [ 789.694983][ T8055] netlink: 'syz.4.14784': attribute type 1 has an invalid length. [ 789.815184][ T8051] bond8: (slave gretap2): making interface the new active one [ 789.850881][ T8051] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 790.074249][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14790'. [ 790.498452][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 790.505733][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 790.543969][ T8080] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14791'. [ 790.691260][ T8101] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.14796'. [ 790.715778][ T8103] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 790.720475][ T8098] IPv6: NLM_F_CREATE should be specified when creating new route [ 791.140244][ T8124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14806'. [ 791.212425][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14807'. [ 791.486599][ T8147] netlink: 'syz.2.14812': attribute type 1 has an invalid length. [ 791.499574][ T8147] netlink: 'syz.2.14812': attribute type 3 has an invalid length. [ 791.538891][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 791.546147][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 791.572005][ T8150] syzkaller0: entered promiscuous mode [ 791.577519][ T8150] syzkaller0: entered allmulticast mode [ 791.903738][ T8164] tipc: Bearer : already 2 bearers with priority 10 [ 791.928752][ T8164] tipc: Bearer : trying with adjusted priority [ 791.935872][ T8164] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 792.023328][ T8173] netlink: 'syz.1.14819': attribute type 1 has an invalid length. [ 792.034345][ T8172] tipc: Enabling of bearer rejected, already enabled [ 792.127392][ T8175] tipc: Enabling of bearer rejected, failed to enable media [ 792.483670][ T8202] tipc: Enabling of bearer rejected, already enabled [ 792.578557][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 792.585844][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 792.806587][ T8222] tipc: Enabling of bearer rejected, already enabled [ 793.138924][ C0] ------------[ cut here ]------------ [ 793.145002][ C0] ODEBUG: free active (active state 0) object: ffff88805846c890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 793.158618][ C0] WARNING: CPU: 0 PID: 8236 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 793.168123][ C0] Modules linked in: [ 793.172416][ C0] CPU: 0 UID: 0 PID: 8236 Comm: syz.4.14840 Not tainted syzkaller #0 PREEMPT(full) [ 793.181837][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 793.191967][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 793.197810][ C0] Code: 4c 89 ff e8 87 9e 8d fd 4d 8b 0f 48 c7 c7 00 45 c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 0a 11 ec fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 56 07 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 793.212148][ T8244] tipc: Enabling of bearer rejected, already enabled [ 793.217477][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292 [ 793.231742][ C0] RAX: 50945e998a1c8f00 RBX: dffffc0000000000 RCX: ffff88802f008000 [ 793.239779][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 793.247780][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 793.255818][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa138 R12: ffffffff8a37aee0 [ 793.263856][ C0] R13: ffffffff8bc04680 R14: ffff88805846c890 R15: ffffffff8b6ce100 [ 793.271896][ C0] FS: 0000000000000000(0000) GS:ffff888125d3b000(0000) knlGS:0000000000000000 [ 793.280891][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.287505][ C0] CR2: 000000110c320bf5 CR3: 000000000df36000 CR4: 00000000003526f0 [ 793.295532][ C0] Call Trace: [ 793.298860][ C0] [ 793.301737][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 793.307322][ C0] ? do_raw_spin_lock+0x121/0x290 [ 793.312425][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 793.317585][ C0] kfree+0x112/0x440 [ 793.321568][ C0] rose_timer_expiry+0x4cb/0x600 [ 793.326556][ C0] ? call_timer_fn+0x155/0x5f0 [ 793.331408][ C0] call_timer_fn+0x17e/0x5f0 [ 793.336059][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 793.341700][ C0] ? call_timer_fn+0xbe/0x5f0 [ 793.346411][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 793.351621][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 793.356870][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 793.362140][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 793.367644][ C0] __run_timer_base+0x61a/0x860 [ 793.372578][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 793.377986][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 793.384316][ C0] run_timer_softirq+0xb7/0x180 [ 793.389240][ C0] handle_softirqs+0x283/0x870 [ 793.394060][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 793.398904][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 793.404256][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 793.409533][ C0] __irq_exit_rcu+0xca/0x1f0 [ 793.414160][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 793.419453][ C0] irq_exit_rcu+0x9/0x30 [ 793.423743][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 793.429438][ C0] [ 793.432405][ C0] [ 793.435377][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 793.441431][ C0] RIP: 0010:lock_release+0x63/0x3e0 [ 793.446696][ C0] Code: 00 89 c0 48 0f a3 05 7c d8 00 0e 73 16 e8 55 f5 08 00 84 c0 75 0d f6 05 bf e8 ea 0d 01 0f 84 ad 02 00 00 83 3d 9d 09 01 0e 00 <0f> 84 44 02 00 00 65 8b 05 90 1c f2 10 85 c0 0f 85 35 02 00 00 65 [ 793.466364][ C0] RSP: 0018:ffffc9000b6b74f0 EFLAGS: 00000202 [ 793.472495][ C0] RAX: 0000000000000001 RBX: ffffffff822f0dfa RCX: 50945e998a1c8f00 [ 793.480536][ C0] RDX: 0000000000000000 RSI: ffffffff8bc03b40 RDI: ffffffff8bc03b00 [ 793.488573][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff822f0dfa [ 793.496573][ C0] R10: dffffc0000000000 R11: fffff940002dd231 R12: dffffc0000000000 [ 793.504608][ C0] R13: ffffffff822f0dfa R14: ffffffff8e13aa20 R15: ffff88813fffa560 [ 793.512648][ C0] ? pfn_valid+0xba/0x490 [ 793.517061][ C0] ? pfn_valid+0xba/0x490 [ 793.521467][ C0] ? pfn_valid+0xba/0x490 [ 793.525867][ C0] ? pfn_valid+0xba/0x490 [ 793.530271][ C0] ? pfn_valid+0xba/0x490 [ 793.534671][ C0] pfn_valid+0x3b2/0x490 [ 793.539057][ C0] page_table_check_clear+0x21/0x700 [ 793.544384][ C0] ? vm_normal_page+0xb7/0x210 [ 793.549224][ C0] unmap_page_range+0x3445/0x4370 [ 793.554384][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 793.559847][ C0] ? mas_find+0xb0e/0xd30 [ 793.564218][ C0] ? unmap_vmas+0x144/0x580 [ 793.568791][ C0] unmap_vmas+0x399/0x580 [ 793.573206][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 793.578141][ C0] exit_mmap+0x248/0xb50 [ 793.582458][ C0] ? uprobe_clear_state+0x20f/0x290 [ 793.587700][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 793.592523][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 793.598235][ C0] ? __pfx_exit_aio+0x10/0x10 [ 793.602964][ C0] ? uprobe_clear_state+0x27c/0x290 [ 793.608250][ C0] __mmput+0x118/0x430 [ 793.612364][ C0] exit_mm+0x1da/0x2c0 [ 793.616473][ C0] ? __pfx_exit_mm+0x10/0x10 [ 793.621144][ C0] ? rcu_is_watching+0x15/0xb0 [ 793.625951][ C0] do_exit+0x648/0x2300 [ 793.628510][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 793.630183][ C0] ? preempt_schedule+0xae/0xc0 [ 793.641933][ C0] ? preempt_schedule_common+0x83/0xd0 [ 793.647437][ C0] ? preempt_schedule+0xae/0xc0 [ 793.652348][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 793.657772][ C0] ? __pfx_do_exit+0x10/0x10 [ 793.662429][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 793.667867][ C0] do_group_exit+0x21c/0x2d0 [ 793.672545][ C0] __x64_sys_exit_group+0x3f/0x40 [ 793.677628][ C0] x64_sys_call+0x21f7/0x2200 [ 793.682376][ C0] do_syscall_64+0xfa/0xfa0 [ 793.686928][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 793.692221][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.698352][ C0] ? clear_bhb_loop+0x60/0xb0 [ 793.703066][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.709027][ C0] RIP: 0033:0x7f3725b8eec9 [ 793.713463][ C0] Code: Unable to access opcode bytes at 0x7f3725b8ee9f. [ 793.720524][ C0] RSP: 002b:00007ffd34252608 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 793.729016][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3725b8eec9 [ 793.736988][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 793.744993][ C0] RBP: 00007ffd3425266c R08: 0000000f342526ff R09: 00000000000927c0 [ 793.753001][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000b12 [ 793.758232][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 793.761010][ C0] R13: 00000000000927c0 R14: 00000000000c1986 R15: 00007ffd342526c0 [ 793.761057][ C0] [ 793.761082][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 793.761101][ C0] CPU: 0 UID: 0 PID: 8236 Comm: syz.4.14840 Not tainted syzkaller #0 PREEMPT(full) [ 793.761129][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 793.761146][ C0] Call Trace: [ 793.761159][ C0] [ 793.761169][ C0] dump_stack_lvl+0x99/0x250 [ 793.761202][ C0] ? __asan_memcpy+0x40/0x70 [ 793.761241][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 793.761269][ C0] ? __pfx__printk+0x10/0x10 [ 793.761313][ C0] vpanic+0x281/0x750 [ 793.761350][ C0] ? __pfx__printk+0x10/0x10 [ 793.761375][ C0] ? __pfx_vpanic+0x10/0x10 [ 793.761411][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 793.761477][ C0] panic+0xb9/0xc0 [ 793.761510][ C0] ? __pfx_panic+0x10/0x10 [ 793.761565][ C0] __warn+0x31b/0x4b0 [ 793.761598][ C0] ? debug_print_object+0x16b/0x1e0 [ 793.761626][ C0] ? debug_print_object+0x16b/0x1e0 [ 793.761649][ C0] report_bug+0x2be/0x4f0 [ 793.761682][ C0] ? debug_print_object+0x16b/0x1e0 [ 793.761707][ C0] ? debug_print_object+0x16b/0x1e0 [ 793.761730][ C0] ? debug_print_object+0x16d/0x1e0 [ 793.761752][ C0] handle_bug+0x84/0x160 [ 793.761780][ C0] exc_invalid_op+0x1a/0x50 [ 793.761806][ C0] asm_exc_invalid_op+0x1a/0x20 [ 793.761830][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 793.761855][ C0] Code: 4c 89 ff e8 87 9e 8d fd 4d 8b 0f 48 c7 c7 00 45 c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 0a 11 ec fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 56 07 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 793.761876][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292 [ 793.761900][ C0] RAX: 50945e998a1c8f00 RBX: dffffc0000000000 RCX: ffff88802f008000 [ 793.761919][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 793.761935][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 793.761948][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa138 R12: ffffffff8a37aee0 [ 793.761975][ C0] R13: ffffffff8bc04680 R14: ffff88805846c890 R15: ffffffff8b6ce100 [ 793.761998][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 793.762053][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 793.762087][ C0] ? do_raw_spin_lock+0x121/0x290 [ 793.762124][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 793.762160][ C0] kfree+0x112/0x440 [ 793.762191][ C0] rose_timer_expiry+0x4cb/0x600 [ 793.762224][ C0] ? call_timer_fn+0x155/0x5f0 [ 793.762263][ C0] call_timer_fn+0x17e/0x5f0 [ 793.762297][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 793.762332][ C0] ? call_timer_fn+0xbe/0x5f0 [ 793.762364][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 793.762411][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 793.762446][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 793.762480][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 793.762517][ C0] __run_timer_base+0x61a/0x860 [ 793.762571][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 793.762600][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 793.762652][ C0] run_timer_softirq+0xb7/0x180 [ 793.762684][ C0] handle_softirqs+0x283/0x870 [ 793.762724][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 793.762778][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 793.762818][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 793.762849][ C0] __irq_exit_rcu+0xca/0x1f0 [ 793.762884][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 793.762929][ C0] irq_exit_rcu+0x9/0x30 [ 793.762966][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 793.762999][ C0] [ 793.763008][ C0] [ 793.763017][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 793.763042][ C0] RIP: 0010:lock_release+0x63/0x3e0 [ 793.763073][ C0] Code: 00 89 c0 48 0f a3 05 7c d8 00 0e 73 16 e8 55 f5 08 00 84 c0 75 0d f6 05 bf e8 ea 0d 01 0f 84 ad 02 00 00 83 3d 9d 09 01 0e 00 <0f> 84 44 02 00 00 65 8b 05 90 1c f2 10 85 c0 0f 85 35 02 00 00 65 [ 793.763092][ C0] RSP: 0018:ffffc9000b6b74f0 EFLAGS: 00000202 [ 793.763113][ C0] RAX: 0000000000000001 RBX: ffffffff822f0dfa RCX: 50945e998a1c8f00 [ 793.763127][ C0] RDX: 0000000000000000 RSI: ffffffff8bc03b40 RDI: ffffffff8bc03b00 [ 793.763144][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff822f0dfa [ 793.763159][ C0] R10: dffffc0000000000 R11: fffff940002dd231 R12: dffffc0000000000 [ 793.763177][ C0] R13: ffffffff822f0dfa R14: ffffffff8e13aa20 R15: ffff88813fffa560 [ 793.763198][ C0] ? pfn_valid+0xba/0x490 [ 793.763221][ C0] ? pfn_valid+0xba/0x490 [ 793.763245][ C0] ? pfn_valid+0xba/0x490 [ 793.763284][ C0] ? pfn_valid+0xba/0x490 [ 793.763306][ C0] ? pfn_valid+0xba/0x490 [ 793.763333][ C0] pfn_valid+0x3b2/0x490 [ 793.763360][ C0] page_table_check_clear+0x21/0x700 [ 793.763386][ C0] ? vm_normal_page+0xb7/0x210 [ 793.763420][ C0] unmap_page_range+0x3445/0x4370 [ 793.763509][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 793.763549][ C0] ? mas_find+0xb0e/0xd30 [ 793.763580][ C0] ? unmap_vmas+0x144/0x580 [ 793.763615][ C0] unmap_vmas+0x399/0x580 [ 793.763656][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 793.763718][ C0] exit_mmap+0x248/0xb50 [ 793.763744][ C0] ? uprobe_clear_state+0x20f/0x290 [ 793.763783][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 793.763804][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 793.763843][ C0] ? __pfx_exit_aio+0x10/0x10 [ 793.763902][ C0] ? uprobe_clear_state+0x27c/0x290 [ 793.763947][ C0] __mmput+0x118/0x430 [ 793.763996][ C0] exit_mm+0x1da/0x2c0 [ 793.764029][ C0] ? __pfx_exit_mm+0x10/0x10 [ 793.764064][ C0] ? rcu_is_watching+0x15/0xb0 [ 793.764093][ C0] do_exit+0x648/0x2300 [ 793.764119][ C0] ? preempt_schedule+0xae/0xc0 [ 793.764158][ C0] ? preempt_schedule_common+0x83/0xd0 [ 793.764194][ C0] ? preempt_schedule+0xae/0xc0 [ 793.764227][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 793.764263][ C0] ? __pfx_do_exit+0x10/0x10 [ 793.764298][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 793.764343][ C0] do_group_exit+0x21c/0x2d0 [ 793.764381][ C0] __x64_sys_exit_group+0x3f/0x40 [ 793.764410][ C0] x64_sys_call+0x21f7/0x2200 [ 793.764438][ C0] do_syscall_64+0xfa/0xfa0 [ 793.764474][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 793.764511][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.764535][ C0] ? clear_bhb_loop+0x60/0xb0 [ 793.764566][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.764590][ C0] RIP: 0033:0x7f3725b8eec9 [ 793.764611][ C0] Code: Unable to access opcode bytes at 0x7f3725b8ee9f. [ 793.764625][ C0] RSP: 002b:00007ffd34252608 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 793.764650][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3725b8eec9 [ 793.764667][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 793.764681][ C0] RBP: 00007ffd3425266c R08: 0000000f342526ff R09: 00000000000927c0 [ 793.764699][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000b12 [ 793.764714][ C0] R13: 00000000000927c0 R14: 00000000000c1986 R15: 00007ffd342526c0 [ 793.764755][ C0] [ 793.769347][ C0] Kernel Offset: disabled