last executing test programs: 4.85488779s ago: executing program 2 (id=2795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x200800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x800) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000100)="89e7ee2c21fe62a3b46380c988ca4b5e69bbb983ca55c0d60ecdd3c015d95f5ee4142df6640b", 0x26}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x200800, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) (async) preadv(r4, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x800) (async) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000100)="89e7ee2c21fe62a3b46380c988ca4b5e69bbb983ca55c0d60ecdd3c015d95f5ee4142df6640b", 0x26}], 0x1) (async) 4.712895812s ago: executing program 2 (id=2797): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000180)=0x4) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000009513c2e9d62bd6612663068efbd8ac669799628637d3202f15470a5b8a6b5e23e3831201573fdea38113b5d6836bead71c4ea17852655f9b185ac2bb5cf037081ca0f34f0d5cff18cc607518a377a69abdf7b6beb6244f9c041ee7c8fe66c6eb117e51d4940d0a40a90227251130359f0b09714cd37f3fb56cd3c789693900"], 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0x2, 0x1, 0x2, 0x80, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x79, &(0x7f0000000740)=""/121, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x1, 0x72, 0xffff}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000900)=[r7, 0xffffffffffffffff], &(0x7f0000000940)=[{0x2, 0x5, 0x3, 0x3}, {0x5, 0x2, 0xc, 0x8}, {0x5, 0x5, 0xb, 0x6}, {0x5, 0x4, 0x1, 0x7}, {0x5, 0x1, 0x10, 0x3}, {0x2, 0x1, 0x0, 0x8}, {0x5, 0x2, 0xc, 0x1}], 0x10, 0x10000}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0xb, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r10, 0x0) sendto$inet6(r10, &(0x7f0000000080)="e3813ec3e636c0b333b7ea643a74ee5a73f69e5a43d0810655638ae582", 0x1d, 0x4040001, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.613754156s ago: executing program 2 (id=2799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x1dc, 0x30, 0x200, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x1c8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0x144, 0xa, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x125, 0x6, "c0bf1a10c97e86292441131f78f0d34cf350375f5dfeb940e1ae97edb36d0a31e9fa39ce9754924c38d18410e51472529cc64d104ba8883565d4a1c4290082a76a890159b1742de7733d0e44fff8db0f949450a7866526b0ec50592c552e0b1e57d8afbdfb205a585071afd3fad84948f9071e693448698e4cadf38989bce2f4ff709a940813b9fffa5f72a0aa7d0c96716e7bfcac1174dd70bd1377b376169f6d4b440e427f0407634d890200461f522008f697de3ec26826ddd96d0c614094457af8dc6d91f1866b1b522c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1dc}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f00000009c0)={{r0}, "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"}) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000003e0007012fbd7000fcdbdf25047c0000040000002000018006000600800a000014001900fe"], 0x38}}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYRESDEC=r7, @ANYBLOB="0000000000000000b703f7001300008fad0000000c0000ffb79aad591445892b8a0100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.472732373s ago: executing program 2 (id=2800): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x8004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x8004) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) (async) 4.436866258s ago: executing program 2 (id=2802): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x9d155b29becae6e4, 0x3, 0x0, {{0x8, 0x4, 0x2, 0x7, 0x20, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x0, 0x6, "f6795cc8"}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x27d0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={r5, 0x5}, &(0x7f00000002c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00f9ff5200010002000000fdffffff0203000003230200edcaf49957e04a81dacd83b3fc5aed18e16b750d64b2c88bea832f21d2725f5ae60a401c6b23a355fcbfdd34596bf0604fe8c72400eec913e493722372a1d45d49dad6d8428143857aa91a85057d"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007111b70000000000851000000200000085000000ae00000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', r0, @fallback=0xa, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x9d155b29becae6e4, 0x3, 0x0, {{0x8, 0x4, 0x2, 0x7, 0x20, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x0, 0x6, "f6795cc8"}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x27d0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={r5, 0x5}, &(0x7f00000002c0)=0xc) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00f9ff5200010002000000fdffffff0203000003230200edcaf49957e04a81dacd83b3fc5aed18e16b750d64b2c88bea832f21d2725f5ae60a401c6b23a355fcbfdd34596bf0604fe8c72400eec913e493722372a1d45d49dad6d8428143857aa91a85057d"], 0x1c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007111b70000000000851000000200000085000000ae00000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', r0, @fallback=0xa, 0xffffffffffffffff, 0x6}, 0x94) (async) 4.312492381s ago: executing program 2 (id=2804): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008000640000080000500010006000000050005000200007a31000000000d000300686173683a6e657400"/84], 0x54}}, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3.032903587s ago: executing program 3 (id=2818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc243, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1402, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000054}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc3}) bind$alg(r3, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x5c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) 2.024563268s ago: executing program 3 (id=2824): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000001c0)=0x4, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r2) 1.90910182s ago: executing program 3 (id=2825): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 1.903813005s ago: executing program 3 (id=2826): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b800000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) listen(r0, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000640)="6e666f1afd7271ac40e9f77287d585b14837fe1e05b2ab67ff0fd14da057645a38234f9c78c190b6c4067ef8c6b0f6f93413c82bd49d87f8f1ab25f0eb6027680dd250a943eed18368de1af66d96bd519d5b9821b0b4a86b76ee087f2fe0bf1e1d374f4995cd73dc7bb5ae3eeeb3284c2e707499e87b48d6003da50931a1d9e87c4ad08c76307aa9a0898b3cf202d23847f861a5a1a685bbdc3f484826abd2573b4b5b0545d85b6e36378aeef9ece3c18d7242094924cf27ea523e8a61bbdddf2c159fdc8bc33349d2435f9c180e0013a27ef32f1511bb2a2f774a07f0f48c5a38188b2ab4f6012fca315e72afb8c259285c2c205e2a21", 0xf7) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000580)={'security\x00', 0x4b, "d3a22b9ff986a12e9f9c75439345c9f95515514ae157a8e1340f0cb041bd3b7d7918607bfdfc7bad8882adc633e343fa83c44d2a9b36f3267abffc79ca5fded79bacef8c893d37bfe3c466"}, &(0x7f0000000600)=0x6f) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000010651fbe347b322b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x40, 0x7, 0x100, 0x0, {{0xa, 0x4, 0x0, 0x3, 0x28, 0x65, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @loopback, {[@timestamp={0x44, 0xc, 0x72, 0x0, 0x4, [0xd90, 0x8080000]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x10, 0x7800, 0x0, 0x0, {{0x20, 0x4, 0x1, 0x18, 0x80, 0x67, 0x0, 0xac, 0x2f, 0x0, @private=0xa010100, @empty, {[@cipso={0x86, 0x3d, 0x6, [{0x5, 0x4, '$l'}, {0x6, 0x11, "f45172f38e67ab7fda250f2fb91066"}, {0x5, 0x12, "beee01c81b51936024f8b7b78fa41aa3"}, {0x0, 0x10, "c51b94649ba084a7fbb3185d1ba2"}]}, @end, @timestamp_addr={0x44, 0x2c, 0x74, 0x1, 0x5, [{@loopback, 0x9}, {@empty, 0x1}, {@loopback, 0x9}, {@private=0xa010100, 0xa8c6}, {@multicast1}]}]}}}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x130, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@generic="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"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf4, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1020}, 0x8801) 1.685179426s ago: executing program 0 (id=2830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x1000) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000080)={{r0}, {@val={r1}, @max}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c"], 0x44}}, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000001180)={{r0}, 0x0, 0x0, @unused=[0x1, 0xd, 0x101, 0xffffffff80000000], @subvolid=0x100}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x884}, 0x0) 1.603825686s ago: executing program 3 (id=2831): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) 1.500855696s ago: executing program 3 (id=2832): r0 = socket$kcm(0x2, 0x7, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e000100fdffffff0000000002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x42816}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b25, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000700), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0xc0) socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)={0x144c, 0x13, 0x601, 0x70bd2a, 0x25dfdbfc, {}, [@generic="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", @nested={0x8, 0xcf, 0x0, 0x1, [@nested={0x4, 0x2b}]}, @nested={0xac, 0x98, 0x0, 0x1, [@generic="e62cefc5c8206b2df7c4ffafe297935bce615854609a700bf0d552228785cb82ce1deb9f721250c41fd762a6b16f844691dc0dfb8e2468ca2776462d23bced56db59cc1607709fe649ace060b0ff33ea68deb25dd11fe5632554e454546f6fb6c916b4a3f739b9943910a7e76b5635e9b8028325b359aa3affe0667366edcba657806749b3328f09d226d19658708f49b3cc1183452208e630daae1bd9c284575c73c33d6eddc61f"]}, @generic="0b030393da3877fdea86772402b41be4250cabb6e9be7865b1c56e3287a1f610d85b939477e39e06305a3dd8b7c166163092c05fa9a26a4a97c91a36c28096dfc907c0ef61b4ead39f38e986d9507a3d0bc453c23dea2d87babcd7d311a44d3a2ca10a76b03c39b3beac6d6a02c4cc721b71a635913b498b670cfd7a27d26d3a21905e9dd34c1d2c4dd943bdd61f1a804e35", @generic="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", @generic="02c86da1ea30c8239fc01d8939a86d5fd63b318394354bea5d49a25f5369bec3217effcb81f9c00fd31089abf6c7998c032284c6e98cf30cceffb93516181f25e6b303cf1b8784ae07de41fdb6c95c0f45d6ea749bd05dc2dba5b6868e918c7fe888a6b06af55accce8b80dec3fe936773048ba79f239450e8c392ea8e0aabca6eb23bf459019b196bac131cc90839661bf9022d370652e259b9746d6b51bf6d24a7695d04fa8a0e19c77e5db148aab156c4404818b51e19be19700ded1f94760edd342a3c12f861953e615139bed00612c40af4", @typed={0x4, 0xc0}, @nested={0x109, 0x76, 0x0, 0x1, [@generic="be1b0c98cca350eb0a693d3a31c78473f2995c29174dad8f2bba128b1c355abd396ecfd447edd8dbe742b4aa9d5b3f53c295abb84fb0f3ee5663ce361a44a15a72b400ecdc3c6fe8ad2260eb75865a545f169e031b0eb205877cc2e898f76cc1fe51a19c2cb752630dff535dfac255bc2276df898780feb933a9fa77f8f342140abb7efe1662fcf325d2f5827d44221997cddaaef6544bdd279930544b4acc380a1879d2e5e7ef5be793ca2b74a7c643ca1c2645", @generic="9034e6a3214043a7682849cfb687f0445b58646b5a21f2577cb8d9754a1c5bfd46364648e60a5bf4bac55f4899c57feb6147cf609949ae432e777a8a8f27d3cb0523fead43121ac23e786998d2515f1299"]}, @typed={0x14, 0xcc, 0x0, 0x0, @ipv6=@mcast2}]}, 0x144c}}, 0x45) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1.48894311s ago: executing program 0 (id=2834): r0 = socket(0xa, 0x3, 0x4) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) 1.365883064s ago: executing program 0 (id=2835): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) 1.284262211s ago: executing program 0 (id=2837): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x803, 0x8) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf250200000000000000060007000b0000000c000880050004000100000008000600f200000008000500", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) 1.081498883s ago: executing program 1 (id=2840): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@deltaction={0x44, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYRESHEX=r0], 0x44}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f00000000c0)={@empty, r2}, 0x14) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4c0ddb65}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0xe0000000}}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0x5, 0x3}) 799.9819ms ago: executing program 1 (id=2842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="1e1651c83a4951b85375ab8786b6ff8f32f1badc70195f0db5ca05658cf4246e6d71dabffde4cc834bb07ac393c715ace53932e8e8d78f32f4cf8ae55bd25620ebbc15f4150c0439ec33b95e29d7411ba45b9d5990f0b31ccb4d8da4d1d7a69806f3bcc3fcdf456157a4edf20e6630dc701c38bcf1f3bfd4f3bb5c", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf25030000000c00018008000100", @ANYRES32=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x1ffc, 0x5, {{0x10, 0x4, 0x1, 0x1a, 0x40, 0x64, 0x0, 0x90, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @lsrr={0x83, 0x2b, 0xa3, [@loopback, @multicast2, @local, @loopback, @loopback, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x17}, @loopback, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x2238, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "cecaa31e6c66239044932fa09c31e9ad9c88866eea49ee7e0e13fed21625020dbf199d076f7a64065646cb8912ddd067d40c15c8e6715f6848ed9fadc1cdb907673a189f85425ac667959a81c8a8c8886158ea430b2bcb8ace18909b6532046fa3de831bacae67b900200d7c6f1e30635872e192bff63d2333dce31b1ab86b89c3ba1701d86d5a3af67c893430ab9454f95daedfae58b9b4a846d314"}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x107c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{[\a\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&,{}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x28, 0x5, "cc9ed14cbb997d10722bdecb7bc2024ed47c56e3e8717b2d14481500081f079c2ad0a160"}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x6c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x64, 0x5, "3964150b8af35ff524eb79e7f5cbd0b0cf03cd8ebdd56af16a217ac4939c054480e56f1d675f29f110fa647df8fdaf66d43c2fc83b361feee2a6f0c4fadb022977698a042bcb645c35f2503151014b2aa8993891cd83353bfdb93fef29a2e419"}]}]}, 0x2238}, 0x1, 0x0, 0x0, 0x20000800}, 0x4001) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x3d, 0x107, 0x8000, 0x8, {0x3, 0x7c}, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0xc000) 752.788573ms ago: executing program 0 (id=2844): syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2b780af2}]}]}], {0x14}}, 0x90}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf253d00000008000300", @ANYRES32=r4, @ANYBLOB="3fc883d60100000041d2a408362c4e67c1a50d3fb84abab965054801e5fab5dd2bfe21"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x8084) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000013002f0a2bbd7000fedbcf2507006800", @ANYRES32=r6, @ANYBLOB="00cd00006522020024001a8009000100766c616e000000001400048010000580"], 0x44}}, 0x8004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0006"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x4, 0x276, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r11, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r11, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x1, 0x0}, &(0x7f00000002c0)=0x40) sendmsg$alg(r10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r12 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000500)) 604.316777ms ago: executing program 0 (id=2845): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{r1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r4, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x50}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x8000}, &(0x7f0000000040)=0x8) r6 = socket(0x1, 0x3, 0x0) bind$unix(r6, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) recvmsg$can_raw(r6, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40012020) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000007c0)="b49588044419ba1896493a", 0x1002, 0xffffffffffffffff, 0x4}, 0x38) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) connect$inet(r8, &(0x7f0000000440)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$sock_SIOCSIFBR(r7, 0x890c, &(0x7f0000000300)=@generic={0x0, 0x2}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x401, 0x0, 0xfff, 0xdd92}, &(0x7f0000000480)=0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x61) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="bc0000000008050000000000000000000d00acd2e9e4048008000240000000000800014000000200080001407fffffff0800014000005b1908000140000000020600024086dd00000900010073797a31000000000900010073797a3000000000050003001100000005000300880000001c00048008000140000000ee2872d4d013012c0108000140000000011c0004800800014026fffff70800014000000001080001400000001006000240888e00000900010073797a3000000000"], 0xbc}}, 0x880) socket$inet6(0xa, 0x2, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r10) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 585.486609ms ago: executing program 1 (id=2847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r7}, [@IFA_FLAGS={0x8, 0x8, 0x411}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x30, 0x4, 0x80000000, 0x54, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x10, 0x8001, 0xe1a}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0x5, 0x91b5, {{0x34, 0x4, 0x1, 0x3e, 0xd0, 0x68, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0x18, 0x0, 0x8, [0x4, 0x3, 0x1]}, @noop, @end, @cipso={0x86, 0x4f, 0x1, [{0x0, 0xb, "c8bc843c8652577c13"}, {0x6, 0x8, "dcb7c2ff9a09"}, {0x7, 0x9, "4e4922fa945bff"}, {0x0, 0x7, "541dcfddc4"}, {0x7, 0x11, "27386395537e971174a5acd2ee8f3a"}, {0x6, 0x8, "81ef75847047"}, {0x2, 0x9, "31d7652bc718a6"}, {0x7, 0x4, 'nQ'}]}, @lsrr={0x83, 0x1f, 0x6e, [@rand_addr=0x64010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x2, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @loopback]}, @rr={0x7, 0x1b, 0xc1, [@multicast1, @loopback, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0x81, [@multicast1, @rand_addr=0x64010101, @broadcast, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'gre0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0xa8, 0x8, 0x3, 0x4, {{0x23, 0x4, 0x1, 0x7, 0x8c, 0x64, 0x0, 0x10, 0x2f, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x5a, 0x1, [{0x5, 0x6, ') VN'}, {0x1, 0xf, "abd075de51e96209b25f1d91d0"}, {0x1, 0x11, "78ac8ad8ea7e6b903f13d65fdec610"}, {0x0, 0x3, "ce"}, {0x1, 0x9, "a2bf4e7d7b0576"}, {0x7, 0xf, "db5b4d5f6881028cbe96aa05fa"}, {0x6, 0x5, "941005"}, {0x2, 0x4, "bafc"}, {0x0, 0xa, "95e568bdab354cdb"}]}, @rr={0x7, 0xf, 0x7, [@remote, @private=0xa010100, @private=0xa010100]}, @timestamp_prespec={0x44, 0xc, 0xe0, 0x3, 0x5, [{@multicast1, 0xffff}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x0, 0x1, {{0x19, 0x4, 0x1, 0x2f, 0x64, 0x68, 0x0, 0x9, 0x4, 0x0, @local, @private=0xa010100, {[@timestamp_addr={0x44, 0x24, 0x48, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff4f}, {@broadcast, 0x4aa92600}, {@loopback, 0x1}, {@multicast2, 0x4}]}, @rr={0x7, 0xf, 0xc7, [@private=0xa010101, @private=0xa010101, @multicast1]}, @noop, @ssrr={0x89, 0xb, 0x5, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x10, 0xd1, 0x0, 0x1, [0x2, 0x7fffffff, 0x80]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000440)='GPL\x00'}, 0x90) r13 = socket(0x2a, 0x2, 0x0) getsockname$packet(r13, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0xfffa, 0x2}, {}, {0xa, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0xec}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x24004000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x700, 0x0, 0x3, 0x7, {{0x29, 0x4, 0x0, 0x5, 0xa4, 0x64, 0x0, 0x9, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x38}, {[@timestamp_prespec={0x44, 0x24, 0x56, 0x3, 0x0, [{@loopback, 0x80b7}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x5}, {@private=0xa010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}]}, @noop, @timestamp_addr={0x44, 0x34, 0xe8, 0x1, 0xf, [{@multicast2, 0x7}, {@remote, 0x400}, {@broadcast, 0x45}, {@remote, 0xaf}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xb84f}]}, @timestamp_prespec={0x44, 0x34, 0xfe, 0x3, 0x7, [{@rand_addr=0x64010100, 0xa0}, {@remote, 0x1ff}, {@remote, 0x10}, {@broadcast, 0x6b3d9cad}, {@empty, 0x100}, {@loopback, 0x6}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], 0x0, 0x23, &(0x7f00000008c0)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c80)={'tunl0\x00', &(0x7f0000000bc0)={'erspan0\x00', 0x0, 0x8, 0x700, 0x6, 0x6, {{0x1e, 0x4, 0x1, 0x3, 0x78, 0x64, 0x0, 0x3, 0x2f, 0x0, @empty, @empty, {[@noop, @end, @generic={0x89, 0x10, "ef84207a1c9e2dbb99b43f450368"}, @generic={0x82, 0x6, "363a1564"}, @timestamp_addr={0x44, 0x4c, 0xe2, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast}, {@empty, 0x10001}, {@rand_addr=0x64010100, 0x7}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x401}, {@multicast1, 0x2}, {@rand_addr=0x64010100, 0xa}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x7}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000cc0)=0x0, &(0x7f0000000d00)=0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000d80)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000e00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000001640)={0x8f4, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xcf}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x280, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x5, 0xd9, 0xfffffff7}, {0xfffe, 0x0, 0x18, 0x7f}, {0x1000, 0x6, 0xd8, 0x3d1}, {0x0, 0x2, 0x6, 0xc0}, {0x0, 0x6, 0x7, 0x9}, {0x400, 0xff, 0xb, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x258, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3ff, 0xc, 0x9, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x7, 0x800}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4704a02d}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3, 0x4, 0xa7, 0x6}, {0x3, 0x51, 0x9, 0xee1c}, {0x7ff, 0x6, 0x6, 0x3}, {0xfffe, 0x1, 0x4, 0x6}, {0x1, 0x8b, 0xb, 0x8}, {0x5, 0x4, 0x4, 0x2}]}}}]}}, {{0x8, 0x1, r20}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r21}}, {0x8}}}]}}]}, 0x8f4}, 0x1, 0x0, 0x0, 0x4801}, 0x40040c3) r22 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r22, 0x407, 0x0, 0x0, {{}, {0x0, 0x4000}, {0x8}}}, 0x24}}, 0x0) 505.812081ms ago: executing program 4 (id=2848): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002140)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x20044014}, 0x4080) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={r3, 0xcb}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3, 0x8000}, &(0x7f0000000040)=0x8) r4 = socket(0x18, 0x0, 0x2) bind$netlink(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40042}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) (async) accept(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1) (async) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002140)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x20044014}, 0x4080) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={r3, 0xcb}, 0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3, 0x8000}, &(0x7f0000000040)=0x8) (async) socket(0x18, 0x0, 0x2) (async) bind$netlink(r4, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40042}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) (async) 427.458852ms ago: executing program 1 (id=2849): unshare(0x24060400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000900)=0x200000, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b40500000000000061107a0000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000f8ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20040600) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7ffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000340)=""/233, 0x0, 0x11}, 0x94) r9 = accept$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000480)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x1d0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, &(0x7f00000004c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff000000, 0x0, 0x0, 0xff000000], [0x0, 0xffffff00, 0xffffffff, 0xffffffff], 'hsr0\x00', 'pimreg\x00', {}, {0xff}, 0x8, 0xb, 0x0, 0x42}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0xffffff00, 0xff000000, 0xffff00], 'syzkaller0\x00', 'dummy0\x00', {0xff}, {0xff}, 0x2e, 0x9, 0x7, 0x50}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d2], 0x2, 0x4, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @local, [0xff000000, 0xffffff00, 0x0, 0xff000000], [0xffffff00], 'vcan0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x32, 0x9, 0x2}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 395.847203ms ago: executing program 4 (id=2850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40800000000000073116c00000000008510000002000000b7000000000000009500c2006a2000009500bc4dca72c25060cf59a47ba0c5b5f70dd6f3e4"], &(0x7f0000000000)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 329.492329ms ago: executing program 1 (id=2851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="07e90000000000000000050000020800030089"], 0x1c}}, 0x0) 221.066075ms ago: executing program 4 (id=2852): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0}}, 0x0) 179.949035ms ago: executing program 4 (id=2853): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 164.27484ms ago: executing program 1 (id=2854): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, 0x0, 0xe) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x7a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000340)={{r2}, "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"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) 25.022139ms ago: executing program 4 (id=2855): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x20000000, 0x8000002}}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 0s ago: executing program 4 (id=2856): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={r3, 0x2}, 0x8) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000200)={@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, {&(0x7f00000000c0)=""/217, 0xd9}, &(0x7f00000001c0), 0x4}, 0xa0) r4 = accept(r1, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000002c0)={r4}) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket(0x1e, 0x805, 0x0) (async) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={r3, 0x2}, 0x8) (async) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000200)={@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, {&(0x7f00000000c0)=""/217, 0xd9}, &(0x7f00000001c0), 0x4}, 0xa0) (async) accept(r1, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000002c0)={r4}) (async) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) (async) kernel console output (not intermixed with test programs): tes leftover after parsing attributes in process `syz.3.1849'. [ 254.408730][T12051] netlink: 'syz.0.1858': attribute type 2 has an invalid length. [ 254.470893][T12046] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1856'. [ 256.542940][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 261.025287][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.262981][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 304.861595][T12068] syzkaller1: entered promiscuous mode [ 304.879306][T12068] syzkaller1: entered allmulticast mode [ 304.951931][T12075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1861'. [ 305.089500][T12086] ieee802154 phy1 wpan1: encryption failed: -90 [ 305.129418][T12095] netlink: 'syz.4.1875': attribute type 39 has an invalid length. [ 305.245961][T12098] veth0: entered promiscuous mode [ 305.271770][T12085] veth0: left promiscuous mode [ 305.278822][T12107] netlink: 'syz.2.1878': attribute type 11 has an invalid length. [ 305.308042][T12107] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1878'. [ 305.430741][T12124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1883'. [ 305.459659][T12124] nbd: must specify at least one socket [ 305.534829][T12133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1883'. [ 305.585298][T12133] nbd: must specify a device to reconfigure [ 305.607950][T12137] netlink: 'syz.3.1885': attribute type 11 has an invalid length. [ 305.620615][T12134] netlink: 'syz.3.1885': attribute type 11 has an invalid length. [ 305.637291][T12137] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1885'. [ 305.647772][T12134] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1885'. [ 305.801761][T12155] netlink: 'syz.3.1892': attribute type 1 has an invalid length. [ 305.829294][T12157] netlink: 'syz.1.1893': attribute type 8 has an invalid length. [ 305.868195][T12164] netlink: 'syz.3.1895': attribute type 1 has an invalid length. [ 305.902395][T12164] smc: adding net device bond0 with user defined pnetid SYZ2 [ 305.910887][T12164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.931153][T12157] netlink: 'syz.1.1893': attribute type 8 has an invalid length. [ 305.939912][T12164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.947549][T12164] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 305.959115][T12164] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 305.983421][T12165] veth13: entered promiscuous mode [ 305.990362][T12165] bond0: (slave veth13): Enslaving as an active interface with a down link [ 306.010273][T12170] ip6gre0: Master is either lo or non-ether device [ 306.074169][T12183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1899'. [ 306.115440][T12183] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1899'. [ 306.270669][T12194] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1903'. [ 306.458779][T12214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1910'. [ 306.508072][T12214] 8021q: adding VLAN 0 to HW filter on device bond8 [ 306.526542][T12214] 8021q: adding VLAN 0 to HW filter on device bond8 [ 306.537256][T12214] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 306.551007][T12214] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 306.771758][T12242] team0: Cannot enslave team device to itself [ 306.780856][T12236] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 306.993104][T12268] FAULT_INJECTION: forcing a failure. [ 306.993104][T12268] name failslab, interval 1, probability 0, space 0, times 0 [ 307.006124][T12268] CPU: 1 UID: 0 PID: 12268 Comm: syz.0.1929 Not tainted syzkaller #0 PREEMPT(full) [ 307.006153][T12268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.006167][T12268] Call Trace: [ 307.006175][T12268] [ 307.006184][T12268] dump_stack_lvl+0x189/0x250 [ 307.006215][T12268] ? __pfx____ratelimit+0x10/0x10 [ 307.006245][T12268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.006269][T12268] ? __pfx__printk+0x10/0x10 [ 307.006305][T12268] should_fail_ex+0x414/0x560 [ 307.006335][T12268] should_failslab+0xa8/0x100 [ 307.006386][T12268] kmem_cache_alloc_noprof+0x73/0x3c0 [ 307.006415][T12268] ? skb_clone+0x212/0x3a0 [ 307.006440][T12268] skb_clone+0x212/0x3a0 [ 307.006465][T12268] __netlink_deliver_tap+0x404/0x850 [ 307.006504][T12268] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.006536][T12268] netlink_deliver_tap+0x19c/0x1b0 [ 307.006568][T12268] netlink_unicast+0x7fa/0x9e0 [ 307.006600][T12268] ? __pfx_netlink_unicast+0x10/0x10 [ 307.006628][T12268] ? netlink_sendmsg+0x642/0xb30 [ 307.006659][T12268] ? skb_put+0x11b/0x210 [ 307.006680][T12268] netlink_sendmsg+0x805/0xb30 [ 307.006717][T12268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.006750][T12268] ? aa_sock_msg_perm+0xf1/0x1d0 [ 307.006779][T12268] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.006802][T12268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.006834][T12268] __sock_sendmsg+0x21c/0x270 [ 307.006862][T12268] ____sys_sendmsg+0x505/0x830 [ 307.006886][T12268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.006913][T12268] ? import_iovec+0x74/0xa0 [ 307.006938][T12268] ___sys_sendmsg+0x21f/0x2a0 [ 307.006960][T12268] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.007002][T12268] ? __fget_files+0x2a/0x420 [ 307.007033][T12268] ? __fget_files+0x3a0/0x420 [ 307.007071][T12268] __x64_sys_sendmsg+0x19b/0x260 [ 307.007094][T12268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.007122][T12268] ? __pfx_ksys_write+0x10/0x10 [ 307.007148][T12268] ? rcu_is_watching+0x15/0xb0 [ 307.007171][T12268] ? rcu_is_watching+0x15/0xb0 [ 307.007193][T12268] do_syscall_64+0xfa/0x3b0 [ 307.007226][T12268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.007247][T12268] ? clear_bhb_loop+0x60/0xb0 [ 307.007271][T12268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.007291][T12268] RIP: 0033:0x7fb5aa38ebe9 [ 307.007309][T12268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.007328][T12268] RSP: 002b:00007fb5ab146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.007352][T12268] RAX: ffffffffffffffda RBX: 00007fb5aa5b5fa0 RCX: 00007fb5aa38ebe9 [ 307.007368][T12268] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 307.007383][T12268] RBP: 00007fb5ab146090 R08: 0000000000000000 R09: 0000000000000000 [ 307.007396][T12268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.007409][T12268] R13: 00007fb5aa5b6038 R14: 00007fb5aa5b5fa0 R15: 00007ffca7ddc6f8 [ 307.007434][T12268] [ 307.548550][T12287] openvswitch: netlink: Tunnel attr 1 has unexpected len 7 expected 4 [ 308.243383][T12324] netlink: 'syz.2.1944': attribute type 1 has an invalid length. [ 308.251240][T12324] netlink: 'syz.2.1944': attribute type 1 has an invalid length. [ 308.509260][T12341] vxcan1 speed is unknown, defaulting to 1000 [ 308.589169][T12340] tap0: tun_chr_ioctl cmd 1074025677 [ 308.609025][T12340] tap0: linktype set to 65534 [ 309.101602][T12387] geneve3: entered promiscuous mode [ 309.107286][T12387] geneve3: entered allmulticast mode [ 309.253816][T12393] 8021q: adding VLAN 0 to HW filter on device bond6 [ 309.332684][T12399] bond6: (slave veth17): Enslaving as an active interface with a down link [ 309.346328][T12393] team0: Cannot enslave team device to itself [ 309.609132][T12420] vxcan1 speed is unknown, defaulting to 1000 [ 309.817685][T12428] geneve3: entered promiscuous mode [ 310.184445][T12436] syzkaller1: entered promiscuous mode [ 310.189996][T12436] syzkaller1: entered allmulticast mode [ 310.217202][T12436] __nla_validate_parse: 13 callbacks suppressed [ 310.217229][T12436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1985'. [ 310.319831][T12448] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1991'. [ 310.358248][T12450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.367886][T12450] openvswitch: netlink: IP tunnel dst address not specified [ 310.412006][T12456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1994'. [ 310.492263][T12464] FAULT_INJECTION: forcing a failure. [ 310.492263][T12464] name failslab, interval 1, probability 0, space 0, times 0 [ 310.513624][T12464] CPU: 0 UID: 0 PID: 12464 Comm: syz.4.1996 Not tainted syzkaller #0 PREEMPT(full) [ 310.513653][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.513667][T12464] Call Trace: [ 310.513675][T12464] [ 310.513684][T12464] dump_stack_lvl+0x189/0x250 [ 310.513714][T12464] ? __pfx____ratelimit+0x10/0x10 [ 310.513743][T12464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.513767][T12464] ? __pfx__printk+0x10/0x10 [ 310.513793][T12464] ? __local_bh_enable_ip+0x12d/0x1c0 [ 310.513822][T12464] should_fail_ex+0x414/0x560 [ 310.513851][T12464] should_failslab+0xa8/0x100 [ 310.513887][T12464] kmem_cache_alloc_noprof+0x73/0x3c0 [ 310.513913][T12464] ? skb_clone+0x212/0x3a0 [ 310.513939][T12464] skb_clone+0x212/0x3a0 [ 310.513962][T12464] __netlink_deliver_tap+0x404/0x850 [ 310.514001][T12464] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.514031][T12464] netlink_deliver_tap+0x19c/0x1b0 [ 310.514061][T12464] netlink_dump+0x92b/0xe90 [ 310.514096][T12464] ? __pfx_netlink_dump+0x10/0x10 [ 310.514133][T12464] ? genl_start+0x499/0x6c0 [ 310.514160][T12464] __netlink_dump_start+0x5cb/0x7e0 [ 310.514193][T12464] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 310.514287][T12464] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 310.514331][T12464] ? __pfx_genl_start+0x10/0x10 [ 310.514352][T12464] ? __pfx_genl_dumpit+0x10/0x10 [ 310.514373][T12464] ? __pfx_genl_done+0x10/0x10 [ 310.514397][T12464] ? bpf_lsm_capable+0x9/0x20 [ 310.514425][T12464] ? security_capable+0x7e/0x2e0 [ 310.514458][T12464] genl_rcv_msg+0x5da/0x790 [ 310.514483][T12464] ? __pfx_genl_rcv_msg+0x10/0x10 [ 310.514505][T12464] ? __pfx_batadv_bla_backbone_dump+0x10/0x10 [ 310.514529][T12464] ? __asan_memcpy+0x40/0x70 [ 310.514551][T12464] ? __pfx_ref_tracker_free+0x10/0x10 [ 310.514583][T12464] netlink_rcv_skb+0x208/0x470 [ 310.514613][T12464] ? __pfx_genl_rcv_msg+0x10/0x10 [ 310.514635][T12464] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.514670][T12464] ? lock_release+0x4b/0x3e0 [ 310.514701][T12464] ? down_read+0x1ad/0x2e0 [ 310.514721][T12464] genl_rcv+0x28/0x40 [ 310.514741][T12464] netlink_unicast+0x82c/0x9e0 [ 310.514771][T12464] ? __pfx_netlink_unicast+0x10/0x10 [ 310.514798][T12464] ? netlink_sendmsg+0x642/0xb30 [ 310.514826][T12464] ? skb_put+0x11b/0x210 [ 310.514845][T12464] netlink_sendmsg+0x805/0xb30 [ 310.514881][T12464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.514913][T12464] ? aa_sock_msg_perm+0xf1/0x1d0 [ 310.514932][T12464] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.514953][T12464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.514983][T12464] __sock_sendmsg+0x21c/0x270 [ 310.515010][T12464] ____sys_sendmsg+0x505/0x830 [ 310.515033][T12464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.515059][T12464] ? import_iovec+0x74/0xa0 [ 310.515084][T12464] ___sys_sendmsg+0x21f/0x2a0 [ 310.515105][T12464] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.515146][T12464] ? __fget_files+0x2a/0x420 [ 310.515176][T12464] ? __fget_files+0x3a0/0x420 [ 310.515220][T12464] __x64_sys_sendmsg+0x19b/0x260 [ 310.515242][T12464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.515269][T12464] ? __pfx_ksys_write+0x10/0x10 [ 310.515293][T12464] ? rcu_is_watching+0x15/0xb0 [ 310.515316][T12464] ? rcu_is_watching+0x15/0xb0 [ 310.515337][T12464] do_syscall_64+0xfa/0x3b0 [ 310.515368][T12464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.515388][T12464] ? clear_bhb_loop+0x60/0xb0 [ 310.515411][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.515430][T12464] RIP: 0033:0x7f8cbf98ebe9 [ 310.515448][T12464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.515466][T12464] RSP: 002b:00007f8cc07a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.515488][T12464] RAX: ffffffffffffffda RBX: 00007f8cbfbb5fa0 RCX: 00007f8cbf98ebe9 [ 310.515503][T12464] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 310.515516][T12464] RBP: 00007f8cc07a7090 R08: 0000000000000000 R09: 0000000000000000 [ 310.515529][T12464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.515542][T12464] R13: 00007f8cbfbb6038 R14: 00007f8cbfbb5fa0 R15: 00007ffff81c53f8 [ 310.515566][T12464] [ 310.936508][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1997'. [ 311.015828][T12476] nbd: must specify at least one socket [ 311.041283][T12479] validate_nla: 3 callbacks suppressed [ 311.041302][T12479] netlink: 'syz.3.2001': attribute type 8 has an invalid length. [ 311.059148][T12475] vxcan1 speed is unknown, defaulting to 1000 [ 311.270937][T12492] vxcan1 speed is unknown, defaulting to 1000 [ 311.519355][T12512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2012'. [ 311.937262][T12530] netlink: 'syz.3.2018': attribute type 1 has an invalid length. [ 312.414539][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'. [ 312.443481][T12550] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2026'. [ 312.466989][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2025'. [ 312.488119][T12550] sock: sock_set_timeout: `syz.2.2026' (pid 12550) tries to set negative timeout [ 312.644026][T12567] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2031'. [ 312.704053][T12572] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2033'. [ 312.770868][ T30] audit: type=1800 audit(1756313605.477:6): pid=12575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2034" name="memory.events" dev="tmpfs" ino=2046 res=0 errno=0 [ 312.797504][ T30] audit: type=1804 audit(1756313605.507:7): pid=12575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2034" name="/newroot/399/memory.events" dev="tmpfs" ino=2046 res=1 errno=0 [ 312.908051][T12584] nbd: must specify a size in bytes for the device [ 313.732062][T12631] netlink: 'syz.3.2054': attribute type 27 has an invalid length. [ 313.759169][T12636] netlink: 'syz.4.2058': attribute type 1 has an invalid length. [ 313.768351][T12636] netlink: 'syz.4.2058': attribute type 1 has an invalid length. [ 313.783485][T12636] netlink: 'syz.4.2058': attribute type 2 has an invalid length. [ 314.290964][T12684] netlink: 'syz.4.2074': attribute type 29 has an invalid length. [ 314.301575][T12684] netlink: 'syz.4.2074': attribute type 29 has an invalid length. [ 314.321058][T12684] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 314.537804][T12704] netlink: 'syz.1.2081': attribute type 32 has an invalid length. [ 314.635663][T12716] netlink: 'syz.4.2084': attribute type 1 has an invalid length. [ 314.660680][T12716] 8021q: adding VLAN 0 to HW filter on device bond5 [ 314.870963][T12716] 8021q: adding VLAN 0 to HW filter on device bond5 [ 314.878375][T12716] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 314.943884][T12716] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 315.269332][T12764] vxcan1 speed is unknown, defaulting to 1000 [ 315.357964][T12768] __nla_validate_parse: 15 callbacks suppressed [ 315.357983][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2096'. [ 315.544749][T12786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2102'. [ 315.556775][T12786] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2102'. [ 315.857351][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'. [ 315.868744][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'. [ 315.995556][T12825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2115'. [ 316.441280][T12862] vxcan1 speed is unknown, defaulting to 1000 [ 316.447489][T12867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2128'. [ 316.476799][T12867] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2128'. [ 316.784707][T12887] validate_nla: 5 callbacks suppressed [ 316.784727][T12887] netlink: 'syz.1.2134': attribute type 2 has an invalid length. [ 316.848831][T12884] vxcan1 speed is unknown, defaulting to 1000 [ 316.980084][T12905] sctp_setsockopt_maxseg: 23 callbacks suppressed [ 316.980106][T12905] sctp: [Deprecated]: syz.3.2139 (pid 12905) Use of int in maxseg socket option. [ 316.980106][T12905] Use struct sctp_assoc_value instead [ 317.017028][T12907] FAULT_INJECTION: forcing a failure. [ 317.017028][T12907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.052897][T12907] CPU: 0 UID: 0 PID: 12907 Comm: syz.2.2140 Not tainted syzkaller #0 PREEMPT(full) [ 317.052926][T12907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.052940][T12907] Call Trace: [ 317.052948][T12907] [ 317.052956][T12907] dump_stack_lvl+0x189/0x250 [ 317.052986][T12907] ? __pfx____ratelimit+0x10/0x10 [ 317.053015][T12907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.053038][T12907] ? __pfx__printk+0x10/0x10 [ 317.053064][T12907] ? __might_fault+0xb0/0x130 [ 317.053097][T12907] ? rcu_is_watching+0x15/0xb0 [ 317.053119][T12907] should_fail_ex+0x414/0x560 [ 317.053148][T12907] _copy_from_user+0x2d/0xb0 [ 317.053172][T12907] ___sys_sendmsg+0x158/0x2a0 [ 317.053195][T12907] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.053236][T12907] ? __fget_files+0x2a/0x420 [ 317.053265][T12907] ? __fget_files+0x3a0/0x420 [ 317.053302][T12907] __x64_sys_sendmsg+0x19b/0x260 [ 317.053325][T12907] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.053352][T12907] ? __pfx_ksys_write+0x10/0x10 [ 317.053377][T12907] ? rcu_is_watching+0x15/0xb0 [ 317.053400][T12907] ? rcu_is_watching+0x15/0xb0 [ 317.053421][T12907] do_syscall_64+0xfa/0x3b0 [ 317.053453][T12907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.053473][T12907] ? clear_bhb_loop+0x60/0xb0 [ 317.053495][T12907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.053532][T12907] RIP: 0033:0x7fd2c538ebe9 [ 317.053550][T12907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.053568][T12907] RSP: 002b:00007fd2c6225038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.053590][T12907] RAX: ffffffffffffffda RBX: 00007fd2c55b5fa0 RCX: 00007fd2c538ebe9 [ 317.053606][T12907] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 317.053619][T12907] RBP: 00007fd2c6225090 R08: 0000000000000000 R09: 0000000000000000 [ 317.053632][T12907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.053644][T12907] R13: 00007fd2c55b6038 R14: 00007fd2c55b5fa0 R15: 00007ffdcc3d3458 [ 317.053677][T12907] [ 317.499738][T12922] netlink: del zone limit has 4 unknown bytes [ 317.508975][T12922] netlink: 160696 bytes leftover after parsing attributes in process `syz.3.2146'. [ 317.527827][T12922] netlink: zone id is out of range [ 317.533374][T12922] netlink: zone id is out of range [ 317.539833][T12922] netlink: zone id is out of range [ 317.546982][T12922] netlink: zone id is out of range [ 317.552299][T12922] netlink: get zone limit has 8 unknown bytes [ 317.570460][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2145'. [ 317.772503][T12934] hsr0 speed is unknown, defaulting to 1000 [ 317.824740][T12934] hsr0 speed is unknown, defaulting to 1000 [ 317.831161][T12934] hsr0 speed is unknown, defaulting to 1000 [ 317.859544][T12949] FAULT_INJECTION: forcing a failure. [ 317.859544][T12949] name failslab, interval 1, probability 0, space 0, times 0 [ 317.887943][T12934] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 317.895592][T12949] CPU: 0 UID: 0 PID: 12949 Comm: syz.1.2153 Not tainted syzkaller #0 PREEMPT(full) [ 317.895618][T12949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.895632][T12949] Call Trace: [ 317.895639][T12949] [ 317.895647][T12949] dump_stack_lvl+0x189/0x250 [ 317.895676][T12949] ? __pfx____ratelimit+0x10/0x10 [ 317.895705][T12949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.895729][T12949] ? __pfx__printk+0x10/0x10 [ 317.895759][T12949] ? fs_reclaim_acquire+0x7d/0x100 [ 317.895790][T12949] ? rcu_is_watching+0x15/0xb0 [ 317.895809][T12949] ? __pfx___might_resched+0x10/0x10 [ 317.895828][T12949] ? lock_acquire+0x5f/0x360 [ 317.895858][T12949] should_fail_ex+0x414/0x560 [ 317.895885][T12949] should_failslab+0xa8/0x100 [ 317.895913][T12949] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 317.895940][T12949] ? __alloc_skb+0x112/0x2d0 [ 317.895973][T12949] __alloc_skb+0x112/0x2d0 [ 317.896006][T12949] netlink_sendmsg+0x5c6/0xb30 [ 317.896041][T12949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.896072][T12949] ? aa_sock_msg_perm+0xf1/0x1d0 [ 317.896091][T12949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 317.896113][T12949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.896143][T12949] __sock_sendmsg+0x21c/0x270 [ 317.896170][T12949] ____sys_sendmsg+0x505/0x830 [ 317.896193][T12949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.896219][T12949] ? import_iovec+0x74/0xa0 [ 317.896244][T12949] ___sys_sendmsg+0x21f/0x2a0 [ 317.896267][T12949] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.896306][T12949] ? __fget_files+0x2a/0x420 [ 317.896337][T12949] ? __fget_files+0x3a0/0x420 [ 317.896374][T12949] __x64_sys_sendmsg+0x19b/0x260 [ 317.896396][T12949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.896424][T12949] ? __pfx_ksys_write+0x10/0x10 [ 317.896450][T12949] ? rcu_is_watching+0x15/0xb0 [ 317.896472][T12949] ? rcu_is_watching+0x15/0xb0 [ 317.896494][T12949] do_syscall_64+0xfa/0x3b0 [ 317.896523][T12949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.896543][T12949] ? clear_bhb_loop+0x60/0xb0 [ 317.896577][T12949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.896598][T12949] RIP: 0033:0x7f68e638ebe9 [ 317.896616][T12949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.896634][T12949] RSP: 002b:00007f68e7128038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.896656][T12949] RAX: ffffffffffffffda RBX: 00007f68e65b5fa0 RCX: 00007f68e638ebe9 [ 317.896672][T12949] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 317.896686][T12949] RBP: 00007f68e7128090 R08: 0000000000000000 R09: 0000000000000000 [ 317.896699][T12949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.896712][T12949] R13: 00007f68e65b6038 R14: 00007f68e65b5fa0 R15: 00007ffd75576478 [ 317.896737][T12949] [ 318.204035][T12934] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 318.244866][T12934] hsr0 speed is unknown, defaulting to 1000 [ 318.251947][T12934] hsr0 speed is unknown, defaulting to 1000 [ 318.258828][T12934] hsr0 speed is unknown, defaulting to 1000 [ 318.265867][T12934] hsr0 speed is unknown, defaulting to 1000 [ 318.275422][T12934] hsr0 speed is unknown, defaulting to 1000 [ 318.284114][T12934] hsr0 speed is unknown, defaulting to 1000 [ 318.592271][T12970] nbd: couldn't find a device at index 0 [ 318.839153][T12990] : entered promiscuous mode [ 319.033957][T13012] IPVS: set_ctl: invalid protocol: 59 172.20.20.42:20001 [ 319.243095][T13033] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 319.281535][T13029] vxcan1 speed is unknown, defaulting to 1000 [ 319.319215][T13041] FAULT_INJECTION: forcing a failure. [ 319.319215][T13041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.341510][T13041] CPU: 0 UID: 0 PID: 13041 Comm: syz.2.2184 Not tainted syzkaller #0 PREEMPT(full) [ 319.341539][T13041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.341552][T13041] Call Trace: [ 319.341559][T13041] [ 319.341567][T13041] dump_stack_lvl+0x189/0x250 [ 319.341597][T13041] ? __pfx____ratelimit+0x10/0x10 [ 319.341626][T13041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.341649][T13041] ? __pfx__printk+0x10/0x10 [ 319.341683][T13041] ? __might_fault+0xb0/0x130 [ 319.341715][T13041] ? rcu_is_watching+0x15/0xb0 [ 319.341737][T13041] should_fail_ex+0x414/0x560 [ 319.341766][T13041] _copy_from_iter+0x1db/0x16f0 [ 319.341788][T13041] ? rcu_is_watching+0x15/0xb0 [ 319.341808][T13041] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 319.341837][T13041] ? __pfx__copy_from_iter+0x10/0x10 [ 319.341858][T13041] ? __build_skb_around+0x257/0x3e0 [ 319.341890][T13041] ? netlink_sendmsg+0x642/0xb30 [ 319.341920][T13041] ? skb_put+0x11b/0x210 [ 319.341940][T13041] netlink_sendmsg+0x6b2/0xb30 [ 319.341976][T13041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.342009][T13041] ? aa_sock_msg_perm+0xf1/0x1d0 [ 319.342029][T13041] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.342051][T13041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.342081][T13041] __sock_sendmsg+0x21c/0x270 [ 319.342108][T13041] ____sys_sendmsg+0x505/0x830 [ 319.342132][T13041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.342157][T13041] ? import_iovec+0x74/0xa0 [ 319.342181][T13041] ___sys_sendmsg+0x21f/0x2a0 [ 319.342203][T13041] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.342244][T13041] ? __fget_files+0x2a/0x420 [ 319.342274][T13041] ? __fget_files+0x3a0/0x420 [ 319.342310][T13041] __x64_sys_sendmsg+0x19b/0x260 [ 319.342333][T13041] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.342360][T13041] ? __pfx_ksys_write+0x10/0x10 [ 319.342385][T13041] ? rcu_is_watching+0x15/0xb0 [ 319.342407][T13041] ? rcu_is_watching+0x15/0xb0 [ 319.342429][T13041] do_syscall_64+0xfa/0x3b0 [ 319.342465][T13041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.342496][T13041] ? clear_bhb_loop+0x60/0xb0 [ 319.342518][T13041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.342536][T13041] RIP: 0033:0x7fd2c538ebe9 [ 319.342553][T13041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.342570][T13041] RSP: 002b:00007fd2c6225038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.342592][T13041] RAX: ffffffffffffffda RBX: 00007fd2c55b5fa0 RCX: 00007fd2c538ebe9 [ 319.342606][T13041] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 319.342620][T13041] RBP: 00007fd2c6225090 R08: 0000000000000000 R09: 0000000000000000 [ 319.342632][T13041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.342661][T13041] R13: 00007fd2c55b6038 R14: 00007fd2c55b5fa0 R15: 00007ffdcc3d3458 [ 319.342692][T13041] [ 319.899258][T13029] hsr0 speed is unknown, defaulting to 1000 [ 320.079099][T13079] netlink: 'syz.3.2194': attribute type 10 has an invalid length. [ 320.234205][T13090] FAULT_INJECTION: forcing a failure. [ 320.234205][T13090] name failslab, interval 1, probability 0, space 0, times 0 [ 320.247659][T13090] CPU: 1 UID: 0 PID: 13090 Comm: syz.1.2196 Not tainted syzkaller #0 PREEMPT(full) [ 320.247689][T13090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.247702][T13090] Call Trace: [ 320.247709][T13090] [ 320.247718][T13090] dump_stack_lvl+0x189/0x250 [ 320.247749][T13090] ? __pfx____ratelimit+0x10/0x10 [ 320.247778][T13090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.247803][T13090] ? __pfx__printk+0x10/0x10 [ 320.247833][T13090] ? __pfx___might_resched+0x10/0x10 [ 320.247854][T13090] ? lock_acquire+0x5f/0x360 [ 320.247886][T13090] should_fail_ex+0x414/0x560 [ 320.247917][T13090] should_failslab+0xa8/0x100 [ 320.247948][T13090] __kmalloc_noprof+0xcb/0x4f0 [ 320.247976][T13090] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 320.248006][T13090] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 320.248037][T13090] genl_family_rcv_msg_doit+0xb8/0x300 [ 320.248065][T13090] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 320.248088][T13090] ? __pfx_genl_get_cmd+0x10/0x10 [ 320.248109][T13090] ? __pfx_nbd_genl_connect+0x10/0x10 [ 320.248154][T13090] ? stack_trace_save+0x9c/0xe0 [ 320.248180][T13090] genl_rcv_msg+0x60e/0x790 [ 320.248222][T13090] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.248240][T13090] ? __kasan_slab_alloc+0x6c/0x80 [ 320.248265][T13090] ? __pfx_nbd_genl_connect+0x10/0x10 [ 320.248292][T13090] ? __netlink_lookup+0xbd/0x810 [ 320.248307][T13090] ? rcu_is_watching+0x15/0xb0 [ 320.248329][T13090] netlink_rcv_skb+0x208/0x470 [ 320.248355][T13090] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.248377][T13090] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.248410][T13090] ? lock_release+0x4b/0x3e0 [ 320.248438][T13090] ? down_read+0x1ad/0x2e0 [ 320.248457][T13090] genl_rcv+0x28/0x40 [ 320.248476][T13090] netlink_unicast+0x82c/0x9e0 [ 320.248503][T13090] ? __pfx_netlink_unicast+0x10/0x10 [ 320.248527][T13090] ? netlink_sendmsg+0x642/0xb30 [ 320.248555][T13090] ? skb_put+0x11b/0x210 [ 320.248581][T13090] netlink_sendmsg+0x805/0xb30 [ 320.248615][T13090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.248646][T13090] ? aa_sock_msg_perm+0xf1/0x1d0 [ 320.248665][T13090] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.248685][T13090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.248713][T13090] __sock_sendmsg+0x21c/0x270 [ 320.248739][T13090] ____sys_sendmsg+0x505/0x830 [ 320.248761][T13090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.248803][T13090] ? import_iovec+0x74/0xa0 [ 320.248828][T13090] ___sys_sendmsg+0x21f/0x2a0 [ 320.248848][T13090] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.248886][T13090] ? __fget_files+0x2a/0x420 [ 320.248916][T13090] ? __fget_files+0x3a0/0x420 [ 320.248952][T13090] __x64_sys_sendmsg+0x19b/0x260 [ 320.248974][T13090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.249000][T13090] ? __pfx_ksys_write+0x10/0x10 [ 320.249026][T13090] ? rcu_is_watching+0x15/0xb0 [ 320.249047][T13090] ? rcu_is_watching+0x15/0xb0 [ 320.249069][T13090] do_syscall_64+0xfa/0x3b0 [ 320.249100][T13090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.249120][T13090] ? clear_bhb_loop+0x60/0xb0 [ 320.249143][T13090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.249163][T13090] RIP: 0033:0x7f68e638ebe9 [ 320.249180][T13090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.249198][T13090] RSP: 002b:00007f68e7128038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.249221][T13090] RAX: ffffffffffffffda RBX: 00007f68e65b5fa0 RCX: 00007f68e638ebe9 [ 320.249236][T13090] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 320.249249][T13090] RBP: 00007f68e7128090 R08: 0000000000000000 R09: 0000000000000000 [ 320.249261][T13090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.249273][T13090] R13: 00007f68e65b6038 R14: 00007f68e65b5fa0 R15: 00007ffd75576478 [ 320.249298][T13090] [ 320.828475][T13109] __nla_validate_parse: 17 callbacks suppressed [ 320.828498][T13109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2200'. [ 320.873309][T13107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2201'. [ 320.883973][T13113] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2200'. [ 320.918016][T13098] syzkaller1: entered promiscuous mode [ 320.924084][T13098] syzkaller1: entered allmulticast mode [ 321.044467][T13115] vxcan1 speed is unknown, defaulting to 1000 [ 321.120422][T13125] net veth1_virt_wifi .: renamed from virt_wifi0 [ 321.144984][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'. [ 321.266199][T13120] vxcan1 speed is unknown, defaulting to 1000 [ 321.396413][T13132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2208'. [ 321.415709][T13115] hsr0 speed is unknown, defaulting to 1000 [ 321.534894][T13120] hsr0 speed is unknown, defaulting to 1000 [ 321.567891][T13134] FAULT_INJECTION: forcing a failure. [ 321.567891][T13134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.592061][T13137] vxcan1 speed is unknown, defaulting to 1000 [ 321.615182][T13142] FAULT_INJECTION: forcing a failure. [ 321.615182][T13142] name failslab, interval 1, probability 0, space 0, times 0 [ 321.626895][T13134] CPU: 0 UID: 0 PID: 13134 Comm: syz.3.2209 Not tainted syzkaller #0 PREEMPT(full) [ 321.626934][T13134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.626948][T13134] Call Trace: [ 321.626957][T13134] [ 321.626967][T13134] dump_stack_lvl+0x189/0x250 [ 321.627002][T13134] ? __pfx____ratelimit+0x10/0x10 [ 321.627037][T13134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.627066][T13134] ? __pfx__printk+0x10/0x10 [ 321.627097][T13134] ? __might_fault+0xb0/0x130 [ 321.627131][T13134] ? __handle_mm_fault+0x27b7/0x5440 [ 321.627165][T13134] ? rcu_is_watching+0x15/0xb0 [ 321.627198][T13134] should_fail_ex+0x414/0x560 [ 321.627233][T13134] _copy_from_user+0x2d/0xb0 [ 321.627262][T13134] __sys_sendto+0x25c/0x520 [ 321.627300][T13134] ? __pfx___sys_sendto+0x10/0x10 [ 321.627343][T13134] ? count_memcg_event_mm+0x21/0x260 [ 321.627384][T13134] ? do_user_addr_fault+0xc8a/0x1390 [ 321.627426][T13134] __x64_sys_sendto+0xde/0x100 [ 321.627464][T13134] do_syscall_64+0xfa/0x3b0 [ 321.627500][T13134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.627523][T13134] ? clear_bhb_loop+0x60/0xb0 [ 321.627550][T13134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.627572][T13134] RIP: 0033:0x7fc3df390a7c [ 321.627594][T13134] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 321.627615][T13134] RSP: 002b:00007fc3e0226ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 321.627642][T13134] RAX: ffffffffffffffda RBX: 00007fc3e0226fc0 RCX: 00007fc3df390a7c [ 321.627660][T13134] RDX: 0000000000000024 RSI: 00007fc3e0227010 RDI: 0000000000000004 [ 321.627676][T13134] RBP: 0000000000000000 R08: 00007fc3e0226f14 R09: 000000000000000c [ 321.627690][T13134] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 321.627705][T13134] R13: 00007fc3e0226f68 R14: 00007fc3e0227010 R15: 0000000000000000 [ 321.627733][T13134] [ 321.889357][T13142] CPU: 0 UID: 0 PID: 13142 Comm: syz.4.2210 Not tainted syzkaller #0 PREEMPT(full) [ 321.889386][T13142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.889398][T13142] Call Trace: [ 321.889405][T13142] [ 321.889413][T13142] dump_stack_lvl+0x189/0x250 [ 321.889440][T13142] ? __pfx____ratelimit+0x10/0x10 [ 321.889467][T13142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.889490][T13142] ? __pfx__printk+0x10/0x10 [ 321.889515][T13142] ? is_bpf_text_address+0x26/0x2b0 [ 321.889546][T13142] ? __pfx___might_resched+0x10/0x10 [ 321.889564][T13142] ? lock_acquire+0x5f/0x360 [ 321.889593][T13142] should_fail_ex+0x414/0x560 [ 321.889621][T13142] should_failslab+0xa8/0x100 [ 321.889651][T13142] __kmalloc_cache_noprof+0x70/0x3d0 [ 321.889676][T13142] ? nbd_dev_add+0xec/0xae0 [ 321.889705][T13142] nbd_dev_add+0xec/0xae0 [ 321.889732][T13142] ? rcu_is_watching+0x15/0xb0 [ 321.889751][T13142] ? lock_release+0x4b/0x3e0 [ 321.889778][T13142] ? __pfx_nbd_dev_add+0x10/0x10 [ 321.889818][T13142] ? bpf_lsm_capable+0x9/0x20 [ 321.889843][T13142] ? security_capable+0x7e/0x2e0 [ 321.889871][T13142] ? radix_tree_lookup+0x240/0x290 [ 321.889895][T13142] nbd_genl_connect+0x919/0x18f0 [ 321.889927][T13142] ? __pfx_nbd_genl_connect+0x10/0x10 [ 321.889961][T13142] ? __nla_parse+0x40/0x60 [ 321.889991][T13142] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 321.890020][T13142] genl_family_rcv_msg_doit+0x215/0x300 [ 321.890045][T13142] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 321.890075][T13142] ? stack_trace_save+0x9c/0xe0 [ 321.890100][T13142] genl_rcv_msg+0x60e/0x790 [ 321.890125][T13142] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.890144][T13142] ? __kasan_slab_alloc+0x6c/0x80 [ 321.890180][T13142] ? __pfx_nbd_genl_connect+0x10/0x10 [ 321.890208][T13142] ? __netlink_lookup+0xbd/0x810 [ 321.890224][T13142] ? rcu_is_watching+0x15/0xb0 [ 321.890247][T13142] netlink_rcv_skb+0x208/0x470 [ 321.890275][T13142] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.890297][T13142] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.890330][T13142] ? lock_release+0x4b/0x3e0 [ 321.890359][T13142] ? down_read+0x1ad/0x2e0 [ 321.890378][T13142] genl_rcv+0x28/0x40 [ 321.890397][T13142] netlink_unicast+0x82c/0x9e0 [ 321.890427][T13142] ? __pfx_netlink_unicast+0x10/0x10 [ 321.890452][T13142] ? netlink_sendmsg+0x642/0xb30 [ 321.890479][T13142] ? skb_put+0x11b/0x210 [ 321.890499][T13142] netlink_sendmsg+0x805/0xb30 [ 321.890532][T13142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.890562][T13142] ? aa_sock_msg_perm+0xf1/0x1d0 [ 321.890580][T13142] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.890600][T13142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.890629][T13142] __sock_sendmsg+0x21c/0x270 [ 321.890655][T13142] ____sys_sendmsg+0x505/0x830 [ 321.890677][T13142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.890701][T13142] ? import_iovec+0x74/0xa0 [ 321.890724][T13142] ___sys_sendmsg+0x21f/0x2a0 [ 321.890744][T13142] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.890783][T13142] ? __fget_files+0x2a/0x420 [ 321.890811][T13142] ? __fget_files+0x3a0/0x420 [ 321.890845][T13142] __x64_sys_sendmsg+0x19b/0x260 [ 321.890866][T13142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.890891][T13142] ? __pfx_ksys_write+0x10/0x10 [ 321.890918][T13142] ? rcu_is_watching+0x15/0xb0 [ 321.890937][T13142] do_syscall_64+0xfa/0x3b0 [ 321.890976][T13142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.890994][T13142] ? clear_bhb_loop+0x60/0xb0 [ 321.891031][T13142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.891050][T13142] RIP: 0033:0x7f8cbf98ebe9 [ 321.891066][T13142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.891083][T13142] RSP: 002b:00007f8cc07a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.891104][T13142] RAX: ffffffffffffffda RBX: 00007f8cbfbb5fa0 RCX: 00007f8cbf98ebe9 [ 321.891119][T13142] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 321.891131][T13142] RBP: 00007f8cc07a7090 R08: 0000000000000000 R09: 0000000000000000 [ 321.891143][T13142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.891164][T13142] R13: 00007f8cbfbb6038 R14: 00007f8cbfbb5fa0 R15: 00007ffff81c53f8 [ 321.891188][T13142] [ 321.891271][T13142] nbd: failed to add new device [ 322.175432][T13137] hsr0 speed is unknown, defaulting to 1000 [ 322.466069][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.468205][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.500637][T13163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.730584][T13179] vxcan1 speed is unknown, defaulting to 1000 [ 322.954607][T13179] hsr0 speed is unknown, defaulting to 1000 [ 323.105548][T13197] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2223'. [ 323.190010][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2224'. [ 323.242942][T13206] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2224'. [ 323.258270][T13205] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 323.502458][T13215] team0: Device vti0 is of different type [ 323.751885][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2232'. [ 323.768753][T13224] nbd: couldn't find a device at index 0 [ 323.824661][T13228] vxcan1 speed is unknown, defaulting to 1000 [ 323.844836][T13235] FAULT_INJECTION: forcing a failure. [ 323.844836][T13235] name failslab, interval 1, probability 0, space 0, times 0 [ 323.862857][T13235] CPU: 0 UID: 0 PID: 13235 Comm: syz.3.2236 Not tainted syzkaller #0 PREEMPT(full) [ 323.862888][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.862901][T13235] Call Trace: [ 323.862909][T13235] [ 323.862917][T13235] dump_stack_lvl+0x189/0x250 [ 323.862953][T13235] ? __pfx____ratelimit+0x10/0x10 [ 323.862983][T13235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.863009][T13235] ? __pfx__printk+0x10/0x10 [ 323.863041][T13235] ? __pfx___might_resched+0x10/0x10 [ 323.863062][T13235] ? lock_acquire+0x5f/0x360 [ 323.863095][T13235] should_fail_ex+0x414/0x560 [ 323.863126][T13235] should_failslab+0xa8/0x100 [ 323.863158][T13235] __kmalloc_cache_noprof+0x70/0x3d0 [ 323.863188][T13235] ? init_srcu_struct_fields+0x7f/0xa20 [ 323.863221][T13235] init_srcu_struct_fields+0x7f/0xa20 [ 323.863258][T13235] blk_mq_alloc_tag_set+0x7a6/0xfd0 [ 323.863292][T13235] nbd_dev_add+0x2d7/0xae0 [ 323.863324][T13235] ? rcu_is_watching+0x15/0xb0 [ 323.863347][T13235] ? __pfx_nbd_dev_add+0x10/0x10 [ 323.863396][T13235] ? bpf_lsm_capable+0x9/0x20 [ 323.863430][T13235] ? security_capable+0x7e/0x2e0 [ 323.863462][T13235] ? radix_tree_lookup+0x240/0x290 [ 323.863490][T13235] nbd_genl_connect+0x919/0x18f0 [ 323.863526][T13235] ? __pfx_nbd_genl_connect+0x10/0x10 [ 323.863565][T13235] ? __nla_parse+0x40/0x60 [ 323.863599][T13235] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 323.863630][T13235] genl_family_rcv_msg_doit+0x215/0x300 [ 323.863661][T13235] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 323.863694][T13235] ? stack_trace_save+0x9c/0xe0 [ 323.863722][T13235] genl_rcv_msg+0x60e/0x790 [ 323.863749][T13235] ? __pfx_genl_rcv_msg+0x10/0x10 [ 323.863772][T13235] ? __kasan_slab_alloc+0x6c/0x80 [ 323.863799][T13235] ? __pfx_nbd_genl_connect+0x10/0x10 [ 323.863829][T13235] ? __netlink_lookup+0xbd/0x810 [ 323.863847][T13235] ? rcu_is_watching+0x15/0xb0 [ 323.863872][T13235] netlink_rcv_skb+0x208/0x470 [ 323.863904][T13235] ? __pfx_genl_rcv_msg+0x10/0x10 [ 323.863928][T13235] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.863966][T13235] ? lock_release+0x4b/0x3e0 [ 323.863999][T13235] ? down_read+0x1ad/0x2e0 [ 323.864020][T13235] genl_rcv+0x28/0x40 [ 323.864041][T13235] netlink_unicast+0x82c/0x9e0 [ 323.864074][T13235] ? __pfx_netlink_unicast+0x10/0x10 [ 323.864103][T13235] ? netlink_sendmsg+0x642/0xb30 [ 323.864133][T13235] ? skb_put+0x11b/0x210 [ 323.864154][T13235] netlink_sendmsg+0x805/0xb30 [ 323.864191][T13235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.864225][T13235] ? aa_sock_msg_perm+0xf1/0x1d0 [ 323.864245][T13235] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.864268][T13235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.864306][T13235] __sock_sendmsg+0x21c/0x270 [ 323.864335][T13235] ____sys_sendmsg+0x505/0x830 [ 323.864360][T13235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.864387][T13235] ? import_iovec+0x74/0xa0 [ 323.864413][T13235] ___sys_sendmsg+0x21f/0x2a0 [ 323.864435][T13235] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.864478][T13235] ? __fget_files+0x2a/0x420 [ 323.864509][T13235] ? __fget_files+0x3a0/0x420 [ 323.864547][T13235] __x64_sys_sendmsg+0x19b/0x260 [ 323.864570][T13235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.864598][T13235] ? __pfx_ksys_write+0x10/0x10 [ 323.864624][T13235] ? rcu_is_watching+0x15/0xb0 [ 323.864648][T13235] ? rcu_is_watching+0x15/0xb0 [ 323.864670][T13235] do_syscall_64+0xfa/0x3b0 [ 323.864701][T13235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.864723][T13235] ? clear_bhb_loop+0x60/0xb0 [ 323.864747][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.864767][T13235] RIP: 0033:0x7fc3df38ebe9 [ 323.864785][T13235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.864805][T13235] RSP: 002b:00007fc3e0228038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.864828][T13235] RAX: ffffffffffffffda RBX: 00007fc3df5b5fa0 RCX: 00007fc3df38ebe9 [ 323.864866][T13235] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 323.864880][T13235] RBP: 00007fc3e0228090 R08: 0000000000000000 R09: 0000000000000000 [ 323.864894][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.864907][T13235] R13: 00007fc3df5b6038 R14: 00007fc3df5b5fa0 R15: 00007ffc3441f678 [ 323.864934][T13235] [ 323.865053][T13235] nbd: failed to add new device [ 324.328699][T13228] hsr0 speed is unknown, defaulting to 1000 [ 324.338523][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2238'. [ 324.549097][T13263] vlan3: entered promiscuous mode [ 324.792519][T13279] vxcan1 speed is unknown, defaulting to 1000 [ 324.811804][T13285] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 324.824417][T13271] FAULT_INJECTION: forcing a failure. [ 324.824417][T13271] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 324.900330][T13271] CPU: 1 UID: 0 PID: 13271 Comm: syz.1.2247 Not tainted syzkaller #0 PREEMPT(full) [ 324.900363][T13271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.900376][T13271] Call Trace: [ 324.900384][T13271] [ 324.900393][T13271] dump_stack_lvl+0x189/0x250 [ 324.900424][T13271] ? __pfx____ratelimit+0x10/0x10 [ 324.900454][T13271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.900479][T13271] ? __pfx__printk+0x10/0x10 [ 324.900508][T13271] ? lock_acquire+0x5f/0x360 [ 324.900544][T13271] should_fail_ex+0x414/0x560 [ 324.900575][T13271] prepare_alloc_pages+0x213/0x610 [ 324.900601][T13271] __alloc_frozen_pages_noprof+0x123/0x370 [ 324.900625][T13271] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 324.900650][T13271] ? pfn_valid+0xba/0x490 [ 324.900693][T13271] ? rcu_is_watching+0x15/0xb0 [ 324.900716][T13271] ? policy_nodemask+0x27c/0x720 [ 324.900744][T13271] ? rcu_is_watching+0x15/0xb0 [ 324.900768][T13271] alloc_pages_mpol+0x232/0x4a0 [ 324.900800][T13271] vma_alloc_folio_noprof+0xe4/0x200 [ 324.900829][T13271] ? xas_find+0x842/0x990 [ 324.900848][T13271] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 324.900881][T13271] ? rcu_is_watching+0x15/0xb0 [ 324.900902][T13271] ? lock_release+0x4b/0x3e0 [ 324.900933][T13271] folio_prealloc+0x30/0x180 [ 324.900964][T13271] do_wp_page+0x1231/0x5800 [ 324.901002][T13271] ? __pfx_do_wp_page+0x10/0x10 [ 324.901026][T13271] ? do_raw_spin_lock+0x121/0x290 [ 324.901053][T13271] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 324.901077][T13271] ? ___pte_offset_map+0x45/0x250 [ 324.901110][T13271] __handle_mm_fault+0x1033/0x5440 [ 324.901156][T13271] ? __pfx___handle_mm_fault+0x10/0x10 [ 324.901184][T13271] ? lock_release+0x4b/0x3e0 [ 324.901220][T13271] ? lock_vma_under_rcu+0xdf/0x3d0 [ 324.901254][T13271] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 324.901290][T13271] handle_mm_fault+0x40a/0x8e0 [ 324.901323][T13271] do_user_addr_fault+0xa81/0x1390 [ 324.901362][T13271] ? rcu_is_watching+0x15/0xb0 [ 324.901382][T13271] ? trace_page_fault_user+0x84/0x1e0 [ 324.901416][T13271] exc_page_fault+0x76/0xf0 [ 324.901447][T13271] asm_exc_page_fault+0x26/0x30 [ 324.901467][T13271] RIP: 0033:0x7f68e6348745 [ 324.901486][T13271] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 324.901506][T13271] RSP: 002b:00007f68e7126de0 EFLAGS: 00010293 [ 324.901526][T13271] RAX: 0000000000000008 RBX: 00007f68e70e7d60 RCX: 0000000000000000 [ 324.901539][T13271] RDX: 0000000000000000 RSI: 00007f68e64503f0 RDI: 00007f68e70e7d60 [ 324.901554][T13271] RBP: 00007f68e7126f00 R08: 0000000000000000 R09: 0000000000000005 [ 324.901567][T13271] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f68e644f5a0 [ 324.901581][T13271] R13: 000000000000006a R14: 00007f68e6587460 R15: 0000000000000000 [ 324.901605][T13271] [ 325.181494][T13271] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 325.315428][T13296] FAULT_INJECTION: forcing a failure. [ 325.315428][T13296] name failslab, interval 1, probability 0, space 0, times 0 [ 325.328926][T13296] CPU: 0 UID: 0 PID: 13296 Comm: syz.2.2253 Not tainted syzkaller #0 PREEMPT(full) [ 325.328957][T13296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.328970][T13296] Call Trace: [ 325.328978][T13296] [ 325.328987][T13296] dump_stack_lvl+0x189/0x250 [ 325.329017][T13296] ? __pfx____ratelimit+0x10/0x10 [ 325.329048][T13296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.329073][T13296] ? __pfx__printk+0x10/0x10 [ 325.329103][T13296] ? __pfx___might_resched+0x10/0x10 [ 325.329124][T13296] ? lock_acquire+0x5f/0x360 [ 325.329156][T13296] should_fail_ex+0x414/0x560 [ 325.329187][T13296] should_failslab+0xa8/0x100 [ 325.329219][T13296] __kmalloc_node_noprof+0xd1/0x4e0 [ 325.329247][T13296] ? blk_mq_alloc_tag_set+0x41a/0xfd0 [ 325.329271][T13296] blk_mq_alloc_tag_set+0x41a/0xfd0 [ 325.329298][T13296] nbd_dev_add+0x2d7/0xae0 [ 325.329328][T13296] ? rcu_is_watching+0x15/0xb0 [ 325.329352][T13296] ? __pfx_nbd_dev_add+0x10/0x10 [ 325.329394][T13296] ? bpf_lsm_capable+0x9/0x20 [ 325.329424][T13296] ? security_capable+0x7e/0x2e0 [ 325.329454][T13296] ? radix_tree_lookup+0x240/0x290 [ 325.329482][T13296] nbd_genl_connect+0x919/0x18f0 [ 325.329517][T13296] ? __pfx_nbd_genl_connect+0x10/0x10 [ 325.329555][T13296] ? __nla_parse+0x40/0x60 [ 325.329589][T13296] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 325.329620][T13296] genl_family_rcv_msg_doit+0x215/0x300 [ 325.329649][T13296] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 325.329683][T13296] ? stack_trace_save+0x9c/0xe0 [ 325.329712][T13296] genl_rcv_msg+0x60e/0x790 [ 325.329739][T13296] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.329761][T13296] ? __kasan_slab_alloc+0x6c/0x80 [ 325.329788][T13296] ? __pfx_nbd_genl_connect+0x10/0x10 [ 325.329819][T13296] ? __netlink_lookup+0xbd/0x810 [ 325.329837][T13296] ? rcu_is_watching+0x15/0xb0 [ 325.329870][T13296] netlink_rcv_skb+0x208/0x470 [ 325.329902][T13296] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.329926][T13296] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.329964][T13296] ? lock_release+0x4b/0x3e0 [ 325.329997][T13296] ? down_read+0x1ad/0x2e0 [ 325.330018][T13296] genl_rcv+0x28/0x40 [ 325.330038][T13296] netlink_unicast+0x82c/0x9e0 [ 325.330071][T13296] ? __pfx_netlink_unicast+0x10/0x10 [ 325.330101][T13296] ? netlink_sendmsg+0x642/0xb30 [ 325.330131][T13296] ? skb_put+0x11b/0x210 [ 325.330152][T13296] netlink_sendmsg+0x805/0xb30 [ 325.330189][T13296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.330223][T13296] ? aa_sock_msg_perm+0xf1/0x1d0 [ 325.330243][T13296] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.330266][T13296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.330299][T13296] __sock_sendmsg+0x21c/0x270 [ 325.330327][T13296] ____sys_sendmsg+0x505/0x830 [ 325.330352][T13296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.330380][T13296] ? import_iovec+0x74/0xa0 [ 325.330406][T13296] ___sys_sendmsg+0x21f/0x2a0 [ 325.330429][T13296] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.330472][T13296] ? __fget_files+0x2a/0x420 [ 325.330503][T13296] ? __fget_files+0x3a0/0x420 [ 325.330542][T13296] __x64_sys_sendmsg+0x19b/0x260 [ 325.330565][T13296] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 325.330594][T13296] ? __pfx_ksys_write+0x10/0x10 [ 325.330619][T13296] ? rcu_is_watching+0x15/0xb0 [ 325.330643][T13296] ? rcu_is_watching+0x15/0xb0 [ 325.330665][T13296] do_syscall_64+0xfa/0x3b0 [ 325.330697][T13296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.330719][T13296] ? clear_bhb_loop+0x60/0xb0 [ 325.330743][T13296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.330762][T13296] RIP: 0033:0x7fd2c538ebe9 [ 325.330780][T13296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.330799][T13296] RSP: 002b:00007fd2c6225038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.330822][T13296] RAX: ffffffffffffffda RBX: 00007fd2c55b5fa0 RCX: 00007fd2c538ebe9 [ 325.330839][T13296] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 325.330859][T13296] RBP: 00007fd2c6225090 R08: 0000000000000000 R09: 0000000000000000 [ 325.330873][T13296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.330885][T13296] R13: 00007fd2c55b6038 R14: 00007fd2c55b5fa0 R15: 00007ffdcc3d3458 [ 325.330910][T13296] [ 325.330972][T13296] nbd: failed to add new device [ 325.362715][T13279] hsr0 speed is unknown, defaulting to 1000 [ 325.531488][T13307] tipc: Enabling of bearer rejected, already enabled [ 325.820263][T13294] lo speed is unknown, defaulting to 1000 [ 325.918792][T13294] lo speed is unknown, defaulting to 1000 [ 325.926895][T13294] lo speed is unknown, defaulting to 1000 [ 325.940052][T13313] vxcan1 speed is unknown, defaulting to 1000 [ 326.076290][T13326] netlink: 'syz.1.2263': attribute type 1 has an invalid length. [ 326.150965][T13326] bond10: (slave bridge9): making interface the new active one [ 326.180484][T13326] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 326.313469][T13336] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 326.329300][T13340] gtp0: entered promiscuous mode [ 326.356000][T13340] gtp0: entered allmulticast mode [ 326.372715][T13313] hsr0 speed is unknown, defaulting to 1000 [ 326.380444][T13294] infiniband syz0: set active [ 326.385718][T10288] lo speed is unknown, defaulting to 1000 [ 326.392889][T13294] infiniband syz0: added lo [ 326.399382][T13294] syz0: rxe_create_cq: returned err = -12 [ 326.410097][T13294] infiniband syz0: Couldn't create ib_mad CQ [ 326.427707][T13294] infiniband syz0: Couldn't open port 1 [ 326.435517][T13345] openvswitch: netlink: Message has 8 unknown bytes. [ 326.443194][T13346] __nla_validate_parse: 3 callbacks suppressed [ 326.443213][T13346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2269'. [ 326.521115][T13294] RDS/IB: syz0: added [ 326.534712][T13350] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2269'. [ 326.545305][T13294] smc: adding ib device syz0 with port count 1 [ 326.561279][T13294] smc: ib device syz0 port 1 has pnetid [ 326.775457][T10288] lo speed is unknown, defaulting to 1000 [ 326.799661][T13294] lo speed is unknown, defaulting to 1000 [ 326.818124][T13362] FAULT_INJECTION: forcing a failure. [ 326.818124][T13362] name failslab, interval 1, probability 0, space 0, times 0 [ 326.820134][T13360] vxcan1 speed is unknown, defaulting to 1000 [ 326.863063][T13362] CPU: 1 UID: 0 PID: 13362 Comm: syz.4.2272 Not tainted syzkaller #0 PREEMPT(full) [ 326.863096][T13362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.863109][T13362] Call Trace: [ 326.863118][T13362] [ 326.863126][T13362] dump_stack_lvl+0x189/0x250 [ 326.863156][T13362] ? __pfx____ratelimit+0x10/0x10 [ 326.863184][T13362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.863209][T13362] ? __pfx__printk+0x10/0x10 [ 326.863244][T13362] ? fs_reclaim_acquire+0x7d/0x100 [ 326.863276][T13362] ? rcu_is_watching+0x15/0xb0 [ 326.863296][T13362] ? __pfx___might_resched+0x10/0x10 [ 326.863314][T13362] ? lock_acquire+0x5f/0x360 [ 326.863345][T13362] should_fail_ex+0x414/0x560 [ 326.863374][T13362] should_failslab+0xa8/0x100 [ 326.863404][T13362] __kmalloc_noprof+0xcb/0x4f0 [ 326.863431][T13362] ? sk_prot_alloc+0xe7/0x220 [ 326.863453][T13362] sk_prot_alloc+0xe7/0x220 [ 326.863471][T13362] ? sk_alloc+0x24/0x370 [ 326.863490][T13362] sk_alloc+0x3a/0x370 [ 326.863519][T13362] __netlink_create+0x65/0x260 [ 326.863552][T13362] ? __pfx_genl_release+0x10/0x10 [ 326.863575][T13362] netlink_create+0x3ca/0x590 [ 326.863594][T13362] ? __pfx_genl_unbind+0x10/0x10 [ 326.863615][T13362] ? __pfx_genl_bind+0x10/0x10 [ 326.863637][T13362] __sock_create+0x4b3/0x9f0 [ 326.863670][T13362] __sys_socket+0xd7/0x1b0 [ 326.863699][T13362] __x64_sys_socket+0x7a/0x90 [ 326.863728][T13362] do_syscall_64+0xfa/0x3b0 [ 326.863759][T13362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.863780][T13362] ? clear_bhb_loop+0x60/0xb0 [ 326.863803][T13362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.863824][T13362] RIP: 0033:0x7f8cbf990b07 [ 326.863842][T13362] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.863860][T13362] RSP: 002b:00007f8cc0784fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 326.863881][T13362] RAX: ffffffffffffffda RBX: 00007f8cbfbb6090 RCX: 00007f8cbf990b07 [ 326.863896][T13362] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 326.863908][T13362] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 326.863921][T13362] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000001 [ 326.863934][T13362] R13: 00007f8cbfbb6128 R14: 00007f8cbfbb6090 R15: 00007ffff81c53f8 [ 326.863959][T13362] [ 327.164581][T13294] lo speed is unknown, defaulting to 1000 [ 327.205051][T13364] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2273'. [ 327.226608][T13364] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2273'. [ 327.248125][T13364] netlink: 'syz.1.2273': attribute type 5 has an invalid length. [ 327.271099][T13364] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2273'. [ 327.285733][T13294] lo speed is unknown, defaulting to 1000 [ 327.294128][T13364] syzkaller1: entered promiscuous mode [ 327.300205][T13364] syzkaller1: entered allmulticast mode [ 327.391922][T13294] lo speed is unknown, defaulting to 1000 [ 327.447017][T13368] FAULT_INJECTION: forcing a failure. [ 327.447017][T13368] name failslab, interval 1, probability 0, space 0, times 0 [ 327.461951][T13368] CPU: 1 UID: 0 PID: 13368 Comm: syz.2.2275 Not tainted syzkaller #0 PREEMPT(full) [ 327.461980][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.461994][T13368] Call Trace: [ 327.462001][T13368] [ 327.462010][T13368] dump_stack_lvl+0x189/0x250 [ 327.462040][T13368] ? __pfx____ratelimit+0x10/0x10 [ 327.462069][T13368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.462094][T13368] ? __pfx__printk+0x10/0x10 [ 327.462124][T13368] ? __pfx___might_resched+0x10/0x10 [ 327.462144][T13368] ? lock_acquire+0x5f/0x360 [ 327.462175][T13368] should_fail_ex+0x414/0x560 [ 327.462205][T13368] should_failslab+0xa8/0x100 [ 327.462235][T13368] __kmalloc_noprof+0xcb/0x4f0 [ 327.462262][T13368] ? group_cpus_evenly+0xc4/0x550 [ 327.462285][T13368] group_cpus_evenly+0xc4/0x550 [ 327.462308][T13368] ? __pfx_group_cpus_evenly+0x10/0x10 [ 327.462337][T13368] blk_mq_map_queues+0xab/0x4a0 [ 327.462369][T13368] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 327.462398][T13368] ? blk_mq_update_queue_map+0x37a/0x440 [ 327.462421][T13368] blk_mq_alloc_tag_set+0x83f/0xfd0 [ 327.462447][T13368] nbd_dev_add+0x2d7/0xae0 [ 327.462477][T13368] ? rcu_is_watching+0x15/0xb0 [ 327.462516][T13368] ? __pfx_nbd_dev_add+0x10/0x10 [ 327.462559][T13368] ? bpf_lsm_capable+0x9/0x20 [ 327.462588][T13368] ? security_capable+0x7e/0x2e0 [ 327.462619][T13368] ? radix_tree_lookup+0x240/0x290 [ 327.462648][T13368] nbd_genl_connect+0x919/0x18f0 [ 327.462684][T13368] ? __pfx_nbd_genl_connect+0x10/0x10 [ 327.462722][T13368] ? __nla_parse+0x40/0x60 [ 327.462759][T13368] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 327.462790][T13368] genl_family_rcv_msg_doit+0x215/0x300 [ 327.462819][T13368] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 327.462853][T13368] ? stack_trace_save+0x9c/0xe0 [ 327.462881][T13368] genl_rcv_msg+0x60e/0x790 [ 327.462916][T13368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.462938][T13368] ? __kasan_slab_alloc+0x6c/0x80 [ 327.462966][T13368] ? __pfx_nbd_genl_connect+0x10/0x10 [ 327.463008][T13368] ? __netlink_lookup+0xbd/0x810 [ 327.463026][T13368] ? rcu_is_watching+0x15/0xb0 [ 327.463051][T13368] netlink_rcv_skb+0x208/0x470 [ 327.463081][T13368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.463104][T13368] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.463140][T13368] ? lock_release+0x4b/0x3e0 [ 327.463171][T13368] ? down_read+0x1ad/0x2e0 [ 327.463191][T13368] genl_rcv+0x28/0x40 [ 327.463211][T13368] netlink_unicast+0x82c/0x9e0 [ 327.463242][T13368] ? __pfx_netlink_unicast+0x10/0x10 [ 327.463270][T13368] ? netlink_sendmsg+0x642/0xb30 [ 327.463298][T13368] ? skb_put+0x11b/0x210 [ 327.463318][T13368] netlink_sendmsg+0x805/0xb30 [ 327.463353][T13368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.463385][T13368] ? aa_sock_msg_perm+0xf1/0x1d0 [ 327.463404][T13368] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 327.463426][T13368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.463456][T13368] __sock_sendmsg+0x21c/0x270 [ 327.463483][T13368] ____sys_sendmsg+0x505/0x830 [ 327.463507][T13368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.463533][T13368] ? import_iovec+0x74/0xa0 [ 327.463557][T13368] ___sys_sendmsg+0x21f/0x2a0 [ 327.463579][T13368] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.463620][T13368] ? __fget_files+0x2a/0x420 [ 327.463650][T13368] ? __fget_files+0x3a0/0x420 [ 327.463686][T13368] __x64_sys_sendmsg+0x19b/0x260 [ 327.463709][T13368] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 327.463735][T13368] ? __pfx_ksys_write+0x10/0x10 [ 327.463761][T13368] ? rcu_is_watching+0x15/0xb0 [ 327.463783][T13368] ? rcu_is_watching+0x15/0xb0 [ 327.463804][T13368] do_syscall_64+0xfa/0x3b0 [ 327.463835][T13368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.463855][T13368] ? clear_bhb_loop+0x60/0xb0 [ 327.463877][T13368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.463897][T13368] RIP: 0033:0x7fd2c538ebe9 [ 327.463921][T13368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.463939][T13368] RSP: 002b:00007fd2c6225038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.463962][T13368] RAX: ffffffffffffffda RBX: 00007fd2c55b5fa0 RCX: 00007fd2c538ebe9 [ 327.463977][T13368] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 327.463991][T13368] RBP: 00007fd2c6225090 R08: 0000000000000000 R09: 0000000000000000 [ 327.464003][T13368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 327.464015][T13368] R13: 00007fd2c55b6038 R14: 00007fd2c55b5fa0 R15: 00007ffdcc3d3458 [ 327.464039][T13368] [ 327.955546][T13294] lo speed is unknown, defaulting to 1000 [ 328.045985][T13375] pim6reg1: entered promiscuous mode [ 328.057172][T13375] pim6reg1: entered allmulticast mode [ 328.067435][T13375] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2278'. [ 328.078174][T13375] bridge0: port 1(veth0_to_bridge) entered disabled state [ 328.120718][T13294] lo speed is unknown, defaulting to 1000 [ 328.150300][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2279'. [ 328.321820][T13294] lo speed is unknown, defaulting to 1000 [ 328.386221][T13392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2283'. [ 328.486020][T13294] lo speed is unknown, defaulting to 1000 [ 328.617116][T13389] vxcan1 speed is unknown, defaulting to 1000 [ 328.795042][T13413] FAULT_INJECTION: forcing a failure. [ 328.795042][T13413] name failslab, interval 1, probability 0, space 0, times 0 [ 328.807933][T13413] CPU: 0 UID: 0 PID: 13413 Comm: syz.0.2289 Not tainted syzkaller #0 PREEMPT(full) [ 328.807962][T13413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.807976][T13413] Call Trace: [ 328.807984][T13413] [ 328.807993][T13413] dump_stack_lvl+0x189/0x250 [ 328.808024][T13413] ? __pfx____ratelimit+0x10/0x10 [ 328.808054][T13413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.808079][T13413] ? __pfx__printk+0x10/0x10 [ 328.808111][T13413] ? __pfx___might_resched+0x10/0x10 [ 328.808142][T13413] ? lock_acquire+0x5f/0x360 [ 328.808186][T13413] should_fail_ex+0x414/0x560 [ 328.808214][T13413] should_failslab+0xa8/0x100 [ 328.808243][T13413] __kmalloc_noprof+0xcb/0x4f0 [ 328.808287][T13413] ? group_cpus_evenly+0x288/0x550 [ 328.808312][T13413] group_cpus_evenly+0x288/0x550 [ 328.808334][T13413] ? __pfx_group_cpus_evenly+0x10/0x10 [ 328.808364][T13413] blk_mq_map_queues+0xab/0x4a0 [ 328.808398][T13413] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 328.808428][T13413] ? blk_mq_update_queue_map+0x37a/0x440 [ 328.808452][T13413] blk_mq_alloc_tag_set+0x83f/0xfd0 [ 328.808479][T13413] nbd_dev_add+0x2d7/0xae0 [ 328.808509][T13413] ? rcu_is_watching+0x15/0xb0 [ 328.808541][T13413] ? __pfx_nbd_dev_add+0x10/0x10 [ 328.808583][T13413] ? bpf_lsm_capable+0x9/0x20 [ 328.808611][T13413] ? security_capable+0x7e/0x2e0 [ 328.808641][T13413] ? radix_tree_lookup+0x240/0x290 [ 328.808668][T13413] nbd_genl_connect+0x919/0x18f0 [ 328.808703][T13413] ? __pfx_nbd_genl_connect+0x10/0x10 [ 328.808740][T13413] ? __nla_parse+0x40/0x60 [ 328.808791][T13413] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 328.808820][T13413] genl_family_rcv_msg_doit+0x215/0x300 [ 328.808846][T13413] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 328.808876][T13413] ? stack_trace_save+0x9c/0xe0 [ 328.808902][T13413] genl_rcv_msg+0x60e/0x790 [ 328.808926][T13413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.808946][T13413] ? __kasan_slab_alloc+0x6c/0x80 [ 328.808975][T13413] ? __pfx_nbd_genl_connect+0x10/0x10 [ 328.809002][T13413] ? __netlink_lookup+0xbd/0x810 [ 328.809018][T13413] ? rcu_is_watching+0x15/0xb0 [ 328.809041][T13413] netlink_rcv_skb+0x208/0x470 [ 328.809069][T13413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.809090][T13413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.809124][T13413] ? lock_release+0x4b/0x3e0 [ 328.809153][T13413] ? down_read+0x1ad/0x2e0 [ 328.809172][T13413] genl_rcv+0x28/0x40 [ 328.809190][T13413] netlink_unicast+0x82c/0x9e0 [ 328.809217][T13413] ? __pfx_netlink_unicast+0x10/0x10 [ 328.809243][T13413] ? netlink_sendmsg+0x642/0xb30 [ 328.809269][T13413] ? skb_put+0x11b/0x210 [ 328.809289][T13413] netlink_sendmsg+0x805/0xb30 [ 328.809322][T13413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.809352][T13413] ? aa_sock_msg_perm+0xf1/0x1d0 [ 328.809370][T13413] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.809391][T13413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.809419][T13413] __sock_sendmsg+0x21c/0x270 [ 328.809445][T13413] ____sys_sendmsg+0x505/0x830 [ 328.809467][T13413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.809491][T13413] ? import_iovec+0x74/0xa0 [ 328.809514][T13413] ___sys_sendmsg+0x21f/0x2a0 [ 328.809554][T13413] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.809595][T13413] ? __fget_files+0x2a/0x420 [ 328.809625][T13413] ? __fget_files+0x3a0/0x420 [ 328.809661][T13413] __x64_sys_sendmsg+0x19b/0x260 [ 328.809683][T13413] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.809710][T13413] ? __pfx_ksys_write+0x10/0x10 [ 328.809735][T13413] ? rcu_is_watching+0x15/0xb0 [ 328.809757][T13413] ? rcu_is_watching+0x15/0xb0 [ 328.809798][T13413] do_syscall_64+0xfa/0x3b0 [ 328.809827][T13413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.809847][T13413] ? clear_bhb_loop+0x60/0xb0 [ 328.809868][T13413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.809887][T13413] RIP: 0033:0x7fb5aa38ebe9 [ 328.809904][T13413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.809922][T13413] RSP: 002b:00007fb5ab146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.809943][T13413] RAX: ffffffffffffffda RBX: 00007fb5aa5b5fa0 RCX: 00007fb5aa38ebe9 [ 328.809958][T13413] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 328.809971][T13413] RBP: 00007fb5ab146090 R08: 0000000000000000 R09: 0000000000000000 [ 328.809983][T13413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 328.809994][T13413] R13: 00007fb5aa5b6038 R14: 00007fb5aa5b5fa0 R15: 00007ffca7ddc6f8 [ 328.810017][T13413] [ 329.455339][T13360] hsr0 speed is unknown, defaulting to 1000 [ 329.683323][T13426] veth0: entered promiscuous mode [ 329.700732][T13425] veth0: left promiscuous mode [ 329.770609][T13389] hsr0 speed is unknown, defaulting to 1000 [ 329.783148][T13428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2293'. [ 329.795158][T13389] lo speed is unknown, defaulting to 1000 [ 329.827966][T13430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2294'. [ 330.756514][T13479] vxcan1 speed is unknown, defaulting to 1000 [ 331.094558][T13479] hsr0 speed is unknown, defaulting to 1000 [ 331.102576][T13479] lo speed is unknown, defaulting to 1000 [ 331.568873][T13513] FAULT_INJECTION: forcing a failure. [ 331.568873][T13513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.584658][T13513] CPU: 1 UID: 0 PID: 13513 Comm: syz.1.2321 Not tainted syzkaller #0 PREEMPT(full) [ 331.584688][T13513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.584703][T13513] Call Trace: [ 331.584711][T13513] [ 331.584720][T13513] dump_stack_lvl+0x189/0x250 [ 331.584750][T13513] ? __pfx____ratelimit+0x10/0x10 [ 331.584780][T13513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.584806][T13513] ? __pfx__printk+0x10/0x10 [ 331.584834][T13513] ? __might_fault+0xb0/0x130 [ 331.584869][T13513] ? rcu_is_watching+0x15/0xb0 [ 331.584891][T13513] should_fail_ex+0x414/0x560 [ 331.584922][T13513] _copy_from_user+0x2d/0xb0 [ 331.584947][T13513] kstrtouint_from_user+0xc4/0x170 [ 331.584981][T13513] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 331.585020][T13513] ? vfs_write+0x211/0xb30 [ 331.585045][T13513] ? rcu_is_watching+0x15/0xb0 [ 331.585067][T13513] proc_fail_nth_write+0x88/0x200 [ 331.585091][T13513] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 331.585113][T13513] ? security_file_permission+0x75/0x290 [ 331.585141][T13513] ? preempt_count_add+0x91/0x1a0 [ 331.585172][T13513] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 331.585196][T13513] vfs_write+0x27b/0xb30 [ 331.585228][T13513] ? __pfx_vfs_write+0x10/0x10 [ 331.585259][T13513] ? __fget_files+0x3a0/0x420 [ 331.585291][T13513] ? __fget_files+0x2a/0x420 [ 331.585327][T13513] ksys_write+0x145/0x250 [ 331.585353][T13513] ? lock_release+0x4b/0x3e0 [ 331.585383][T13513] ? __pfx_ksys_write+0x10/0x10 [ 331.585410][T13513] ? rcu_is_watching+0x15/0xb0 [ 331.585430][T13513] ? trace_sys_enter+0x25/0x100 [ 331.585464][T13513] do_syscall_64+0xfa/0x3b0 [ 331.585496][T13513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.585517][T13513] ? clear_bhb_loop+0x60/0xb0 [ 331.585549][T13513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.585569][T13513] RIP: 0033:0x7f68e638d69f [ 331.585587][T13513] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 331.585606][T13513] RSP: 002b:00007f68e7128030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 331.585628][T13513] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f68e638d69f [ 331.585646][T13513] RDX: 0000000000000001 RSI: 00007f68e71280a0 RDI: 0000000000000005 [ 331.585659][T13513] RBP: 00007f68e7128090 R08: 0000000000000000 R09: 0000000000000000 [ 331.585672][T13513] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 331.585685][T13513] R13: 00007f68e65b6038 R14: 00007f68e65b5fa0 R15: 00007ffd75576478 [ 331.585710][T13513] [ 331.630281][T13517] vxcan1 speed is unknown, defaulting to 1000 [ 331.807973][T13524] netlink: 'syz.0.2324': attribute type 1 has an invalid length. [ 331.870255][T13522] ip6gre1: entered allmulticast mode [ 332.014716][T13520] vxcan1 speed is unknown, defaulting to 1000 [ 332.089993][T13535] netlink: 'syz.0.2327': attribute type 1 has an invalid length. [ 332.124173][T13535] netlink: 'syz.0.2327': attribute type 2 has an invalid length. [ 332.148932][T13539] __nla_validate_parse: 12 callbacks suppressed [ 332.148953][T13539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2328'. [ 332.220872][T13539] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2328'. [ 332.249939][T13517] hsr0 speed is unknown, defaulting to 1000 [ 332.257479][T13517] lo speed is unknown, defaulting to 1000 [ 332.408128][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2329'. [ 332.439144][T13520] hsr0 speed is unknown, defaulting to 1000 [ 332.456366][T13520] lo speed is unknown, defaulting to 1000 [ 332.492382][T13549] vxcan1 speed is unknown, defaulting to 1000 [ 332.752527][T13549] hsr0 speed is unknown, defaulting to 1000 [ 332.781309][T13549] lo speed is unknown, defaulting to 1000 [ 333.007063][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2331'. [ 333.131829][T13555] vlan4: entered allmulticast mode [ 333.144311][T13555] bridge0: entered allmulticast mode [ 333.149960][T13555] bridge4: port 1(vlan4) entered blocking state [ 333.157068][T13555] bridge4: port 1(vlan4) entered disabled state [ 333.167039][T13555] vlan4: entered promiscuous mode [ 333.172196][T13555] bridge0: entered promiscuous mode [ 333.481829][T13571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2336'. [ 333.562345][T13569] pim6reg1: entered promiscuous mode [ 333.569449][T13569] pim6reg1: entered allmulticast mode [ 333.898600][T13582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2339'. [ 333.927710][T13582] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2339'. [ 333.971234][T13587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2341'. [ 333.984919][T13587] netlink: 'syz.0.2341': attribute type 21 has an invalid length. [ 333.994717][T13587] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2341'. [ 334.004189][T13587] netlink: 'syz.0.2341': attribute type 5 has an invalid length. [ 334.012080][T13587] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2341'. [ 334.122424][T13599] nbd: must specify at least one socket [ 334.482385][T13631] sctp: [Deprecated]: syz.4.2350 (pid 13631) Use of int in maxseg socket option. [ 334.482385][T13631] Use struct sctp_assoc_value instead [ 334.805206][T13646] bond0: entered promiscuous mode [ 334.828480][T13646] !€ÿ: entered promiscuous mode [ 334.834333][T13646] bond_slave_1: entered promiscuous mode [ 335.287373][T13700] vxcan1 speed is unknown, defaulting to 1000 [ 335.325623][T13704] FAULT_INJECTION: forcing a failure. [ 335.325623][T13704] name failslab, interval 1, probability 0, space 0, times 0 [ 335.370496][T13704] CPU: 1 UID: 0 PID: 13704 Comm: syz.2.2369 Not tainted syzkaller #0 PREEMPT(full) [ 335.370526][T13704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.370540][T13704] Call Trace: [ 335.370548][T13704] [ 335.370558][T13704] dump_stack_lvl+0x189/0x250 [ 335.370588][T13704] ? __pfx____ratelimit+0x10/0x10 [ 335.370618][T13704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.370643][T13704] ? __pfx__printk+0x10/0x10 [ 335.370675][T13704] ? __pfx___might_resched+0x10/0x10 [ 335.370695][T13704] ? lock_acquire+0x5f/0x360 [ 335.370727][T13704] should_fail_ex+0x414/0x560 [ 335.370757][T13704] should_failslab+0xa8/0x100 [ 335.370789][T13704] __kmalloc_noprof+0xcb/0x4f0 [ 335.370816][T13704] ? kfree+0x4d/0x440 [ 335.370844][T13704] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 335.370868][T13704] tomoyo_realpath_from_path+0xe3/0x5d0 [ 335.370891][T13704] ? tomoyo_domain+0xd9/0x130 [ 335.370915][T13704] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 335.370944][T13704] tomoyo_path_number_perm+0x1e8/0x5a0 [ 335.370980][T13704] ? lock_release+0x4b/0x3e0 [ 335.371011][T13704] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 335.371042][T13704] ? rcu_is_watching+0x15/0xb0 [ 335.371063][T13704] ? lock_release+0x4b/0x3e0 [ 335.371092][T13704] ? vfs_write+0x956/0xb30 [ 335.371122][T13704] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 335.371166][T13704] ? lock_release+0x4b/0x3e0 [ 335.371199][T13704] ? __fget_files+0x2a/0x420 [ 335.371231][T13704] ? __fget_files+0x3a0/0x420 [ 335.371262][T13704] ? __fget_files+0x2a/0x420 [ 335.371295][T13704] security_file_ioctl+0xcb/0x2d0 [ 335.371325][T13704] __se_sys_ioctl+0x47/0x170 [ 335.371352][T13704] do_syscall_64+0xfa/0x3b0 [ 335.371395][T13704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.371416][T13704] ? clear_bhb_loop+0x60/0xb0 [ 335.371439][T13704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.371459][T13704] RIP: 0033:0x7fd2c538ebe9 [ 335.371476][T13704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.371495][T13704] RSP: 002b:00007fd2c6204038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.371517][T13704] RAX: ffffffffffffffda RBX: 00007fd2c55b6090 RCX: 00007fd2c538ebe9 [ 335.371532][T13704] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000008 [ 335.371546][T13704] RBP: 00007fd2c6204090 R08: 0000000000000000 R09: 0000000000000000 [ 335.371559][T13704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.371571][T13704] R13: 00007fd2c55b6128 R14: 00007fd2c55b6090 R15: 00007ffdcc3d3458 [ 335.371596][T13704] [ 335.628091][T13704] ERROR: Out of memory at tomoyo_realpath_from_path. [ 335.697478][T13711] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20003 [ 335.706117][T13712] netlink: 'syz.4.2372': attribute type 10 has an invalid length. [ 335.723325][T13702] vxcan1 speed is unknown, defaulting to 1000 [ 335.911479][T13700] hsr0 speed is unknown, defaulting to 1000 [ 335.942225][T13700] lo speed is unknown, defaulting to 1000 [ 336.013446][T13726] nbd: socks must be embedded in a SOCK_ITEM attr [ 336.105932][T13731] nbd: must specify a size in bytes for the device [ 336.187047][T13702] hsr0 speed is unknown, defaulting to 1000 [ 336.205438][T13702] lo speed is unknown, defaulting to 1000 [ 336.990000][T13763] openvswitch: netlink: Flow key attribute not present in set flow. [ 337.223556][T13781] vxcan1 speed is unknown, defaulting to 1000 [ 337.257458][T13776] FAULT_INJECTION: forcing a failure. [ 337.257458][T13776] name failslab, interval 1, probability 0, space 0, times 0 [ 337.313010][T13776] CPU: 0 UID: 0 PID: 13776 Comm: syz.3.2390 Not tainted syzkaller #0 PREEMPT(full) [ 337.313039][T13776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.313053][T13776] Call Trace: [ 337.313060][T13776] [ 337.313069][T13776] dump_stack_lvl+0x189/0x250 [ 337.313099][T13776] ? __pfx____ratelimit+0x10/0x10 [ 337.313128][T13776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.313151][T13776] ? __pfx__printk+0x10/0x10 [ 337.313181][T13776] ? __pfx___might_resched+0x10/0x10 [ 337.313201][T13776] ? lock_acquire+0x5f/0x360 [ 337.313233][T13776] should_fail_ex+0x414/0x560 [ 337.313263][T13776] should_failslab+0xa8/0x100 [ 337.313294][T13776] __kmalloc_noprof+0xcb/0x4f0 [ 337.313320][T13776] ? tomoyo_encode+0x28b/0x550 [ 337.313342][T13776] tomoyo_encode+0x28b/0x550 [ 337.313364][T13776] tomoyo_realpath_from_path+0x58d/0x5d0 [ 337.313386][T13776] ? tomoyo_domain+0xd9/0x130 [ 337.313409][T13776] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 337.313437][T13776] tomoyo_path_number_perm+0x1e8/0x5a0 [ 337.313465][T13776] ? lock_release+0x4b/0x3e0 [ 337.313494][T13776] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 337.313525][T13776] ? rcu_is_watching+0x15/0xb0 [ 337.313545][T13776] ? lock_release+0x4b/0x3e0 [ 337.313574][T13776] ? vfs_write+0x956/0xb30 [ 337.313603][T13776] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 337.313645][T13776] ? lock_release+0x4b/0x3e0 [ 337.313677][T13776] ? __fget_files+0x2a/0x420 [ 337.313707][T13776] ? __fget_files+0x3a0/0x420 [ 337.313737][T13776] ? __fget_files+0x2a/0x420 [ 337.313771][T13776] security_file_ioctl+0xcb/0x2d0 [ 337.313797][T13776] __se_sys_ioctl+0x47/0x170 [ 337.313833][T13776] do_syscall_64+0xfa/0x3b0 [ 337.313864][T13776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.313885][T13776] ? clear_bhb_loop+0x60/0xb0 [ 337.313908][T13776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.313928][T13776] RIP: 0033:0x7fc3df38ebe9 [ 337.313945][T13776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.313965][T13776] RSP: 002b:00007fc3e0228038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.313988][T13776] RAX: ffffffffffffffda RBX: 00007fc3df5b5fa0 RCX: 00007fc3df38ebe9 [ 337.314003][T13776] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000007 [ 337.314017][T13776] RBP: 00007fc3e0228090 R08: 0000000000000000 R09: 0000000000000000 [ 337.314031][T13776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.314042][T13776] R13: 00007fc3df5b6038 R14: 00007fc3df5b5fa0 R15: 00007ffc3441f678 [ 337.314069][T13776] [ 337.314085][T13776] ERROR: Out of memory at tomoyo_realpath_from_path. [ 337.582989][T13792] __nla_validate_parse: 8 callbacks suppressed [ 337.583008][T13792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2395'. [ 337.648279][T13792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2395'. [ 337.663319][T13792] nbd: must specify at least one socket [ 337.720982][T13797] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2399'. [ 337.741543][T13806] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 337.848379][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'. [ 337.870695][T13818] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2404'. [ 337.893883][T13781] hsr0 speed is unknown, defaulting to 1000 [ 337.949786][T13781] lo speed is unknown, defaulting to 1000 [ 337.964875][T13822] vxcan1 speed is unknown, defaulting to 1000 [ 338.190147][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.240952][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.252292][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.270417][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.310157][T13839] vxcan1 speed is unknown, defaulting to 1000 [ 338.391276][T13851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2410'. [ 338.442690][T13854] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2410'. [ 338.511633][T13822] hsr0 speed is unknown, defaulting to 1000 [ 338.518724][T13822] lo speed is unknown, defaulting to 1000 [ 338.730291][T13861] netlink: 'syz.4.2412': attribute type 4 has an invalid length. [ 338.738307][T13839] hsr0 speed is unknown, defaulting to 1000 [ 338.746585][T13839] lo speed is unknown, defaulting to 1000 [ 338.814275][T13863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2413'. [ 338.941911][T13867] netlink: 'syz.2.2414': attribute type 10 has an invalid length. [ 339.003505][T13867] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 339.307309][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2422'. [ 339.333090][T13890] netlink: 'syz.1.2422': attribute type 5 has an invalid length. [ 339.340872][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2422'. [ 339.491167][T13896] nbd: device at index 1 is going down [ 339.501161][T13896] netlink: 'syz.1.2424': attribute type 75 has an invalid length. [ 339.795846][T13919] netlink: 'syz.1.2441': attribute type 7 has an invalid length. [ 339.839710][T13919] netlink: 'syz.1.2441': attribute type 8 has an invalid length. [ 340.072479][T13936] vxcan1 speed is unknown, defaulting to 1000 [ 340.219586][T13945] netlink: 'syz.1.2442': attribute type 11 has an invalid length. [ 340.387183][T13936] hsr0 speed is unknown, defaulting to 1000 [ 340.394462][T13936] lo speed is unknown, defaulting to 1000 [ 340.409946][T13951] nbd: couldn't find device at index 1 [ 340.676378][T13971] tipc: Enabled bearer , priority 0 [ 340.747193][T13971] syzkaller0: entered promiscuous mode [ 340.752966][T13971] syzkaller0: entered allmulticast mode [ 340.759988][T13971] tipc: Resetting bearer [ 340.879018][T13982] syzkaller1: entered promiscuous mode [ 340.899911][T13982] syzkaller1: entered allmulticast mode [ 340.945431][T13982] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.995421][T13985] vxcan1 speed is unknown, defaulting to 1000 [ 341.336008][ T44] tipc: Resetting bearer [ 341.365079][T13985] hsr0 speed is unknown, defaulting to 1000 [ 341.371870][T13985] lo speed is unknown, defaulting to 1000 [ 341.474649][T14007] vxcan1 speed is unknown, defaulting to 1000 [ 341.500354][T13970] tipc: Resetting bearer [ 341.578271][T13970] tipc: Disabling bearer [ 341.589893][T14013] netlink: 'syz.1.2463': attribute type 11 has an invalid length. [ 341.908050][T14007] hsr0 speed is unknown, defaulting to 1000 [ 341.917146][T14007] lo speed is unknown, defaulting to 1000 [ 341.969135][T14023] FAULT_INJECTION: forcing a failure. [ 341.969135][T14023] name failslab, interval 1, probability 0, space 0, times 0 [ 342.001724][T14023] CPU: 0 UID: 0 PID: 14023 Comm: syz.3.2466 Not tainted syzkaller #0 PREEMPT(full) [ 342.001753][T14023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.001766][T14023] Call Trace: [ 342.001773][T14023] [ 342.001782][T14023] dump_stack_lvl+0x189/0x250 [ 342.001812][T14023] ? __pfx____ratelimit+0x10/0x10 [ 342.001841][T14023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.001865][T14023] ? __pfx__printk+0x10/0x10 [ 342.001891][T14023] ? rcu_is_watching+0x15/0xb0 [ 342.001913][T14023] ? __pfx___might_resched+0x10/0x10 [ 342.001932][T14023] ? lock_acquire+0x5f/0x360 [ 342.001963][T14023] should_fail_ex+0x414/0x560 [ 342.001993][T14023] should_failslab+0xa8/0x100 [ 342.002024][T14023] __kmalloc_node_noprof+0xd1/0x4e0 [ 342.002052][T14023] ? rcu_is_watching+0x15/0xb0 [ 342.002071][T14023] ? qdisc_alloc+0x97/0xaa0 [ 342.002108][T14023] qdisc_alloc+0x97/0xaa0 [ 342.002142][T14023] qdisc_create_dflt+0x8e/0x4e0 [ 342.002172][T14023] dev_activate+0x378/0x1150 [ 342.002226][T14023] __dev_open+0x69c/0x880 [ 342.002259][T14023] ? __pfx___dev_open+0x10/0x10 [ 342.002293][T14023] __dev_change_flags+0x1ea/0x6d0 [ 342.002312][T14023] ? __mutex_lock+0x5bb/0x1350 [ 342.002346][T14023] ? __pfx___dev_change_flags+0x10/0x10 [ 342.002368][T14023] ? __pfx___mutex_lock+0x10/0x10 [ 342.002408][T14023] netif_change_flags+0x88/0x1a0 [ 342.002432][T14023] dev_change_flags+0x130/0x260 [ 342.002467][T14023] devinet_ioctl+0xbb4/0x1b50 [ 342.002491][T14023] ? __might_fault+0xb0/0x130 [ 342.002521][T14023] ? __pfx_devinet_ioctl+0x10/0x10 [ 342.002543][T14023] ? get_user_ifreq+0x12c/0x180 [ 342.002568][T14023] inet_ioctl+0x3c0/0x4c0 [ 342.002595][T14023] ? __pfx_inet_ioctl+0x10/0x10 [ 342.002630][T14023] ? lock_release+0x4b/0x3e0 [ 342.002658][T14023] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 342.002687][T14023] ? kfree+0x18e/0x440 [ 342.002720][T14023] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 342.002757][T14023] ? packet_ioctl+0x254/0x350 [ 342.002780][T14023] sock_do_ioctl+0xd9/0x300 [ 342.002805][T14023] ? __pfx_sock_do_ioctl+0x10/0x10 [ 342.002829][T14023] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 342.002869][T14023] sock_ioctl+0x576/0x790 [ 342.002891][T14023] ? lock_release+0x4b/0x3e0 [ 342.002921][T14023] ? __pfx_sock_ioctl+0x10/0x10 [ 342.002945][T14023] ? __fget_files+0x2a/0x420 [ 342.002975][T14023] ? __fget_files+0x3a0/0x420 [ 342.003005][T14023] ? __fget_files+0x2a/0x420 [ 342.003036][T14023] ? bpf_lsm_file_ioctl+0x9/0x20 [ 342.003061][T14023] ? __pfx_sock_ioctl+0x10/0x10 [ 342.003083][T14023] __se_sys_ioctl+0xfc/0x170 [ 342.003107][T14023] do_syscall_64+0xfa/0x3b0 [ 342.003138][T14023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.003159][T14023] ? clear_bhb_loop+0x60/0xb0 [ 342.003182][T14023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.003226][T14023] RIP: 0033:0x7fc3df38ebe9 [ 342.003244][T14023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.003280][T14023] RSP: 002b:00007fc3e0228038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.003302][T14023] RAX: ffffffffffffffda RBX: 00007fc3df5b5fa0 RCX: 00007fc3df38ebe9 [ 342.003317][T14023] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000008 [ 342.003330][T14023] RBP: 00007fc3e0228090 R08: 0000000000000000 R09: 0000000000000000 [ 342.003342][T14023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.003355][T14023] R13: 00007fc3df5b6038 R14: 00007fc3df5b5fa0 R15: 00007ffc3441f678 [ 342.003380][T14023] [ 342.364171][T14023] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 342.380775][T14027] vxcan1 speed is unknown, defaulting to 1000 [ 342.608669][T14053] __nla_validate_parse: 11 callbacks suppressed [ 342.608690][T14053] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2473'. [ 342.633631][T14052] netlink: 'syz.0.2475': attribute type 2 has an invalid length. [ 342.645330][T14027] hsr0 speed is unknown, defaulting to 1000 [ 342.652292][T14027] lo speed is unknown, defaulting to 1000 [ 342.853565][T14063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2478'. [ 342.863224][T14063] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2478'. [ 343.316657][T14072] netlink: 'syz.0.2479': attribute type 1 has an invalid length. [ 343.354713][T14072] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2479'. [ 343.580293][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2482'. [ 343.649036][T14084] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2482'. [ 343.700413][T14085] bond5 (unregistering): Released all slaves [ 343.746552][T14085] netlink: 'syz.2.2483': attribute type 62 has an invalid length. [ 343.754929][T14085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2483'. [ 343.810385][T14092] netlink: 'syz.2.2485': attribute type 11 has an invalid length. [ 343.828335][T14092] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2485'. [ 344.044465][T14104] vxcan1 speed is unknown, defaulting to 1000 [ 344.390580][T14104] hsr0 speed is unknown, defaulting to 1000 [ 344.397623][T14104] lo speed is unknown, defaulting to 1000 [ 344.586759][T14128] vxcan1 speed is unknown, defaulting to 1000 [ 344.663291][T14138] nbd: must specify at least one socket [ 344.691557][T14133] vxcan1 speed is unknown, defaulting to 1000 [ 344.867456][T14128] hsr0 speed is unknown, defaulting to 1000 [ 344.888605][T14142] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 344.900850][T14128] lo speed is unknown, defaulting to 1000 [ 344.948248][T14144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2501'. [ 345.161699][T14133] hsr0 speed is unknown, defaulting to 1000 [ 345.180840][T14133] lo speed is unknown, defaulting to 1000 [ 345.218895][T14154] netlink: 'syz.2.2504': attribute type 1 has an invalid length. [ 345.233417][T14154] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2504'. [ 345.585575][T14170] vxcan1 speed is unknown, defaulting to 1000 [ 345.765168][T14187] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 345.808570][T14187] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 346.182191][T14170] hsr0 speed is unknown, defaulting to 1000 [ 346.239375][T14170] lo speed is unknown, defaulting to 1000 [ 346.255299][T14204] vxcan1 speed is unknown, defaulting to 1000 [ 346.579489][T14217] netlink: 'syz.1.2520': attribute type 1 has an invalid length. [ 347.042947][T14204] hsr0 speed is unknown, defaulting to 1000 [ 347.059749][T14220] netlink: 'syz.4.2521': attribute type 3 has an invalid length. [ 347.065096][T14204] lo speed is unknown, defaulting to 1000 [ 347.572942][T14252] team0: No ports can be present during mode change [ 347.808407][T14259] __nla_validate_parse: 7 callbacks suppressed [ 347.808427][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 347.936767][T14265] netlink: 'syz.3.2537': attribute type 33 has an invalid length. [ 347.979314][T14265] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2537'. [ 348.082680][T14273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2540'. [ 348.210486][T14277] syzkaller1: entered promiscuous mode [ 348.223692][T14277] syzkaller1: entered allmulticast mode [ 348.346881][T14283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2544'. [ 348.453035][T14306] netlink: 'syz.4.2550': attribute type 1 has an invalid length. [ 348.501502][T14306] 8021q: adding VLAN 0 to HW filter on device bond11 [ 348.550133][T14306] bond11: (slave geneve3): making interface the new active one [ 348.558711][T14306] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 348.591964][T14309] vxcan1 speed is unknown, defaulting to 1000 [ 348.958349][T14309] hsr0 speed is unknown, defaulting to 1000 [ 348.965336][T14309] lo speed is unknown, defaulting to 1000 [ 349.137781][T14353] vxcan1 speed is unknown, defaulting to 1000 [ 349.175102][T14356] netlink: 'syz.0.2562': attribute type 2 has an invalid length. [ 349.186686][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2563'. [ 349.272659][T14356] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2562'. [ 349.298499][T14364] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2564'. [ 349.343250][T14351] vxcan1 speed is unknown, defaulting to 1000 [ 349.426823][T14366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2566'. [ 349.586742][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2567'. [ 349.628558][T14377] hsr_slave_1 (unregistering): left promiscuous mode [ 349.654762][T14353] hsr0 speed is unknown, defaulting to 1000 [ 349.662301][T14353] lo speed is unknown, defaulting to 1000 [ 349.898325][T14388] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2571'. [ 350.061921][T14351] hsr0 speed is unknown, defaulting to 1000 [ 350.079017][T14351] lo speed is unknown, defaulting to 1000 [ 350.263365][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 350.275826][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 350.295996][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 350.366255][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 350.942807][T14416] netlink: 'syz.3.2582': attribute type 12 has an invalid length. [ 351.279042][T14442] netlink: 'syz.3.2589': attribute type 1 has an invalid length. [ 351.293000][T14443] netlink: 'syz.1.2588': attribute type 1 has an invalid length. [ 351.301783][T14443] nbd: error processing sock list [ 351.318536][T14443] block nbd0: shutting down sockets [ 351.356750][T14442] 8021q: adding VLAN 0 to HW filter on device bond6 [ 351.389078][T14448] bond6: (slave veth15): Enslaving as an active interface with a down link [ 351.420457][T14449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.458239][T14449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.508232][T14448] vlan2: entered allmulticast mode [ 351.515316][T14448] veth0_to_bond: entered allmulticast mode [ 351.530668][T14448] bond6: (slave vlan2): Opening slave failed [ 351.667698][T14467] wg1: entered promiscuous mode [ 351.715332][T14463] vxcan1 speed is unknown, defaulting to 1000 [ 351.733030][T14470] netlink: 'syz.3.2597': attribute type 83 has an invalid length. [ 351.838730][T14478] netlink: 'syz.3.2599': attribute type 10 has an invalid length. [ 351.849296][T14478] batadv0: entered promiscuous mode [ 351.859095][T14478] batadv0: entered allmulticast mode [ 351.865683][T14478] bridge0: port 1(batadv0) entered blocking state [ 351.872398][T14478] bridge0: port 1(batadv0) entered disabled state [ 351.977477][T14484] vxcan1 speed is unknown, defaulting to 1000 [ 352.031224][T14491] FAULT_INJECTION: forcing a failure. [ 352.031224][T14491] name failslab, interval 1, probability 0, space 0, times 0 [ 352.046051][T14491] CPU: 0 UID: 0 PID: 14491 Comm: syz.3.2602 Not tainted syzkaller #0 PREEMPT(full) [ 352.046086][T14491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.046099][T14491] Call Trace: [ 352.046108][T14491] [ 352.046116][T14491] dump_stack_lvl+0x189/0x250 [ 352.046147][T14491] ? __pfx____ratelimit+0x10/0x10 [ 352.046178][T14491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.046203][T14491] ? __pfx__printk+0x10/0x10 [ 352.046236][T14491] ? rtnl_prop_list_size+0x1e/0x1e0 [ 352.046263][T14491] ? rcu_is_watching+0x15/0xb0 [ 352.046298][T14491] should_fail_ex+0x414/0x560 [ 352.046327][T14491] should_failslab+0xa8/0x100 [ 352.046358][T14491] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 352.046386][T14491] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 352.046412][T14491] ? __alloc_skb+0x112/0x2d0 [ 352.046453][T14491] __alloc_skb+0x112/0x2d0 [ 352.046486][T14491] rtmsg_ifinfo_build_skb+0x84/0x260 [ 352.046517][T14491] rtmsg_ifinfo+0x8c/0x1a0 [ 352.046546][T14491] __dev_notify_flags+0xf4/0x2e0 [ 352.046567][T14491] ? __pfx___dev_notify_flags+0x10/0x10 [ 352.046586][T14491] ? __dev_change_flags+0x4cc/0x6d0 [ 352.046609][T14491] ? __pfx___dev_change_flags+0x10/0x10 [ 352.046627][T14491] ? stack_depot_save_flags+0x40/0x860 [ 352.046656][T14491] ? __pfx___mutex_lock+0x10/0x10 [ 352.046690][T14491] netif_change_flags+0xe8/0x1a0 [ 352.046712][T14491] dev_change_flags+0x130/0x260 [ 352.046746][T14491] devinet_ioctl+0xbb4/0x1b50 [ 352.046771][T14491] ? __might_fault+0xb0/0x130 [ 352.046799][T14491] ? __pfx_devinet_ioctl+0x10/0x10 [ 352.046820][T14491] ? get_user_ifreq+0x12c/0x180 [ 352.046845][T14491] inet_ioctl+0x3c0/0x4c0 [ 352.046871][T14491] ? __pfx_inet_ioctl+0x10/0x10 [ 352.046899][T14491] ? lock_release+0x4b/0x3e0 [ 352.046926][T14491] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 352.046959][T14491] ? kfree+0x18e/0x440 [ 352.047009][T14491] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 352.047036][T14491] ? packet_ioctl+0x254/0x350 [ 352.047061][T14491] sock_do_ioctl+0xd9/0x300 [ 352.047088][T14491] ? __pfx_sock_do_ioctl+0x10/0x10 [ 352.047113][T14491] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 352.047153][T14491] sock_ioctl+0x576/0x790 [ 352.047177][T14491] ? lock_release+0x4b/0x3e0 [ 352.047207][T14491] ? __pfx_sock_ioctl+0x10/0x10 [ 352.047233][T14491] ? __fget_files+0x2a/0x420 [ 352.047264][T14491] ? __fget_files+0x3a0/0x420 [ 352.047294][T14491] ? __fget_files+0x2a/0x420 [ 352.047328][T14491] ? bpf_lsm_file_ioctl+0x9/0x20 [ 352.047355][T14491] ? __pfx_sock_ioctl+0x10/0x10 [ 352.047380][T14491] __se_sys_ioctl+0xfc/0x170 [ 352.047406][T14491] do_syscall_64+0xfa/0x3b0 [ 352.047446][T14491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.047467][T14491] ? clear_bhb_loop+0x60/0xb0 [ 352.047491][T14491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.047512][T14491] RIP: 0033:0x7fc3df38ebe9 [ 352.047530][T14491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.047548][T14491] RSP: 002b:00007fc3e0207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.047571][T14491] RAX: ffffffffffffffda RBX: 00007fc3df5b6090 RCX: 00007fc3df38ebe9 [ 352.047631][T14491] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000008 [ 352.047645][T14491] RBP: 00007fc3e0207090 R08: 0000000000000000 R09: 0000000000000000 [ 352.047659][T14491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.047671][T14491] R13: 00007fc3df5b6128 R14: 00007fc3df5b6090 R15: 00007ffc3441f678 [ 352.047697][T14491] [ 352.401735][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 352.411064][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 352.449472][T14463] hsr0 speed is unknown, defaulting to 1000 [ 352.477447][T14463] lo speed is unknown, defaulting to 1000 [ 352.500176][T14486] vxcan1 speed is unknown, defaulting to 1000 [ 352.576111][T14484] hsr0 speed is unknown, defaulting to 1000 [ 352.781991][T14484] lo speed is unknown, defaulting to 1000 [ 352.991872][T14486] hsr0 speed is unknown, defaulting to 1000 [ 353.008762][T14486] lo speed is unknown, defaulting to 1000 [ 353.046271][T14515] __nla_validate_parse: 9 callbacks suppressed [ 353.046293][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2610'. [ 353.182915][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 353.276648][ T3572] tipc: Subscription rejected, illegal request [ 353.348209][T14524] netlink: 'syz.0.2613': attribute type 10 has an invalid length. [ 353.406502][T14523] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2613'. [ 353.416033][T14523] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2613'. [ 353.633438][T14526] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2614'. [ 353.800649][T14535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2617'. [ 354.030505][T14547] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 354.181497][T14556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2624'. [ 354.222008][T14560] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.2626'. [ 354.233359][T14563] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2624'. [ 354.250484][T14557] vxcan1 speed is unknown, defaulting to 1000 [ 354.276480][T14553] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.297036][ T8163] lo speed is unknown, defaulting to 1000 [ 354.304681][T14565] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 354.378882][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2623'. [ 354.519802][T14572] vxcan1 speed is unknown, defaulting to 1000 [ 354.543908][T14578] netlink: 'syz.3.2628': attribute type 21 has an invalid length. [ 354.552010][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2628'. [ 354.597288][T14557] hsr0 speed is unknown, defaulting to 1000 [ 354.618986][T14557] lo speed is unknown, defaulting to 1000 [ 354.776556][T14572] hsr0 speed is unknown, defaulting to 1000 [ 354.859648][T14572] lo speed is unknown, defaulting to 1000 [ 355.189052][T14610] vxcan1 speed is unknown, defaulting to 1000 [ 355.282974][T14606] FAULT_INJECTION: forcing a failure. [ 355.282974][T14606] name failslab, interval 1, probability 0, space 0, times 0 [ 355.318918][T14606] CPU: 0 UID: 0 PID: 14606 Comm: syz.4.2638 Not tainted syzkaller #0 PREEMPT(full) [ 355.318949][T14606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.318963][T14606] Call Trace: [ 355.318971][T14606] [ 355.318980][T14606] dump_stack_lvl+0x189/0x250 [ 355.319011][T14606] ? __pfx____ratelimit+0x10/0x10 [ 355.319041][T14606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.319066][T14606] ? __pfx__printk+0x10/0x10 [ 355.319097][T14606] ? fs_reclaim_acquire+0x7d/0x100 [ 355.319129][T14606] ? rcu_is_watching+0x15/0xb0 [ 355.319150][T14606] ? __pfx___might_resched+0x10/0x10 [ 355.319169][T14606] ? lock_acquire+0x5f/0x360 [ 355.319201][T14606] should_fail_ex+0x414/0x560 [ 355.319230][T14606] should_failslab+0xa8/0x100 [ 355.319263][T14606] __kmalloc_cache_noprof+0x70/0x3d0 [ 355.319292][T14606] ? call_usermodehelper_setup+0x8e/0x270 [ 355.319325][T14606] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 355.319358][T14606] call_usermodehelper_setup+0x8e/0x270 [ 355.319398][T14606] ? __pfx_free_modprobe_argv+0x10/0x10 [ 355.319433][T14606] __request_module+0x39f/0x5e0 [ 355.319469][T14606] ? __pfx___request_module+0x10/0x10 [ 355.319503][T14606] ? apparmor_capable+0x137/0x1b0 [ 355.319533][T14606] ? capable+0x89/0xe0 [ 355.319552][T14606] ? dev_load+0x21/0x1f0 [ 355.319583][T14606] devinet_ioctl+0x130/0x1b50 [ 355.319606][T14606] ? rcu_is_watching+0x15/0xb0 [ 355.319627][T14606] ? lock_release+0x4b/0x3e0 [ 355.319655][T14606] ? __might_fault+0xb0/0x130 [ 355.319685][T14606] ? __pfx_devinet_ioctl+0x10/0x10 [ 355.319707][T14606] ? get_user_ifreq+0x12c/0x180 [ 355.319733][T14606] inet_ioctl+0x3c0/0x4c0 [ 355.319760][T14606] ? __pfx_inet_ioctl+0x10/0x10 [ 355.319788][T14606] ? lock_release+0x4b/0x3e0 [ 355.319875][T14606] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 355.319904][T14606] ? kfree+0x18e/0x440 [ 355.319938][T14606] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 355.319965][T14606] ? packet_ioctl+0x254/0x350 [ 355.319990][T14606] sock_do_ioctl+0xd9/0x300 [ 355.320029][T14606] ? __pfx_sock_do_ioctl+0x10/0x10 [ 355.320054][T14606] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 355.320096][T14606] sock_ioctl+0x576/0x790 [ 355.320120][T14606] ? lock_release+0x4b/0x3e0 [ 355.320151][T14606] ? __pfx_sock_ioctl+0x10/0x10 [ 355.320177][T14606] ? __fget_files+0x2a/0x420 [ 355.320209][T14606] ? __fget_files+0x3a0/0x420 [ 355.320241][T14606] ? __fget_files+0x2a/0x420 [ 355.320276][T14606] ? bpf_lsm_file_ioctl+0x9/0x20 [ 355.320304][T14606] ? __pfx_sock_ioctl+0x10/0x10 [ 355.320329][T14606] __se_sys_ioctl+0xfc/0x170 [ 355.320356][T14606] do_syscall_64+0xfa/0x3b0 [ 355.320396][T14606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.320418][T14606] ? clear_bhb_loop+0x60/0xb0 [ 355.320443][T14606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.320464][T14606] RIP: 0033:0x7f8cbf98ebe9 [ 355.320484][T14606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.320504][T14606] RSP: 002b:00007f8cc07a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.320528][T14606] RAX: ffffffffffffffda RBX: 00007f8cbfbb5fa0 RCX: 00007f8cbf98ebe9 [ 355.320545][T14606] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000007 [ 355.320560][T14606] RBP: 00007f8cc07a7090 R08: 0000000000000000 R09: 0000000000000000 [ 355.320574][T14606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.320588][T14606] R13: 00007f8cbfbb6038 R14: 00007f8cbfbb5fa0 R15: 00007ffff81c53f8 [ 355.320614][T14606] [ 356.075846][T14610] hsr0 speed is unknown, defaulting to 1000 [ 356.088286][T14610] lo speed is unknown, defaulting to 1000 [ 356.838586][T14680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.282246][T14715] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 357.315615][T14715] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 357.322642][T14707] vxcan1 speed is unknown, defaulting to 1000 [ 357.407023][T14722] syzkaller1: entered promiscuous mode [ 357.434996][T14722] syzkaller1: entered allmulticast mode [ 357.612888][T14731] vxcan1 speed is unknown, defaulting to 1000 [ 357.773877][T14750] netlink: 'syz.1.2679': attribute type 1 has an invalid length. [ 357.802649][T14749] netlink: 'syz.4.2678': attribute type 1 has an invalid length. [ 357.825523][T14749] netlink: 'syz.4.2678': attribute type 10 has an invalid length. [ 357.998438][T14707] hsr0 speed is unknown, defaulting to 1000 [ 358.006257][T14731] hsr0 speed is unknown, defaulting to 1000 [ 358.015939][T14707] lo speed is unknown, defaulting to 1000 [ 358.138902][T14769] __nla_validate_parse: 12 callbacks suppressed [ 358.138926][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2687'. [ 358.212179][T14774] veth13: entered promiscuous mode [ 358.238531][T14774] veth13: entered allmulticast mode [ 358.378265][T14731] lo speed is unknown, defaulting to 1000 [ 358.593153][T14796] vxcan1 speed is unknown, defaulting to 1000 [ 358.758884][T14810] netlink: 'syz.2.2695': attribute type 1 has an invalid length. [ 358.796037][T14813] netlink: 'syz.1.2696': attribute type 21 has an invalid length. [ 358.863137][T14810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2695'. [ 358.886957][T14816] 8021q: adding VLAN 0 to HW filter on device bond6 [ 358.895464][T14816] bond5: (slave bond6): making interface the new active one [ 358.903225][T14816] bond5: (slave bond6): Enslaving as an active interface with an up link [ 358.913447][T14796] hsr0 speed is unknown, defaulting to 1000 [ 359.027817][T14810] bond5: entered promiscuous mode [ 359.035280][T14810] bond6: entered promiscuous mode [ 359.040528][T14810] bond5: entered allmulticast mode [ 359.046725][T14810] bond6: entered allmulticast mode [ 359.053081][T14810] 8021q: adding VLAN 0 to HW filter on device bond5 [ 359.060783][T14796] lo speed is unknown, defaulting to 1000 [ 359.169250][T14822] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2699'. [ 359.192290][T14823] netlink: 'syz.0.2698': attribute type 11 has an invalid length. [ 359.294030][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'. [ 359.311564][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'. [ 359.879834][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2706'. [ 359.897114][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2706'. [ 359.997471][T14857] syzkaller1: entered promiscuous mode [ 360.027924][T14857] syzkaller1: entered allmulticast mode [ 360.093419][T14864] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 360.260632][T14872] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2710'. [ 360.354740][T14874] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2711'. [ 360.436658][T14881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.438123][T14879] pim6reg527: entered allmulticast mode [ 360.476278][T14881] sit1: entered promiscuous mode [ 360.481277][T14881] sit1: entered allmulticast mode [ 360.540064][T14888] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2717'. [ 360.657675][T14900] vxcan1 speed is unknown, defaulting to 1000 [ 360.851441][T14910] syzkaller1: entered promiscuous mode [ 360.882821][T14910] syzkaller1: entered allmulticast mode [ 361.050664][T14918] vxcan1 speed is unknown, defaulting to 1000 [ 361.240497][T14939] vlan0: entered promiscuous mode [ 361.246036][T14939] vlan0: entered allmulticast mode [ 361.267992][T14929] vxcan1 speed is unknown, defaulting to 1000 [ 361.274439][T14900] hsr0 speed is unknown, defaulting to 1000 [ 361.289020][T14900] lo speed is unknown, defaulting to 1000 [ 361.477685][T14918] hsr0 speed is unknown, defaulting to 1000 [ 361.567672][T14918] lo speed is unknown, defaulting to 1000 [ 361.732827][T14929] hsr0 speed is unknown, defaulting to 1000 [ 361.772067][T14929] lo speed is unknown, defaulting to 1000 [ 362.271380][T14961] netlink: 'syz.4.2740': attribute type 6 has an invalid length. [ 362.289231][T14961] netlink: 'syz.4.2740': attribute type 11 has an invalid length. [ 362.537712][T14968] netlink: 'syz.4.2743': attribute type 7 has an invalid length. [ 362.661245][T14970] team0: Device gtp1 is of different type [ 362.750999][T14975] netlink: 'syz.4.2745': attribute type 1 has an invalid length. [ 362.764272][T14974] netlink: 'syz.4.2745': attribute type 1 has an invalid length. [ 362.772106][T14974] netlink: 'syz.4.2745': attribute type 3 has an invalid length. [ 362.781643][T14975] netlink: 'syz.4.2745': attribute type 3 has an invalid length. [ 363.187374][T15006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.353886][T15017] vxcan1 speed is unknown, defaulting to 1000 [ 363.406274][T15021] __nla_validate_parse: 12 callbacks suppressed [ 363.406297][T15021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2761'. [ 363.413107][T15011] FAULT_INJECTION: forcing a failure. [ 363.413107][T15011] name failslab, interval 1, probability 0, space 0, times 0 [ 363.455189][T15025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2762'. [ 363.466465][T15011] CPU: 1 UID: 0 PID: 15011 Comm: syz.0.2758 Not tainted syzkaller #0 PREEMPT(full) [ 363.466494][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.466509][T15011] Call Trace: [ 363.466518][T15011] [ 363.466528][T15011] dump_stack_lvl+0x189/0x250 [ 363.466560][T15011] ? __pfx____ratelimit+0x10/0x10 [ 363.466591][T15011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.466618][T15011] ? __pfx__printk+0x10/0x10 [ 363.466650][T15011] ? fs_reclaim_acquire+0x7d/0x100 [ 363.466689][T15011] ? rcu_is_watching+0x15/0xb0 [ 363.466711][T15011] ? __pfx___might_resched+0x10/0x10 [ 363.466731][T15011] ? lock_acquire+0x5f/0x360 [ 363.466764][T15011] should_fail_ex+0x414/0x560 [ 363.466801][T15011] should_failslab+0xa8/0x100 [ 363.466834][T15011] __kmalloc_cache_noprof+0x70/0x3d0 [ 363.466864][T15011] ? ____ip_mc_inc_group+0x528/0xde0 [ 363.466897][T15011] ____ip_mc_inc_group+0x528/0xde0 [ 363.466935][T15011] ip_mc_up+0x125/0x300 [ 363.466972][T15011] inetdev_event+0xfb3/0x15b0 [ 363.466994][T15011] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 363.467019][T15011] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 363.467045][T15011] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 363.467070][T15011] ? __pfx_inetdev_event+0x10/0x10 [ 363.467099][T15011] notifier_call_chain+0x1b3/0x3e0 [ 363.467127][T15011] __dev_notify_flags+0x18d/0x2e0 [ 363.467151][T15011] ? __pfx___dev_notify_flags+0x10/0x10 [ 363.467171][T15011] ? __dev_change_flags+0x4cc/0x6d0 [ 363.467196][T15011] ? __pfx___dev_change_flags+0x10/0x10 [ 363.467217][T15011] ? stack_depot_save_flags+0x40/0x860 [ 363.467247][T15011] ? __pfx___mutex_lock+0x10/0x10 [ 363.467282][T15011] netif_change_flags+0xe8/0x1a0 [ 363.467307][T15011] dev_change_flags+0x130/0x260 [ 363.467344][T15011] devinet_ioctl+0xbb4/0x1b50 [ 363.467369][T15011] ? __might_fault+0xb0/0x130 [ 363.467399][T15011] ? __pfx_devinet_ioctl+0x10/0x10 [ 363.467435][T15011] ? get_user_ifreq+0x12c/0x180 [ 363.467460][T15011] inet_ioctl+0x3c0/0x4c0 [ 363.467488][T15011] ? __pfx_inet_ioctl+0x10/0x10 [ 363.467516][T15011] ? lock_release+0x4b/0x3e0 [ 363.467546][T15011] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 363.467576][T15011] ? kfree+0x18e/0x440 [ 363.467610][T15011] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 363.467637][T15011] ? packet_ioctl+0x254/0x350 [ 363.467662][T15011] sock_do_ioctl+0xd9/0x300 [ 363.467690][T15011] ? __pfx_sock_do_ioctl+0x10/0x10 [ 363.467716][T15011] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 363.467757][T15011] sock_ioctl+0x576/0x790 [ 363.467782][T15011] ? lock_release+0x4b/0x3e0 [ 363.467813][T15011] ? __pfx_sock_ioctl+0x10/0x10 [ 363.467839][T15011] ? __fget_files+0x2a/0x420 [ 363.467870][T15011] ? __fget_files+0x3a0/0x420 [ 363.467902][T15011] ? __fget_files+0x2a/0x420 [ 363.467935][T15011] ? bpf_lsm_file_ioctl+0x9/0x20 [ 363.467963][T15011] ? __pfx_sock_ioctl+0x10/0x10 [ 363.467988][T15011] __se_sys_ioctl+0xfc/0x170 [ 363.468016][T15011] do_syscall_64+0xfa/0x3b0 [ 363.468048][T15011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.468071][T15011] ? clear_bhb_loop+0x60/0xb0 [ 363.468095][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.468116][T15011] RIP: 0033:0x7fb5aa38ebe9 [ 363.468135][T15011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.468154][T15011] RSP: 002b:00007fb5ab146038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.468179][T15011] RAX: ffffffffffffffda RBX: 00007fb5aa5b5fa0 RCX: 00007fb5aa38ebe9 [ 363.468195][T15011] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000008 [ 363.468209][T15011] RBP: 00007fb5ab146090 R08: 0000000000000000 R09: 0000000000000000 [ 363.468223][T15011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.468236][T15011] R13: 00007fb5aa5b6038 R14: 00007fb5aa5b5fa0 R15: 00007ffca7ddc6f8 [ 363.468263][T15011] [ 363.474692][T15027] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2761'. [ 363.706811][T15029] vxcan1 speed is unknown, defaulting to 1000 [ 363.973499][T15017] hsr0 speed is unknown, defaulting to 1000 [ 363.980438][T15017] lo speed is unknown, defaulting to 1000 [ 364.191103][T15046] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2764'. [ 364.200802][T15029] hsr0 speed is unknown, defaulting to 1000 [ 364.202372][T15029] lo speed is unknown, defaulting to 1000 [ 364.449126][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2768'. [ 364.460257][T15064] netlink: 'syz.1.2768': attribute type 8 has an invalid length. [ 364.849737][T15076] smc: net device erspan0 applied user defined pnetid SYZ0 [ 364.863075][T15068] vxcan1 speed is unknown, defaulting to 1000 [ 364.870117][T15081] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2771'. [ 364.902501][T15076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2773'. [ 364.922639][T15076] netlink: 'syz.3.2773': attribute type 7 has an invalid length. [ 364.930867][T15076] netlink: 'syz.3.2773': attribute type 8 has an invalid length. [ 364.940113][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2773'. [ 365.058481][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2774'. [ 365.357765][T15068] hsr0 speed is unknown, defaulting to 1000 [ 365.384243][T15068] lo speed is unknown, defaulting to 1000 [ 365.591579][T15113] vxcan1 speed is unknown, defaulting to 1000 [ 365.819593][T15118] macvlan1: entered promiscuous mode [ 365.829646][T15118] macvlan1: entered allmulticast mode [ 365.835268][T15118] veth1_vlan: entered allmulticast mode [ 365.959870][T15131] netlink: 15930 bytes leftover after parsing attributes in process `syz.0.2787'. [ 365.984255][T15138] netlink: zone id is out of range [ 365.989652][T15138] netlink: zone id is out of range [ 366.008310][T15138] netlink: zone id is out of range [ 366.101506][T15133] vxcan1 speed is unknown, defaulting to 1000 [ 366.230854][T15149] tipc: Enabling of bearer rejected, already enabled [ 366.319402][T15154] sctp: [Deprecated]: syz.2.2797 (pid 15154) Use of int in maxseg socket option. [ 366.319402][T15154] Use struct sctp_assoc_value instead [ 366.340144][T15113] hsr0 speed is unknown, defaulting to 1000 [ 366.359256][T15113] lo speed is unknown, defaulting to 1000 [ 366.677626][T15133] hsr0 speed is unknown, defaulting to 1000 [ 366.708185][T15133] lo speed is unknown, defaulting to 1000 [ 367.379562][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.412211][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.433349][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.452935][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.460426][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.551670][T15194] vxcan1 speed is unknown, defaulting to 1000 [ 367.707233][ T9589] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.729745][ T9589] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.771090][T15206] delete_channel: no stack [ 367.786810][ T9589] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.793290][T15210] nbd: must specify at least one socket [ 367.813128][ T9589] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.860266][ T9589] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.890413][ T9589] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.973414][T15194] hsr0 speed is unknown, defaulting to 1000 [ 367.990752][T15194] lo speed is unknown, defaulting to 1000 [ 368.025842][ T9589] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.050241][ T9589] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.071881][T15220] ieee802154 phy1 wpan1: encryption failed: -22 [ 368.209195][T15231] wg1: entered allmulticast mode [ 368.279919][ T9589] veth0_to_bridge: left allmulticast mode [ 368.300498][ T9589] veth0_to_bridge: left promiscuous mode [ 368.310860][ T9589] bridge0: port 1(veth0_to_bridge) entered disabled state [ 368.375531][ T9589] tipc: Resetting bearer [ 368.422629][T15240] __nla_validate_parse: 15 callbacks suppressed [ 368.422651][T15240] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2822'. [ 368.619349][ T9589] tipc: Disabling bearer [ 368.885659][ T9589] bond1 (unregistering): Released all slaves [ 368.897778][ T9589] bond0 (unregistering): Released all slaves [ 368.907846][ T9589] bond2 (unregistering): Released all slaves [ 368.918241][ T9589] bond3 (unregistering): Released all slaves [ 368.929724][ T9589] bond4 (unregistering): Released all slaves [ 368.946680][ T9589] bond5 (unregistering): (slave bond6): Releasing backup interface [ 368.955010][ T9589] bond6 (unregistering): left promiscuous mode [ 368.961200][ T9589] bond6 (unregistering): left allmulticast mode [ 368.974930][ T9589] bond5 (unregistering): Released all slaves [ 368.986292][ T9589] bond6 (unregistering): Released all slaves [ 369.070457][ T9589] tipc: Left network mode [ 369.328454][T15194] chnl_net:caif_netlink_parms(): no params data found [ 369.415627][T15266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2828'. [ 369.582825][ T51] Bluetooth: hci1: command tx timeout [ 369.608178][T15280] nbd: must specify a size in bytes for the device [ 369.706902][ T9589] hsr_slave_0: left promiscuous mode [ 369.715150][ T9589] hsr_slave_1: left promiscuous mode [ 369.730874][ T9589] veth1_macvtap: left promiscuous mode [ 369.731783][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2832'. [ 369.738447][ T9589] veth0_macvtap: left promiscuous mode [ 369.762867][ T9589] veth1_vlan: left promiscuous mode [ 369.768237][ T9589] veth0_vlan: left promiscuous mode [ 369.799804][T15296] validate_nla: 2 callbacks suppressed [ 369.799825][T15296] netlink: 'syz.0.2837': attribute type 1 has an invalid length. [ 369.847077][T15301] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2832'. [ 369.988908][T15311] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2840'. [ 370.081875][T15194] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.090065][T15194] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.099206][T15194] bridge_slave_0: entered allmulticast mode [ 370.107595][T15194] bridge_slave_0: entered promiscuous mode [ 370.129768][T15296] 8021q: adding VLAN 0 to HW filter on device bond10 [ 370.141553][T15302] vlan5: entered promiscuous mode [ 370.147049][T15302] bond10: entered promiscuous mode [ 370.152428][T15302] vlan5: entered allmulticast mode [ 370.159025][T15302] bond10: entered allmulticast mode [ 370.176208][T15307] bond10: (slave gretap0): making interface the new active one [ 370.183957][T15307] gretap0: entered promiscuous mode [ 370.189400][T15307] gretap0: entered allmulticast mode [ 370.197917][T15307] bond10: (slave gretap0): Enslaving as an active interface with an up link [ 370.217926][T15283] vxcan1 speed is unknown, defaulting to 1000 [ 370.240102][T15194] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.277488][T15194] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.279654][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'. [ 370.298679][T15194] bridge_slave_1: entered allmulticast mode [ 370.317136][T15194] bridge_slave_1: entered promiscuous mode [ 370.352056][T15321] netlink: 'syz.1.2842': attribute type 8 has an invalid length. [ 370.355174][T15194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.379763][T15194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.394283][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 370.407889][T15317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.480107][T15325] nbd: must specify a size in bytes for the device [ 370.491754][T15194] team0: Port device team_slave_0 added [ 370.518097][T15194] team0: Port device team_slave_1 added [ 370.575914][T15194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.585204][T15194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.612176][T15194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.680441][T15194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.689823][T15194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.729016][T15194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.762388][T15283] hsr0 speed is unknown, defaulting to 1000 [ 370.764463][ T9589] IPVS: stop unused estimator thread 0... [ 370.777149][T15283] lo speed is unknown, defaulting to 1000 [ 370.797224][T15194] hsr_slave_0: entered promiscuous mode [ 370.814833][T15194] hsr_slave_1: entered promiscuous mode [ 370.821039][T15194] debugfs: 'hsr0' already exists in 'hsr' [ 370.862842][T15194] Cannot create hsr debugfs directory [ 371.065570][T15350] vxcan1 speed is unknown, defaulting to 1000 [ 371.092786][T15354] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 371.104814][T15354] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 371.113269][T15354] CPU: 1 UID: 0 PID: 15354 Comm: syz.4.2856 Not tainted syzkaller #0 PREEMPT(full) [ 371.122666][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 371.132761][T15354] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 371.138260][T15354] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 371.157893][T15354] RSP: 0018:ffffc9001bad7ae0 EFLAGS: 00010202 [ 371.163977][T15354] RAX: 0000000000000000 RBX: ffff888056e82000 RCX: 0000000000000000 [ 371.172045][T15354] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 371.180017][T15354] RBP: ffffc9001bad7c10 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6 [ 371.187993][T15354] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffff88807530c080 [ 371.195974][T15354] R13: dffffc0000000000 R14: ffff88807530c080 R15: 0000000000000002 [ 371.203949][T15354] FS: 00007f8cc07a76c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 371.212896][T15354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.219486][T15354] CR2: 0000200000000000 CR3: 000000003378e000 CR4: 00000000003526f0 [ 371.227463][T15354] Call Trace: [ 371.230745][T15354] [ 371.233700][T15354] ? __pfx_rose_rt_ioctl+0x10/0x10 [ 371.238827][T15354] ? bpf_lsm_capable+0x9/0x20 [ 371.243521][T15354] ? security_capable+0x7e/0x2e0 [ 371.248485][T15354] rose_ioctl+0x3ce/0x8b0 [ 371.252830][T15354] ? __pfx_rose_ioctl+0x10/0x10 [ 371.257683][T15354] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 371.262734][T15354] sock_do_ioctl+0xd9/0x300 [ 371.267248][T15354] ? __pfx_sock_do_ioctl+0x10/0x10 [ 371.272369][T15354] ? do_futex+0x395/0x420 [ 371.276719][T15354] sock_ioctl+0x576/0x790 [ 371.281092][T15354] ? lock_release+0x4b/0x3e0 [ 371.285764][T15354] ? __pfx_sock_ioctl+0x10/0x10 [ 371.290645][T15354] ? __fget_files+0x2a/0x420 [ 371.295258][T15354] ? __fget_files+0x3a0/0x420 [ 371.299956][T15354] ? __fget_files+0x2a/0x420 [ 371.304570][T15354] ? bpf_lsm_file_ioctl+0x9/0x20 [ 371.309521][T15354] ? __pfx_sock_ioctl+0x10/0x10 [ 371.314398][T15354] __se_sys_ioctl+0xfc/0x170 [ 371.319018][T15354] do_syscall_64+0xfa/0x3b0 [ 371.323534][T15354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.329619][T15354] ? clear_bhb_loop+0x60/0xb0 [ 371.334393][T15354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.340308][T15354] RIP: 0033:0x7f8cbf98ebe9 [ 371.344736][T15354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.364516][T15354] RSP: 002b:00007f8cc07a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.372946][T15354] RAX: ffffffffffffffda RBX: 00007f8cbfbb5fa0 RCX: 00007f8cbf98ebe9 [ 371.381010][T15354] RDX: 0000000000000000 RSI: 00000000000089e4 RDI: 0000000000000004 [ 371.388989][T15354] RBP: 00007f8cbfa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 371.396963][T15354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.404944][T15354] R13: 00007f8cbfbb6038 R14: 00007f8cbfbb5fa0 R15: 00007ffff81c53f8 [ 371.412936][T15354] [ 371.415980][T15354] Modules linked in: [ 371.420054][T15354] ---[ end trace 0000000000000000 ]--- [ 371.425558][T15354] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 371.431054][T15354] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 371.450730][T15354] RSP: 0018:ffffc9001bad7ae0 EFLAGS: 00010202 [ 371.456851][T15354] RAX: 0000000000000000 RBX: ffff888056e82000 RCX: 0000000000000000 [ 371.464874][T15354] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 371.472894][T15354] RBP: ffffc9001bad7c10 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6 [ 371.480888][T15354] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffff88807530c080 [ 371.488923][T15354] R13: dffffc0000000000 R14: ffff88807530c080 R15: 0000000000000002 [ 371.496967][T15354] FS: 00007f8cc07a76c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 371.505953][T15354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.512563][T15354] CR2: 0000200000000000 CR3: 000000003378e000 CR4: 00000000003526f0 [ 371.520618][T15354] Kernel panic - not syncing: Fatal exception in interrupt [ 371.528183][T15354] Kernel Offset: disabled [ 371.532510][T15354] Rebooting in 86400 seconds..