last executing test programs: 4.948234842s ago: executing program 3 (id=2647): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0xa, [{0x10, 0x1}, {0xf, 0x1}, {0x4, 0x3}, {0x7, 0x4}]}]}}, &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x8}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000140)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0xffffff24, 0x5, 0x1, 0x6}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x20008004) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r3], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x300) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r6, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x10, 0x9, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="c1", 0xffe0}], 0x1}}], 0x1, 0x200400c0) accept4(r0, 0x0, 0x0, 0x0) 4.564149906s ago: executing program 3 (id=2652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="380000001200050100000000000000e627001a00"], 0x38}}, 0x20040810) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) (rerun: 64) 4.556135228s ago: executing program 4 (id=2653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'dvmrp1\x00'}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4.412113194s ago: executing program 4 (id=2655): r0 = socket(0x10, 0x80002, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000003c0)="dc8daf8d760c0b5d5c8caa98fa19c6a35a188a3775d272c579ff33a6effc0c49320ff86badc0d7f8b91fbc6ce4baa16de55d0ee6203b6db86008599c5d2f19dda7e34e3693cbb469728ec4005e4f00000000000053c282394f9f31d9210d4e736b769be32865f7dc70c5bdd6cdd0e82ac0e85e8ae59456bcda96de64e44f063dd60011126f90ef97069e", 0x8a) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4", @ANYBLOB="40a9384824eabf84d30861196d24a3403ff04a", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) r1 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001140)={'bond0\x00'}) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfc00, @multicast2}, 0x10, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x3, 0x3, 0xff) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r4 = socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 32) recvmmsg(r4, &(0x7f00000029c0)=[{{&(0x7f0000000340)=@pppol2tpv3, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000480)=""/180, 0xb4}, {&(0x7f0000000580)=""/159, 0x9f}, {&(0x7f0000000640)=""/167, 0xa7}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/44, 0x2c}, {&(0x7f0000000700)=""/55, 0x37}, {&(0x7f0000000800)=""/80, 0x50}, {&(0x7f0000000740)=""/30, 0x1e}, {&(0x7f0000000880)=""/68, 0x44}, {&(0x7f0000000940)=""/228, 0xe4}], 0xa, &(0x7f0000000b00)=""/3, 0x3}, 0x4}, {{&(0x7f0000000b40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)=""/4, 0x4}, {&(0x7f0000000c00)=""/185, 0xb9}, {&(0x7f0000000cc0)=""/39, 0x27}, {&(0x7f0000000d00)=""/147, 0x93}, {&(0x7f0000000dc0)=""/98, 0x62}, {&(0x7f0000000e40)=""/145, 0x91}, {&(0x7f0000000f00)=""/6, 0x6}, {&(0x7f0000000f40)=""/98, 0x62}], 0x8, &(0x7f0000001040)=""/117, 0x75}, 0x7fff}, {{&(0x7f00000010c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001140), 0x0, &(0x7f00000011c0)=""/14, 0xe}, 0x8}, {{&(0x7f0000001200)=@isdn, 0x80, &(0x7f0000002880)=[{&(0x7f0000002300)=""/79, 0x4f}, {&(0x7f00000023c0)=""/89, 0x59}, {&(0x7f0000002440)=""/227, 0xe3}, {&(0x7f0000002540)=""/182, 0xb6}, {&(0x7f0000002600)=""/146, 0x92}, {0xfffffffffffffffd}, {&(0x7f00000026c0)=""/168, 0xa8}, {&(0x7f0000002780)=""/238, 0xee}], 0x8, &(0x7f0000002900)=""/190, 0xbe}, 0x5}], 0x4, 0x12001, 0x0) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x5c, 0x2c, 0x400, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "6ac4b8d77751b955091d041ba765f109"}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "8c8f14bcf2a335c42db253db5bd80461"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000812000001c0012800d0000000003000947ba4e37643ab2f1e5da16bbba7f2900"], 0x3c}}, 0x28000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 32) r9 = socket$inet(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x8, [{0xfffffffd, 0x7fffc}, {0x301, 0xffffffff}, {0xffffffff, 0x10000}, {0x10000, 0x8000}, {0x69, 0x6}, {0x6, 0x401}, {0x40, 0x8}, {0xd, 0xf9}]}}) 4.360487044s ago: executing program 0 (id=2656): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) connect$inet(r1, &(0x7f0000000300)={0x2, 0x200, @remote}, 0x10) (async) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1) (async) splice(r1, 0x0, r0, 0x0, 0x8a, 0xa) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0xa8a513aee30c8dc3, 0x2000}}], 0x38, 0x40000}, 0x40000) 4.24893041s ago: executing program 3 (id=2657): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000680)={0xc8, r2, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000016c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x3}, {0x0, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x200080c0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x2e36, 0x10000}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r6, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="85a1c64a33e72d0ccafb56341f7c86dc8d913af74df83673de48dc77"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_PMK={0x14, 0xfe, "bbc806d0c8fdfff6f25e5f980f3a8bcc"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x46}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x29}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6}, @NL80211_ATTR_MAC={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_GET_SE(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r10, 0xc00, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000890) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000580)={0x0, 0x4e, 0x1, [0x80000001, 0x2, 0x401, 0xfffffffffffffffb, 0x7], [0x1, 0x7, 0x1, 0x6, 0x7fffffff, 0xa45e, 0xe3, 0x0, 0x7fffffffffffffff, 0x2, 0xfffffffffffffff9, 0x1, 0x9, 0x8001, 0x8000000000000000, 0xfffffffffffffff8, 0x3, 0x2, 0x8a93, 0x4, 0xf6, 0xd, 0x7ff, 0x3, 0x682014cd, 0x4, 0xffff, 0x401, 0x1, 0x9, 0xa57, 0x5, 0x9, 0x3ff, 0x10, 0xb19a00000000, 0x80, 0x100000001, 0x8f, 0x100000001, 0x100, 0x4, 0x7, 0x23fe6eab, 0x9, 0x6, 0x1ff, 0x2fb, 0xfc00, 0x2, 0x80000001, 0x7, 0x9, 0x9, 0x5, 0x5, 0x8000000000000001, 0x200, 0x2, 0x7, 0xa44a, 0x1, 0x6, 0x7, 0x200, 0x935a, 0x69, 0x8, 0x9, 0x6d, 0x2, 0x7fffffff, 0x3, 0xf830, 0x8, 0x8001, 0x5, 0x0, 0x8000000000000000, 0x9, 0x20a, 0x8, 0xb, 0x7, 0x3, 0x0, 0xe, 0x8, 0x9, 0x5, 0x10001, 0x5, 0x4, 0x8, 0x80800000000000, 0x1000, 0x72d6, 0xc, 0x2714f925, 0x5, 0x10001, 0xe, 0x4, 0x80000001, 0x2, 0x7ff, 0x80000000, 0x18, 0x5, 0x3, 0x6, 0x100000000, 0x3, 0x6, 0x5, 0x6, 0xffffffffffffffff, 0x24, 0xe597, 0x2, 0x7fff]}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000009c0)={r12, 0x101, 0xf, 0x1}) 3.932148496s ago: executing program 2 (id=2662): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x922000000001, 0x106) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x401, 0x5f, 0x0, 0x3, 0x5, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x7, 0x2, 0x0, 0x0, 0x2, 0x9, 0x1, 0xfffffffd, 0x1, 0x80000001, 0x7f, 0x0, 0xfffffffc}}) setsockopt$sock_attach_bpf(r4, 0x1, 0x25, &(0x7f00000002c0), 0x8) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) close(r2) write(r0, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005bd000/0x2000)=nil, 0x2000, 0x2, 0x50, r3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x15, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0x810, r4, 0xc161c000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x3, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRESOCT=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x410fe, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(r10, &(0x7f0000000400)=[{&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000380)=""/103, 0x67}], 0x4, 0x401, 0x80000001) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r11}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) 3.630061106s ago: executing program 2 (id=2664): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x5, 0x5}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60040d0}, 0x40000) (async) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x5, 0x5}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60040d0}, 0x40000) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x13, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x4, 0x0, 0x4, 0x7, 0x5, 0x50, 0xfffffffffffffffc}, @ldst={0x0, 0x1, 0x2, 0x2, 0x1, 0x8, 0xfffffffffffffff0}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x16b) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x16b) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x22, 0x0, 0x9, 0x5, 0x2, @random="8db8048a1053"}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d", 0x1f) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d", 0x1f) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x4c0486c7dd49ec8a) sendmmsg$alg(r6, 0x0, 0x0, 0x8040) (async) sendmmsg$alg(r6, 0x0, 0x0, 0x8040) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x103c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x101c, 0x1, 0x0, 0x1, [@nested={0x1018, 0x10, 0x0, 0x1, [@nested={0x1014, 0xf, 0x0, 0x1, [@nested={0x1010, 0x38, 0x0, 0x1, [@nested={0x1004, 0x5b, 0x0, 0x1, [@generic="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"]}, @nested={0x8, 0x46, 0x0, 0x1, [@nested={0x4, 0x3a}]}, @generic]}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r7}]}, 0x103c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 3.488880677s ago: executing program 2 (id=2665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x1403, 0x100, 0x70bd26, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}]}, 0x88}}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000224bd7000fbdbdf250200000005003d000600008008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r7, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x4010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) 3.310572269s ago: executing program 0 (id=2666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0xbc, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private0, @in6=@loopback, 0x4e22, 0x0, 0x1, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x31}, @in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e24, @in6=@local}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000002c0007fe4c45beee1ad815ab0100000000ffdbdf25037c00000800018004006101000000800c00018008008e800400e9808e6f6084fcf74583cf94acd26944b9bf90fcdcbfc7755846d66c10bac13d9fab2c6e481a5485e8c86a5be48fc38c7fcb984d4460ca6877c28a4eedb04345dd55aa338137eaba17f2c4bc66db6f1b6cc9e897337df6abd01b3e12232fde5e38ef8cad665b2b6846582078160bc37001fdfdd0da784ed71024f6a7f5776b10257592d7b10fbf1c27fe806e95ad785aa13088c3606567d2f35916a1"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd04, 0x24dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 985.997167ms ago: executing program 1 (id=2667): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x10) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff0200007b010000000000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 907.586681ms ago: executing program 2 (id=2668): socket$inet6_sctp(0xa, 0x4, 0x84) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1) ioctl$XFS_IOC_START_COMMIT(r0, 0x8916, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000000c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000000000c02000000000000000200000d0000000000000000000000a184e81300000000000061"], 0x0, 0x43}, 0x28) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x84, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x53}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x59}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xa757}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000}, 0x4) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000000280)) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, 0x0, 0x480c1) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 907.348688ms ago: executing program 3 (id=2669): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x38, 0x0, 0x601, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x4090) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYBLOB="6f637203eea0b7441c53c32e8c3477adb111b4c1a397e04d170dd0e9286a76918f8cc631f5a8c2080a8599b386ae17c67c6330e8354966ed54577bb8e88c3f7f85390a0842e65e3383f1689582c0c38472bd46e42576e49874", @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x4e310}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40) 906.979391ms ago: executing program 0 (id=2670): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYRES16=0x0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2720, 0x0, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmmsg$inet6(r1, &(0x7f00000005c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1800, @remote, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)="bf0d8c5fe517307cfb3d7caf5f428b28cf93f1dc26b105109da265049927259e33b758254de35cac655908ba7b11db7df89937d327f3160cd526244728a25efc7624966ba1a120f38b4bf426fde038e8eacffaebc7fb256b6b834fb31d", 0x5d}, {&(0x7f00000000c0)="af22c571a95c30bba0189fd7189c026f7286225332bc2b8e9441cb5c666664223d597fbf560d2eaaf05457ee1dfdd72ab85aa0689995179104731160086be3cb0a70310ea032a2d0cef4729a3f7a5724bec96603ecf4857180513d7da22fcf2275ff2487ab6d8c05aa72d1d3a9a9057df2ffb7942362ce45e9a00de5d82cfa9d066665", 0x83}, {&(0x7f00000001c0)="1734aa695034b48cf4cb87d80fdc8bae384d22425098b8b5a5261b4f7d0f9142ebd74e19fb12fec4d6c77929b95cde69eb348ff15fc5f1e8578b7b47bcbb0355148e1da763ecc9e8f9547f62d801497bbec765c5da950a66efcbaeb016c1885b0c5d0f2407b1395762b5ce55a1151740c3b028", 0x73}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000240)="e5", 0x1}, {&(0x7f0000001a80)="d85cfbb524c1d93e6b7d14f3b395980a51456bb9cae93d9cce69549f25d5eb012bc06d964881937d9d56f1dfd3652b25bd447bbcc3692085d42a5b58f3724d5943c9aa4791495fdeb27a015eec6db29cf2e98db21023b67cfdb21d90a6adb5054bc4c386bab0b8bae2197e0e8166b2e41d7248c97d3d60140ff6e04e35022527ecd8d8ea3c8b45537b1d882c44a1c42e074d2cd9fc4531bc119bbd978d03d5ff1c99f8af588629d7e9d21ad991caf5388f921da890a2018b95cf3c14fe4c1e86c3c92c558a6f6b554a47f5dc2b3d77e22b3dab71c20ff790dc2f16f0d0bc28f3e1733631c9f664870936a2b7dc55acf197f18c6b08647236d7e99db0bd544192e8d95f99e98f225cbcd167a55995abfca6c4947d76eeb5cf1e1455616edb02766d326c2ee3306d04321a048464f895285e05bf8c2ba95bca66e6d4d4907e5f4d2787b2c7d1709f56fcacde5261e9b2d40c305c830a7ebc3d8e9dcb4a5fc48900d002778ff412121adc5d051f90a29a08d5112a132b4059fe9d3a63b58d897f0604099700d19efa741f56c4932424af82ac79b2e367121cc5b6b8d6390ceabfb27e62755e64bc3fcb4fe64ddf1a0cd750a6c3af73a73e79e08615498c5d0c3099b2b766a95f41fe04e1c8ac056ccbbe0a95f6b9dad0ef1f104620163be3a59fa6d2e394afee4afc7bb3a3b9713cb4cf2cffea6ad927d0c99fca44447194de292516a7e72aaa3f29c21baca7cc090db0abc37446b8b9e486e6bb3fb9a8f72ebb4d6b6c87c74975d841dc7a8a1f9d0585acec4fef4221491c51608cda3c35535e34dacd17f5fe86afca62ae217ad1b6138e88d43fb3cdc0f8330826adc409f7d68b3007e68044e4bd28baa3907fdff8cedb453cbb427931afe08430fd2af57ba3c5c843a87295bebef7558f19361bb8af3c4a7fc65a69f123cf9f7aafb705717ef34b56c1432cc7f0ce40b817c3a6be87b19b0b1485811a383c7e6c77f48dcf1123156a496a245ff95cfa0524caf210f04e0cfb81e3e6c0550efbc117e10891f2abe36de1f66615439a2ecf4d5bdda7d4a6f4ffbc91f420070d16703a477412b3ebc6f79ac25f51a8b372e41ed63c8916b9b8335077ccabcabe9258c1a51827947475f0c9d127253ad12eb11be4e66e11e68b16de4ad64106b470f36b5bdbc6f866202280b93985d026870344b792e144f6266738205a71bd87b4005edfce1249fc67e86e2942ef1db5046fcb075ab4f37c50c5845d6ef9b3db3d1005ff5be26e3c0eb26a9f72e636e1fb88b461238aa402cb88cfd41cf08924dd2963a9b57a06d7c4fd4798cb08481f7b7ecd11a1b8458a24a7daccc2e9047f6c0b02778730bf58b4139b08989435159a838c079728d7e7343f7e75ab7d5e97965dbbb1547216f457a3fb5381e0357564bf553b06b7149f249550490882daf953040859469c5a53096a5d214e33eb56f4645054534c625aae766b4101d9322ec8bb707ce36c23c8701fdcafb9cbb0ac873e5d2d70d731296b2ecb9ac1473680f245edfe8a8515e3ca1fc6cd95d2bcb9572a64a710abf3f7518afba88a02259b6bcc74d895bb075b9e0d91e25f8333d8335bcd68ed7fbd0c70aea0280ec9d6d8f4bd17c33515025fe9d78ccdd3463b9056c82fa304e18e5a8bfef58be98f37966ed6c5eab582bf7ecfe27dce5acbbbecd2ffa43460c9088fab03b11459c33c50462842d608774476910a281eb07f12bf22fc8be26f560b04946f56143a4775b94698ae82833aeea02bddb213336975b326b093d66a03ae61741efe6444a5afd4ef14775aad85ab5ff6e6d97d11f9511bb26ac7ae18ce4ef65f1defdf3c86706ac36c58de23656f77c4f8e18fa1fa352c34ec85638cd4ba2fc4f202c36f0edaac6e9e2066be628215974c2531af04e1645040a1caa65f2c0ae287b1bbee9ce0d32a9271d8bac396b9efeb4c5bfa32b5977f89a3b061ac74c08eee855e8e2942c531f400e68f81f332fc3a80c84d489b058910a2fd3246fc8e76c822620fd9fbac83c2230b69fc47ae7c0cb82e11bab5bf99b28d58ccf979e6e60702d73f185370ec31df7246a9c57078192df304767940bf112f9c8bfcf4943c15689718635b4fd028fce6c4dd9219b6ff0ec9fb71297042fbfad10d283cb928fab1ce04bd8d53dd8959495171db725fbbb6c96d8dc52b52bc251813f30fcf07d0b29b671578bd26b5e14fded8260209fa268773719c0bed5074ef06fb4ca4b7436d8c0cff91cb89ef9edad5a3c812d3bf4584a4a4843e6bc3da261ed201a7abe8952eb38afe3569589ae76600b235743fa8ffefdaf2d5377ae6c5251c1d45305a2d4e342c607e52f005861d8575e5e06b9e3e2a3fd5c9038f2170bdc1ab5e61c7d4410f83c98e4a760e2d83472ac7ad3c96b735cb9253d6e76933b75df3993977b542313655208b0e8a2314d45517f478ea615b72f186cbba99ccf104b6351f18413bbdda4e6dfed7d465b28e5bde6bc8e33bde54f3b217ffcb00c753381e18ab8bf8583308974607e5af54cca70c9ca6c90c9ac0a9605281beb9125a00877610cf0f8da9dd0b5494932d90576aa1da30ee621b79d59bbab19750a6eadcbb715f0f61cfe82ae3a39cd2f82af49b77816956a1f582b3b87c1dc609dd84043d30d1248a2954787453e31e87acc932f78d8465a62705a5b09f3107b3b5b4f71153641fe4865f44b54190580a2a9494e23e11e9ce486959946bd853915ad7b439d8e32f0d4d04eb436723f5e0d340d642ab86f98346f1e819ceeb40b58caf520d4e5ff78453169ebce548c023f74d17e38485d3af74e7ced4aa2ebfecd08995e30679d6788b9d37227bcca0294ee536b36f9fe18f8459dfd77da0d407acaf1cd1a68d2bf314d90076743b0b34fc0f02b42bd0da9cb20ef2a24ad460b2a9cdb28d139e7d0824ed30969132f40463d7cb78a1a404d38506ea9d1c84311f2984eba6b643c707c676c8a5c3b6985c2e390492ba80290ad2f8586cde9d6ddf2067aec47233375b5f83d59042d566177ab9f763f8e69b9218ef7fcb3078fb317bbb993ac84020ccbc9fc2cc658180e68bdbb6000c79eb9255226b3205b6805f0577384c25ac9ef6cdda35e2840ab2293423ea88f81e67d3b2d1435707414a13b3d5e7812a41b4ad0e4427517268d3a7b63ee5c74df65ee65e45ebd637cc0de5401593473db1d307dcd56521c4afb5dc71456e754fa4b800b860663ab19c3d5eeaf944987a44e0f1134de72a4e8ccd584fd676ca0e3d4461bea72cd75ede6fc292f0a83b2ce0120bd3072f7eb0d5f87486fee5a705fe00d87b1574fb502bffe609190dea91e3dfc1aed373e874f1e9e4ae8562576f9a7ea55bb928e0a58eb65fb067571c3e4578813ddb909e74c44cc2acc7734a6a3c3fd21b08e32812008f78717a406d73c8f5283cf5fad360c4a68c88e55c746ab7a23b45923a7c7efdd226d0679728601bdaba7a7f050eced8aeaa53a1efbab57c4e93798093b1004a1390ad39601a591da891272b45963a25c9f6dde5cd750690e7dcb2b4f5c6827a1b885bad50382b6cdbe446a3fb2d668fd6387ad5f8d259277f1c71356ad1f918410fb4267e47587eb20504a3a4ce5ea67d109ec13cef1f74c826e3fb66b5158f425908a1e3c42905c198775d64121f1f026610a9d42dc1ff9086f3a1dbd9ad70c1c8fd1be1eb20dc778b75b237efc8f0544dcb40cc7d897372631a8eabf18949f89693ca5609e49b8d937e5c309d1bb1c3b36fb21c83ec18e22a90307dda73d476f58f5f5587e8e84463bf4b9f755a0605f3503cf3e112789c7b2e2693175791e4d010738c13b731be69b20e37fd32175a015fd5fa51a98926adb3d2ece4ac3cb7ce12016562ededd8ad174e11d58766618d4aa49d5800f4afc080a7f6760e365644b1762095b5265da47b74815b480360a66412ae5cb117fe3007b1d501e4e6eedcb0b2211e7ff71e4df7a618eedbac4276329eae7765c05264d748faac0fa8b930e686436630d421d66b0a4dd81ee936f998ed6930bb88ec20dd63339bde2d05427ca4f012df95076c5b58c2a089624c330e6c903190d8dc2fecdcede88c054f3f470fd847c16a6485b102b8fa7e56a1476c0995654629fc4c3bab338f7b8a7455a417ed4963fe24b532bfae2eb06b48fcf375065a85e9c0c0793447efa159ec0e0d5e2784c4f2394a4fa20f07084176925573cafbae35d61a23dbeedd8ce8760a68b7f13897220b6488437160a8f8fe6396864cd09e2cbff3b6fb7623d517dfd3088a121121f61cebb67b7b563bb4c2de2a0eea8a4c5862a236b6f000581a2a310efb3b0e788cd179b00dc0a3d99291427e9f6cd69acd8b97ce8a581838ef3defaf92b808950e527a8f1dde34d1d89e9616b3fb49f718b0d38b61d1d053397192a6e925949d966c32c3d991992bb5667f18747649395fb178a1c52abcb9ca7101598db3e9b042dee1d291aa4b8f0a15ed0083fef8bb8991478117b8ce89c1b0aae950cebe6a08c174a99fbd53ae7df184fe7845af49f38517570e985b9e71344518d5602636fc753672b0230fe0f5a6b84edadcb0f7375654d9fa94985001d7095dac7daf963cc955765378098e4f9ce6bd843add517a4d9b94061ee5341eee8ec2eb0e34b8e3907f3f5670d02ada0a3010fb6c2489bd724b114992d2e81f84d352b621a1bb0bc114b16eb32317b31b8a06084de5989e3a844b9df16cdf9161a344e40259c4727ba2e5df60e07f9a7d87944cebb9fc44cfd3218694ec6b281d4f0d3649b16f54bc2c470cbc19d4b3e0d6a55446d7ab9bc774e498da757f1a9216313992f54158aca91fb9b40669fb40a49f070419a902a7b629cd3dbaf3493afb7443ea2eccdd60fc52cff0d6b7bfba49975281894656299fd7dc3b9b80b4c06d29ef8a2444505fe17019af22beeba542b2a807f1ff132b62136099b0142f34eec727219d1a5cbd075791f513eff2494412f211c4d993880400aae3f39403a440fdabcd9edc76307f5b4334ce507c1be203c846931e79a309b38646112916e9188e37803116c308c1ed21519a145eb2d9461cb2d0d79226e4ef9f4c400c8dbe8341f841e508a403c3c8bdfd9a65ddf4f72a90b4a0868366329d5c0335f75e6e8512a65e0db0192f864e9cdccfa12d07475ef7c19509d2f6f3e2380c1433fee5eed2e063be647d147881a43bb407105d10b69e102dc3ccf07a3478d2ecf5a7ebf036580f9a27fb7c37d308020f9292e051af708de1467db0ec5d23a0431029516032bde71e20b389ec7868766651e633d8e2a039c483f6c901a69bd668ec2fecfecf6592b734def5fef3bdac29ba2a1d3572c61fdd27aca43f1f0f607ed4a09c3295e1b07bcd9a0732a3bdfd92718687a3b9425a1691618d878ef49fd24085c233b864ef7c9093af16bad7962607d0ce38f26ae877696c17e1bc81b9a29ceb670f86c4cc480ca0e79d3868a9db8fa8747b087cd5935f554098c9e6a332b9536cb7e238c56c841602a5880e2c2d10028e7e817fcbe7ca226441d0e06fc4ef250059fd7f997ca1cbe6a862965b24c84f88ecf720c6fc5d9f02601573101b4568b4a1f4b8f8d49f3f6ed55a94585187722e7f3d22110cdef7ce9ebd68f46d37b0e2ed88f821fd3503a9f8f91a3c74f7f100f7b5799493bae7276d8553ddf681e3fd651274957a1d2fa0e8bb5ba140642cd38b06d47f3bbadb951fcb3177a072f52692795cf5ebba88a8f60e0fe5173d8ee93485166af7d2f63ade0fdf597d4631f4b19244679f67f142fea13d165dbde5c774dcbf55ef", 0x1000}, {&(0x7f0000002a80)="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", 0x1000}, {&(0x7f0000000280)="835a63fea5a84fa092d084650138591907b1fbdc86074f9b142704", 0x1b}], 0x8, &(0x7f0000000340)=[@rthdrdstopts={{0x50, 0x29, 0x37, {0xbb, 0x6, '\x00', [@ra={0x5, 0x2, 0xfff8}, @calipso={0x7, 0x28, {0x2, 0x8, 0xff, 0x1, [0x59d, 0x1, 0x5c, 0x2]}}, @ra={0x5, 0x2, 0x6}]}}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x87, 0x9, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0xf4, 0x8482, [0x1ff, 0x40, 0x9]}}, @ra={0x5, 0x2, 0x1ff}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @empty}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x2b, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts={{0x148, 0x29, 0x36, {0x52, 0x25, '\x00', [@enc_lim, @generic={0xc, 0xd5, "93587eab8517c9445ea5e2b2b27ddd1c82a1a17b4e591fa21a7742d9f3823c099aa3903465718e3e35596e9c5ae03eb49073f27c4b24189605e7266c63f2ff3a686cd08326f3933221b08caf86f3b74d60d20f9481479f5d8a6bcdd61e96395ce127320047d7c01620ee1e4d43601f993cfc320759056d142ee5b0be658d0aefc07e2eb09e8f7ead24130b25b80d552fd687d0b61101f7975d9e077d08b10fb3ce7a2c3197c9da8b295d9c82fd2b7f4d7295d060d027372e48115c8cc27484af493aba79b770ade9af173f3151ca888e8d4339dffa"}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0xffff}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3e7c00}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x16, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r3}}}], 0x270}}], 0x1, 0x8000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r0}, 0x2) 906.436495ms ago: executing program 4 (id=2671): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 64) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) shutdown(r0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x2e00}, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r3, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) (rerun: 64) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a73300008000200000000000800070026093a0914000600626f6e64300000000000000003000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4, 0x1, 0xc, 0x594a5e3e, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async, rerun: 64) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r10, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async, rerun: 64) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES16=r3, @ANYBLOB="080428bd7000fcdb00", @ANYRES32=r11, @ANYBLOB="04000380"], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x80) (async) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r13, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x41, @mcast2, @local, 0x7800, 0x0, 0x0, 0x6}}) (async) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 664.280733ms ago: executing program 3 (id=2672): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffe}]}, &(0x7f0000000180)=0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/176, 0xb0}}], 0x2, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r3, @in={{0x2, 0x4e21, @loopback}}, 0x0, 0x100, 0x0, 0xbe}, &(0x7f00000001c0)=0x9c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000002c0)={0x802, 0x2}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000005a0025"], 0x1c}}, 0x0) 663.871961ms ago: executing program 0 (id=2673): socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) pread64(r1, &(0x7f00000008c0)=""/233, 0xe9, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206010300000000000000000000000605000100070000100900020073797a32000000000c000780"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 663.601125ms ago: executing program 4 (id=2674): syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 589.452952ms ago: executing program 0 (id=2675): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ff}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140)=0x89, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, 0x0, 0x4820) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ife={0x2c, 0x21, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r8, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x7, 0x4, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x8000, 0x7820, 0x800, 0x9}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000000)={@remote, r10}, 0x14) 511.643508ms ago: executing program 4 (id=2676): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r1, 0xe, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000180)={r2}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) recvmsg$kcm(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/253, 0xfd}, {&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000440)=""/99, 0x63}, {&(0x7f00000004c0)=""/41, 0x29}], 0x4}, 0x20) splice(r0, &(0x7f0000000580)=0x6, r0, &(0x7f00000005c0)=0xd, 0x100000001, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$llc(r2, &(0x7f0000000600)={0x1a, 0x321, 0x6, 0x2, 0xbd, 0x43, @remote}, 0x10) syz_80211_inject_frame(&(0x7f0000000640), &(0x7f0000000680)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7}, @broadcast, @broadcast, @initial, {0x5, 0x8}, "", @void, @value=@ver_80211n={0x0, 0x71fd, 0x1, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, @random="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"}, 0x803) syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), r2) clock_gettime(0x0, &(0x7f0000000fc0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000f00)={0x3, 0x6, 0x5, 0x40, 0x7, 0x3, 0x2, 0x2}, &(0x7f0000000f40)={0x6c, 0x9, 0x8a, 0x5, 0x6, 0x7, 0x1, 0x7}, &(0x7f0000000f80)={0x8, 0x4, 0x2, 0x7ff, 0x0, 0x3ff, 0x1ff, 0x7}, &(0x7f0000001000)={r3, r4+10000000}, &(0x7f0000001080)={&(0x7f0000001040)={[0x3]}, 0x8}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000010c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001100)={0x1d, r5, 0x0, {0x1, 0x1, 0x3}, 0x2}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001180), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000001400)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f00000011c0)={0x1fc, r7, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x998}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x72d}, {0x6, 0x11, 0x200}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x81000}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xb1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xf3f}, {0x6, 0x11, 0x8000}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40011}, 0x44001) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001440)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x12, 0xf, &(0x7f0000001480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], &(0x7f0000001500)='syzkaller\x00', 0xffffbb42, 0x7e, &(0x7f0000001540)=""/126, 0x41100, 0x32, '\x00', r5, @cgroup_sock_addr=0x20, r2, 0x8, &(0x7f00000015c0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x4, &(0x7f0000001600)=[r2], &(0x7f0000001640)=[{0x4, 0x3, 0xa, 0x7}, {0x0, 0x3, 0x6, 0x4}, {0x3, 0x2, 0x6, 0xb}, {0x3f0, 0x2, 0xd, 0x5}], 0x10, 0x5}, 0x94) syz_80211_inject_frame(&(0x7f0000001740)=@device_b, &(0x7f0000001780)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @broadcast, @random="95a4e3f4a9ac", {0xf, 0x6}}, 0xff, @random, 0x20, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0xff, 0x7f, 0x1, 0x54}}, @val={0x6, 0x2, 0xc6}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, [{0xdd, 0xa7, "04623b3fd31ecd1672e761ada06b757ee9bfef33296510b7e6ede280b87e10ffd54cfce1bc9eacc819fef5b45f050f0c287508b20a0589e751877f2cb5ca08acfeb02f6112fe89edb6e07684856bf769fcbfd9d70ddb704c0cf633ff02a83e1083a56e692d482ce283ed4545cf2a5cbcc129efd9f125ecf800c2fb30b7e4ee12a63f74ef1007b35675bb1c8fd806a4be098f583adcb5fba726100804ae72f079abba7a5d10215b"}, {0xdd, 0xd2, "3117aad8555d96e8de305d12dba2aaf15266aef9d4b303db2e650b1650b16c73e2b91fb0bc34bbf43bab2ea57fde63055904e66150bb8f049a8158ff13c133d7caf8a399e983fd57ba6f24235713685f26ef455142c32182661e2f77f001fa2becb0c951f98f9ca45e9928f4f2679c47eac17ede1ac9579064ae3a89f97a57dbdc8dd4e98216cf49017a3c934b8606c3900834b137681840a34ba8a25a9ed2b65eb84892d9f6a48ca441b82545c5df4ebc7a2c01c3170f556ac92b81389a0dc4e409b2e6aa0b49dc0be2cc88e22a0eaca7ae"}, {0xdd, 0xdf, "5643c6b438a12ab12ded7b8426d5748c0e7b874cd9e2ca731458c037026eb9de34029c73d7a978bf08da1aa17ef4b861b9822fa8a73475211576d185ef65778fb457927ac9a9ef080ead95d8d883154880b01d4534cf8040d0461156d662cc3cbeb837e3098fac0d03b88d9a2efeb0ba2990696f71be15da1bf8985d694d3bfa0f06bf1b8923d0125a8e3d0498f9bd09c21a8725b97cb5b9e5f317ee90316189aab291556fb2c2e5b39486f27b5aa6e8b9bd2f4eec213a44875780fdbd31f3f77948ccf2ad43d843e7f72a70849d2d7d8f4e55a96d8db6335dcd1b92f1392f"}, {0xdd, 0xdc, "dfcb775f863bb7ac41fb5de6a27fadd7fe88932e3b381f87f0459c88c3e6805745bec7807851fc28036006b3aa6aa4cc4b78bf3d2b1202b56ca83af0dd208bbeaae95fd76cb829f5ce45bd6d6622daf4db7481b21ac4ccfe0e1aa42632c8e45ff198d5ef6158a402bb17541ac13450de476b6cef96e809d0a8c68fbc7128efbf240d553b83d7b68b63a02fdd068b464d1171c0bf8a543414c09148a1ef2966e30ac780931a5fd86a2ab00742a29991f7e4ef789cfe73bc4ce1a3b292ce700d9d49ed30cfcd662558d5d00d40ed95459fee3d831531a049b9ed8ad9dd"}, {0xdd, 0xa5, "be57b1a7eb34fb785f2179a0571a77f5d1033c17d19aebab461e1ab6d5e0f19e11b474d8e57db72e89b9cb5c4333be9e82b779f36c52edd8fe9702793c006bd63d3badc21d28b690fa637d1a860bdab6c959c0fa5accff57bfb90b94b8eb1283e46f97206198cae4b81325f0ccc9d4c41762eba2841c319878b14972be317d322f5fa49f02ebb4d291e318cd8ad13e11c16ad3645ed28c6651a96ab1b395187716927f0d96"}, {0xdd, 0x39, "8455cf9b03497fa3760cfdf020af982f76c3650fe8bc3b8de2c1e81a387e932e4fb53e860002a9ac958bb2fcf5b52fd6aaef1a157fd157f024"}]}, 0x467) syz_80211_inject_frame(&(0x7f0000001c00)=@device_b, &(0x7f0000001c40)=@mgmt_frame=@action_no_ack={{{}, {0x5}, @device_b, @broadcast, @random="bcc650f411bc", {0xf}}, @tdls_setup_req={0xc, 0x0, "", 0xfe, @val=0x5000, @val={0x1, 0x7, [{0x12}, {0x60}, {0x12, 0x1}, {0x16, 0x1}, {0x4}, {0x3}, {0x3}]}, @val={0x2d, 0x1a, {0x8000, 0x0, 0x6, 0x0, {0x7, 0xf, 0x0, 0x3f9, 0x0, 0x1, 0x1}, 0x300, 0x8, 0x65}}, @val={0x65, 0x12}}}, 0x56) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d00), r2) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x24, r9, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x925}]}, 0x24}}, 0x4048000) pipe(&(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001e80), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r11, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x50, r12, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x4001800) write$tun(r10, &(0x7f0000001fc0)={@void, @void, @llc={@llc={0xf8, 0x42, "d9b7", "76e7c74575f2a6bb47087d36eab3a8ff57ef9dc0225f9444afa5a411b9f14aa939d7429fc06607930f3dcece6b7bf36716b2c52431051722d4d0194d5ba2fb6a2b485e0895a18f01583a8b6093af72138c735389dd757da64927f0da52ecebcbbb5174cbf3032843b41ebabc93383244ccb159f22bbffac2843ff561053808f69bc8661571509e010a4a8d98a397f8c488380d6fe9a91ba9b7ad7772ada0ddfdc0eefe85318fabd6f71a4c2bd3d38abdab1e099e83cf7aad327f87484b9b8da792c83d2a30798dd079842bb1c66d4ac44e76427ce3476e7e82e1d281902492b2f5f7c756868e3128a5c47070"}}}, 0xf0) syz_genetlink_get_family_id$smc(&(0x7f00000020c0), r10) 384.707249ms ago: executing program 1 (id=2677): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x36, &(0x7f0000000080)={0x42, 0x1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000080", @ANYRES32=r6, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r6, @ANYBLOB="14000500fe80917a"], 0x3c}}, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f00000001c0)=@ll={0x11, 0x1c, r6, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000240)="f00983475eeadc54c0253d27c5b8aad13c3e59368c0d3f1e18fdd52090d01e8869ee3e7fb1866258968f0311fe964c55e2e9724d8524a47b48f8214d0d41c68fc22349d990d96526f8ddb4a6bd1eea08183026c730daecadc8f8d965e7a946d25ecd6bb2458f59446b89da16650218a9fd3b2fe9b35ee4f3626d129161d858f24f44382cd7a9511920329575649f8d1a48e3d7633874b79a7f7f88b52a5dd7bfc449595f9a450c9935be43e1c2671d31b1c949ee9811b5d72d8b5d96431cf4779fecb2bfe1b9225dfe280198a91c54ff213888c4db26a4977266ef6f", 0xdc}, {&(0x7f0000000340)="642f5469d52367a6e0111bde31c2a61377f695d118adb10d289a79d0513515038ea17d7d05b39e06787f126b0dc1cf134bdef5a2cb5b431faa66c1773f6c253e0ade6f1bf3d8b84f1eeb1b659b7e002c3126c6856baf6ebf2e4ca38b1c3aefb63fb208d75b1d5012e0262c65dac1de2b25f1bb9076c4", 0x76}, {&(0x7f00000003c0)="621bba2cec2feb3b20560b65c6a2d078c36dcc1991e404a0f665e78890744151457356126993b2be2b8d238deb334c85b31fef62b20a66b819b7e57686cff13884491095c41216dab372376605d83bc0723c253df861f604089e6be268c1ed696aa10eacef70f076172f9b7b4dddfd9abd061c0cebcd681c2d7c36559a8f3ce28d61812be8d7532621b081f860f64dd63084fc99fc90cc28925bcd94ee63d1d59a351e1ef85340971884658a31761759e32bec966146365d6e021afe8b1f6167966b1879159c15b728d6bd55", 0xcc}, {&(0x7f00000004c0)="0543d5688b9a7af8fb8cf01540b3966d27a8bcfc0842eec8fdbfe6a45d54a19da89070e36242bb7d9c94de70106580e2c5fa320ddfb6f5bb1b2e7403ef61a15e91f1a04280e49600277a798c987305c0e876998d5ceab06d6e8f34e4980ef2cdd7e0498554a9b6e995a79ddaa9b290af957dd56dfda3789928db6390764febf5ea1539f0cdb4af1a2f0bda3a6741f28603b84ca10de73e3454d17451b172c10659f345b773af071aedb146184eda31d15f08d0977ee443c0b86166a80effeba85d1422d6e6cb76f19b09f914b96d1891cd56b93926f6d3509071ecba68dafbfd0693dd17e1861584f1606173fe9be6", 0xef}, {&(0x7f00000005c0)="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", 0x1000}], 0x5}, 0x44088) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaaaa86dd66c2eeed0018110000000000000000000000000000000000fe8000000000000000000000000000aa4e204e2200"], 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000001640), r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r7, 0x8, 0x9, 0xd5}, 0x14) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r7, 0x7}, 0x8) 295.437127ms ago: executing program 1 (id=2678): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@union={0x1, 0x6, 0x0, 0x5, 0x1, 0x5, [{0xb, 0x2, 0x277}, {0x7, 0x0, 0x3ce}, {0xe, 0x2, 0x100}, {0x2, 0x1}, {0x5, 0x2, 0xa}, {0x2, 0x3, 0xfffffffd}]}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x88, 0x0, 0x0, 0x4}, 0x28) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) 192.163568ms ago: executing program 1 (id=2679): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x6}]}]}}, &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x7}, 0x28) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) 182.966428ms ago: executing program 1 (id=2680): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026", 0x39}], 0x3}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) write$tun(r3, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x2c, 0x67, 0x0, 0xd, 0x6, 0x0, @broadcast, @loopback, {[@end]}}, {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x6, 0x0, 0x4}}}}, 0x3a) (async, rerun: 32) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x0, 0x0, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0004000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) (rerun: 32) 129.307521ms ago: executing program 2 (id=2681): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 273.522µs ago: executing program 2 (id=2682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x13, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 0s ago: executing program 1 (id=2683): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000440)="d2ff03cb4608008cb89e08d986dd", 0x0, 0xb22a, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef) kernel console output (not intermixed with test programs): mes 0 [ 173.078352][ T9562] CPU: 1 UID: 0 PID: 9562 Comm: syz.1.1041 Not tainted syzkaller #0 PREEMPT(full) [ 173.078379][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.078391][ T9562] Call Trace: [ 173.078398][ T9562] [ 173.078407][ T9562] dump_stack_lvl+0xe8/0x150 [ 173.078439][ T9562] should_fail_ex+0x412/0x560 [ 173.078472][ T9562] should_failslab+0xa8/0x100 [ 173.078498][ T9562] __kvmalloc_node_noprof+0x178/0x8a0 [ 173.078520][ T9562] ? __raw_spin_lock_init+0x45/0x100 [ 173.078538][ T9562] ? alloc_netdev_mqs+0xa4b/0x11b0 [ 173.078573][ T9562] alloc_netdev_mqs+0xa4b/0x11b0 [ 173.078606][ T9562] rtnl_create_link+0x31f/0xd70 [ 173.078638][ T9562] rtnl_newlink_create+0x277/0xb70 [ 173.078666][ T9562] ? __mutex_lock+0x5ac/0x1300 [ 173.078695][ T9562] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 173.078721][ T9562] ? __pfx___mutex_lock+0x10/0x10 [ 173.078755][ T9562] ? ns_capable+0x89/0xe0 [ 173.078783][ T9562] rtnl_newlink+0x1666/0x1be0 [ 173.078819][ T9562] ? __pfx_rtnl_newlink+0x10/0x10 [ 173.078836][ T9562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.078891][ T9562] ? kasan_quarantine_put+0xbb/0x1f0 [ 173.078912][ T9562] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.078939][ T9562] ? kmem_cache_free+0x187/0x630 [ 173.078959][ T9562] ? nlmon_xmit+0xb0/0x100 [ 173.078995][ T9562] ? __lock_acquire+0x6b5/0x2cf0 [ 173.079024][ T9562] ? __local_bh_enable_ip+0xd0/0x130 [ 173.079049][ T9562] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.079076][ T9562] ? __dev_queue_xmit+0x28b/0x3870 [ 173.079100][ T9562] ? __local_bh_enable_ip+0xd0/0x130 [ 173.079122][ T9562] ? __dev_queue_xmit+0x28b/0x3870 [ 173.079171][ T9562] ? __pfx_rtnl_newlink+0x10/0x10 [ 173.079191][ T9562] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 173.079215][ T9562] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 173.079234][ T9562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 173.079252][ T9562] ? ref_tracker_free+0x693/0x840 [ 173.079278][ T9562] ? __copy_skb_header+0xa3/0x4a0 [ 173.079303][ T9562] ? __pfx_ref_tracker_free+0x10/0x10 [ 173.079341][ T9562] netlink_rcv_skb+0x232/0x4b0 [ 173.079363][ T9562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 173.079388][ T9562] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.079419][ T9562] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.079447][ T9562] netlink_unicast+0x80f/0x9b0 [ 173.079484][ T9562] ? __pfx_netlink_unicast+0x10/0x10 [ 173.079517][ T9562] ? netlink_sendmsg+0x650/0xb40 [ 173.079535][ T9562] ? skb_put+0x11b/0x210 [ 173.079560][ T9562] netlink_sendmsg+0x813/0xb40 [ 173.079590][ T9562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.079614][ T9562] ? aa_sock_msg_perm+0xf1/0x1b0 [ 173.079643][ T9562] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.079667][ T9562] ____sys_sendmsg+0x972/0x9f0 [ 173.079701][ T9562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.079734][ T9562] ? import_iovec+0x73/0xa0 [ 173.079759][ T9562] ___sys_sendmsg+0x2a5/0x360 [ 173.079788][ T9562] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.079846][ T9562] ? __fget_files+0x2a/0x420 [ 173.079872][ T9562] ? __fget_files+0x3a0/0x420 [ 173.079910][ T9562] __x64_sys_sendmsg+0x1bd/0x2a0 [ 173.079936][ T9562] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.079969][ T9562] ? __pfx_ksys_write+0x10/0x10 [ 173.080002][ T9562] do_syscall_64+0x14d/0xf80 [ 173.080024][ T9562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.080044][ T9562] ? clear_bhb_loop+0x40/0x90 [ 173.080073][ T9562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.080092][ T9562] RIP: 0033:0x7fe69f59c799 [ 173.080111][ T9562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.080127][ T9562] RSP: 002b:00007fe6a044a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.080148][ T9562] RAX: ffffffffffffffda RBX: 00007fe69f815fa0 RCX: 00007fe69f59c799 [ 173.080161][ T9562] RDX: 0000000020000044 RSI: 0000200000000040 RDI: 000000000000000b [ 173.080174][ T9562] RBP: 00007fe6a044a090 R08: 0000000000000000 R09: 0000000000000000 [ 173.080185][ T9562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.080196][ T9562] R13: 00007fe69f816038 R14: 00007fe69f815fa0 R15: 00007ffe532fd9f8 [ 173.080227][ T9562] [ 173.659201][ T9469] lo speed is unknown, defaulting to 1000 [ 173.745731][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1044'. [ 173.759990][ T9567] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 173.942722][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.106976][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 174.132619][ T9594] macsec2: entered allmulticast mode [ 174.138756][ T9594] bridge0: entered allmulticast mode [ 174.148036][ T9594] bridge0: left allmulticast mode [ 174.160872][ T9469] lo speed is unknown, defaulting to 1000 [ 174.188147][ T9592] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.289170][ T9592] tipc: Resetting bearer [ 174.514074][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1053'. [ 174.544489][ T9574] lo speed is unknown, defaulting to 1000 [ 174.545314][ T9603] syzkaller0: entered promiscuous mode [ 174.557015][ T9603] syzkaller0: entered allmulticast mode [ 174.594164][ T9603] team_slave_0: entered promiscuous mode [ 174.600658][ T9603] team_slave_1: entered promiscuous mode [ 174.607418][ T9603] dummy0: entered promiscuous mode [ 174.631040][ T9603] macsec2: entered allmulticast mode [ 174.643999][ T9603] team0: entered allmulticast mode [ 174.660044][ T9603] team_slave_0: entered allmulticast mode [ 174.668839][ T9603] team_slave_1: entered allmulticast mode [ 174.675645][ T9603] dummy0: entered allmulticast mode [ 174.684806][ T9603] team0: left allmulticast mode [ 174.689921][ T9603] team_slave_0: left allmulticast mode [ 174.695913][ T9603] team_slave_1: left allmulticast mode [ 174.701950][ T9603] dummy0: left allmulticast mode [ 174.729408][ T9603] team_slave_0: left promiscuous mode [ 174.735224][ T9603] team_slave_1: left promiscuous mode [ 174.740674][ T9603] dummy0: left promiscuous mode [ 174.822733][ T9612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.041022][ T9618] syzkaller0: entered promiscuous mode [ 175.116121][ T9621] netlink: 'syz.3.1059': attribute type 1 has an invalid length. [ 175.183278][ T9615] IPv6: addrconf: prefix option has invalid lifetime [ 175.200342][ T9621] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.352397][ T9621] bond4: (slave veth3): Enslaving as an active interface with a down link [ 175.597586][ T9638] lo speed is unknown, defaulting to 1000 [ 176.226051][ T9671] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.243864][ T9671] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.270245][ T9671] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 176.389729][ T9676] 8021q: adding VLAN 0 to HW filter on device bond6 [ 176.423490][ T9671] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.434714][ T9671] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.448422][ T9671] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 176.548422][ T9682] nbd: must specify a device to reconfigure [ 176.607488][ T9671] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.636529][ T9671] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.651213][ T9671] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 176.846675][ T9671] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.871933][ T9671] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.903877][ T9671] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 177.209710][ T9192] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.219213][ T9192] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.228539][ T9192] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.246728][ T9713] __nla_validate_parse: 7 callbacks suppressed [ 177.246746][ T9713] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1083'. [ 177.263705][ T9192] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.282667][ T9192] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.312069][ T9192] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.359671][ T461] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.404595][ T461] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.422956][ T461] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.450117][ T461] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.469196][ T461] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.487844][ T461] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.626654][ T9727] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1087'. [ 177.747940][ T9727] netlink: 'syz.2.1087': attribute type 11 has an invalid length. [ 177.756841][ T9727] netlink: 'syz.2.1087': attribute type 23 has an invalid length. [ 177.768052][ T9727] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1087'. [ 177.874364][ T9736] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 178.007315][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1092'. [ 178.018295][ T9745] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 178.143156][ T9750] sctp: [Deprecated]: syz.3.1095 (pid 9750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.143156][ T9750] Use struct sctp_sack_info instead [ 178.187164][ T9750] sctp: [Deprecated]: syz.3.1095 (pid 9750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.187164][ T9750] Use struct sctp_sack_info instead [ 178.266688][ T9750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1095'. [ 178.375508][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 178.413113][ T9758] netlink: 'syz.0.1099': attribute type 10 has an invalid length. [ 178.721089][ T9777] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 178.784370][ T9781] IPv6: Can't replace route, no match found [ 178.791355][ T9781] IPv6: Can't replace route, no match found [ 179.014656][ T9796] netlink: 'syz.1.1109': attribute type 1 has an invalid length. [ 179.072657][ T9796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.127884][ T9804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1115'. [ 179.336108][ T9814] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1113'. [ 179.536501][ T9819] bond2: Unable to set up delay as MII monitoring is disabled [ 179.545758][ T9819] bond2 (unregistering): Released all slaves [ 179.606360][ T9814] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 179.856188][ T9844] FAULT_INJECTION: forcing a failure. [ 179.856188][ T9844] name failslab, interval 1, probability 0, space 0, times 0 [ 179.876033][ T9844] CPU: 1 UID: 0 PID: 9844 Comm: syz.4.1123 Not tainted syzkaller #0 PREEMPT(full) [ 179.876061][ T9844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.876072][ T9844] Call Trace: [ 179.876080][ T9844] [ 179.876087][ T9844] dump_stack_lvl+0xe8/0x150 [ 179.876119][ T9844] should_fail_ex+0x412/0x560 [ 179.876150][ T9844] should_failslab+0xa8/0x100 [ 179.876175][ T9844] __kmalloc_cache_noprof+0x88/0x660 [ 179.876198][ T9844] ? register_netdevice+0x582/0x1cf0 [ 179.876227][ T9844] register_netdevice+0x582/0x1cf0 [ 179.876255][ T9844] ? kasan_save_track+0x4f/0x80 [ 179.876275][ T9844] ? __kasan_kmalloc+0x93/0xb0 [ 179.876294][ T9844] ? __kvmalloc_node_noprof+0x528/0x8a0 [ 179.876313][ T9844] ? alloc_netdev_mqs+0xc89/0x11b0 [ 179.876335][ T9844] ? rtnl_create_link+0x31f/0xd70 [ 179.876371][ T9844] ? rtnl_newlink_create+0x277/0xb70 [ 179.876388][ T9844] ? rtnl_newlink+0x1666/0x1be0 [ 179.876405][ T9844] ? netlink_rcv_skb+0x232/0x4b0 [ 179.876420][ T9844] ? netlink_unicast+0x80f/0x9b0 [ 179.876445][ T9844] ? netlink_sendmsg+0x813/0xb40 [ 179.876462][ T9844] ? ____sys_sendmsg+0x972/0x9f0 [ 179.876484][ T9844] ? __pfx_register_netdevice+0x10/0x10 [ 179.876505][ T9844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.876541][ T9844] macsec_newlink+0x6f9/0x1200 [ 179.876590][ T9844] ? __pfx_macsec_handle_frame+0x10/0x10 [ 179.876618][ T9844] ? __pfx_macsec_newlink+0x10/0x10 [ 179.876638][ T9844] ? trace_kmalloc+0x2a/0x110 [ 179.876660][ T9844] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 179.876681][ T9844] ? alloc_netdev_mqs+0xc89/0x11b0 [ 179.876705][ T9844] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 179.876731][ T9844] ? validate_linkmsg+0x765/0x950 [ 179.876762][ T9844] ? __pfx_macsec_newlink+0x10/0x10 [ 179.876786][ T9844] rtnl_newlink_create+0x329/0xb70 [ 179.876806][ T9844] ? __pfx___nla_validate_parse+0x10/0x10 [ 179.876833][ T9844] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 179.876859][ T9844] ? __pfx___mutex_lock+0x10/0x10 [ 179.876894][ T9844] ? ns_capable+0x89/0xe0 [ 179.876924][ T9844] rtnl_newlink+0x1666/0x1be0 [ 179.876960][ T9844] ? __pfx_rtnl_newlink+0x10/0x10 [ 179.876990][ T9844] ? __lock_acquire+0x6b5/0x2cf0 [ 179.877027][ T9844] ? __lock_acquire+0x6b5/0x2cf0 [ 179.877054][ T9844] ? __lock_acquire+0x6b5/0x2cf0 [ 179.877089][ T9844] ? unwind_next_frame+0xa5/0x23c0 [ 179.877134][ T9844] ? __lock_acquire+0x6b5/0x2cf0 [ 179.877159][ T9844] ? is_bpf_text_address+0x26/0x2b0 [ 179.877182][ T9844] ? kernel_text_address+0xa5/0xe0 [ 179.877231][ T9844] ? __pfx_rtnl_newlink+0x10/0x10 [ 179.877251][ T9844] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 179.877275][ T9844] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 179.877293][ T9844] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.877315][ T9844] ? __lock_acquire+0x6b5/0x2cf0 [ 179.877350][ T9844] netlink_rcv_skb+0x232/0x4b0 [ 179.877371][ T9844] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.877393][ T9844] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.877425][ T9844] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.877451][ T9844] netlink_unicast+0x80f/0x9b0 [ 179.877489][ T9844] ? __pfx_netlink_unicast+0x10/0x10 [ 179.877518][ T9844] ? netlink_sendmsg+0x650/0xb40 [ 179.877541][ T9844] ? skb_put+0x11b/0x210 [ 179.877573][ T9844] netlink_sendmsg+0x813/0xb40 [ 179.877603][ T9844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.877627][ T9844] ? aa_sock_msg_perm+0xf1/0x1b0 [ 179.877656][ T9844] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.877681][ T9844] ____sys_sendmsg+0x972/0x9f0 [ 179.877714][ T9844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.877747][ T9844] ? import_iovec+0x73/0xa0 [ 179.877772][ T9844] ___sys_sendmsg+0x2a5/0x360 [ 179.877802][ T9844] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.877861][ T9844] ? __fget_files+0x2a/0x420 [ 179.877888][ T9844] ? __fget_files+0x3a0/0x420 [ 179.877926][ T9844] __x64_sys_sendmsg+0x1bd/0x2a0 [ 179.877954][ T9844] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.877986][ T9844] ? __pfx_ksys_write+0x10/0x10 [ 179.878020][ T9844] do_syscall_64+0x14d/0xf80 [ 179.878042][ T9844] ? trace_irq_disable+0x3b/0x150 [ 179.878067][ T9844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.878086][ T9844] ? clear_bhb_loop+0x40/0x90 [ 179.878109][ T9844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.878128][ T9844] RIP: 0033:0x7f2f0779c799 [ 179.878148][ T9844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.878164][ T9844] RSP: 002b:00007f2f085c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.878184][ T9844] RAX: ffffffffffffffda RBX: 00007f2f07a15fa0 RCX: 00007f2f0779c799 [ 179.878198][ T9844] RDX: 0000000020000044 RSI: 0000200000000040 RDI: 000000000000000b [ 179.878209][ T9844] RBP: 00007f2f085c4090 R08: 0000000000000000 R09: 0000000000000000 [ 179.878219][ T9844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.878230][ T9844] R13: 00007f2f07a16038 R14: 00007f2f07a15fa0 R15: 00007ffd8087b688 [ 179.878257][ T9844] [ 180.570181][ T9850] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1124'. [ 180.607404][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1126'. [ 180.756800][ T9852] bond5: entered promiscuous mode [ 180.767945][ T9852] 8021q: adding VLAN 0 to HW filter on device bond5 [ 180.776713][ T9871] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 180.894727][ T9864] 8021q: adding VLAN 0 to HW filter on device bond6 [ 180.912795][ T9864] bond6: entered promiscuous mode [ 180.918503][ T9864] bond5: (slave bond6): Enslaving as an active interface with an up link [ 181.160774][ T9893] macsec2: entered allmulticast mode [ 181.168552][ T9893] syz_tun: entered allmulticast mode [ 181.179165][ T9893] syz_tun: left allmulticast mode [ 181.247078][ T9898] xt_hashlimit: size too large, truncated to 1048576 [ 181.280329][ T9900] syzkaller0: entered allmulticast mode [ 181.444492][ T9905] bond0: (slave sit0): Error: Device type is different from other slaves [ 181.995782][ T9928] netlink: 'syz.2.1147': attribute type 10 has an invalid length. [ 182.015819][ T9931] geneve1: Caught tx_queue_len zero misconfig [ 182.215934][ T9945] syz_tun: entered promiscuous mode [ 182.234182][ T9945] macsec1: entered allmulticast mode [ 182.239842][ T9945] syz_tun: entered allmulticast mode [ 182.248081][ T9945] syz_tun: left allmulticast mode [ 182.254229][ T9945] syz_tun: left promiscuous mode [ 182.286475][ T9946] geneve3: entered promiscuous mode [ 182.454826][ T9946] lo speed is unknown, defaulting to 1000 [ 182.478055][ T9956] __nla_validate_parse: 3 callbacks suppressed [ 182.478074][ T9956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1153'. [ 182.482925][ T9966] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1156'. [ 182.516265][ T9964] netlink: 'syz.2.1155': attribute type 27 has an invalid length. [ 182.525420][ T9965] netlink: 'syz.2.1155': attribute type 27 has an invalid length. [ 182.813040][ T9975] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 183.255078][ T9987] dvmrp12: entered allmulticast mode [ 183.379053][ T9993] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 183.669756][T10003] lo speed is unknown, defaulting to 1000 [ 183.733951][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1165'. [ 183.938783][ T9989] dvmrp12: left allmulticast mode [ 184.762698][T10032] lo speed is unknown, defaulting to 1000 [ 185.499537][T10047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1173'. [ 185.526073][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1173'. [ 185.973559][T10055] syzkaller0: entered promiscuous mode [ 185.980263][T10055] syzkaller0: entered allmulticast mode [ 186.100133][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'. [ 187.303963][T10108] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1187'. [ 187.333240][T10107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1187'. [ 187.446410][T10116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1190'. [ 187.567459][T10116] netlink: 'syz.4.1190': attribute type 2 has an invalid length. [ 187.616372][T10116] netlink: 'syz.4.1190': attribute type 1 has an invalid length. [ 187.637888][T10116] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1190'. [ 187.737211][T10124] tipc: Can't bind to reserved service type 0 [ 188.084506][T10143] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 188.100675][T10143] pim6reg0: linktype set to 773 [ 188.216674][T10153] netlink: 'syz.4.1202': attribute type 5 has an invalid length. [ 188.388843][T10159] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1201'. [ 188.732403][T10165] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 188.829787][T10169] sock: sock_timestamping_bind_phc: sock not bind to device [ 188.992811][T10172] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1204'. [ 189.441355][T10190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1213'. [ 189.744147][T10198] netlink: 'syz.1.1214': attribute type 29 has an invalid length. [ 189.753582][T10200] lo speed is unknown, defaulting to 1000 [ 189.772612][T10198] netlink: 'syz.1.1214': attribute type 29 has an invalid length. [ 189.972827][T10209] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1218'. [ 190.226561][T10209] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 190.387410][T10209] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 190.788481][T10237] syzkaller1: entered promiscuous mode [ 190.800915][T10237] syzkaller1: entered allmulticast mode [ 191.393562][T10265] lo speed is unknown, defaulting to 1000 [ 191.417319][T10265] lo speed is unknown, defaulting to 1000 [ 191.450028][T10265] lo speed is unknown, defaulting to 1000 [ 191.481150][T10265] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 191.514889][T10265] lo speed is unknown, defaulting to 1000 [ 191.526421][T10265] lo speed is unknown, defaulting to 1000 [ 191.563320][T10265] lo speed is unknown, defaulting to 1000 [ 191.626261][T10265] lo speed is unknown, defaulting to 1000 [ 191.658184][T10265] lo speed is unknown, defaulting to 1000 [ 191.765767][T10283] netlink: 'syz.3.1232': attribute type 10 has an invalid length. [ 191.805104][T10285] netlink: 'syz.4.1233': attribute type 10 has an invalid length. [ 191.842737][T10285] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 192.000625][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 192.014645][T10298] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1235'. [ 192.044023][T10298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1235'. [ 192.082697][T10298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1235'. [ 192.191250][T10307] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1236'. [ 192.320387][T10307] pim6reg99999999: entered allmulticast mode [ 192.358288][T10308] lo speed is unknown, defaulting to 1000 [ 192.681316][T10326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.917320][T10308] lo speed is unknown, defaulting to 1000 [ 193.194242][ T8541] IPVS: starting estimator thread 0... [ 193.296665][T10348] IPVS: using max 28 ests per chain, 67200 per kthread [ 193.566125][ T29] audit: type=1800 audit(1774461224.385:6): pid=10350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1250" name="cgroup.controllers" dev="tmpfs" ino=1369 res=0 errno=0 [ 193.828706][T10374] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 193.932890][T10374] xt_hashlimit: size too large, truncated to 1048576 [ 194.044006][T10394] Cannot find set identified by id 65534 to match [ 194.094231][T10374] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 194.407456][T10408] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 194.585744][T10417] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 194.606671][T10417] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 194.827703][T10430] __nla_validate_parse: 2 callbacks suppressed [ 194.827722][T10430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1272'. [ 194.845693][T10428] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1272'. [ 194.886736][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.895009][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.922372][T10427] tipc: Resetting bearer [ 194.971469][T10427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.984260][T10427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.047984][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1276'. [ 195.092086][ T9192] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.124860][ T9192] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 195.152595][ T9192] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 195.186179][ T9192] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.228416][ T9192] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 195.264362][ T9192] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 195.282587][ T9192] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.323739][ T9192] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 195.363183][ T9192] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 195.395511][ T9192] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.420522][ T9192] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 195.479866][ T9192] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 195.784879][T10460] lo speed is unknown, defaulting to 1000 [ 195.991419][ T9176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.001317][ T9176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.638037][T10482] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1290'. [ 196.739663][T10460] lo speed is unknown, defaulting to 1000 [ 196.825750][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1295'. [ 196.882824][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1295'. [ 197.004022][T10514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1295'. [ 197.018209][T10505] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 197.866088][T10553] netlink: 'syz.1.1307': attribute type 1 has an invalid length. [ 197.921570][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'. [ 197.921819][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1310'. [ 197.943496][T10556] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1308'. [ 197.955160][T10563] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.408606][T10543] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 198.769557][T10612] netlink: 'syz.0.1322': attribute type 14 has an invalid length. [ 198.813294][T10612] netlink: 'syz.0.1322': attribute type 13 has an invalid length. [ 199.158755][T10636] syzkaller0: entered promiscuous mode [ 199.208537][T10636] syzkaller0: entered allmulticast mode [ 199.287962][T10642] netlink: 'syz.3.1331': attribute type 10 has an invalid length. [ 199.314397][T10642] veth0_vlan: left promiscuous mode [ 199.325743][T10642] veth0_vlan: entered promiscuous mode [ 199.340320][T10642] team0: Device veth0_vlan failed to register rx_handler [ 199.613541][T10651] netlink: 'syz.4.1335': attribute type 21 has an invalid length. [ 199.693905][T10661] syz.4.1335: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 199.711313][T10661] CPU: 0 UID: 0 PID: 10661 Comm: syz.4.1335 Not tainted syzkaller #0 PREEMPT(full) [ 199.711346][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.711359][T10661] Call Trace: [ 199.711366][T10661] [ 199.711373][T10661] dump_stack_lvl+0xe8/0x150 [ 199.711407][T10661] warn_alloc+0x249/0x340 [ 199.711432][T10661] ? stack_trace_save+0xa9/0x100 [ 199.711454][T10661] ? __pfx_warn_alloc+0x10/0x10 [ 199.711481][T10661] ? kasan_save_track+0x4f/0x80 [ 199.711500][T10661] ? kasan_save_track+0x3e/0x80 [ 199.711519][T10661] ? __kasan_kmalloc+0x93/0xb0 [ 199.711539][T10661] ? __kmalloc_cache_noprof+0x31c/0x660 [ 199.711558][T10661] ? xskq_create+0x56/0x170 [ 199.711577][T10661] ? xsk_setsockopt+0x54c/0x990 [ 199.711603][T10661] ? do_sock_setsockopt+0x17c/0x1b0 [ 199.711626][T10661] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 199.711774][T10661] ? do_syscall_64+0x14d/0xf80 [ 199.711810][T10661] __vmalloc_node_range_noprof+0x132/0x1730 [ 199.711865][T10661] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 199.711892][T10661] ? __kasan_kmalloc+0x93/0xb0 [ 199.711934][T10661] vmalloc_user_noprof+0xad/0xe0 [ 199.711958][T10661] ? xskq_create+0xbf/0x170 [ 199.711978][T10661] xskq_create+0xbf/0x170 [ 199.712000][T10661] xsk_init_queue+0x8a/0xe0 [ 199.712023][T10661] xsk_setsockopt+0x54c/0x990 [ 199.712062][T10661] ? __pfx_xsk_setsockopt+0x10/0x10 [ 199.712098][T10661] ? __pfx_aa_sk_perm+0x10/0x10 [ 199.712135][T10661] ? aa_sock_opt_perm+0xff/0x1a0 [ 199.712170][T10661] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 199.712194][T10661] ? __pfx_xsk_setsockopt+0x10/0x10 [ 199.712221][T10661] do_sock_setsockopt+0x17c/0x1b0 [ 199.712246][T10661] __x64_sys_setsockopt+0x13d/0x1b0 [ 199.712302][T10661] do_syscall_64+0x14d/0xf80 [ 199.712326][T10661] ? trace_irq_disable+0x3b/0x150 [ 199.712354][T10661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.712373][T10661] ? clear_bhb_loop+0x40/0x90 [ 199.712398][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.712417][T10661] RIP: 0033:0x7f2f0779c799 [ 199.712437][T10661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.712455][T10661] RSP: 002b:00007f2f085a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 199.712478][T10661] RAX: ffffffffffffffda RBX: 00007f2f07a16090 RCX: 00007f2f0779c799 [ 199.712494][T10661] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 199.712505][T10661] RBP: 00007f2f07832c99 R08: 0000000000000004 R09: 0000000000000000 [ 199.712518][T10661] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.712530][T10661] R13: 00007f2f07a16128 R14: 00007f2f07a16090 R15: 00007ffd8087b688 [ 199.712561][T10661] [ 200.162533][T10661] Mem-Info: [ 200.168047][T10664] __nla_validate_parse: 3 callbacks suppressed [ 200.168066][T10664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1334'. [ 200.196057][T10661] active_anon:5852 inactive_anon:6 isolated_anon:0 [ 200.196057][T10661] active_file:2956 inactive_file:40341 isolated_file:0 [ 200.196057][T10661] unevictable:768 dirty:115 writeback:0 [ 200.196057][T10661] slab_reclaimable:11655 slab_unreclaimable:100462 [ 200.196057][T10661] mapped:30743 shmem:1362 pagetables:1322 [ 200.196057][T10661] sec_pagetables:0 bounce:0 [ 200.196057][T10661] kernel_misc_reclaimable:0 [ 200.196057][T10661] free:1328330 free_pcp:8669 free_cma:0 [ 200.278574][T10661] Node 0 active_anon:23508kB inactive_anon:24kB active_file:11824kB inactive_file:161164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123072kB dirty:460kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13664kB pagetables:5132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.368550][T10661] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.418860][T10661] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.460752][T10661] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 200.473174][T10661] Node 0 DMA32 free:1348632kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23508kB inactive_anon:24kB active_file:11824kB inactive_file:161164kB unevictable:1536kB writepending:460kB zspages:0kB present:3129332kB managed:2552480kB mlocked:0kB bounce:0kB free_pcp:34740kB local_pcp:20656kB free_cma:0kB [ 200.521158][T10661] lowmem_reserve[]: 0 0 0 0 0 [ 200.528221][T10661] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 200.590305][T10679] bond7: option fail_over_mac: invalid value (127) [ 200.603502][T10679] bond7 (unregistering): Released all slaves [ 200.621280][T10661] lowmem_reserve[]: 0 0 0 0 0 [ 200.656381][T10661] Node 1 Normal free:3948944kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.764245][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1339'. [ 200.802019][T10661] lowmem_reserve[]: 0 0 0 0 0 [ 200.817968][T10661] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 200.860820][T10661] Node 0 DMA32: 3120*4kB (UME) 2405*8kB (UM) 1263*16kB (UM) 1313*32kB (UM) 732*64kB (UME) 443*128kB (UME) 283*256kB (UM) 273*512kB (U) 203*1024kB (UE) 125*2048kB (UM) 116*4096kB (UM) = 1348728kB [ 200.924796][T10661] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 200.980819][T10661] Node 1 Normal: 0*4kB 2*8kB (UM) 8*16kB (UM) 12*32kB (UM) 10*64kB (UM) 6*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3948944kB [ 201.067525][T10661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.080476][T10661] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.092909][T10661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.132865][T10661] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.158718][T10661] 45420 total pagecache pages [ 201.165157][T10661] 0 pages in swap cache [ 201.170291][T10661] Free swap = 124996kB [ 201.178514][T10661] Total swap = 124996kB [ 201.188875][T10661] 2097051 pages RAM [ 201.198878][T10661] 0 pages HighMem/MovableOnly [ 201.205020][T10661] 427096 pages reserved [ 201.272201][T10661] 0 pages cma reserved [ 201.340780][T10711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1347'. [ 201.476663][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 201.602989][T10711] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.613730][T10711] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.809298][T10711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.828271][T10711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.948717][T10716] vlan3: entered allmulticast mode [ 202.068998][ T461] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.093856][ T461] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 202.128833][ T461] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 202.161084][ T461] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.187645][ T461] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 202.201541][ T461] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 202.215158][ T461] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.226734][ T461] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 202.240561][ T461] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 202.361152][ T461] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.401561][ T461] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 202.416601][ T461] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 202.458603][T10751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1353'. [ 202.567136][T10757] erspan1: entered promiscuous mode [ 202.578527][T10757] erspan1: entered allmulticast mode [ 202.613011][T10762] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20003 [ 202.800759][T10769] syzkaller0: entered promiscuous mode [ 202.818247][T10769] syzkaller0: entered allmulticast mode [ 202.877552][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 202.919589][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'. [ 202.997773][T10772] team0: Port device team_slave_0 removed [ 203.347663][T10801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1369'. [ 203.395659][T10801] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1369'. [ 203.496618][T10808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1371'. [ 203.753083][T10812] lo speed is unknown, defaulting to 1000 [ 203.993422][T10812] lo speed is unknown, defaulting to 1000 [ 204.351618][T10848] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 204.462539][T10850] netlink: 'syz.3.1377': attribute type 58 has an invalid length. [ 204.507498][T10844] lo speed is unknown, defaulting to 1000 [ 205.245488][T10877] netlink: 'syz.1.1388': attribute type 6 has an invalid length. [ 205.282050][T10877] __nla_validate_parse: 4 callbacks suppressed [ 205.282070][T10877] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1388'. [ 205.292207][T10880] netlink: 'syz.4.1387': attribute type 13 has an invalid length. [ 205.353611][T10842] lo speed is unknown, defaulting to 1000 [ 205.394666][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 205.474490][T10885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1389'. [ 205.548387][T10885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1389'. [ 205.738124][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'. [ 205.886748][T10902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1394'. [ 205.942718][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.952427][T10904] netlink: 'syz.0.1395': attribute type 2 has an invalid length. [ 205.999802][T10842] lo speed is unknown, defaulting to 1000 [ 206.082255][T10844] lo speed is unknown, defaulting to 1000 [ 206.092164][T10907] netlink: 'syz.2.1396': attribute type 10 has an invalid length. [ 206.118595][T10907] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1396'. [ 206.439471][T10919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1398'. [ 206.492216][T10921] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1396'. [ 206.721056][T10933] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1398'. [ 207.477366][T10952] lo speed is unknown, defaulting to 1000 [ 207.814127][T10977] Bluetooth: MGMT ver 1.23 [ 208.073573][T10989] netlink: 'syz.1.1412': attribute type 10 has an invalid length. [ 208.119232][T10989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.430476][T10952] lo speed is unknown, defaulting to 1000 [ 208.485600][T11005] syzkaller0: entered promiscuous mode [ 208.502959][T11005] syzkaller0: entered allmulticast mode [ 208.596383][T11009] batman_adv: batadv0: Adding interface: ipvlan2 [ 208.612408][T11009] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.649840][T11009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.663703][T11009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.678377][T11009] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 208.938883][T11018] bond0: (slave sit0): Error: Device type is different from other slaves [ 209.155749][T11018] netlink: zone id is out of range [ 210.477085][T11101] __nla_validate_parse: 11 callbacks suppressed [ 210.477106][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 210.583487][ T9176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.614678][ T9176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.649661][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'. [ 210.651765][ T9176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.701166][ T9176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.920794][T11124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1445'. [ 211.048572][T11124] bond6 (unregistering): Released all slaves [ 211.095028][T11133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1445'. [ 211.219546][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 211.448302][T11149] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1450'. [ 211.507621][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'. [ 211.594624][T11149] bond0 (unregistering): left promiscuous mode [ 211.601167][T11149] bond_slave_0: left promiscuous mode [ 211.638197][T11149] bond_slave_1: left promiscuous mode [ 211.677029][T11149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.752782][T11175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1452'. [ 211.786757][T11149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.843655][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1458'. [ 211.874736][T11149] bond0 (unregistering): Released all slaves [ 211.943794][T11159] bond7: entered allmulticast mode [ 211.949970][T11159] 8021q: adding VLAN 0 to HW filter on device bond7 [ 212.252616][T11200] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20003 [ 212.311079][T11201] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 212.488689][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1465'. [ 212.619049][T11211] lo speed is unknown, defaulting to 1000 [ 212.911189][T11240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.918851][T11240] IPv6: NLM_F_CREATE should be set when creating new route [ 212.923014][T11241] netlink: 'syz.4.1470': attribute type 1 has an invalid length. [ 212.932429][T11233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.942197][T11233] IPv6: NLM_F_CREATE should be set when creating new route [ 213.095462][T11241] bond2: entered promiscuous mode [ 213.155761][T11241] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.338132][T11246] bond2: (slave bridge6): making interface the new active one [ 213.422030][T11246] bridge6: entered promiscuous mode [ 213.444896][T11246] bond2: (slave bridge6): Enslaving as an active interface with an up link [ 213.661438][T11211] lo speed is unknown, defaulting to 1000 [ 213.800047][T11284] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 216.774619][T11298] __nla_validate_parse: 3 callbacks suppressed [ 216.774641][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 216.843977][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1486'. [ 216.889966][T11303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.898144][T11303] IPv6: NLM_F_CREATE should be set when creating new route [ 216.954293][T11304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.962031][T11304] IPv6: NLM_F_CREATE should be set when creating new route [ 216.974979][T11306] netlink: 'syz.3.1487': attribute type 11 has an invalid length. [ 217.071975][T11309] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1488'. [ 217.112032][T11310] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1488'. [ 217.367006][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1492'. [ 217.538468][ T29] audit: type=1804 audit(1774461248.355:7): pid=11335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1496" name="/newroot/338/memory.events" dev="tmpfs" ino=1737 res=1 errno=0 [ 217.616598][T11336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.631166][T11336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.641983][ T29] audit: type=1800 audit(1774461248.355:8): pid=11335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1496" name="memory.events" dev="tmpfs" ino=1737 res=0 errno=0 [ 217.669709][ T29] audit: type=1804 audit(1774461248.355:9): pid=11335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1496" name="/newroot/338/memory.events" dev="tmpfs" ino=1737 res=1 errno=0 [ 217.675318][T11336] tipc: Disabling bearer [ 217.732566][T11332] lo speed is unknown, defaulting to 1000 [ 217.745613][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'. [ 217.854730][T11350] netem: change failed [ 217.978780][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1501'. [ 218.024232][ T29] audit: type=1107 audit(1774461248.835:10): pid=11354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 218.065369][T11361] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1504'. [ 218.115183][T11355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1503'. [ 218.148074][T11355] bond0: entered promiscuous mode [ 218.163640][T11355] bond_slave_0: entered promiscuous mode [ 218.202337][T11355] bond_slave_1: entered promiscuous mode [ 218.233029][T11355] dummy0: entered promiscuous mode [ 218.249416][T11355] bond0: left promiscuous mode [ 218.262550][T11355] bond_slave_0: left promiscuous mode [ 218.272516][T11355] bond_slave_1: left promiscuous mode [ 218.285174][T11355] dummy0: left promiscuous mode [ 218.379548][T11370] tipc: Enabled bearer , priority 0 [ 218.398334][T11370] syzkaller0: entered promiscuous mode [ 218.406407][T11370] syzkaller0: entered allmulticast mode [ 218.479912][T11370] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1507'. [ 218.496007][T11375] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 218.533616][T11332] lo speed is unknown, defaulting to 1000 [ 218.541580][T11370] tipc: Resetting bearer [ 218.609983][T11369] tipc: Resetting bearer [ 218.674780][T11369] tipc: Disabling bearer [ 218.897527][T11387] FAULT_INJECTION: forcing a failure. [ 218.897527][T11387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.931302][T11387] CPU: 0 UID: 0 PID: 11387 Comm: syz.4.1513 Not tainted syzkaller #0 PREEMPT(full) [ 218.931329][T11387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.931342][T11387] Call Trace: [ 218.931348][T11387] [ 218.931358][T11387] dump_stack_lvl+0xe8/0x150 [ 218.931389][T11387] should_fail_ex+0x412/0x560 [ 218.931422][T11387] _copy_from_user+0x2d/0xb0 [ 218.931443][T11387] ___sys_sendmsg+0x1c6/0x360 [ 218.931472][T11387] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.931501][T11387] ? kstrtouint+0x6e/0xe0 [ 218.931551][T11387] ? __fget_files+0x2a/0x420 [ 218.931578][T11387] ? __fget_files+0x3a0/0x420 [ 218.931615][T11387] __sys_sendmmsg+0x27c/0x4e0 [ 218.931644][T11387] ? __pfx___sys_sendmmsg+0x10/0x10 [ 218.931666][T11387] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 218.931709][T11387] ? ksys_write+0x242/0x270 [ 218.931731][T11387] ? __pfx_ksys_write+0x10/0x10 [ 218.931766][T11387] __x64_sys_sendmmsg+0xa0/0xc0 [ 218.931791][T11387] do_syscall_64+0x14d/0xf80 [ 218.931813][T11387] ? trace_irq_disable+0x3b/0x150 [ 218.931839][T11387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.931858][T11387] ? clear_bhb_loop+0x40/0x90 [ 218.931881][T11387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.931899][T11387] RIP: 0033:0x7f2f0779c799 [ 218.931916][T11387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.931930][T11387] RSP: 002b:00007f2f085c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 218.931950][T11387] RAX: ffffffffffffffda RBX: 00007f2f07a15fa0 RCX: 00007f2f0779c799 [ 218.931962][T11387] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000012 [ 218.931974][T11387] RBP: 00007f2f085c4090 R08: 0000000000000000 R09: 0000000000000000 [ 218.931986][T11387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.931996][T11387] R13: 00007f2f07a16038 R14: 00007f2f07a15fa0 R15: 00007ffd8087b688 [ 218.932024][T11387] [ 219.571293][T11411] tipc: Enabled bearer , priority 0 [ 219.695361][T11407] tipc: Disabling bearer [ 219.894339][T11423] netlink: 'syz.0.1526': attribute type 5 has an invalid length. [ 219.937584][T11425] bond0: entered promiscuous mode [ 219.951968][T11425] bond_slave_0: entered promiscuous mode [ 219.958242][T11425] bond_slave_1: entered promiscuous mode [ 219.967701][T11425] gretap0: entered promiscuous mode [ 219.974828][T11425] hsr0: entered promiscuous mode [ 221.195424][T11476] siw: device registration error -23 [ 221.468138][T11495] lo speed is unknown, defaulting to 1000 [ 221.767302][T11519] bridge0: port 1(gretap0) entered blocking state [ 221.796026][T11519] bridge0: port 1(gretap0) entered disabled state [ 221.803552][T11519] gretap0: entered allmulticast mode [ 221.825687][T11519] gretap0: entered promiscuous mode [ 221.965228][T11495] lo speed is unknown, defaulting to 1000 [ 222.157841][T11536] syzkaller0: entered promiscuous mode [ 222.165272][T11536] syzkaller0: entered allmulticast mode [ 222.183256][T11539] __nla_validate_parse: 16 callbacks suppressed [ 222.183278][T11539] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1559'. [ 222.489612][T11551] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1563'. [ 222.585148][T11554] netlink: 'syz.4.1564': attribute type 39 has an invalid length. [ 222.734331][T11563] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1567'. [ 223.044680][T11575] xt_l2tp: unknown flags: 51 [ 223.077998][T11575] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 223.087417][T11583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1572'. [ 223.111988][T11583] netlink: 'syz.2.1572': attribute type 8 has an invalid length. [ 223.120150][T11583] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1572'. [ 223.173822][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1571'. [ 223.222195][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 223.233625][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 223.247704][T11583] netlink: 'syz.2.1572': attribute type 14 has an invalid length. [ 223.273392][T11583] netlink: 'syz.2.1572': attribute type 13 has an invalid length. [ 223.417281][T11593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.610752][T11607] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1579'. [ 223.611208][T11605] x_tables: ip_tables: ah match: only valid for protocol 51 [ 223.647262][ T29] audit: type=1804 audit(1774461254.465:11): pid=11607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1579" name="/newroot/324/cgroup.controllers" dev="tmpfs" ino=1664 res=1 errno=0 [ 223.715858][ T29] audit: type=1800 audit(1774461254.495:12): pid=11607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1579" name="cgroup.controllers" dev="tmpfs" ino=1664 res=0 errno=0 [ 223.789769][ T29] audit: type=1800 audit(1774461254.495:13): pid=11607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1579" name="cgroup.controllers" dev="tmpfs" ino=1664 res=0 errno=0 [ 223.919694][T11622] netlink: 'syz.4.1586': attribute type 1 has an invalid length. [ 224.750799][T11662] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 224.826627][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1594'. [ 227.584484][T11737] pim6reg1: entered promiscuous mode [ 227.609063][T11737] pim6reg1: entered allmulticast mode [ 228.129537][T11756] __nla_validate_parse: 4 callbacks suppressed [ 228.129561][T11756] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1617'. [ 228.154026][T11756] netlink: 'syz.1.1617': attribute type 11 has an invalid length. [ 228.162751][T11756] netlink: 'syz.1.1617': attribute type 23 has an invalid length. [ 228.177687][T11756] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1617'. [ 228.195519][T11758] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1618'. [ 228.255116][T11760] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 228.265510][T11760] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1617'. [ 228.477595][T11766] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1620'. [ 228.625354][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1623'. [ 228.647400][T11772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.655203][T11772] IPv6: NLM_F_CREATE should be set when creating new route [ 228.694176][T11772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.701747][T11772] IPv6: NLM_F_CREATE should be set when creating new route [ 228.822125][T11777] lo speed is unknown, defaulting to 1000 [ 228.839311][T11779] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 229.124523][T11798] syzkaller0: entered promiscuous mode [ 229.130401][T11798] syzkaller0: entered allmulticast mode [ 229.145577][T11798] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1631'. [ 229.166876][T11799] syzkaller1: entered promiscuous mode [ 229.175619][T11799] syzkaller1: entered allmulticast mode [ 229.300764][ T29] audit: type=1804 audit(1774461260.115:14): pid=11801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1633" name="/newroot/292/memory.events" dev="tmpfs" ino=1514 res=1 errno=0 [ 229.359337][ T29] audit: type=1800 audit(1774461260.115:15): pid=11801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1633" name="memory.events" dev="tmpfs" ino=1514 res=0 errno=0 [ 229.405991][T11777] lo speed is unknown, defaulting to 1000 [ 229.515136][T11802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1625'. [ 229.710220][T11818] tipc: Enabled bearer , priority 0 [ 230.014104][T11833] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1641'. [ 230.014276][T11814] tipc: Resetting bearer [ 230.178208][T11834] netlink: 'syz.4.1641': attribute type 11 has an invalid length. [ 230.199345][T11834] netlink: 'syz.4.1641': attribute type 23 has an invalid length. [ 230.255060][T11834] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1641'. [ 230.357673][T11847] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 230.691253][T11857] veth7: entered promiscuous mode [ 230.822248][ T1210] tipc: Node number set to 3145021250 [ 231.075310][T11881] xt_hashlimit: max too large, truncated to 1048576 [ 231.102631][T11881] xt_hashlimit: overflow, try lower: 18446744073709551608/8 [ 231.185619][T11883] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.221088][T11890] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 231.453844][T11883] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.627042][T11883] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.645494][T11911] netlink: 'syz.3.1660': attribute type 3 has an invalid length. [ 231.840883][T11883] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.043936][ T9176] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.059341][T11928] gretap1: entered promiscuous mode [ 232.065907][T11928] batman_adv: batadv0: Adding interface: gretap1 [ 232.073403][T11928] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 232.097529][T11928] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 232.133314][ T9192] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.220987][ T461] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.231087][T11926] netlink: 'syz.3.1664': attribute type 11 has an invalid length. [ 232.240451][T11926] netlink: 'syz.3.1664': attribute type 23 has an invalid length. [ 232.257969][ T461] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.334153][T11941] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 232.402335][T11947] netlink: 'syz.4.1669': attribute type 10 has an invalid length. [ 232.436222][T11947] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 232.516844][T11950] veth9: entered promiscuous mode [ 232.600274][T11959] netlink: 'syz.1.1673': attribute type 4 has an invalid length. [ 232.680937][T11964] syzkaller0: entered promiscuous mode [ 232.687104][T11964] syzkaller0: entered allmulticast mode [ 232.938443][T11985] netlink: 'syz.1.1681': attribute type 1 has an invalid length. [ 233.072813][T11987] netlink: 'syz.0.1682': attribute type 1 has an invalid length. [ 233.072887][T11989] netlink: 'syz.1.1683': attribute type 12 has an invalid length. [ 233.101910][T11989] netlink: 'syz.1.1683': attribute type 12 has an invalid length. [ 233.135474][T11987] bond7: entered promiscuous mode [ 233.142585][T11987] 8021q: adding VLAN 0 to HW filter on device bond7 [ 233.150724][ T9195] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.160159][ T9195] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.198369][ T9195] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.229865][T11987] 8021q: adding VLAN 0 to HW filter on device bond7 [ 233.238091][T11987] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 233.250394][T11987] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 233.276960][T11987] bond7: (slave vcan1): making interface the new active one [ 233.285505][T11987] vcan1: entered promiscuous mode [ 233.294439][T11987] bond7: (slave vcan1): Enslaving as an active interface with an up link [ 233.321778][ T9195] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.347633][T12001] tap0: tun_chr_ioctl cmd 1074025692 [ 233.725544][T12015] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 233.743281][T12015] bond9 (unregistering): Released all slaves [ 233.812661][T12016] lo speed is unknown, defaulting to 1000 [ 233.879409][T12044] __nla_validate_parse: 14 callbacks suppressed [ 233.879429][T12044] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1698'. [ 234.037897][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1700'. [ 234.125217][T12053] syzkaller0: entered promiscuous mode [ 234.131082][T12053] syzkaller0: entered allmulticast mode [ 234.141157][T12055] netlink: set zone limit has 4 unknown bytes [ 234.200683][T12048] bond0: (slave vcan0): refused to change device type [ 234.246507][T12016] lo speed is unknown, defaulting to 1000 [ 234.404049][T12050] netlink: 'syz.4.1699': attribute type 1 has an invalid length. [ 235.055719][T12097] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1715'. [ 235.065586][T12097] netlink: 'syz.1.1715': attribute type 1 has an invalid length. [ 235.081775][T12097] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1715'. [ 235.165426][T12100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1716'. [ 235.498940][T12115] netlink: 'syz.0.1719': attribute type 61 has an invalid length. [ 235.570634][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1719'. [ 235.931883][T12138] netlink: 'syz.4.1727': attribute type 4 has an invalid length. [ 235.946496][T12139] macsec1: entered promiscuous mode [ 235.952350][T12139] bridge0: entered promiscuous mode [ 236.089002][T12145] IPVS: Unknown mcast interface: ipvlan1 [ 236.155510][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1728'. [ 236.169831][T12147] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 236.202049][T12145] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1727'. [ 236.324932][T12149] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 236.365560][T12149] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1729'. [ 236.527346][T12162] netlink: 'syz.2.1731': attribute type 1 has an invalid length. [ 236.588679][T12162] bond9: entered promiscuous mode [ 236.590975][T12168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1731'. [ 236.595113][T12162] 8021q: adding VLAN 0 to HW filter on device bond9 [ 236.814691][T12182] netlink: 'syz.0.1734': attribute type 10 has an invalid length. [ 236.823581][T12168] bond9: entered allmulticast mode [ 236.845530][T12182] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 236.890263][T12175] netlink: 'syz.0.1734': attribute type 13 has an invalid length. [ 237.120687][T12193] batadv_slave_0: Caught tx_queue_len zero misconfig [ 237.348966][T12206] lo speed is unknown, defaulting to 1000 [ 237.360957][T12215] netlink: 'syz.4.1745': attribute type 10 has an invalid length. [ 237.538071][T12216] bond3: entered promiscuous mode [ 237.562931][T12216] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.571164][T12215] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.602451][T12215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.655031][T12215] hsr0: entered promiscuous mode [ 237.680157][T12215] bridge0: port 2(hsr0) entered blocking state [ 237.708524][T12215] bridge0: port 2(hsr0) entered disabled state [ 237.737127][T12215] hsr0: entered allmulticast mode [ 237.751787][T12215] hsr_slave_0: entered allmulticast mode [ 237.761755][T12215] hsr_slave_1: entered allmulticast mode [ 237.940865][T12217] lo speed is unknown, defaulting to 1000 [ 237.968558][T12206] lo speed is unknown, defaulting to 1000 [ 238.162198][T12194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.298527][T12248] netlink: 'syz.1.1749': attribute type 1 has an invalid length. [ 238.407757][T12248] bond4: entered promiscuous mode [ 238.454587][T12248] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.783811][T12217] lo speed is unknown, defaulting to 1000 [ 238.798152][T12272] team_slave_1: Caught tx_queue_len zero misconfig [ 239.065291][T12288] netlink: 'syz.4.1752': attribute type 21 has an invalid length. [ 239.112039][T12288] __nla_validate_parse: 6 callbacks suppressed [ 239.112060][T12288] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1752'. [ 239.173317][T12293] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1754'. [ 239.276565][T12289] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1754'. [ 239.372273][T12279] tipc: Enabling of bearer rejected, failed to enable media [ 239.647136][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'. [ 240.528839][T12328] validate_nla: 1 callbacks suppressed [ 240.528921][T12328] netlink: 'syz.4.1761': attribute type 1 has an invalid length. [ 240.578407][T12328] bond3: entered promiscuous mode [ 240.605570][T12328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.686582][T12332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.113670][T12324] ip6tnl5: entered allmulticast mode [ 241.173646][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 241.299666][T12355] netlink: 'syz.0.1768': attribute type 1 has an invalid length. [ 241.398194][T12355] 8021q: adding VLAN 0 to HW filter on device bond8 [ 241.470926][T12356] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 241.482927][T12356] bond8: (slave batadv1): making interface the new active one [ 241.494182][T12356] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 241.656302][T12368] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1771'. [ 241.838993][T12374] netlink: 'syz.2.1773': attribute type 1 has an invalid length. [ 241.915859][T12374] bond10: entered promiscuous mode [ 241.930337][T12374] 8021q: adding VLAN 0 to HW filter on device bond10 [ 242.332810][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1775'. [ 242.343173][T12392] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 242.359336][T12392] FAULT_INJECTION: forcing a failure. [ 242.359336][T12392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.375156][T12392] CPU: 0 UID: 0 PID: 12392 Comm: syz.2.1775 Not tainted syzkaller #0 PREEMPT(full) [ 242.375189][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.375213][T12392] Call Trace: [ 242.375220][T12392] [ 242.375228][T12392] dump_stack_lvl+0xe8/0x150 [ 242.375262][T12392] should_fail_ex+0x412/0x560 [ 242.375294][T12392] _copy_from_iter+0x1d3/0x1670 [ 242.375325][T12392] ? rcu_is_watching+0x15/0xb0 [ 242.375357][T12392] ? __pfx__copy_from_iter+0x10/0x10 [ 242.375392][T12392] ? __alloc_skb+0x4e5/0x7d0 [ 242.375412][T12392] ? skb_put+0x11b/0x210 [ 242.375434][T12392] pfkey_sendmsg+0x265/0x1120 [ 242.375473][T12392] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 242.375500][T12392] ? aa_sk_perm+0x6d5/0x900 [ 242.375535][T12392] ? __pfx_aa_sk_perm+0x10/0x10 [ 242.375559][T12392] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 242.375593][T12392] ? aa_sock_msg_perm+0xf1/0x1b0 [ 242.375622][T12392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 242.375649][T12392] ____sys_sendmsg+0x972/0x9f0 [ 242.375680][T12392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.375712][T12392] ? import_iovec+0x73/0xa0 [ 242.375736][T12392] ___sys_sendmsg+0x2a5/0x360 [ 242.375765][T12392] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.375821][T12392] ? __fget_files+0x2a/0x420 [ 242.375844][T12392] ? __fget_files+0x3a0/0x420 [ 242.375878][T12392] __x64_sys_sendmsg+0x1bd/0x2a0 [ 242.375903][T12392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.375936][T12392] ? __pfx_ksys_write+0x10/0x10 [ 242.375966][T12392] do_syscall_64+0x14d/0xf80 [ 242.375988][T12392] ? trace_irq_disable+0x3b/0x150 [ 242.376015][T12392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.376034][T12392] ? clear_bhb_loop+0x40/0x90 [ 242.376056][T12392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.376074][T12392] RIP: 0033:0x7f503059c799 [ 242.376094][T12392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.376111][T12392] RSP: 002b:00007f5031370028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.376138][T12392] RAX: ffffffffffffffda RBX: 00007f5030815fa0 RCX: 00007f503059c799 [ 242.376152][T12392] RDX: 0000000020040800 RSI: 0000200000000080 RDI: 000000000000000d [ 242.376164][T12392] RBP: 00007f5031370090 R08: 0000000000000000 R09: 0000000000000000 [ 242.376182][T12392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.376193][T12392] R13: 00007f5030816038 R14: 00007f5030815fa0 R15: 00007ffc9e85e088 [ 242.376222][T12392] [ 242.783031][T12399] bond4: option resend_igmp: invalid value (2880) [ 242.789696][T12399] bond4: option resend_igmp: allowed values 0 - 255 [ 242.836140][T12399] bond4 (unregistering): Released all slaves [ 242.980817][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1776'. [ 243.015184][T12416] netlink: 'syz.2.1785': attribute type 1 has an invalid length. [ 243.162003][T12416] bond11: entered promiscuous mode [ 243.172530][T12416] 8021q: adding VLAN 0 to HW filter on device bond11 [ 243.288327][T12426] lo speed is unknown, defaulting to 1000 [ 243.299291][T12431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1787'. [ 243.513189][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1787'. [ 243.754520][T12447] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 244.188458][T12429] lo speed is unknown, defaulting to 1000 [ 244.201646][T12426] lo speed is unknown, defaulting to 1000 [ 244.471999][T12470] geneve1: Caught tx_queue_len zero misconfig [ 244.633436][T12479] __nla_validate_parse: 2 callbacks suppressed [ 244.633453][T12479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1803'. [ 244.662991][T12429] lo speed is unknown, defaulting to 1000 [ 245.938855][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1813'. [ 245.970191][T12518] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 246.094826][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 246.164442][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1816'. [ 246.192913][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1817'. [ 246.202979][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1816'. [ 246.223029][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1816'. [ 246.232889][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1817'. [ 246.517321][T12536] syzkaller1: entered promiscuous mode [ 246.532451][T12536] syzkaller1: entered allmulticast mode [ 246.838819][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1827'. [ 246.871532][T12551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1823'. [ 246.915382][T12551] netlink: 'syz.0.1823': attribute type 7 has an invalid length. [ 246.949451][T12551] netlink: 'syz.0.1823': attribute type 8 has an invalid length. [ 246.955241][T12562] lo speed is unknown, defaulting to 1000 [ 247.006729][T12551] team0: entered promiscuous mode [ 247.021759][T12551] team_slave_0: entered promiscuous mode [ 247.038233][T12551] team_slave_1: entered promiscuous mode [ 247.066791][T12551] erspan0: entered promiscuous mode [ 247.087293][T12551] debugfs: 'hsr1' already exists in 'hsr' [ 247.109471][T12551] Cannot create hsr debugfs directory [ 247.132410][T12572] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 247.146733][T12572] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 247.154486][T12551] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 247.190012][T12551] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 247.241184][T12551] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 247.277510][T12567] sit0: entered allmulticast mode [ 247.315198][T12587] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 247.318429][T12574] sit0: left allmulticast mode [ 247.388220][T12575] syzkaller1: entered promiscuous mode [ 247.397128][T12575] syzkaller1: entered allmulticast mode [ 247.400483][T12594] FAULT_INJECTION: forcing a failure. [ 247.400483][T12594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.427538][T12594] CPU: 0 UID: 0 PID: 12594 Comm: syz.1.1832 Not tainted syzkaller #0 PREEMPT(full) [ 247.427564][T12594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 247.427575][T12594] Call Trace: [ 247.427581][T12594] [ 247.427590][T12594] dump_stack_lvl+0xe8/0x150 [ 247.427619][T12594] should_fail_ex+0x412/0x560 [ 247.427648][T12594] _copy_to_user+0x31/0xb0 [ 247.427673][T12594] simple_read_from_buffer+0xe1/0x170 [ 247.427703][T12594] proc_fail_nth_read+0x1bb/0x230 [ 247.427734][T12594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.427764][T12594] ? rw_verify_area+0x2a6/0x4d0 [ 247.427792][T12594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.427820][T12594] vfs_read+0x20c/0xa70 [ 247.427839][T12594] ? fdget_pos+0x246/0x320 [ 247.427861][T12594] ? __pfx___mutex_lock+0x10/0x10 [ 247.427886][T12594] ? __pfx_vfs_read+0x10/0x10 [ 247.427908][T12594] ? __fget_files+0x2a/0x420 [ 247.427939][T12594] ? __fget_files+0x3a0/0x420 [ 247.427966][T12594] ? __fget_files+0x2a/0x420 [ 247.428000][T12594] ksys_read+0x150/0x270 [ 247.428027][T12594] ? __pfx_ksys_read+0x10/0x10 [ 247.428058][T12594] do_syscall_64+0x14d/0xf80 [ 247.428080][T12594] ? trace_irq_disable+0x3b/0x150 [ 247.428106][T12594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.428126][T12594] ? clear_bhb_loop+0x40/0x90 [ 247.428150][T12594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.428168][T12594] RIP: 0033:0x7fe69f55cfce [ 247.428187][T12594] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 247.428203][T12594] RSP: 002b:00007fe6a0428fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.428223][T12594] RAX: ffffffffffffffda RBX: 00007fe6a04296c0 RCX: 00007fe69f55cfce [ 247.428236][T12594] RDX: 000000000000000f RSI: 00007fe6a04290a0 RDI: 000000000000000f [ 247.428248][T12594] RBP: 00007fe6a0429090 R08: 0000000000000000 R09: 0000000000000000 [ 247.428259][T12594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.428270][T12594] R13: 00007fe69f816128 R14: 00007fe69f816090 R15: 00007ffe532fd9f8 [ 247.428302][T12594] [ 247.818082][T12598] lo: Caught tx_queue_len zero misconfig [ 248.055919][T12577] lo speed is unknown, defaulting to 1000 [ 248.057974][T12562] lo speed is unknown, defaulting to 1000 [ 248.173525][T12604] syzkaller0: entered promiscuous mode [ 248.179653][T12604] syzkaller0: entered allmulticast mode [ 248.293422][T12615] FAULT_INJECTION: forcing a failure. [ 248.293422][T12615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.315293][T12615] CPU: 1 UID: 0 PID: 12615 Comm: syz.0.1839 Not tainted syzkaller #0 PREEMPT(full) [ 248.315322][T12615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.315334][T12615] Call Trace: [ 248.315341][T12615] [ 248.315349][T12615] dump_stack_lvl+0xe8/0x150 [ 248.315381][T12615] should_fail_ex+0x412/0x560 [ 248.315413][T12615] _copy_to_user+0x31/0xb0 [ 248.315437][T12615] simple_read_from_buffer+0xe1/0x170 [ 248.315470][T12615] proc_fail_nth_read+0x1bb/0x230 [ 248.315500][T12615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.315530][T12615] ? rw_verify_area+0x2a6/0x4d0 [ 248.315550][T12615] ? tun_chr_write_iter+0x18a/0x200 [ 248.315569][T12615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.315597][T12615] vfs_read+0x20c/0xa70 [ 248.315616][T12615] ? fdget_pos+0x246/0x320 [ 248.315639][T12615] ? __pfx___mutex_lock+0x10/0x10 [ 248.315663][T12615] ? __pfx_vfs_read+0x10/0x10 [ 248.315685][T12615] ? __fget_files+0x2a/0x420 [ 248.315724][T12615] ? __fget_files+0x3a0/0x420 [ 248.315750][T12615] ? __fget_files+0x2a/0x420 [ 248.315784][T12615] ksys_read+0x150/0x270 [ 248.315808][T12615] ? __pfx_ksys_read+0x10/0x10 [ 248.315839][T12615] do_syscall_64+0x14d/0xf80 [ 248.315861][T12615] ? trace_irq_disable+0x3b/0x150 [ 248.315887][T12615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.315906][T12615] ? clear_bhb_loop+0x40/0x90 [ 248.315929][T12615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.315948][T12615] RIP: 0033:0x7f16e1d5cfce [ 248.315967][T12615] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 248.315983][T12615] RSP: 002b:00007f16e2d15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.316003][T12615] RAX: ffffffffffffffda RBX: 00007f16e2d166c0 RCX: 00007f16e1d5cfce [ 248.316016][T12615] RDX: 000000000000000f RSI: 00007f16e2d160a0 RDI: 0000000000000005 [ 248.316028][T12615] RBP: 00007f16e2d16090 R08: 0000000000000000 R09: 0000000000000000 [ 248.316039][T12615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.316050][T12615] R13: 00007f16e2016038 R14: 00007f16e2015fa0 R15: 00007ffcda0aa3d8 [ 248.316081][T12615] [ 250.184052][T12601] lo speed is unknown, defaulting to 1000 [ 250.255127][T12577] lo speed is unknown, defaulting to 1000 [ 250.674954][T12601] lo speed is unknown, defaulting to 1000 [ 250.831127][T12635] netlink: 'syz.2.1845': attribute type 3 has an invalid length. [ 250.847915][T12635] __nla_validate_parse: 4 callbacks suppressed [ 250.847932][T12635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1845'. [ 251.080689][T12641] netlink: 'syz.0.1846': attribute type 13 has an invalid length. [ 251.090560][T12641] netlink: 'syz.0.1846': attribute type 17 has an invalid length. [ 251.142400][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1846'. [ 251.163937][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1846'. [ 251.322369][T12648] netlink: 'syz.2.1848': attribute type 1 has an invalid length. [ 251.344152][T12641] syz_tun: left promiscuous mode [ 251.367782][T12641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.379243][T12641] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.394847][T12641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.465286][T12649] gretap3: entered allmulticast mode [ 251.494935][T12649] bond12: (slave gretap3): making interface the new active one [ 251.505055][T12649] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 251.907893][T12675] bridge7: entered allmulticast mode [ 252.030794][T12683] syzkaller1: entered promiscuous mode [ 252.048037][T12683] syzkaller1: entered allmulticast mode [ 252.221164][T12695] netlink: 10052 bytes leftover after parsing attributes in process `syz.3.1863'. [ 252.252413][T12698] netlink: 'syz.2.1864': attribute type 1 has an invalid length. [ 252.283961][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1863'. [ 252.393322][T12695] team1: entered promiscuous mode [ 252.412593][T12695] team1: entered allmulticast mode [ 252.428006][T12695] 8021q: adding VLAN 0 to HW filter on device team1 [ 252.447222][T12706] netlink: 'syz.2.1867': attribute type 10 has an invalid length. [ 252.467664][T12706] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1867'. [ 252.495281][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1866'. [ 252.519084][T12712] netlink: 'syz.0.1868': attribute type 4 has an invalid length. [ 252.550820][T12712] netlink: 'syz.0.1868': attribute type 4 has an invalid length. [ 252.594488][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 252.730385][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 252.886272][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1872'. [ 253.048504][T12727] tipc: Resetting bearer [ 253.151354][T12734] team0 (unregistering): left promiscuous mode [ 253.182582][T12734] team_slave_0: left promiscuous mode [ 253.190060][T12734] team_slave_1: left promiscuous mode [ 253.209833][T12734] team0 (unregistering): Port device team_slave_0 removed [ 253.234322][T12734] team0 (unregistering): Port device team_slave_1 removed [ 253.290139][ T461] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.319939][ T461] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.374839][ T461] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.397815][ T461] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.449188][T12735] lo speed is unknown, defaulting to 1000 [ 253.634148][T12764] netlink: 'syz.2.1879': attribute type 1 has an invalid length. [ 253.688159][T12759] syzkaller0: entered promiscuous mode [ 253.694310][T12766] netlink: 'syz.1.1877': attribute type 1 has an invalid length. [ 253.712749][T12759] syzkaller0: entered allmulticast mode [ 253.774259][T12766] bond5: entered promiscuous mode [ 253.780061][T12766] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.814456][T12769] netlink: 'syz.2.1880': attribute type 18 has an invalid length. [ 255.836585][T12735] lo speed is unknown, defaulting to 1000 [ 256.056907][T12822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.087623][T12822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.194219][T12833] netlink: 'syz.4.1891': attribute type 1 has an invalid length. [ 256.269544][T12840] __nla_validate_parse: 4 callbacks suppressed [ 256.269567][T12840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1893'. [ 256.337161][T12833] bond4: entered promiscuous mode [ 256.356433][T12833] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.609390][T12856] netlink: 'syz.4.1895': attribute type 1 has an invalid length. [ 256.640318][T12856] netlink: 'syz.4.1895': attribute type 4 has an invalid length. [ 256.658427][T12853] xt_TCPMSS: Only works on TCP SYN packets [ 256.672746][T12847] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1895'. [ 256.711859][T12856] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1895'. [ 256.816990][T12854] lo speed is unknown, defaulting to 1000 [ 257.039056][T12871] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1903'. [ 257.158908][T12877] tc_dump_action: action bad kind [ 257.178479][T12854] lo speed is unknown, defaulting to 1000 [ 257.275555][T12883] bond10: entered promiscuous mode [ 257.303559][T12883] 8021q: adding VLAN 0 to HW filter on device bond10 [ 257.557301][T12904] netlink: 5828 bytes leftover after parsing attributes in process `syz.2.1909'. [ 257.586453][T12908] atomic_op ffff88807d529998 conn xmit_atomic 0000000000000000 [ 257.602112][T12909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1913'. [ 257.613727][T12909] Bluetooth: MGMT ver 1.23 [ 257.823003][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1916'. [ 258.210118][T12924] lo speed is unknown, defaulting to 1000 [ 258.495729][T12935] validate_nla: 4 callbacks suppressed [ 258.495749][T12935] netlink: 'syz.3.1920': attribute type 1 has an invalid length. [ 258.544086][T12941] IPVS: length: 100 != 8 [ 258.593923][T12935] bond7: entered promiscuous mode [ 258.612490][T12935] 8021q: adding VLAN 0 to HW filter on device bond7 [ 258.649395][T12939] veth1: Caught tx_queue_len zero misconfig [ 258.697783][T12924] lo speed is unknown, defaulting to 1000 [ 258.921802][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1928'. [ 258.942276][T12961] netlink: 'syz.4.1929': attribute type 2 has an invalid length. [ 258.942276][T12960] netlink: 'syz.4.1929': attribute type 2 has an invalid length. [ 258.942299][T12961] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1929'. [ 258.950649][T12960] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1929'. [ 258.980585][T12957] netlink: 'syz.2.1928': attribute type 29 has an invalid length. [ 259.328234][T12977] tunl0: Caught tx_queue_len zero misconfig [ 259.407022][T12988] netlink: 'syz.4.1936': attribute type 1 has an invalid length. [ 259.480859][T12988] bond5: entered promiscuous mode [ 259.501525][T12988] 8021q: adding VLAN 0 to HW filter on device bond5 [ 259.821369][T13015] sctp: [Deprecated]: syz.3.1944 (pid 13015) Use of int in max_burst socket option deprecated. [ 259.821369][T13015] Use struct sctp_assoc_value instead [ 260.014805][T13026] netlink: 'syz.1.1951': attribute type 1 has an invalid length. [ 260.066773][T13026] bond6: entered promiscuous mode [ 260.074664][T13026] 8021q: adding VLAN 0 to HW filter on device bond6 [ 260.409106][T13056] vlan2: left promiscuous mode [ 260.414723][T13056] bridge0: left promiscuous mode [ 260.421337][T13056] macsec1: left promiscuous mode [ 260.428139][T13056] macsec1: left allmulticast mode [ 260.436924][T13056] bond3: left allmulticast mode [ 260.443281][T13056] bond7: left allmulticast mode [ 260.450275][T13056] hsr0: left promiscuous mode [ 260.464591][T13056] bond9: left promiscuous mode [ 260.469633][T13056] bond9: left allmulticast mode [ 260.490624][T13056] bond10: left promiscuous mode [ 260.501545][T13056] bond11: left promiscuous mode [ 260.523466][T13056] gretap3: left allmulticast mode [ 261.063948][T13086] bond11: option ad_user_port_key: invalid value (65535) [ 261.071388][T13086] bond11: option ad_user_port_key: allowed values 0 - 1023 [ 261.093329][T13086] bond11 (unregistering): Released all slaves [ 261.482426][T13115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.505501][T13115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.680088][T13131] __nla_validate_parse: 8 callbacks suppressed [ 261.680110][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'. [ 261.757351][T13136] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1980'. [ 261.767237][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1980'. [ 261.780135][T13128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1982'. [ 261.927020][T13139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1982'. [ 261.963329][T13147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.967371][T13147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.011205][T13144] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1985'. [ 262.031640][T13144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1985'. [ 262.044330][T13147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.054401][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 262.066161][T13147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.089382][T13147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.116496][T13147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.162372][T13147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.180759][T13147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.194601][T13147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.203964][T13152] netlink: 'syz.4.1987': attribute type 15 has an invalid length. [ 262.213277][T13147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.224838][T13152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1987'. [ 262.378551][T13159] batadv_slave_0: entered promiscuous mode [ 262.400632][T13161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1991'. [ 262.463658][T13157] batadv_slave_0: left promiscuous mode [ 264.546276][T13189] lo speed is unknown, defaulting to 1000 [ 264.595541][T13197] syzkaller0: Caught tx_queue_len zero misconfig [ 265.050231][ T9192] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.061926][ T9192] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.111914][ T9192] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.120976][ T9192] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.170245][T13189] lo speed is unknown, defaulting to 1000 [ 265.805509][T13262] netlink: 'syz.1.2013': attribute type 15 has an invalid length. [ 266.031107][T13274] netlink: 'syz.2.2017': attribute type 33 has an invalid length. [ 266.091045][T13274] `: renamed from team0 [ 266.176728][T13278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.184246][T13278] IPv6: NLM_F_CREATE should be set when creating new route [ 266.358582][T13294] netlink: 'syz.4.2020': attribute type 14 has an invalid length. [ 266.412627][T13294] netlink: 'syz.4.2020': attribute type 21 has an invalid length. [ 266.441940][T13294] netlink: 'syz.4.2020': attribute type 4 has an invalid length. [ 266.497541][T13294] netlink: 'syz.4.2020': attribute type 5 has an invalid length. [ 266.511503][T13307] netlink: 'syz.0.2023': attribute type 1 has an invalid length. [ 266.539187][T13307] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 266.577328][T13311] geneve1: entered promiscuous mode [ 266.677974][T13317] IPv6: Can't replace route, no match found [ 266.685410][T13317] IPv6: Can't replace route, no match found [ 266.738397][T13321] __nla_validate_parse: 20 callbacks suppressed [ 266.738419][T13321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2029'. [ 266.791164][T13324] lo speed is unknown, defaulting to 1000 [ 266.839775][T13318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2026'. [ 266.902344][T13318] 8021q: VLANs not supported on hwsim0 [ 266.965157][T13335] veth1_virt_wifi: entered promiscuous mode [ 266.978550][T13335] tipc: New replicast peer: 255.255.255.255 [ 266.996101][T13339] netlink: 'syz.0.2035': attribute type 1 has an invalid length. [ 267.025592][T13335] tipc: Enabled bearer , priority 10 [ 267.041612][T13335] dvmrp1: entered allmulticast mode [ 267.109630][T13339] netlink: 'syz.0.2035': attribute type 2 has an invalid length. [ 267.118460][T13339] netlink: 'syz.0.2035': attribute type 1 has an invalid length. [ 267.249583][T13324] lo speed is unknown, defaulting to 1000 [ 268.051061][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 268.089175][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2048'. [ 268.099892][T13404] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 268.120896][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 268.130939][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2049'. [ 268.150031][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 268.187672][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2049'. [ 268.244755][T13407] batman_adv: batadv0: Adding interface: ipvlan2 [ 268.251140][T13407] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 268.283748][T13407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.299573][T13407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.317835][T13407] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 268.516834][T13423] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2052'. [ 268.647149][T13431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2057'. [ 268.850923][T13441] 8021q: adding VLAN 0 to HW filter on device bond7 [ 268.990026][T13451] lo speed is unknown, defaulting to 1000 [ 269.202226][T13461] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 269.225973][T13469] gretap2: entered promiscuous mode [ 269.295368][T13451] lo speed is unknown, defaulting to 1000 [ 269.378126][T13476] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20001 [ 269.750291][T13485] 8021q: adding VLAN 0 to HW filter on device bond13 [ 269.761486][T13487] bond13 (unregistering): Released all slaves [ 270.356349][T13489] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 271.836782][T13446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.855630][T13455] netlink: 'syz.1.2066': attribute type 11 has an invalid length. [ 271.874025][T13455] validate_nla: 5 callbacks suppressed [ 271.874065][T13455] netlink: 'syz.1.2066': attribute type 23 has an invalid length. [ 271.897187][T13455] __nla_validate_parse: 12 callbacks suppressed [ 271.913181][T13455] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2066'. [ 272.075279][T13508] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2079'. [ 272.089319][T13510] netlink: 'syz.0.2077': attribute type 7 has an invalid length. [ 272.248336][T13521] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2079'. [ 272.284641][T13531] netlink: 'syz.1.2083': attribute type 1 has an invalid length. [ 272.303323][T13508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2079'. [ 272.313384][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'. [ 272.379915][T13531] bond8: entered promiscuous mode [ 272.389793][T13531] 8021q: adding VLAN 0 to HW filter on device bond8 [ 272.452006][T13536] lo speed is unknown, defaulting to 1000 [ 272.469534][T13540] netlink: 'syz.0.2084': attribute type 1 has an invalid length. [ 272.549162][T13544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2084'. [ 272.564454][T13544] bond11: entered promiscuous mode [ 272.593130][T13544] bond11: entered allmulticast mode [ 272.599050][T13544] 8021q: adding VLAN 0 to HW filter on device bond11 [ 272.666299][T13551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2088'. [ 272.794613][T13540] 8021q: adding VLAN 0 to HW filter on device bond11 [ 272.813505][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2089'. [ 272.819695][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2090'. [ 272.838134][T13540] bond11: (slave geneve4): making interface the new active one [ 272.846413][T13540] geneve4: entered promiscuous mode [ 272.852525][T13540] geneve4: entered allmulticast mode [ 272.859435][T13540] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 272.869460][ T9176] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 272.878190][ T9176] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 272.901600][T13536] lo speed is unknown, defaulting to 1000 [ 272.907959][ T9176] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 272.922874][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2090'. [ 272.932578][ T9176] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 272.974742][T13560] netlink: 'syz.2.2090': attribute type 1 has an invalid length. [ 273.006557][T13562] vlan3: entered promiscuous mode [ 273.451229][T13583] netlink: 'syz.2.2096': attribute type 1 has an invalid length. [ 273.472428][T13574] lo speed is unknown, defaulting to 1000 [ 273.814835][T13583] bond13: entered promiscuous mode [ 273.820806][T13583] 8021q: adding VLAN 0 to HW filter on device bond13 [ 273.995002][T13593] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.038970][T13593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.073712][ T9] lo speed is unknown, defaulting to 1000 [ 274.079824][ T9] syz0: Port: 1 Link ACTIVE [ 274.120276][ T8541] lo speed is unknown, defaulting to 1000 [ 274.247177][T13613] netlink: 'syz.0.2104': attribute type 12 has an invalid length. [ 274.257973][T13613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.363376][T13578] lo speed is unknown, defaulting to 1000 [ 274.387040][T13574] lo speed is unknown, defaulting to 1000 [ 274.502243][T13626] xt_bpf: check failed: parse error [ 274.630756][T13631] pim6reg: entered allmulticast mode [ 274.637809][T13634] netlink: 'syz.0.2111': attribute type 1 has an invalid length. [ 274.680378][T13634] bond12: entered promiscuous mode [ 274.686279][T13634] 8021q: adding VLAN 0 to HW filter on device bond12 [ 274.757917][T13637] pim6reg: left allmulticast mode [ 274.798563][T13578] lo speed is unknown, defaulting to 1000 [ 274.809852][T13626] siw: device registration error -23 [ 274.942970][T13642] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 274.950056][T13646] raw_sendmsg: syz.3.2115 forgot to set AF_INET. Fix it! [ 275.018418][T13644] ip6tnl4: entered allmulticast mode [ 275.025110][T13646] netlink: 'syz.3.2115': attribute type 13 has an invalid length. [ 275.062891][T13646] netlink: 'syz.3.2115': attribute type 12 has an invalid length. [ 275.507300][T13671] bond6: entered promiscuous mode [ 275.514950][T13671] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.680015][T13676] bond13: entered promiscuous mode [ 275.707133][T13676] bond13: entered allmulticast mode [ 275.716829][T13676] 8021q: adding VLAN 0 to HW filter on device bond13 [ 275.816958][T13681] macvlan0: entered promiscuous mode [ 275.823095][T13681] macvlan0: entered allmulticast mode [ 275.829265][T13681] bridge0: port 4(macvlan0) entered blocking state [ 275.837310][T13681] bridge0: port 4(macvlan0) entered disabled state [ 276.341937][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.423861][T13730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.206677][T13750] __nla_validate_parse: 14 callbacks suppressed [ 277.206697][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2144'. [ 277.339223][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 277.393609][T13760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.401597][T13760] IPv6: NLM_F_CREATE should be set when creating new route [ 277.494449][T13759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.502716][T13759] IPv6: NLM_F_CREATE should be set when creating new route [ 277.537727][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2149'. [ 277.568308][T13767] vlan3: entered promiscuous mode [ 277.583921][T13767] dummy0: entered promiscuous mode [ 277.847916][T13786] lo speed is unknown, defaulting to 1000 [ 277.879237][T13782] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2154'. [ 278.315023][T13787] lo speed is unknown, defaulting to 1000 [ 278.316460][T13786] lo speed is unknown, defaulting to 1000 [ 278.680870][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'. [ 278.920210][T13787] lo speed is unknown, defaulting to 1000 [ 278.984280][T13820] validate_nla: 3 callbacks suppressed [ 278.984298][T13820] netlink: 'syz.2.2166': attribute type 7 has an invalid length. [ 279.390268][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2169'. [ 279.719887][T13848] netlink: 'syz.4.2173': attribute type 6 has an invalid length. [ 279.793389][T13853] netlink: 'syz.4.2173': attribute type 6 has an invalid length. [ 279.801434][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 279.827740][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 279.894936][T13857] netlink: 'syz.2.2174': attribute type 1 has an invalid length. [ 280.310784][T13880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2180'. [ 281.007369][ T8541] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 281.114594][T13926] netlink: 'syz.4.2194': attribute type 10 has an invalid length. [ 281.144745][T13926] syzkaller0: entered promiscuous mode [ 281.150519][T13926] syzkaller0: entered allmulticast mode [ 281.506144][T13950] netlink: 'syz.0.2200': attribute type 5 has an invalid length. [ 281.701994][ T9179] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 282.142784][ T8541] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 282.373810][T13957] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 282.382557][T13957] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 282.499897][T13975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2208'. [ 282.618990][T13979] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2209'. [ 282.637062][T13983] bridge0: port 3(veth0_to_bridge) entered blocking state [ 282.663150][T13983] bridge0: port 3(veth0_to_bridge) entered disabled state [ 282.670904][T13983] veth0_to_bridge: entered allmulticast mode [ 282.681480][T13983] veth0_to_bridge: entered promiscuous mode [ 282.743328][T13983] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 282.744817][ T32] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 282.762787][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2212'. [ 282.763028][ T32] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 282.783371][T13983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2211'. [ 282.801812][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2212'. [ 283.032857][ T8548] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 283.096931][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2214'. [ 283.106515][T13996] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 283.146641][T13998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2216'. [ 283.335300][T14010] netlink: 'syz.3.2215': attribute type 2 has an invalid length. [ 283.528647][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 283.569287][T14026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.576752][T14026] IPv6: NLM_F_CREATE should be set when creating new route [ 283.627172][T14026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.634817][T14026] IPv6: NLM_F_CREATE should be set when creating new route [ 283.866363][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'. [ 283.876054][T14047] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 283.888559][T14049] xt_limit: Overflow, try lower: 28676/2147483648 [ 284.080543][T14066] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2233'. [ 284.108111][T14005] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 284.135924][T14066] rdma_rxe: rxe_newlink: failed to add bond0 [ 284.353143][T14077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.361241][T14077] IPv6: NLM_F_CREATE should be set when creating new route [ 284.376676][T14077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.385061][T14077] IPv6: NLM_F_CREATE should be set when creating new route [ 284.886893][T14107] batadv_slave_1: entered promiscuous mode [ 284.912749][T14105] batadv_slave_1: left promiscuous mode [ 284.956803][T14111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.964311][T14111] IPv6: NLM_F_CREATE should be set when creating new route [ 284.974229][T14111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.982167][T14111] IPv6: NLM_F_CREATE should be set when creating new route [ 285.274991][T14130] xt_cgroup: invalid path, errno=-2 [ 285.295778][T14133] xt_cgroup: invalid path, errno=-2 [ 285.301485][T14136] netlink: zone id is out of range [ 285.316219][T14136] netlink: del zone limit has 8 unknown bytes [ 285.542206][T14152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.549669][T14152] IPv6: NLM_F_CREATE should be set when creating new route [ 285.560093][T14152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.567752][T14152] IPv6: NLM_F_CREATE should be set when creating new route [ 285.966258][T14181] lo: Caught tx_queue_len zero misconfig [ 286.043282][T14184] netlink: 'syz.1.2268': attribute type 11 has an invalid length. [ 286.082903][T14184] netlink: 'syz.1.2268': attribute type 11 has an invalid length. [ 286.321523][T14205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.329315][T14205] IPv6: NLM_F_CREATE should be set when creating new route [ 286.352921][T14205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.361181][T14205] IPv6: NLM_F_CREATE should be set when creating new route [ 286.571904][T14222] pim6reg: entered allmulticast mode [ 286.580665][T14222] pim6reg: left allmulticast mode [ 286.827296][T14241] netlink: 'syz.1.2285': attribute type 1 has an invalid length. [ 286.839807][T14241] netlink: 'syz.1.2285': attribute type 1 has an invalid length. [ 286.908591][T14243] netlink: 'syz.4.2286': attribute type 9 has an invalid length. [ 286.917304][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 286.999095][ T9192] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.019875][ T9192] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.055976][ T9192] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.102175][ T9192] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.739846][ T29] audit: type=1107 audit(1774461318.545:16): pid=14298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='oI8P2N_:1[ ͍]ѝJa4~L&]YQdf3&"2+J0^*?e~9bϸd' [ 287.867309][T14303] macvtap0: entered promiscuous mode [ 287.890177][T14303] __nla_validate_parse: 20 callbacks suppressed [ 287.890197][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 287.934880][T14303] macvtap0 (unregistering): left promiscuous mode [ 288.002251][ T1210] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 288.024120][T14315] TCP: TCP_TX_DELAY enabled [ 288.522309][ T8549] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 289.232313][ T8549] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.020173][T14312] veth9: entered promiscuous mode [ 290.200340][T14345] lo speed is unknown, defaulting to 1000 [ 290.226644][T14351] SET target dimension over the limit! [ 290.249923][T14357] FAULT_INJECTION: forcing a failure. [ 290.249923][T14357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.332047][T14357] CPU: 1 UID: 0 PID: 14357 Comm: syz.4.2315 Not tainted syzkaller #0 PREEMPT(full) [ 290.332075][T14357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.332087][T14357] Call Trace: [ 290.332096][T14357] [ 290.332104][T14357] dump_stack_lvl+0xe8/0x150 [ 290.332136][T14357] should_fail_ex+0x412/0x560 [ 290.332169][T14357] _copy_to_user+0x31/0xb0 [ 290.332194][T14357] simple_read_from_buffer+0xe1/0x170 [ 290.332226][T14357] proc_fail_nth_read+0x1bb/0x230 [ 290.332256][T14357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.332287][T14357] ? rw_verify_area+0x2a6/0x4d0 [ 290.332308][T14357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.332337][T14357] vfs_read+0x20c/0xa70 [ 290.332356][T14357] ? fdget_pos+0x246/0x320 [ 290.332379][T14357] ? __pfx___mutex_lock+0x10/0x10 [ 290.332404][T14357] ? __pfx_vfs_read+0x10/0x10 [ 290.332427][T14357] ? __fget_files+0x2a/0x420 [ 290.332459][T14357] ? __fget_files+0x3a0/0x420 [ 290.332485][T14357] ? __fget_files+0x2a/0x420 [ 290.332522][T14357] ksys_read+0x150/0x270 [ 290.332545][T14357] ? __pfx_ksys_read+0x10/0x10 [ 290.332578][T14357] do_syscall_64+0x14d/0xf80 [ 290.332600][T14357] ? trace_irq_disable+0x3b/0x150 [ 290.332627][T14357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.332646][T14357] ? clear_bhb_loop+0x40/0x90 [ 290.332671][T14357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.332690][T14357] RIP: 0033:0x7f2f0775cfce [ 290.332709][T14357] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 290.332725][T14357] RSP: 002b:00007f2f085c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.332746][T14357] RAX: ffffffffffffffda RBX: 00007f2f085c46c0 RCX: 00007f2f0775cfce [ 290.332760][T14357] RDX: 000000000000000f RSI: 00007f2f085c40a0 RDI: 0000000000000004 [ 290.332771][T14357] RBP: 00007f2f085c4090 R08: 0000000000000000 R09: 0000000000000000 [ 290.332783][T14357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.332794][T14357] R13: 00007f2f07a16038 R14: 00007f2f07a15fa0 R15: 00007ffd8087b688 [ 290.332822][T14357] [ 290.815233][T14345] lo speed is unknown, defaulting to 1000 [ 290.868274][T14343] lo speed is unknown, defaulting to 1000 [ 292.026080][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 292.040996][T14399] lo speed is unknown, defaulting to 1000 [ 292.473445][T14399] lo speed is unknown, defaulting to 1000 [ 292.502753][T14427] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2330'. [ 292.633015][T14343] lo speed is unknown, defaulting to 1000 [ 293.445911][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'. [ 293.468872][T14470] ip6tnl0: Caught tx_queue_len zero misconfig [ 293.712577][T14467] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2337'. [ 293.741872][T14467] tunl0: Caught tx_queue_len zero misconfig [ 293.776158][T14481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.853760][T14489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2344'. [ 293.874049][T14489] ip6t_srh: unknown srh match flags 4000 [ 294.066494][T14502] syzkaller0: entered promiscuous mode [ 294.096359][T14502] syzkaller0: entered allmulticast mode [ 294.414790][T14523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2350'. [ 294.582790][T14540] bridge0: entered allmulticast mode [ 294.600517][T14533] lo speed is unknown, defaulting to 1000 [ 294.748210][T14549] bridge_slave_1: left allmulticast mode [ 294.756417][T14549] bridge_slave_1: left promiscuous mode [ 294.783431][T14549] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.901852][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 295.005023][T14549] bridge_slave_0: left promiscuous mode [ 295.018007][T14549] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.196847][T14533] lo speed is unknown, defaulting to 1000 [ 295.510907][T14586] netlink: 'syz.4.2367': attribute type 1 has an invalid length. [ 295.523700][T14586] netlink: 'syz.4.2367': attribute type 7 has an invalid length. [ 295.548816][T14586] netlink: 'syz.4.2367': attribute type 8 has an invalid length. [ 295.558641][T14586] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2367'. [ 295.568659][T14586] NCSI netlink: No device for ifindex 1073545264 [ 295.589662][T14596] netlink: 'syz.2.2368': attribute type 1 has an invalid length. [ 295.619837][T14602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2369'. [ 295.724505][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2371'. [ 295.749980][T14596] 8021q: adding VLAN 0 to HW filter on device bond15 [ 295.810755][T14612] vlan3: entered promiscuous mode [ 295.834568][T14612] bond15: entered promiscuous mode [ 295.839884][T14612] vlan3: entered allmulticast mode [ 295.871554][T14612] bond15: entered allmulticast mode [ 296.233837][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2374'. [ 296.354237][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2376'. [ 296.364327][T14642] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 296.780435][T14656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2382'. [ 296.881710][T14658] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 297.247839][T14680] x_tables: ip_tables: osf match: only valid for protocol 6 [ 297.336922][T14684] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 298.531153][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2409'. [ 298.676033][T14765] batadv_slave_1: Caught tx_queue_len zero misconfig [ 298.685329][T14765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2408'. [ 298.703154][T14765] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 298.712252][T14765] team_slave_1: Caught tx_queue_len zero misconfig [ 299.050068][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'. [ 299.060512][T14787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2419'. [ 299.080270][T14787] unsupported nlmsg_type 40 [ 299.259037][T14794] xt_CT: No such helper "syz0" [ 299.350292][T14802] bond14: option ad_actor_sys_prio: invalid value (0) [ 299.359455][T14802] bond14: option ad_actor_sys_prio: allowed values 1 - 65535 [ 299.369559][T14802] bond14 (unregistering): Released all slaves [ 299.610974][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 299.792962][T14817] : renamed from veth0_to_team [ 300.041976][T14813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2427'. [ 300.343134][T14861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2437'. [ 300.619409][T14871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2441'. [ 300.711560][T14877] netlink: 'syz.1.2444': attribute type 13 has an invalid length. [ 300.723545][T14877] netlink: 'syz.1.2444': attribute type 17 has an invalid length. [ 300.776701][T14877] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.789854][T14877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.809922][T14879] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 300.826767][ T1210] lo speed is unknown, defaulting to 1000 [ 300.832986][ T1210] syz2: Port: 1 Link ACTIVE [ 301.175190][T14903] netlink: 'syz.2.2450': attribute type 10 has an invalid length. [ 301.611189][T14917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2454'. [ 301.748460][T14923] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 301.761251][T14923] bond9 (unregistering): Released all slaves [ 301.790500][T14886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 301.802102][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2457'. [ 302.078420][T14943] netlink: 'syz.1.2462': attribute type 2 has an invalid length. [ 303.412211][T15008] lo speed is unknown, defaulting to 1000 [ 303.421044][T15002] netlink: 'syz.1.2479': attribute type 1 has an invalid length. [ 303.948748][T15008] lo speed is unknown, defaulting to 1000 [ 304.032220][T15035] x_tables: unsorted entry at hook 2 [ 304.078674][T15041] __nla_validate_parse: 6 callbacks suppressed [ 304.078696][T15041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2490'. [ 304.176334][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2491'. [ 304.399160][T15061] lo speed is unknown, defaulting to 1000 [ 304.414195][T15056] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 304.432603][T15067] netlink: 'syz.4.2495': attribute type 13 has an invalid length. [ 304.461220][T15067] netlink: 'syz.4.2495': attribute type 17 has an invalid length. [ 304.517007][T15072] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2495'. [ 304.551042][T15067] erspan0: entered promiscuous mode [ 304.584900][T15067] syz_tun: left promiscuous mode [ 304.609819][T15067] ip6gretap0: entered promiscuous mode [ 304.635758][T15067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.654770][T15067] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.676981][T15067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.846522][T15061] lo speed is unknown, defaulting to 1000 [ 305.113911][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2493'. [ 305.148392][T15084] netlink: 'syz.3.2493': attribute type 21 has an invalid length. [ 305.175755][T15084] netlink: 'syz.3.2493': attribute type 1 has an invalid length. [ 305.195427][T15084] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2493'. [ 305.393496][T15094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2501'. [ 305.411365][T15097] netlink: 'syz.0.2502': attribute type 1 has an invalid length. [ 305.449972][T15097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2502'. [ 305.536891][T15102] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2502'. [ 305.586136][T15097] lo speed is unknown, defaulting to 1000 [ 305.599057][T15100] mac80211_hwsim hwsim2 wlan0: Caught tx_queue_len zero misconfig [ 305.927032][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2509'. [ 305.999241][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2509'. [ 306.103403][T15129] xt_hashlimit: size too large, truncated to 1048576 [ 306.110789][T15128] xt_hashlimit: size too large, truncated to 1048576 [ 306.190879][T15120] 8021q: adding VLAN 0 to HW filter on device bond8 [ 306.223288][T15097] lo speed is unknown, defaulting to 1000 [ 307.138439][T15178] tc_dump_action: action bad kind [ 307.299155][T15181] macvtap1: entered promiscuous mode [ 307.329450][T15181] veth1_to_hsr: entered promiscuous mode [ 307.357222][T15181] macvtap1: entered allmulticast mode [ 307.363749][T15181] veth1_to_hsr: entered allmulticast mode [ 307.420148][T15187] netem: unknown loss type 0 [ 307.444911][T15187] netem: change failed [ 307.555122][T15187] netlink: 'syz.0.2527': attribute type 4 has an invalid length. [ 307.735754][T15194] netlink: 'syz.4.2530': attribute type 11 has an invalid length. [ 307.823932][T15207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.283853][T15260] sctp: [Deprecated]: syz.3.2546 (pid 15260) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.283853][T15260] Use struct sctp_sack_info instead [ 309.431808][T15270] __nla_validate_parse: 10 callbacks suppressed [ 309.431828][T15270] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2548'. [ 310.768405][T15310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2551'. [ 310.872844][T15309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2555'. [ 310.902082][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 311.081546][T15318] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2557'. [ 311.390421][T15335] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2563'. [ 311.440845][T15334] lo speed is unknown, defaulting to 1000 [ 311.456201][T15342] openvswitch: netlink: Message has 496 unknown bytes. [ 311.463711][T15342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.479252][T15341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2564'. [ 311.496168][T15341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2564'. [ 311.570659][T15348] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2568'. [ 311.605608][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2568'. [ 311.797158][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2570'. [ 311.838813][T15359] netlink: 'syz.0.2570': attribute type 18 has an invalid length. [ 311.875823][T15363] sit0: entered allmulticast mode [ 311.907049][T15365] pim6reg: entered allmulticast mode [ 311.938321][T15334] lo speed is unknown, defaulting to 1000 [ 312.188205][T15381] xt_hashlimit: size too large, truncated to 1048576 [ 312.206260][T15381] xt_hashlimit: invalid interval [ 312.604111][T15387] lo speed is unknown, defaulting to 1000 [ 312.756924][T15406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.949472][T15410] 8021q: adding VLAN 0 to HW filter on device bond9 [ 312.958472][T15411] bond9: entered promiscuous mode [ 312.970656][T15411] bond9: entered allmulticast mode [ 312.980895][T15411] 8021q: adding VLAN 0 to HW filter on device bond9 [ 313.001483][T15411] team0: Port device bond9 added [ 313.086493][T15427] geneve2: entered promiscuous mode [ 313.092262][T15427] geneve2: entered allmulticast mode [ 313.125394][T15387] lo speed is unknown, defaulting to 1000 [ 313.759782][T15451] netlink: 'syz.1.2597': attribute type 3 has an invalid length. [ 313.784717][T15451] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 313.864047][T15449] syzkaller0: entered promiscuous mode [ 313.873809][T15449] syzkaller0: entered allmulticast mode [ 313.966745][T15457] netlink: 'syz.4.2599': attribute type 10 has an invalid length. [ 314.007744][T15457] geneve0: entered promiscuous mode [ 314.013668][T15457] geneve0: entered allmulticast mode [ 314.023047][T15457] team0: Port device geneve0 added [ 314.125625][T15462] netlink: 'syz.3.2601': attribute type 1 has an invalid length. [ 314.354678][T15481] netlink: 'syz.4.2608': attribute type 1 has an invalid length. [ 314.504106][T15481] 8021q: adding VLAN 0 to HW filter on device bond7 [ 314.549792][T15490] vlan1: entered allmulticast mode [ 314.613642][T15490] bond7: entered allmulticast mode [ 314.718628][T15507] __nla_validate_parse: 11 callbacks suppressed [ 314.718657][T15507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2614'. [ 314.747252][T15481] bond7: (slave geneve3): making interface the new active one [ 314.758835][T15481] geneve3: entered allmulticast mode [ 314.766677][T15481] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 314.785014][T15508] openvswitch: netlink: IP tunnel TTL not specified. [ 314.810490][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2614'. [ 314.813941][T15507] 8021q: adding VLAN 0 to HW filter on device bond10 [ 314.954004][T15513] macvlan5: entered allmulticast mode [ 315.003449][T15507] block nbd1: server does not support multiple connections per device. [ 315.064604][T15507] block nbd1: shutting down sockets [ 315.366908][T15541] netlink: 'syz.4.2623': attribute type 1 has an invalid length. [ 315.389018][T15541] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2623'. [ 315.400127][T15550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2621'. [ 315.454024][T15545] bond9 (unregistering): Released all slaves [ 315.494493][T15547] netlink: 'syz.3.2625': attribute type 83 has an invalid length. [ 315.597884][T15547] netlink: 'syz.3.2625': attribute type 1 has an invalid length. [ 315.635479][T15547] netlink: 'syz.3.2625': attribute type 1 has an invalid length. [ 315.655648][T15547] netlink: 'syz.3.2625': attribute type 1 has an invalid length. [ 315.665766][T15547] netlink: 'syz.3.2625': attribute type 1 has an invalid length. [ 315.682723][T15569] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2628'. [ 315.693652][T15569] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2628'. [ 315.704113][T15569] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2628'. [ 316.492596][T15587] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2631'. [ 316.512106][T15587] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2631'. [ 317.219478][T15636] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2644'. [ 317.577877][T15641] syzkaller0: entered promiscuous mode [ 317.592230][T15641] syzkaller0: entered allmulticast mode [ 318.117293][T15674] gretap0: left allmulticast mode [ 318.132575][T15674] gretap0: left promiscuous mode [ 318.145265][T15674] bridge0: port 1(gretap0) entered disabled state [ 318.177439][T15674] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 318.324905][T15684] bond7: entered allmulticast mode [ 318.330267][T15684] vcan1: entered allmulticast mode [ 318.866181][T15709] openvswitch: netlink: ERSPAN option length err (len 4112, max 255). [ 321.388240][T15687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.407514][T15717] __nla_validate_parse: 4 callbacks suppressed [ 321.407535][T15717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2666'. [ 321.570715][T15722] bond11: entered promiscuous mode [ 321.792777][T15743] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2673'. [ 321.954560][T15751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.987072][T15751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.084033][T15755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2677'. [ 322.423272][ C1] ================================================================== [ 322.431996][ C1] BUG: KASAN: slab-use-after-free in rose_t0timer_expiry+0x1ea/0x560 [ 322.440644][ C1] Read of size 8 at addr ffff88807b40f018 by task syz.2.2682/15773 [ 322.448735][ C1] [ 322.451062][ C1] CPU: 1 UID: 0 PID: 15773 Comm: syz.2.2682 Not tainted syzkaller #0 PREEMPT(full) [ 322.451082][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.451093][ C1] Call Trace: [ 322.451100][ C1] [ 322.451108][ C1] dump_stack_lvl+0xe8/0x150 [ 322.451136][ C1] print_report+0xba/0x230 [ 322.451155][ C1] ? rose_t0timer_expiry+0x1ea/0x560 [ 322.451171][ C1] kasan_report+0x117/0x150 [ 322.451192][ C1] ? rose_t0timer_expiry+0x1ea/0x560 [ 322.451210][ C1] rose_t0timer_expiry+0x1ea/0x560 [ 322.451226][ C1] call_timer_fn+0x192/0x640 [ 322.451246][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 322.451260][ C1] ? call_timer_fn+0xd4/0x640 [ 322.451279][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 322.451302][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.451318][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 322.451334][ C1] __run_timer_base+0x652/0x8b0 [ 322.451351][ C1] ? ktime_get+0x45/0x200 [ 322.451370][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 322.451390][ C1] ? sched_clock_cpu+0x74/0x440 [ 322.451412][ C1] run_timer_softirq+0xb7/0x170 [ 322.451431][ C1] handle_softirqs+0x22a/0x870 [ 322.451452][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 322.451481][ C1] __irq_exit_rcu+0x5f/0x150 [ 322.451501][ C1] irq_exit_rcu+0x9/0x30 [ 322.451519][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 322.451538][ C1] [ 322.451543][ C1] [ 322.451549][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.451566][ C1] RIP: 0010:lock_release+0x2d7/0x3d0 [ 322.451588][ C1] Code: 98 7a 11 00 00 00 00 eb b5 e8 35 e5 0d 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 b5 52 7a 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 1a cb 10 0a cc 48 8d 3d 22 e4 72 [ 322.451602][ C1] RSP: 0018:ffffc90003a7f318 EFLAGS: 00000286 [ 322.451618][ C1] RAX: fa2cce465928e700 RBX: 0000000000000202 RCX: 0000000080000001 [ 322.451630][ C1] RDX: 0000000000000003 RSI: ffffffff8e195c05 RDI: ffffffff8c27c180 [ 322.451641][ C1] RBP: ffff88802f83c8d0 R08: ffff88801dc85e7f R09: 1ffff11003b90bcf [ 322.451653][ C1] R10: dffffc0000000000 R11: ffffed1003b90bd0 R12: 0000000000000003 [ 322.451664][ C1] R13: 0000000000000003 R14: ffffffff8e75e520 R15: ffff88802f83bd00 [ 322.451686][ C1] page_table_check_clear+0x4b8/0x5f0 [ 322.451704][ C1] ? page_table_check_clear+0x144/0x5f0 [ 322.451722][ C1] unmap_page_range+0x33b3/0x48f0 [ 322.451760][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 322.451782][ C1] ? mas_find+0xb0e/0xd30 [ 322.451799][ C1] ? unmap_vmas+0x1c4/0x6a0 [ 322.451818][ C1] unmap_vmas+0x48f/0x6a0 [ 322.451840][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 322.451868][ C1] exit_mmap+0x280/0xa10 [ 322.451884][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 322.451907][ C1] ? __pfx_exit_aio+0x10/0x10 [ 322.451925][ C1] ? uprobe_clear_state+0x27c/0x290 [ 322.451946][ C1] __mmput+0x118/0x430 [ 322.451966][ C1] exit_mm+0x168/0x220 [ 322.451982][ C1] do_exit+0x6a2/0x23c0 [ 322.451997][ C1] ? try_to_wake_up+0x832/0x1390 [ 322.452015][ C1] ? __pfx_do_exit+0x10/0x10 [ 322.452031][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 322.452050][ C1] do_group_exit+0x21b/0x2d0 [ 322.452065][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.452082][ C1] get_signal+0x1284/0x1330 [ 322.452108][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 322.452130][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 322.452150][ C1] ? ksys_write+0x242/0x270 [ 322.452170][ C1] exit_to_user_mode_loop+0x86/0x480 [ 322.452188][ C1] ? rcu_is_watching+0x15/0xb0 [ 322.452211][ C1] do_syscall_64+0x32d/0xf80 [ 322.452229][ C1] ? trace_irq_disable+0x3b/0x150 [ 322.452251][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.452267][ C1] ? clear_bhb_loop+0x40/0x90 [ 322.452284][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.452298][ C1] RIP: 0033:0x7f503059c799 [ 322.452312][ C1] Code: Unable to access opcode bytes at 0x7f503059c76f. [ 322.452320][ C1] RSP: 002b:00007f50313700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 322.452335][ C1] RAX: 0000000000000001 RBX: 00007f5030815fa8 RCX: 00007f503059c799 [ 322.452346][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5030815fac [ 322.452356][ C1] RBP: 00007f5030815fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 322.452367][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 322.452377][ C1] R13: 00007f5030816038 R14: 00007ffc9e85dfa0 R15: 00007ffc9e85e088 [ 322.452394][ C1] [ 322.452400][ C1] [ 322.903507][ C1] Allocated by task 7536: [ 322.907849][ C1] kasan_save_track+0x3e/0x80 [ 322.912914][ C1] __kasan_kmalloc+0x93/0xb0 [ 322.917608][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 322.923388][ C1] rose_add_node+0x23c/0xf00 [ 322.928063][ C1] rose_rt_ioctl+0xd35/0x12a0 [ 322.932924][ C1] rose_ioctl+0x3fb/0x8f0 [ 322.938057][ C1] sock_do_ioctl+0x101/0x320 [ 322.943291][ C1] sock_ioctl+0x5c6/0x7f0 [ 322.947719][ C1] __se_sys_ioctl+0xfc/0x170 [ 322.952495][ C1] do_syscall_64+0x14d/0xf80 [ 322.957098][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.963244][ C1] [ 322.965558][ C1] Freed by task 1210: [ 322.969522][ C1] kasan_save_track+0x3e/0x80 [ 322.974391][ C1] kasan_save_free_info+0x46/0x50 [ 322.979430][ C1] __kasan_slab_free+0x5c/0x80 [ 322.984275][ C1] kfree+0x1c1/0x630 [ 322.988420][ C1] rose_timer_expiry+0x4cb/0x600 [ 322.993615][ C1] call_timer_fn+0x192/0x640 [ 322.998543][ C1] __run_timer_base+0x652/0x8b0 [ 323.003465][ C1] run_timer_softirq+0xb7/0x170 [ 323.008655][ C1] handle_softirqs+0x22a/0x870 [ 323.013503][ C1] __irq_exit_rcu+0x5f/0x150 [ 323.018085][ C1] irq_exit_rcu+0x9/0x30 [ 323.022410][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 323.028031][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.034114][ C1] [ 323.036425][ C1] The buggy address belongs to the object at ffff88807b40f000 [ 323.036425][ C1] which belongs to the cache kmalloc-512 of size 512 [ 323.050819][ C1] The buggy address is located 24 bytes inside of [ 323.050819][ C1] freed 512-byte region [ffff88807b40f000, ffff88807b40f200) [ 323.064872][ C1] [ 323.067186][ C1] The buggy address belongs to the physical page: [ 323.073937][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b40c [ 323.082809][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 323.091596][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 323.099244][ C1] page_type: f5(slab) [ 323.103401][ C1] raw: 00fff00000000040 ffff88813fea5c80 dead000000000100 dead000000000122 [ 323.112428][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 323.121367][ C1] head: 00fff00000000040 ffff88813fea5c80 dead000000000100 dead000000000122 [ 323.130026][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 323.138691][ C1] head: 00fff00000000002 ffffea0001ed0301 00000000ffffffff 00000000ffffffff [ 323.147620][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 323.156449][ C1] page dumped because: kasan: bad access detected [ 323.163122][ C1] page_owner tracks the page as allocated [ 323.168996][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5193, tgid 5193 (udevadm), ts 30593826756, free_ts 25896368409 [ 323.190702][ C1] post_alloc_hook+0x231/0x280 [ 323.195737][ C1] get_page_from_freelist+0x24dc/0x2580 [ 323.201540][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 323.207437][ C1] allocate_slab+0x77/0x660 [ 323.211935][ C1] refill_objects+0x331/0x3c0 [ 323.216882][ C1] __pcs_replace_empty_main+0x2e6/0x730 [ 323.222621][ C1] __kmalloc_cache_noprof+0x392/0x660 [ 323.228609][ C1] kernfs_fop_open+0x397/0xca0 [ 323.233640][ C1] do_dentry_open+0x785/0x14e0 [ 323.238591][ C1] vfs_open+0x3b/0x340 [ 323.243019][ C1] path_openat+0x2e08/0x3860 [ 323.247803][ C1] do_file_open+0x23e/0x4a0 [ 323.252439][ C1] do_sys_openat2+0x113/0x200 [ 323.257258][ C1] __x64_sys_openat+0x138/0x170 [ 323.262207][ C1] do_syscall_64+0x14d/0xf80 [ 323.266880][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.272945][ C1] page last free pid 1 tgid 1 stack trace: [ 323.278914][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 323.284114][ C1] free_contig_range+0xbb/0x170 [ 323.289052][ C1] destroy_args+0x4e5/0x570 [ 323.293807][ C1] debug_vm_pgtable+0x3f8/0x410 [ 323.299013][ C1] do_one_initcall+0x250/0x8d0 [ 323.304578][ C1] do_initcall_level+0x104/0x190 [ 323.310133][ C1] do_initcalls+0x59/0xa0 [ 323.314472][ C1] kernel_init_freeable+0x2a6/0x3e0 [ 323.319839][ C1] kernel_init+0x1d/0x1d0 [ 323.324168][ C1] ret_from_fork+0x51e/0xb90 [ 323.329284][ C1] ret_from_fork_asm+0x1a/0x30 [ 323.334395][ C1] [ 323.336882][ C1] Memory state around the buggy address: [ 323.342861][ C1] ffff88807b40ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.351415][ C1] ffff88807b40ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.359817][ C1] >ffff88807b40f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.368314][ C1] ^ [ 323.373252][ C1] ffff88807b40f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.381650][ C1] ffff88807b40f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.390834][ C1] ================================================================== [ 323.399828][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 323.407829][ C1] CPU: 1 UID: 0 PID: 15773 Comm: syz.2.2682 Not tainted syzkaller #0 PREEMPT(full) [ 323.418156][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 323.429445][ C1] Call Trace: [ 323.432825][ C1] [ 323.435670][ C1] vpanic+0x56c/0xa60 [ 323.439829][ C1] ? __pfx_vpanic+0x10/0x10 [ 323.444505][ C1] ? irqentry_exit+0x59e/0x620 [ 323.449265][ C1] panic+0xc5/0xd0 [ 323.452995][ C1] ? __pfx_panic+0x10/0x10 [ 323.457513][ C1] ? rose_t0timer_expiry+0x1ea/0x560 [ 323.464822][ C1] ? rose_t0timer_expiry+0x1ea/0x560 [ 323.470831][ C1] check_panic_on_warn+0x89/0xb0 [ 323.479337][ C1] ? rose_t0timer_expiry+0x1ea/0x560 [ 323.485508][ C1] end_report+0x73/0x180 [ 323.490221][ C1] ? rose_t0timer_expiry+0x1ea/0x560 [ 323.495880][ C1] kasan_report+0x128/0x150 [ 323.500751][ C1] ? rose_t0timer_expiry+0x1ea/0x560 [ 323.506128][ C1] rose_t0timer_expiry+0x1ea/0x560 [ 323.511691][ C1] call_timer_fn+0x192/0x640 [ 323.516291][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 323.522066][ C1] ? call_timer_fn+0xd4/0x640 [ 323.527023][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 323.532439][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.537985][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 323.543830][ C1] __run_timer_base+0x652/0x8b0 [ 323.549398][ C1] ? ktime_get+0x45/0x200 [ 323.554102][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 323.559656][ C1] ? sched_clock_cpu+0x74/0x440 [ 323.564606][ C1] run_timer_softirq+0xb7/0x170 [ 323.569542][ C1] handle_softirqs+0x22a/0x870 [ 323.574568][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 323.579359][ C1] __irq_exit_rcu+0x5f/0x150 [ 323.583986][ C1] irq_exit_rcu+0x9/0x30 [ 323.588425][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 323.594403][ C1] [ 323.597496][ C1] [ 323.600593][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.606659][ C1] RIP: 0010:lock_release+0x2d7/0x3d0 [ 323.611957][ C1] Code: 98 7a 11 00 00 00 00 eb b5 e8 35 e5 0d 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 b5 52 7a 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 1a cb 10 0a cc 48 8d 3d 22 e4 72 [ 323.632169][ C1] RSP: 0018:ffffc90003a7f318 EFLAGS: 00000286 [ 323.638496][ C1] RAX: fa2cce465928e700 RBX: 0000000000000202 RCX: 0000000080000001 [ 323.646819][ C1] RDX: 0000000000000003 RSI: ffffffff8e195c05 RDI: ffffffff8c27c180 [ 323.655136][ C1] RBP: ffff88802f83c8d0 R08: ffff88801dc85e7f R09: 1ffff11003b90bcf [ 323.664150][ C1] R10: dffffc0000000000 R11: ffffed1003b90bd0 R12: 0000000000000003 [ 323.672427][ C1] R13: 0000000000000003 R14: ffffffff8e75e520 R15: ffff88802f83bd00 [ 323.680505][ C1] page_table_check_clear+0x4b8/0x5f0 [ 323.686057][ C1] ? page_table_check_clear+0x144/0x5f0 [ 323.691707][ C1] unmap_page_range+0x33b3/0x48f0 [ 323.696919][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 323.702558][ C1] ? mas_find+0xb0e/0xd30 [ 323.707055][ C1] ? unmap_vmas+0x1c4/0x6a0 [ 323.711733][ C1] unmap_vmas+0x48f/0x6a0 [ 323.716167][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 323.721128][ C1] exit_mmap+0x280/0xa10 [ 323.726017][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 323.730896][ C1] ? __pfx_exit_aio+0x10/0x10 [ 323.735759][ C1] ? uprobe_clear_state+0x27c/0x290 [ 323.741058][ C1] __mmput+0x118/0x430 [ 323.745303][ C1] exit_mm+0x168/0x220 [ 323.749717][ C1] do_exit+0x6a2/0x23c0 [ 323.753958][ C1] ? try_to_wake_up+0x832/0x1390 [ 323.759067][ C1] ? __pfx_do_exit+0x10/0x10 [ 323.763866][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 323.769001][ C1] do_group_exit+0x21b/0x2d0 [ 323.773916][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.779195][ C1] get_signal+0x1284/0x1330 [ 323.783790][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 323.789336][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 323.795765][ C1] ? ksys_write+0x242/0x270 [ 323.800288][ C1] exit_to_user_mode_loop+0x86/0x480 [ 323.805679][ C1] ? rcu_is_watching+0x15/0xb0 [ 323.810560][ C1] do_syscall_64+0x32d/0xf80 [ 323.815260][ C1] ? trace_irq_disable+0x3b/0x150 [ 323.820468][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.826533][ C1] ? clear_bhb_loop+0x40/0x90 [ 323.831304][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.837295][ C1] RIP: 0033:0x7f503059c799 [ 323.841933][ C1] Code: Unable to access opcode bytes at 0x7f503059c76f. [ 323.849208][ C1] RSP: 002b:00007f50313700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 323.858315][ C1] RAX: 0000000000000001 RBX: 00007f5030815fa8 RCX: 00007f503059c799 [ 323.866382][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5030815fac [ 323.874531][ C1] RBP: 00007f5030815fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 323.882773][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 323.891113][ C1] R13: 00007f5030816038 R14: 00007ffc9e85dfa0 R15: 00007ffc9e85e088 [ 323.899374][ C1] [ 323.902942][ C1] Kernel Offset: disabled [ 323.907664][ C1] Rebooting in 86400 seconds..