last executing test programs: 8.151040619s ago: executing program 1 (id=11129): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x28, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb61, 0x0, 0x0, 0x0, 0x49}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0xd, 0x5, 0x6, 0xffffffffffffffe0, 0x10}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7ff}, @generic={0x3, 0x4, 0x9, 0x9, 0x1ff}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7fff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x1a, 0x713, 0x20, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000000, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000062000002000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000}, 0x48) 7.985604622s ago: executing program 1 (id=11132): socket$packet(0x11, 0x3, 0x300) unshare(0x64000600) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="c392b76f00000000000001000002000000004000"/30], 0x24}}, 0x8044) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000180009007ebd7000000000001c140000fe"], 0x30}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x200, 0x5, @private2={0xfc, 0x2, '\x00', 0xff}, 0x800}, 0x1c) 3.521015883s ago: executing program 4 (id=11180): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e240000140005000000000000000000000000000000000108000200e0000002140004000000000000000000000000000000000014000400fc00000000000000000000000000000114000400fe80000000000000000000000000002308000200ac1414bb08000100e0"], 0x1f0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x0, 0x0, 0x0}, 0x94) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYRESOCT], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x100, 0x1d0, 0x100, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x9, 0xfffffffe, 0x2}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff00, 0xff000000, 0xff], [0xff, 0xff000000, 0xff, 0xffffff00], 'vlan0\x00', 'veth1\x00', {0xff}, {0xff}, 0x2f, 0xd, 0x8}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x599}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 3.356783038s ago: executing program 4 (id=11184): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4008850}, 0x40) (async) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000003803afffe8000000000000000000000000000bbff0200000000000000"], 0x0) (async, rerun: 32) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001680)=""/137, 0x89}, {0x0}], 0x2}, 0x5}], 0x1, 0x10002, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="880000000d0a010800000000000000000a0000080900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000a80410001"], 0x88}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3.270437608s ago: executing program 1 (id=11185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000001c80)={&(0x7f0000001c00)=[{&(0x7f0000000040)="89967690957561fcbfc9087eb46d55b8693535764bd38c6282c711c9623f7168ebc2d6fe71c15c6369b749ae7247cedf242eaa44e543140e984458dc95184b1763699186083fb056c2db3ab2e5ead8ffe7ca1bf09159fab328b1708b43d21ea3ca4ac103ccde1aae079ce59d1878e8f24e949e2552e4b8d28e6565cf6754c020490a41a06a49", 0x86}, {&(0x7f0000000100)="17afb3fd62370ff1122532d57863af25c14362c8a8fc1aba0d35e9d0b6ad29a0bae41211cfb0588159b6208bb1eb89acd575794f1918db863ad23b58cb5e884563b460e428e3bb8ea6f0eec3e1f9693c1a884332c81b6ab0cee9d18226caf73af564ab40e0734373d98c644e7afb1b94f3a65d08699a", 0x76}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="ba3f9670e9977a5a118236c4c23f02d7c5c1dae31fb45ac9b3cfa87094b600a70309ef0d9e391be37a64bcab22c6934ae3a1cf3b5e3ad6c1ef21a5a988630339e48afa1451dcd8698fb66bc5630e2348d97f7ff227c38878caf2c180a8d47981c1ca73bc96c5a287ee9bc60de3867af05de1037841df4f80dacb2678e922649ca739095304201dc98ed9e6107768ff5f488ff0fff7595bf8ae3a56450fa217", 0x9f}, {&(0x7f0000001940)="6a1ea3d6da61a6ddca76bce34b482e663b3e9221d518161faf481e06d64a55d7fda1829b780374955946e0a5c4c27f5647114a454dd877672d9ce589ee0b2c17aa0d19c984761cdfeaf527fce2ce8eee30ada894888e3fe6bd10cccc401a63f115c13c50d179daf7fcb0a68b4814737fdbe37d35966ced1b2bb51183e353df7987712750", 0x84}, {&(0x7f0000001a00)="a7897ff4e23406f803ab8b0600b31e021c6a0954940d16a5c1226dbdd9d6ab5cc160ae46ada753144c73b7ca844d4dc7d3df17dc76177533cc3e58cd00bed454a48c27a2c1717b822f4cf2ddcb3cf3140d33ea98e42e61aa407187acf519bb68a8a63eaaf5016ae07821cd6b67b64974697a37bffa964c7016f2872b019aa9cf0930f602370e5936d415b3bee5e2ef8b6faa5638cffab11d3ad6f679f03bf71e0a28d98f500131d54a8bfd899e8f58620470dc621dbfcc074ce4c9c2051308705ff3e73a1caa8b1adfdfaefb7d94abf4599652de12514b2955a12beef78cbd84436c49776bbb16676b0d2333e2cb6c722a5f", 0xf2}, {&(0x7f0000001b00)="edeeaaf3f185e7555348f913abe2df0cd819dfbbe8092af3414d6ecaf9b338101ccf24787569c512425bf38180e2c6ee863c4685f782ed7be0b005a4eeefaae64d6192aabd5d4f45df5ecffd98a157df4edd370daf5d0d27ca72a3fc1420dea2697585723deb2bf8afb757d0b955b02c2f12037a7bd0c283b708dd0e522fa2ad2ee5f5db8d72a944d045ffe02fdd45e24270ccf009194ab479659c9089d8cb7cb8cf23a991ac78606cd18b527c8dddb3c0589321b218d5c87115c3458311fcf4eca86adf9d8f1da7671e314915e744617d075bf84bdb221dfdc142c6a5038a521f551085fe8384d5df3a89bfd05235295b80b16594334cc30f", 0xf9}], 0x7, 0x2, 0x0, 0x80000000, 0x8000000000000001, 0x3, 0x6, 0x400}) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x400003}]}, 0x1c}}, 0x40800) 3.166480437s ago: executing program 3 (id=11187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x79}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000180)="82", 0x1}, {0x0}], 0x2}}], 0x1, 0x4400c800) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x12}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x3b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0xfffffffffffffe69, r4, 0x1, 0x70bd27, 0x0, {0x4, 0x74, 0x609}}, 0x3c}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x404c080) 3.156566449s ago: executing program 1 (id=11188): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010404000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8091010000000000240012800c0001006d6163766c616e00140002800800010008000000080003000000000008000500", @ANYRES32=r4, @ANYBLOB="33d82c378f3ddd097753a0eae5ea6423350e059614192692c8e72eee3a2ad0ae54730a55a3e6abe7ca7cff55b1a81566daea454caecd03"], 0x4c}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r5, 0xc040583f, &(0x7f0000000300)={{@align=0x4, {0x9, 0x2, 0xff}}, {{[0x6, 0x120000, 0x3, 0x4d5612b5]}, 0x0, 0x3, 0x7, 0x0, &(0x7f0000000200)=[{{@_ha_fsid={[0x51, 0x87]}, {0x6, 0x5bab, 0x5, 0x1ff}}, 0x6910, 0x0, 'u\x00'}, {{@align=0x8, {0x0, 0x7, 0x4, 0x1}}, 0x0, 0x0, '}{\x00'}, {{@_ha_fsid={[0x1, 0x53]}, {0x0, 0x6, 0x4, 0x5}}, 0x8, 0x0, '//&(\x00'}, {{@_ha_fsid={[0xc90, 0x1f4f]}, {0x8000, 0x7fff, 0x7c78, 0x8}}, 0x8, 0x0, '(#-:\x00'}, {{@align=0x7, {0x2000, 0x0, 0x437, 0x863}}, 0x9aca, 0x0, ',\'\x00'}, {{@_ha_fsid={[0x1000, 0x7]}, {0x8001, 0x3023, 0x9, 0x4}}, 0xffffffff, 0x0, '/)([\x00'}]}}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$alg(0x26, 0x5, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket(0x1, 0x803, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) 3.080133174s ago: executing program 3 (id=11189): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) close(0x3) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) syz_emit_ethernet(0x76, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb86dd60f53a0400403a00fe8000000000000000000000000000aaff0200000000000000000000000000010100000000000000070000000001000910008304000000000000160000000000000000000000000000000502e534040106000100050200073a0000000000000004006e98cab3871cb6efdf144a76183bc83e4369b79b8c704a6cac4f03ccb55fd95076e568eff8d1d867b294e33ab14d40ebf6bfbd3638c99f0ba628e1232a9cbe9aca6290550637ad0beb94d54da4688cfa0335537a84aa19398a234fd667971da27ca3a33700001600010300000000ff0100000000400000000000000000013b00000000000000c9000000000000000000000000000000000100010007000000000300d1ff000400000000000000f805000000000000c900fc0200000000000000000000000000000001000001000001000401400000003a0002086800000002009078000005006006000000000200fc010000000000000000000000000000ff0100000000000000000000000000013a370000000000000106000000000000"], 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x800042, 0x1}, 0x10) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2.410898241s ago: executing program 0 (id=11191): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000380)={{r0, &(0x7f0000000040)='ipvlan\x00', 0x1, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x2]}, {0x1, 0xb9, 0x3, 0x5}}, 0x9, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x3}, 0x1, &(0x7f0000000340)=[{0x1, 0x9, &(0x7f0000000180)='ipvlan\x00', &(0x7f00000001c0)="43d7572082e8a3f9e878be889186bc79ff2f619362830e75f7a909384cbb45e79f6763694dd1b5aff35ffc603d775c71185aed636df2ed4f95d6f4d52feeab3f0519bda560d0357018b433174df7dc6a2ad891b5ff992b9e423ea40e254f219c0d51fa382bc6527a7d023d7129934a76eb46dace7ef5bafa257643fff5b83dfb4687660de7cbcc9226c92935797b493d1699366555ba8bbb360077341ce28735c656f57ee906b835d0b42d6ee4b0ceb313ed43983c2ceda9df30d22d738c17fc72e3c34c9346766e7c48a87c", 0xcc, 0x10}]}) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000400)=0x7, 0x4) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{r0}, 0xa3, 0x8, 0x9a}) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x6, "a874e400"}, @generic={0x1, 0x2}]}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x20003, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x300}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x20044014) socket(0x28, 0x800, 0x4) 2.329182938s ago: executing program 1 (id=11192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c090}, 0x4004850) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xffffff59, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 2.253852767s ago: executing program 0 (id=11193): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f000062d000/0x2000)=nil, 0x2000, 0xb635773f05ebbeed, 0x100010, r0, 0x215eb000) (async) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) (async) recvfrom$unix(r1, 0x0, 0x0, 0x40002100, 0x0, 0x0) 2.253680063s ago: executing program 4 (id=11194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="840000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="a122000044700000500012800b00010067656e65766500004000028008000b4000000200060005004e2300000500080001000000080002007f000001050008000100000005000ce11800000004000600050008000200000008001b00177000000a000100a5"], 0x84}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) connect$802154_dgram(r1, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="840000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="a122000044700000500012800b00010067656e65766500004000028008000b4000000200060005004e2300000500080001000000080002007f000001050008000100000005000ce11800000004000600050008000200000008001b00177000000a000100a5"], 0x84}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) (async) 2.105797876s ago: executing program 0 (id=11195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (fail_nth: 1) 2.098827733s ago: executing program 4 (id=11196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040010) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e891a0c70000000000001000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) unshare(0x2040400) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f00000029c0), 0x400006d, 0x20000004) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.865513845s ago: executing program 3 (id=11197): r0 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r2, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async, rerun: 32) r4 = accept(r2, 0x0, 0x0) (rerun: 32) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x0, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r4}, 0x20) (async) recvmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={0x0}}, 0x1697e5ea11c231f4) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async, rerun: 32) close(0x3) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) (async) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x20, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) 1.802917635s ago: executing program 0 (id=11198): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6d}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x40009c4}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xba9}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x28840}, 0x4000) (async) shutdown(r0, 0x1) (async, rerun: 32) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r0) (rerun: 32) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x120, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_FAMILY={0x5, 0xd, 0x2b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x884) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x104, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) (async) r4 = socket(0x8, 0xa, 0x7) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004800) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x78, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x12, 0x34, @random="b053565b717fc24ab1529c5bc3e3"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_IE={0x30, 0x2a, [@mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x2, 0x8, 0x33, 0x7}}, @ht={0x2d, 0x1a, {0x4000, 0x3, 0x3, 0x0, {0x5, 0x3, 0x0, 0x40, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x7ff}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x50) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r4) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008814}, 0x1000) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000a40)={0x3, "8848ac"}, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000a80)=0x8, 0x4) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000ac0)={0x0, 0x2}, 0x8) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r6, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xec, r6, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1fffc}, @NL80211_ATTR_SCAN_SSIDS={0x40, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x2}}, @NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x54, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1f, 0x0, @random="e84a9ccfd8fcb9232beee909c341f03acc76493b7ea003032546c0"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_IE={0x4}]}, 0xec}}, 0x20004081) (async) recvfrom(r4, &(0x7f0000000dc0), 0x0, 0x40000000, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x98, r6, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7c4e7ecc0c8ab16793399f1140546d2c5f8a53772fe1db27"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7bdc896f380edd1ea2cc087d06d6a84b81c4c92ef8608b1b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x7c, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20000}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf52}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x672}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x649}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4040984) (async) getsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f0000001100)=""/174, &(0x7f00000011c0)=0xae) (async) socket$nl_route(0x10, 0x3, 0x0) 1.756570991s ago: executing program 1 (id=11199): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r2, &(0x7f0000000080)=""/47, 0x2f) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESHEX=r1, @ANYRES8=r0], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000004c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000500)={0xc, 0x4, 0x3ff, 0x8000, r5}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x4c}}, 0x0) 1.629872319s ago: executing program 3 (id=11200): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.629728006s ago: executing program 0 (id=11201): getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8, 0x5, 0x6, 0x3f, 0x7ff}, &(0x7f0000000080)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) (async) sendmsg$nl_netfilter(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x18, 0x4, 0x1, 0x5, 0x0, 0x0, {}, [@generic='}']}, 0x18}}, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r0, 0x8}, &(0x7f0000000100)=0x8) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}]}, 0x44}}, 0x0) 1.564315188s ago: executing program 4 (id=11202): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x800, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x1]}, {0x8, 0xe53, 0x100, 0xffff}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x2}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x4, 0x36, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x8, 0x1, 0x4, 0x10001}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000090}, 0x40080) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r3, &(0x7f0000000340)="d127d44eca81227608b94beaa4ba767c82d8c25612d46c62c25cd07293ea47681b29093411187e0c3e46cf18371e5565e8aca95d12633a1e253e3b1ca6ce3782308064066668b4e226b313ae5cbf85dd579a1825aabe518145ffdad0f51c089f73dd278e50", 0x65, 0x1, &(0x7f00000003c0)={0x2, 0x4e20, @remote}, 0x10) sendmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0xb8f, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x5}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000480)="360b6a6ea26528d89ab4c74f91cad78e2eaf961cf5a5840763e6e3484c52eebd3ea4c50df5f238008153a0db4e54e748274d85122e8738f07df74f1d6b8587618dd5e2dfa496245cab21fe045befa238cef72c53d2add1e6a67818cf6a81f9ecfd115ac6284d9862b46ecc9aacbfeb206ac462a698de727f34a9caf8bd8c7ffb0c7432cdb5c9e52e3e52e60eea2d9f0cae849b91f61ae37d0258767a49ff9cf03319e2d30bb6bd52dbe9a5f9ee4f37196c1d3f014071f9d54120ca0666b8e77b7f5a4fd06659a266cea60a0a6037a53ea87a2f972a6c324960", 0xd9}, {&(0x7f0000000580)="5bbd93cef7a37f4a1113c78fdc4fb6b958fc9e1239cc0471f9d325db070cc0501725636f1bd0d8ccfbbee723b5d66329d1173aac7f538bf0a9ed15f32797baa3aa7e0aca0b7e1c9b457244e9a8f9d91b045f299362266a9f9eedf090242e0b962235470ae2a63b06d916c7f90398abbe163d9ff0230fcde62fbab36765a45342a28b2643b082fb93afffc69dd43906d51c607405c4fc8a6104cc0c1229e46a2e635c01d22976f92d3ddea02bd3323ecc468048a4eff0d6f70b1322671aa8049751afa15653720fcbcd35d9fe3e4117c097a879c80d67581ff14c3628b8ad117a", 0xe0}, {&(0x7f0000000680)="5a9074d68aebe52b7051c3f88c5d788c54de42b72042f943e9cee9d0143f7150234ae6c1feb0628b87ae49c9503e6d20cded1ce2bb66b8e1fe120dcf1bbfbe6552f46080171f5693aab95ea6d875c1e4b5f060d0b39df1dbf0c328b48bb82269910b6e84126176418cc725b4ebd49144636ca2bc59b357db757c0d6d5fbf2a7cf86610cf0bedc9e1adafbf16d52a13e22d24e991bb042eee2adf3ee254d48417d6fc8e7e6f4c57934e1c2cf4e50c791954f2479ff03834062a84b88152270a1db3a98a0a80533dcc8e65c9c0b9824ba4", 0xd0}, {&(0x7f0000000780)="8928b575ce1d22234faa52cde1d579d1cf7a8d3070cd8818ac5f86f3e7704e80c6e1789f1b807756108241909477da672d806d8aaeeb978548bd3933d93b1ff21b6f695e6560191cbcb618dd7499c910106cea2828813cb5f8ba42de7efea7e578b71993df8de025c4124fdb5e54e7cff0ee72240abde8b806be6af7d7d2703461c189182bd4ca83650d915d3c640f4031360d4057a996cd3314c35d60110c3b06ae7f93bfa1a96e060fa867603c", 0xae}, {&(0x7f0000000840)="cd6c7ae7b8c532c7c55c5d3db5c56b81c9df13a5e8b96f0f2dfa8d82fefdfdb68d7aec52a3014367b46b0e319629877e275d624bbbe5d6d09f63174324d20fe2e4627c1eae235ed386b2509e7fda132aa86d44cdf0bc7160e2eec95586cf5bb5623e7c6fd1b5cee266e7f2be05e547b8ff354097d572dc5a4eebac3798f2491376e13f3cf0b97d2c2ce2b695597365c8314c799cd7cf02b3ac193a0603b11920584e098a399258e80336618164899f071c800c8f422a414c496ae334d171b7b045edf3921ecef8e55cbac9a36bbb3fefe13aa94cc36bf9324e773b51674646bf4da6b5897d98c310c3861db1", 0xec}, {&(0x7f0000000940)="617330502a269366e273861380aaf7ce3ab6110b1a6deb73bf447dc9354e58e9a853854d78fac6944d8683c2b032154583a11f72be5e47604885efdf42725eceb0547e55dd15ccb5ce1fd6d4a03c04ad9ae09d9fef13e09ac1a431a77ab0c68f68953b3ef29abc90bd92b12f490590aa1f17724ff17cb0d2468af5d1f779706117ba912ca64f0f9822b7eaffc8ba9363b70557c88fb30266c167c804002adf923a4cabe76ac1a93bd05337ff6a3fe37de51c6e180802a190bb36f7be6326b23b41d5ce1c27ac", 0xc6}], 0x6, &(0x7f0000000ac0)=[{0x60, 0x101, 0x0, "f0d9175bd6a0d23d51548352389929e509730a75df7a27ec4f407dd3e9c05c6be994e449b3b76b815176705a62b628ab0c15a299547928a0fab77a2bb7334b9b59d266db8b21245104122890"}, {0x98, 0x10a, 0x1, "0e1fdc1d1c1d49d81a77900b61b3cc52b87e5b94206677070cba4b4689e2ad6dd9e22c4351b38f04bd94d6ff73e300ca917c37e6ad770b5c1a735c409881e6aa6a0b91e3829db35cd51023f6b7cd835619f0eee40e701273fe2b1738abecc000411877cff47726ee92a7e3d0a792774d8ec51b95f242128a1567a284748ad306247e0c29d3"}, {0x98, 0x10b, 0xffffffff, "a3d57f44520d2653613c09c4730172aaff4d453382679e80523eeedd7a4048ea2e8f1e1b43ef584ed5e4c64cf3b5258c7f74e947cc65ae7a6922f92d87a10c5cdd82a8b4e29b1b0cd608c164e6fd60d1a68754288a7aba04323545a8fa8257b089225e401933d4b3572b9cfca727d48c0886d684df41b67346dd0f67f3780b40d8c2"}], 0x190}}, {{&(0x7f0000000c80)=@in6={0xa, 0x4e22, 0x9, @private0, 0x6}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="03350ebefc92dac57351a4fde2de7bb1c16d258e", 0x14}, {&(0x7f0000000d40)="402a273341df3c6c4506e2", 0xb}, {&(0x7f0000000d80)="bc4c1b0ad9dba020fa54f3b39270e976800b3445f0205aea2ec3277a6d", 0x1d}], 0x3, &(0x7f0000000e00)=[{0x60, 0x88, 0x6, "7737ccf9bcf062a258b2dbbb64531edc0f73b1ecda0fee722598a352b9b997ba8b677bf6c7b5949a222facf88dfe769df732e9f649b27ffaf4af176498c9b2b51cee91809ec9d907b15962d3"}], 0x60}}, {{&(0x7f0000000e80)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f00)="a28afdbe28c8c01e959a33c820a43142f7d348fa12dd5d0928bc796a9b7cbae784476d9ff88f18401ac21c6997fc58a89d2a12519c1c6a401d3d1d4e70bad7e66234c61b10eeae0e73a24b609f8fe024d81dfceac555b726724e01050c5ebe8a5ddb914f4a04505dfd8544607e732eead0899fd488356fc087715b006edeb772582d780e281c63ac9ebec7e50e43e6f8dc9d27f1135b4813cfa5fcf76685f5ef364bb9b683c8af7b5aa3bf7768d5d27331d774f5ff6196fb4b21617050b0dcfea57998fba3df4beb3edc832cc9137ca01f75c32bbc4d7fe88cc4090f5c529bd9229c", 0xe2}], 0x1, &(0x7f0000001040)=[{0x18, 0x113, 0x8001, "1f2a"}, {0x30, 0x1, 0x6, "c62ea37d63674b33a5d43d306e024ba2c70f365de2d2e7ecb7"}], 0x48}}, {{&(0x7f00000010c0)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001140)="d47a86c7a4d68e6bf3d3bd76e76e2553ca7d7b38cc22b6dd28409fbebd8f9a8ae3f7247193cb98f82180a5ff7fe0e58c76a4334def28a776ffb7ca2bdccc00f288f24b2c3b06b304754bea6d257dd6e6d2270c4b2ab90ab1572442c7a445b6a46ac858f84a27ac3509c2b2a796be4b9d6c05bd634ec4b2c1fdf3cd3f78d2a2117996113e268f80676a1cf54f20fb7775e1eac4a8ece79faaa29af1f38ebf4de24ed1a08291503fd5f4e139275c09d9bf881bfeca7aae6657f0134d0c1afd800ce78e23a5198869b831c3b30700e96e14efa593b7abb67ae3017f36874c7fde2f9e8c85f4eb7b86c0f1be6c7fe83a38efcec7296d89d2cb90", 0xf8}, {&(0x7f0000001240)="540dadfbda04d1e301995b5b78a399039d3430ebc9e666fa25907edd40c556a6a01850c6199626c43dc5feea6f674e1eaa20b231cee27301d378f796e88142da88a209dea3b43f6551e28a5b7097a3e90c23af14fa04664f5455f77f1e9ff105d2f16ceb75df62404d66ecd57448547ceb65ce580741863299168744fba5c3999809cb8566ae5bb4cbd7f01012608cd3f21896cf8cd6ce4d37b0", 0x9a}, {&(0x7f0000001300)="74c8db7fadfc8dc6c0e53b22a6722cff2815c8dcc4185f216a8340600902ab3f44d398ac808982e7e8a47fab6839764c6634fa45e9b725711f43d63774bf85601eb6b8a33e4ba22597b8550f114f76f24cd751a9b923f3d42e0023803f0dddf710a29a6a2562d23392ae1315ab6655f75a46753b74827026975250cc8e5e646ad5f535ddc0", 0x85}, {0x0}, {&(0x7f00000013c0)="214efd1bcd81bae94f07a2387aa0b1b00251515f5706882e7dc12883197d0188473f04e7fae28a495111e585dbc5906c2741b2667ddd0e9c0f6643d0a8e9758b2df42be46373f15c67ed4116c0b5f25a9a0d6f1dcafeb4e8123a7b00583bff66f8c664ae80667c4bc31979ef57fc0be1a8a4f47e660fca2bb8b0be1888577f22fb883d647907d15e3600fd83e35feecc3065dbb12384236bdd6c227abcc9e9c37c8b88b638b501f67a2f6acb27eeeda508cd701bfb743f337473188bc99e083082fdc7f527ef7d1406d99fb5c1830f5c6142f6b0f9198c3dcbe069070542a5cf82", 0xe1}, {&(0x7f00000014c0)="e3d2d84acaf773fe215b4f91788ec412bd460ba7538f39f48f58b5baf76a55f716962e89fd36c62fe5d86bf799cc0578ffcf01f1709b878167182d37a4eeccd81f48c5f4ae65fc6072e7452af5d111cf782dda259e5fbee15fe097736ec09d0ddf2077113a43972f998f506fb0bd72082429c998fd803d073057dcb7975f", 0x7e}, {&(0x7f0000001540)="324dd39233ecacce3bae013970befb9601a856d4652257930c3c70328b2e50eefdb3b437db5fd3128dbece765180bc8218f8d731286de8f9c2c12f1a9751b1256cd8a056423b7a82fd501c5d9213cdb1dd799b8f84faef31d64aa271dfbe802e5c0013258c09e7189f6d55673272587b9bb85894b3d62c7c81684a7e07b423b0222e541a8ff8c82870c6e630", 0x8c}, {&(0x7f0000001600)="be27a571f64a81f5e60affcf3ce1c73b5e237a05ed3c475e66ae9c8cf16b29da57354de72c3b8168547c91c106aa1b7c6a4ba7529a2abe7a55961850b7e3fca9d030eb605fd3c7cf9305965940a13767c6d273506012e22f07f632e740fc1e0278b515aceffb1480f4fd7071beaed84089df1218a09fb8b7a8e207df", 0x7c}, {&(0x7f0000001680)="63611460ca95bab70529cfc4f6403d58b8de214bfa68baeafe1d237863b2e5f2ab2dfd9ac21b7bab08bd8819ebc2a135e42f747560c4723f2e9eeb1c5c3c8ab41cb0da54ebdad14294b6826348e2c24193332d293cb4097352ec3cb7f246655e248ff987b8c4e3a4923f97c169dea597eb604cfaee599137b98c6b4e99af5ab8d8a7d48d0cc13c0ab49112344271b843ee31bf1e1fa16116a9e4d4af089dacfcc2af9e56ee7805c810fd6fdf1e89b86150c9d54954c1ccf143ec64d9f303fd", 0xbf}, {&(0x7f0000001740)="f78972330331c4bdfa659b048862df7ba97bb557d2d1e92ae3960fe704b4f4add17ac7df99077187bdb02a5295f43598a73e12e2b52af95960f4093dc327d80f8ad083b3272020d0d519abced5c2deac26090e2f921a29ed6ffab9c7510cd0e5b947e959269b4adfb497e7234ff2d1cba40fd505b2aa44970df7caa835aa590df80d72e101796f857aa3b4bc48e4404efdaee61ec6", 0x95}], 0xa}}], 0x4, 0x400cc10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000019c0)={0x4, 0x80, 0x4, 0x3, 0x6, 0x2, 0x8, 0x0, 0x9, 0xc0, 0x6, 0x7, 0x9, 0x1}, 0xe) write$cgroup_int(r0, &(0x7f0000001a00)=0x4, 0x12) sendmsg$nl_xfrm(r0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc, 0x681, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x800) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001b40)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', r2, r0, 0x3, 0x5, 0x5}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000001d00)={r3, &(0x7f0000001c00)='syztnl2\x00', 0x111983, &(0x7f0000001c40)={@_ha_fsid={[0x16, 0xb693]}, {0x2, 0x2, 0x7, 0xfffffffffffffff9}}, 0x1, &(0x7f0000001c80), &(0x7f0000001cc0)=0x7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{r4, 0xffffffffffffffff}, &(0x7f0000001bc0), &(0x7f0000001d40)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r5, 0x0, 0x3d, 0xad, &(0x7f0000001dc0)="843721bd864680bd24a568765f1f152c7871d3a3ece8e77129e670876f3f5085d913ee5fb2b290c8e0c5d00ee00ce05e6d69c5524e6ba937e02640bcd3", &(0x7f0000001e00)=""/173, 0x38000, 0x0, 0x17, 0xf9, &(0x7f0000001ec0)="4f6ccc37f5ddff42d35af7cd3921b43a50373fa70ae350", &(0x7f0000001f00)="0f6ed589ae28106edf365f711c84295af1a9fa3c8a4ddd3bb3e18c91c692af3f0ff467a41d20e94103acdd60f03bef6cd777ea13c5f334b4fa148bff3611bc79a05984bd09a2c4d433ba8af76b372880605a576c5ebef7d6bbffb917db4d2315e6e23f5440c92f1353d6b533c1beafafc241ec8859920a7be484c3813603915e8449508a9beb9aea17c57a93bf4c661ed7256cb9677f891634a260d292b4e4b211eeac96a7f488e7181e4d6531219f333b93a300d264fc9a16d6352adeaa8e034e02ebca4d11864eea70ccd4747b1f61bf91d44754a91f0a969993409cfa9ad6d46076e23bd4e459255e01dc04c31aaaad18919e63ea92d25a", 0x1, 0x0, 0x800}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002080)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000002180)=0xe8) shutdown(r0, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000021c0)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000002200)=0x2, 0x8) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000002280), r5) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x34, r8, 0x300, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002380)) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000023c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000026c0)={0x7, 0x0}, 0x8) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x11, 0x2c, &(0x7f0000002700)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6d5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @jmp={0x5, 0x0, 0xe, 0x1, 0x9, 0xfffffffffffffffc, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xad7}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000002880)='GPL\x00', 0x5, 0xd, &(0x7f00000028c0)=""/13, 0x41000, 0x41, '\x00', r7, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002900)={0x5, 0x8, 0x10000, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002940)=[r0, r4, r0, 0xffffffffffffffff, r4], &(0x7f0000002980)=[{0x5, 0x2, 0x1, 0x6}, {0x1, 0x1, 0x7, 0xa}, {0x3, 0x3, 0x9, 0x8}, {0x0, 0x5, 0x4, 0x2}, {0x3, 0x4, 0x8, 0x6}, {0x1, 0x5, 0x0, 0x2}], 0x10, 0x7}, 0x94) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002b00)=@generic={&(0x7f0000002ac0)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000002b40)={r6, 0x9, 0x8, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000002bc0)={0x8, 0x1e, &(0x7f0000002440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf6b7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @alu={0x7, 0x1, 0x2, 0x3, 0x7, 0x8, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002540)='GPL\x00', 0x0, 0xe3, &(0x7f0000002580)=""/227, 0x41100, 0x40, '\x00', r7, @cgroup_skb, r0, 0x8, &(0x7f0000002680)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, r10, r11, 0x0, &(0x7f0000002b80)=[r0, r4, r5, r4, r4, r12, 0xffffffffffffffff, r5, r13, r6], 0x0, 0x10, 0x7}, 0x94) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f0000002d00)={&(0x7f0000002c80)=""/86, 0x6000, 0x0, 0x6, 0x2}, 0x20) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002d80), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x14, r14, 0x8, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4000084) 1.461150955s ago: executing program 3 (id=11203): syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"/100}}}}}}, 0x0) 1.44913286s ago: executing program 0 (id=11204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000000)) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x9c, 0x24, 0x4, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @qdisc_kind_options=@q_cbq={{0x8}, {0x64, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x1, 0x86, 0x64db, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x9, 0x8, 0xd39, 0x6}}, @TCA_CBS_PARMS={0x18, 0x1, {0xf, '\x00', 0x3, 0x2, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x5, 0x3, 0x0, 0x3}}]}}]}, 0x9c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r4, @ANYBLOB="d1e9e05f6620336717db877f5f7c35479fcbfb998592caff533aef99e8950205d1de8cb32dd41aad99b60332", @ANYRESHEX=r5, @ANYRES32=r4, @ANYRES64=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3ab}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x2, 0x6}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="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", 0xc9c}, {&(0x7f0000001180)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde", 0xb3}, {&(0x7f0000000440)="1da19d23fdff85b98167afffffffff20df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6ea7734e44835fcd6d23a0d7e00b73ac716a577005fe637cf7c7a", 0xe0}, {&(0x7f0000000f80)="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", 0x131}], 0x5}, 0x8bb3a321ef809a) 1.330220298s ago: executing program 4 (id=11205): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)={'c', ' *:* ', 'rw\x00'}, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0xf, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x1}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x2cc04}, [@IFLA_OPERSTATE={0x5, 0x10, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000890}, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r6, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0xe, 0x0, &(0x7f0000000480), &(0x7f0000002040)='GPL\x00', 0x401, 0xb2, &(0x7f0000002080)=""/178, 0x41000, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xd, 0x7, 0xfff}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000001280)=[0x1, r2, r6, r7], &(0x7f0000002200)=[{0x2, 0x4, 0xb, 0x9}, {0x1, 0x5, 0x4, 0x3}], 0x10, 0x3}, 0x94) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000002300), 0x8) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r8, r9}, 0xc) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000fedbdf253100000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) bpf$TOKEN_CREATE(0x24, &(0x7f00000010c0)={0x0, r9}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a0000000000000000000003000000000200000004000000770b000000612e005f603030300060f0f98c6d56f08501a21ed18d87df"], &(0x7f0000002340)=""/4089, 0x3a, 0xff9, 0xa, 0x32e}, 0x28) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="700000006800010028bd7000fddbdf2502000200040000000c00088008000700631800000400040014000600ff010000000000000000000000000001140002000000000002000000010000000e00000004000b000600070004000000140006"], 0x70}}, 0x0) unshare(0x66000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000ef00010000008500d31aacba5a33238f84c6008cdc3e68e88ebbb11900000095ec6c76f61bb7fba64aec"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x91}, 0x94) socket$pppoe(0x18, 0x1, 0x0) socket(0x2, 0x3, 0x0) write$cgroup_int(r12, &(0x7f0000000000), 0xffffff6a) 1.280978927s ago: executing program 3 (id=11207): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$isdn(0x22, 0x2, 0x22) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000440), &(0x7f0000000480)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000900)={r3, &(0x7f00000006c0), 0x0}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000540)=[@in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x10001}, @in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x401}]}, &(0x7f0000000180)=0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x20, 0x7800, 0x5, 0x6, {{0x1a, 0x4, 0x3, 0x3e, 0x68, 0x64, 0x0, 0x80, 0x29, 0x0, @private=0xa010100, @broadcast, {[@cipso={0x86, 0xd, 0x3, [{0x7, 0x7, "da54deefe2"}]}, @timestamp_prespec={0x44, 0x14, 0x19, 0x3, 0x7, [{@multicast1, 0x4}, {@private=0xa010101, 0x8}]}, @ssrr={0x89, 0x27, 0x43, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1, @local]}, @end, @noop, @rr={0x7, 0x7, 0x38, [@local]}]}}}}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}, 0x4, 0x0, 0x0, 0x0, 0xce03b2}, 0x9c) 604.362124ms ago: executing program 2 (id=11209): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000087000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc3}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r2], 0x18}, 0x2404c0d4) 385.087725ms ago: executing program 2 (id=11210): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000ffbb0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 246.48124ms ago: executing program 2 (id=11211): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="de", 0x1, 0x80, &(0x7f0000000140)={0xa, 0x4e21, 0x2400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={r4, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r4, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r4, @in={{0x2, 0x4e22, @multicast1}}, 0x5, 0x8}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_USERDATA={0x5c, 0xd, 0x1, 0x0, "d48771faa036c3df18da7737a147c7d27a13140bb116a6605b99b34368a4ce567e98b94594d55831a9e7b8bfc5aefa7c553308dd89c8f7103b662e48e3ff5f696deec3c6e056dcd1bde1dad25ebaf8b7b6d0c9b7dc6d7954"}]}, 0x70}}, 0x1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022abd7000fbdbdf257500000008000300", @ANYRES32=r7, @ANYBLOB="0c00990001000000050000004c00f080040004000500070007000000050010000400000004000900040008000500070007000000050001000100000005000100010000000a000200334388d2ebfa000005000f00070000000400f08090b28c3f7c72b571ed19cb21d37750f675f189d2f997b657225bfc446248297987a62bd12e2aca57038b3fa2d2c0f23af49e792fa34c2e87e8fc9e6bdf080acc2e1246e6aa3a9630c4149a00041d9cfc91a01b7e3bf2e596e40f77ae3f69bfdc90c00c1f0ace2bec3e0cbf499610961a3f28a1f95f47d19da738810164372c2913d96fb6bd1fff0b49"], 0x78}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x10) 202.849699ms ago: executing program 2 (id=11212): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffd, @loopback}, 0x10, &(0x7f000000c540)=[{&(0x7f0000000280)='\b\x00', 0x2}, {&(0x7f000000b540)="920ca227df6561", 0x7}], 0x2, &(0x7f000000b440)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a0000000301041b01000000000000"], 0x20}, 0x20000890) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d493", 0x48}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000001c0)={{0xffffffffffffffff, 0x0, 0x101000, &(0x7f0000000080)={@_ha_fsid={[0x10000, 0x4]}, {0x7, 0x5, 0x7ff, 0x6}}, 0x8, 0x0, 0x0}, {[0x3, 0x98, 0x4, 0x5]}, 0x101, 0x0, 0x0}) unshare(0x400) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000010000004000000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)="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", &(0x7f0000000180), 0xf8, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r7, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000500)=""/228, 0xe4}], 0x1}, 0x40010160) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0xc0385869, &(0x7f0000000400)={r8, &(0x7f0000000300)=',\\\x00', 0x14d280, &(0x7f0000000340)={@_ha_fsid={[0x338, 0x5]}, {0x1, 0xc667, 0x2, 0x8}}, 0x9, &(0x7f0000000380), &(0x7f00000003c0)=0x7f}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 105.729127ms ago: executing program 2 (id=11213): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=11214): socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0dac0f0004ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x0, 0x110, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000080), {[{{@arp={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0x9, 0xb, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, 0xffff, 0xd4bf, 0x3, 0x4, 0x101, 0x7, 'nr0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@multicast, @local, @empty, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @remote, 0x2}}}, {{@arp={@multicast1, @multicast2, 0xffffffff, 0xffffff00, 0xe, 0x3, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x7, 0x5, 0x2, 0x0, 0xff, 0x7, 'wg0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x0, 0x14}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mac=@remote, @multicast2, @multicast2, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f00", @ANYRES32=0x0, @ANYRES32], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@cgroup=r2, r2, 0x2f}, 0x20) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_SET_WIPHY(r1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="24000000070a030000000000000000000100000608000a40000000030808094000000002a823cf65c59afccae78674033accfe7205006531b5cd29c5d607b940aa1679e5e084f6cbbbb451b5ce1a8a271c102dfcb6195822b84a0e8b5285c48f6bc9b2bc078c76b5ce8dcbc4aa233d13d6d9d7b4a045f988ce61e23ec16f"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x8d0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000040)=0x840c5, 0x4) kernel console output (not intermixed with test programs): [ 1155.663477][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9901'. [ 1156.058687][ T7871] netlink: 'syz.4.9908': attribute type 309 has an invalid length. [ 1156.122133][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9909'. [ 1156.177309][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1156.480674][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9915'. [ 1156.520676][ T7895] veth1_to_bond: entered promiscuous mode [ 1156.532446][ T7895] veth1_to_bond: entered allmulticast mode [ 1156.643542][ T7905] IPv6: Can't replace route, no match found [ 1156.655344][ T7905] IPv6: Can't replace route, no match found [ 1156.673008][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9919'. [ 1156.673380][ T7909] syzkaller1: entered promiscuous mode [ 1156.700667][ T7909] syzkaller1: entered allmulticast mode [ 1156.743813][ T7908] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9920'. [ 1156.778926][ T7909] Bluetooth: MGMT ver 1.23 [ 1156.854304][ T7915] netlink: 'syz.4.9923': attribute type 1 has an invalid length. [ 1156.926549][ T7924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9923'. [ 1156.928409][ T7915] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1156.954491][ T7915] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9923'. [ 1157.147214][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1157.522208][ T7953] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 1157.679758][ T7962] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1157.698236][ T7962] bridge1: entered allmulticast mode [ 1157.931613][ T7988] netlink: 'syz.4.9943': attribute type 6 has an invalid length. [ 1158.157218][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1158.686262][ T8023] __nla_validate_parse: 3 callbacks suppressed [ 1158.686284][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9955'. [ 1158.754424][ T8025] syzkaller0: entered promiscuous mode [ 1158.767265][ T8025] syzkaller0: entered allmulticast mode [ 1158.774077][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9957'. [ 1158.888519][ T8035] netlink: 204 bytes leftover after parsing attributes in process `syz.4.9958'. [ 1158.904931][ T8027] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1158.914954][ T8035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9958'. [ 1158.936750][ T8036] vxcan3: entered promiscuous mode [ 1158.960546][ T8036] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1158.974830][ T8036] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1158.988805][ T8036] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1158.994735][ T8039] netlink: 'syz.2.9960': attribute type 1 has an invalid length. [ 1159.003642][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9958'. [ 1159.125680][ T8043] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1159.140779][ T8043] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 1159.189005][ T8039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9960'. [ 1159.214301][ T8039] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 1159.223310][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1159.255954][ T982] IPVS: starting estimator thread 0... [ 1159.271055][ T8039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9960'. [ 1159.273210][ T8050] netlink: 'syz.0.9964': attribute type 1 has an invalid length. [ 1159.344167][ T8050] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1159.357447][ T8053] IPVS: using max 26 ests per chain, 62400 per kthread [ 1159.415638][ T8050] netlink: 'syz.0.9964': attribute type 1 has an invalid length. [ 1159.434654][ T8050] bond5: (slave batadv1): Opening slave failed [ 1159.445441][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9966'. [ 1159.470274][ T8060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.500140][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9966'. [ 1159.549394][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9968'. [ 1159.682004][ T8073] tipc: Enabled bearer , priority 0 [ 1159.689836][ T8073] syzkaller0: entered promiscuous mode [ 1159.695488][ T8073] syzkaller0: entered allmulticast mode [ 1159.844023][ T8088] tipc: Resetting bearer [ 1159.940544][ T8072] tipc: Resetting bearer [ 1159.983017][ T8072] tipc: Disabling bearer [ 1160.197253][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1160.542925][ T8103] netlink: 'syz.1.9978': attribute type 4 has an invalid length. [ 1160.552064][ T8103] netlink: 'syz.1.9978': attribute type 6 has an invalid length. [ 1160.653336][ T8111] netlink: 'syz.1.9981': attribute type 1 has an invalid length. [ 1160.694808][ T8111] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1160.790976][ T8111] netlink: 'syz.1.9981': attribute type 1 has an invalid length. [ 1160.816878][ T8111] bond4: (slave batadv1): Opening slave failed [ 1161.257448][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1161.503147][ T8137] nbd: must specify a size in bytes for the device [ 1161.856446][ T8151] netlink: 'syz.0.9997': attribute type 1 has an invalid length. [ 1162.022943][ T8151] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1162.173702][ T8151] netlink: 'syz.0.9997': attribute type 1 has an invalid length. [ 1162.273075][ T8155] bond6: (slave batadv1): Opening slave failed [ 1162.297226][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1162.993854][ T8181] team0: Port device dummy0 removed [ 1163.257462][ T8200] FAULT_INJECTION: forcing a failure. [ 1163.257462][ T8200] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.270178][ T8200] CPU: 1 UID: 0 PID: 8200 Comm: syz.0.10012 Not tainted syzkaller #0 PREEMPT(full) [ 1163.270207][ T8200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1163.270220][ T8200] Call Trace: [ 1163.270229][ T8200] [ 1163.270238][ T8200] dump_stack_lvl+0xe8/0x150 [ 1163.270275][ T8200] should_fail_ex+0x412/0x560 [ 1163.270312][ T8200] should_failslab+0xa8/0x100 [ 1163.270338][ T8200] ? skb_clone+0x212/0x3a0 [ 1163.270363][ T8200] kmem_cache_alloc_noprof+0x87/0x650 [ 1163.270387][ T8200] ? __bpf_redirect+0x9b4/0x12a0 [ 1163.270411][ T8200] skb_clone+0x212/0x3a0 [ 1163.270440][ T8200] bpf_clone_redirect+0x16a/0x4b0 [ 1163.270470][ T8200] ? bpf_test_run+0x1d1/0x830 [ 1163.270508][ T8200] bpf_prog_885767c90d177146+0x62/0x6b [ 1163.270542][ T8200] ? __pfx___schedule+0x10/0x10 [ 1163.270584][ T8200] ? preempt_schedule_thunk+0x16/0x30 [ 1163.270607][ T8200] ? preempt_schedule_common+0x82/0xd0 [ 1163.270633][ T8200] ? bpf_test_run+0x1d1/0x830 [ 1163.270658][ T8200] ? bpf_test_timer_continue+0x10c/0x320 [ 1163.270686][ T8200] bpf_test_run+0x354/0x830 [ 1163.270729][ T8200] ? __pfx_bpf_test_run+0x10/0x10 [ 1163.270759][ T8200] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1163.270780][ T8200] ? slab_build_skb+0x52/0x410 [ 1163.270803][ T8200] ? __kasan_krealloc+0xeb/0x110 [ 1163.270827][ T8200] ? eth_type_trans+0x35e/0x6d0 [ 1163.270860][ T8200] ? convert___skb_to_skb+0x3d/0x5b0 [ 1163.270885][ T8200] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1163.270921][ T8200] ? __fget_files+0x2a/0x420 [ 1163.270950][ T8200] ? __fget_files+0x3a0/0x420 [ 1163.270979][ T8200] ? __fget_files+0x2a/0x420 [ 1163.271014][ T8200] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1163.271037][ T8200] bpf_prog_test_run+0x2c7/0x340 [ 1163.271065][ T8200] __sys_bpf+0x643/0x950 [ 1163.271087][ T8200] ? __pfx___sys_bpf+0x10/0x10 [ 1163.271124][ T8200] ? ksys_write+0x242/0x270 [ 1163.271150][ T8200] ? __pfx_ksys_write+0x10/0x10 [ 1163.271179][ T8200] __x64_sys_bpf+0x7c/0x90 [ 1163.271208][ T8200] do_syscall_64+0x14d/0xf80 [ 1163.271236][ T8200] ? trace_irq_disable+0x3b/0x150 [ 1163.271253][ T8200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.271274][ T8200] ? clear_bhb_loop+0x40/0x90 [ 1163.271299][ T8200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.271319][ T8200] RIP: 0033:0x7efd68b9c819 [ 1163.271339][ T8200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.271357][ T8200] RSP: 002b:00007efd69a76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1163.271379][ T8200] RAX: ffffffffffffffda RBX: 00007efd68e15fa0 RCX: 00007efd68b9c819 [ 1163.271394][ T8200] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 1163.271408][ T8200] RBP: 00007efd69a76090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.271420][ T8200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1163.271432][ T8200] R13: 00007efd68e16038 R14: 00007efd68e15fa0 R15: 00007ffcf0ce0038 [ 1163.271467][ T8200] [ 1163.477205][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1163.694402][ T8207] pim6reg0: tun_chr_ioctl cmd 1342215180 [ 1163.703158][ T8206] netlink: 'syz.2.10014': attribute type 1 has an invalid length. [ 1163.717694][ T8207] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 1163.733756][ T8207] pim6reg0: persist disabled [ 1163.756335][ T8209] __nla_validate_parse: 9 callbacks suppressed [ 1163.756357][ T8209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10014'. [ 1163.839701][ T8206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1164.016319][ T8206] bond2: (slave batadv1): Opening slave failed [ 1164.185524][ T8217] FAULT_INJECTION: forcing a failure. [ 1164.185524][ T8217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.224911][ T8217] CPU: 0 UID: 0 PID: 8217 Comm: syz.0.10017 Not tainted syzkaller #0 PREEMPT(full) [ 1164.224942][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1164.224955][ T8217] Call Trace: [ 1164.224963][ T8217] [ 1164.224973][ T8217] dump_stack_lvl+0xe8/0x150 [ 1164.225011][ T8217] should_fail_ex+0x412/0x560 [ 1164.225048][ T8217] _copy_to_user+0x31/0xb0 [ 1164.225075][ T8217] simple_read_from_buffer+0xe1/0x170 [ 1164.225111][ T8217] proc_fail_nth_read+0x1bb/0x230 [ 1164.225145][ T8217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1164.225188][ T8217] ? rw_verify_area+0x2a6/0x4d0 [ 1164.225211][ T8217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1164.225242][ T8217] vfs_read+0x20c/0xa70 [ 1164.225262][ T8217] ? fdget_pos+0x246/0x320 [ 1164.225286][ T8217] ? __pfx___mutex_lock+0x10/0x10 [ 1164.225318][ T8217] ? __pfx_vfs_read+0x10/0x10 [ 1164.225343][ T8217] ? __fget_files+0x2a/0x420 [ 1164.225379][ T8217] ? __fget_files+0x3a0/0x420 [ 1164.225416][ T8217] ? __fget_files+0x2a/0x420 [ 1164.225457][ T8217] ksys_read+0x150/0x270 [ 1164.225482][ T8217] ? __pfx_ksys_read+0x10/0x10 [ 1164.225518][ T8217] do_syscall_64+0x14d/0xf80 [ 1164.225547][ T8217] ? trace_irq_disable+0x3b/0x150 [ 1164.225566][ T8217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.225588][ T8217] ? clear_bhb_loop+0x40/0x90 [ 1164.225614][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.225635][ T8217] RIP: 0033:0x7efd68b5d04e [ 1164.225654][ T8217] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1164.225673][ T8217] RSP: 002b:00007efd69a75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1164.225696][ T8217] RAX: ffffffffffffffda RBX: 00007efd69a766c0 RCX: 00007efd68b5d04e [ 1164.225711][ T8217] RDX: 000000000000000f RSI: 00007efd69a760a0 RDI: 0000000000000004 [ 1164.225724][ T8217] RBP: 00007efd69a76090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.225737][ T8217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.225750][ T8217] R13: 00007efd68e16038 R14: 00007efd68e15fa0 R15: 00007ffcf0ce0038 [ 1164.225783][ T8217] [ 1164.437196][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1164.473377][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10018'. [ 1164.548617][ T8225] netlink: 328 bytes leftover after parsing attributes in process `syz.1.10021'. [ 1164.557938][ T29] audit: type=1107 audit(1775171114.451:10): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1165.162726][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.284789][ T8233] veth1_to_bridge: left allmulticast mode [ 1165.377471][ T8233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.395508][ T8233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.491083][ T8233] mac80211_hwsim hwsim73 wlan1: left allmulticast mode [ 1165.498250][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1165.533070][ T8233] geneve4: left promiscuous mode [ 1165.543141][ T8233] bridge1: left allmulticast mode [ 1165.571924][ T3004] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1165.608472][ T3004] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.630320][ T8256] validate_nla: 1 callbacks suppressed [ 1165.630342][ T8256] netlink: 'syz.2.10028': attribute type 1 has an invalid length. [ 1165.646072][ T3004] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1165.656513][ T3004] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.682366][ T8257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10028'. [ 1165.732091][ T8256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1165.740089][ T3004] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1165.753041][ T3004] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.781285][ T3004] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1165.797920][ T3004] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.849195][ T8256] netlink: 'syz.2.10028': attribute type 1 has an invalid length. [ 1165.851802][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10030'. [ 1165.866136][ T8256] bond3: (slave batadv1): Opening slave failed [ 1165.886250][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10029'. [ 1166.140734][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10034'. [ 1166.405738][ T8288] pimreg0: tun_chr_ioctl cmd 1074025673 [ 1166.439097][ T8289] pimreg0: tun_chr_ioctl cmd 1074025681 [ 1166.507917][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1166.551752][ T8291] netlink: 124 bytes leftover after parsing attributes in process `syz.1.10039'. [ 1166.722404][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10041'. [ 1166.966238][ T8303] lo speed is unknown, defaulting to 1000 [ 1166.996992][ T8307] netlink: 'syz.2.10044': attribute type 1 has an invalid length. [ 1167.055973][ T8312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10044'. [ 1167.072100][ T8307] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1167.147488][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1167.169808][ T8313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1167.186496][ T8307] netlink: 'syz.2.10044': attribute type 1 has an invalid length. [ 1167.212507][ T8307] bond4: (slave batadv1): Opening slave failed [ 1167.334957][ T8303] lo speed is unknown, defaulting to 1000 [ 1167.374134][ T8324] netlink: 'syz.3.10049': attribute type 11 has an invalid length. [ 1167.547377][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1167.575421][ T8332] bond5: entered promiscuous mode [ 1167.581742][ T8332] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1167.620843][ T8332] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1167.628658][ T8332] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 1167.641105][ T8332] bond5: (slave sit1): Error -95 calling set_mac_address [ 1168.736348][ T8362] x_tables: duplicate underflow at hook 3 [ 1168.767237][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1169.088701][ T8377] __nla_validate_parse: 6 callbacks suppressed [ 1169.088723][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10066'. [ 1169.302328][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10072'. [ 1169.317326][ T8391] netlink: 7 bytes leftover after parsing attributes in process `syz.4.10072'. [ 1169.350209][ T8390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10072'. [ 1169.637217][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1169.940660][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10080'. [ 1169.986832][ T4310] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.021113][ T4310] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.030867][ T4310] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1170.166043][ T8435] netlink: 'syz.1.10085': attribute type 2 has an invalid length. [ 1170.185772][ T8435] l24): entered promiscuous mode [ 1170.208957][ T8437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10087'. [ 1170.279331][ T8441] netlink: 'syz.1.10089': attribute type 1 has an invalid length. [ 1170.309029][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10088'. [ 1170.331621][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10088'. [ 1170.687228][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1171.322818][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10099'. [ 1171.358493][ T8470] netlink: 'syz.3.10099': attribute type 3 has an invalid length. [ 1171.388321][ T8470] block nbd3: NBD_DISCONNECT [ 1171.393258][ T8470] block nbd3: Send disconnect failed -32 [ 1171.400480][ T8470] block nbd3: shutting down sockets [ 1171.456880][ T4320] veth0_to_bridge: left allmulticast mode [ 1171.473656][ T4320] veth0_to_bridge: left promiscuous mode [ 1171.497785][ T4320] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1171.518511][ T4320] bridge_slave_1: left allmulticast mode [ 1171.524444][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.552953][ T4320] bridge_slave_0: left allmulticast mode [ 1171.559267][ T4320] bridge_slave_0: left promiscuous mode [ 1171.565057][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.565367][ T8472] netlink: 'syz.1.10100': attribute type 1 has an invalid length. [ 1171.580665][ T8472] netlink: 'syz.1.10100': attribute type 4 has an invalid length. [ 1171.589099][ T8472] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.10100'. [ 1171.604147][ T8472] netlink: 'syz.1.10100': attribute type 1 has an invalid length. [ 1171.612644][ T8472] netlink: 'syz.1.10100': attribute type 4 has an invalid length. [ 1171.617791][ T4320] dvmrp8: left allmulticast mode [ 1171.882941][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1171.975614][ T8483] netlink: 'syz.2.10104': attribute type 10 has an invalid length. [ 1172.000386][ T4320] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1172.009302][ T4320] bridge1 (unregistering): left promiscuous mode [ 1172.029030][ T8484] netlink: 'syz.2.10104': attribute type 10 has an invalid length. [ 1172.114846][ T4320] bond14 (unregistering): (slave bridge3): Releasing backup interface [ 1172.123257][ T4320] bridge3 (unregistering): left promiscuous mode [ 1172.129766][ T4320] bridge3 (unregistering): left allmulticast mode [ 1172.255254][ T4320] bond1 (unregistering): Released all slaves [ 1172.273082][ T4320] bond2 (unregistering): (slave veth5): Releasing active interface [ 1172.282087][ T4320] bond2 (unregistering): Released all slaves [ 1172.301824][ T4320] bond3 (unregistering): Released all slaves [ 1172.316777][ T4320] bond4 (unregistering): Released all slaves [ 1172.332014][ T4320] bond5 (unregistering): Released all slaves [ 1172.354866][ T4320] bond6 (unregistering): (slave veth7): Releasing active interface [ 1172.363841][ T4320] bond6 (unregistering): Released all slaves [ 1172.378877][ T4320] bond7 (unregistering): Released all slaves [ 1172.397848][ T4320] bond8 (unregistering): Released all slaves [ 1172.412211][ T4320] bond9 (unregistering): Released all slaves [ 1172.425683][ T4320] bond10 (unregistering): Released all slaves [ 1172.447007][ T4320] bond11 (unregistering): Released all slaves [ 1172.461953][ T4320] bond12 (unregistering): Released all slaves [ 1172.477261][ T4320] bond13 (unregistering): Released all slaves [ 1172.495026][ T4320] bond14 (unregistering): Released all slaves [ 1172.533039][ T8410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.601278][ T8483] team0: Port device dummy0 added [ 1172.708274][ T8484] team0: Port device dummy0 removed [ 1172.730652][ T8484] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1172.757232][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1172.803686][ T8410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.839757][ T4320] tipc: Disabling bearer [ 1172.845273][ T4320] tipc: Disabling bearer [ 1172.858061][ T4320] tipc: Left network mode [ 1172.860433][ T8488] FAULT_INJECTION: forcing a failure. [ 1172.860433][ T8488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1172.899412][ T8488] CPU: 1 UID: 0 PID: 8488 Comm: syz.4.10105 Not tainted syzkaller #0 PREEMPT(full) [ 1172.899442][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1172.899454][ T8488] Call Trace: [ 1172.899463][ T8488] [ 1172.899472][ T8488] dump_stack_lvl+0xe8/0x150 [ 1172.899507][ T8488] should_fail_ex+0x412/0x560 [ 1172.899541][ T8488] _copy_from_iter+0x1d3/0x1670 [ 1172.899576][ T8488] ? rcu_is_watching+0x15/0xb0 [ 1172.899609][ T8488] ? __pfx__copy_from_iter+0x10/0x10 [ 1172.899647][ T8488] ? netlink_sendmsg+0x650/0xb40 [ 1172.899668][ T8488] ? skb_put+0x11b/0x210 [ 1172.899708][ T8488] netlink_sendmsg+0x6c0/0xb40 [ 1172.899741][ T8488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1172.899769][ T8488] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1172.899802][ T8488] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1172.899831][ T8488] ____sys_sendmsg+0x972/0x9f0 [ 1172.899869][ T8488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1172.899906][ T8488] ? import_iovec+0x73/0xa0 [ 1172.899933][ T8488] ___sys_sendmsg+0x2a5/0x360 [ 1172.899966][ T8488] ? __pfx____sys_sendmsg+0x10/0x10 [ 1172.900031][ T8488] ? __fget_files+0x2a/0x420 [ 1172.900060][ T8488] ? __fget_files+0x3a0/0x420 [ 1172.900101][ T8488] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1172.900130][ T8488] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1172.900166][ T8488] ? __pfx_ksys_write+0x10/0x10 [ 1172.900201][ T8488] do_syscall_64+0x14d/0xf80 [ 1172.900230][ T8488] ? trace_irq_disable+0x3b/0x150 [ 1172.900247][ T8488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.900268][ T8488] ? clear_bhb_loop+0x40/0x90 [ 1172.900291][ T8488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.900312][ T8488] RIP: 0033:0x7f969179c819 [ 1172.900333][ T8488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1172.900351][ T8488] RSP: 002b:00007f96925e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1172.900375][ T8488] RAX: ffffffffffffffda RBX: 00007f9691a15fa0 RCX: 00007f969179c819 [ 1172.900390][ T8488] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000007 [ 1172.900403][ T8488] RBP: 00007f96925e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1172.900417][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1172.900429][ T8488] R13: 00007f9691a16038 R14: 00007f9691a15fa0 R15: 00007ffdf106d168 [ 1172.900462][ T8488] [ 1173.294463][ T8410] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1173.455025][ T1061] tipc: Subscription rejected, illegal request [ 1173.506886][ T8509] netlink: 'syz.2.10109': attribute type 1 has an invalid length. [ 1173.775922][ T8516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1173.783274][ T8516] IPv6: NLM_F_CREATE should be set when creating new route [ 1173.827011][ T8516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1173.834338][ T8516] IPv6: NLM_F_CREATE should be set when creating new route [ 1173.859398][ T1061] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.947264][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1174.141893][T24266] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1174.252018][ T8532] __nla_validate_parse: 3 callbacks suppressed [ 1174.252042][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10117'. [ 1174.282418][ T8532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10117'. [ 1174.322589][T19647] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1174.380346][T19647] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1174.748553][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10125'. [ 1174.779094][ T8549] netlink: 'syz.3.10125': attribute type 2 has an invalid length. [ 1174.779694][ T8552] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10126'. [ 1174.786966][ T8549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10125'. [ 1174.827653][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1174.858948][ T8552] siw: device registration error -23 [ 1174.932977][ T4320] batadv0: left promiscuous mode [ 1174.976110][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.006673][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.020191][ T8559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1175.331858][ T4320] ` (unregistering): Port device team_slave_1 removed [ 1175.358507][ T4320] ` (unregistering): Port device team_slave_0 removed [ 1175.779810][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10136'. [ 1175.927223][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1175.946165][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10136'. [ 1176.108386][T16407] lec:lec_start_xmit: lec0:No lecd attached [ 1176.150400][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10140'. [ 1176.188203][ T4320] IPVS: stop unused estimator thread 0... [ 1176.627290][ T8616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10144'. [ 1176.649229][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10145'. [ 1176.917172][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1177.967245][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1178.235708][ T8688] team1: entered promiscuous mode [ 1178.241153][ T8688] team1: entered allmulticast mode [ 1178.259122][ T8688] 8021q: adding VLAN 0 to HW filter on device team1 [ 1178.329512][ T8695] FAULT_INJECTION: forcing a failure. [ 1178.329512][ T8695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1178.377287][ T8695] CPU: 1 UID: 0 PID: 8695 Comm: syz.0.10173 Not tainted syzkaller #0 PREEMPT(full) [ 1178.377316][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1178.377329][ T8695] Call Trace: [ 1178.377338][ T8695] [ 1178.377348][ T8695] dump_stack_lvl+0xe8/0x150 [ 1178.377382][ T8695] should_fail_ex+0x412/0x560 [ 1178.377426][ T8695] _copy_from_user+0x2d/0xb0 [ 1178.377451][ T8695] ___sys_recvmsg+0x175/0x590 [ 1178.377476][ T8695] ? __lock_acquire+0x6b5/0x2cf0 [ 1178.377505][ T8695] ? __pfx____sys_recvmsg+0x10/0x10 [ 1178.377569][ T8695] do_recvmmsg+0x334/0x800 [ 1178.377605][ T8695] ? __pfx_do_recvmmsg+0x10/0x10 [ 1178.377642][ T8695] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1178.377686][ T8695] __x64_sys_recvmmsg+0x198/0x250 [ 1178.377717][ T8695] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1178.377757][ T8695] do_syscall_64+0x14d/0xf80 [ 1178.377785][ T8695] ? trace_irq_disable+0x3b/0x150 [ 1178.377803][ T8695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.377823][ T8695] ? clear_bhb_loop+0x40/0x90 [ 1178.377849][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.377869][ T8695] RIP: 0033:0x7efd68b9c819 [ 1178.377889][ T8695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.377906][ T8695] RSP: 002b:00007efd69a55028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1178.377928][ T8695] RAX: ffffffffffffffda RBX: 00007efd68e16090 RCX: 00007efd68b9c819 [ 1178.377943][ T8695] RDX: 0000000000000004 RSI: 0000200000002b00 RDI: 0000000000000004 [ 1178.377956][ T8695] RBP: 00007efd69a55090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.377968][ T8695] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 1178.377980][ T8695] R13: 00007efd68e16128 R14: 00007efd68e16090 R15: 00007ffcf0ce0038 [ 1178.378012][ T8695] [ 1178.418207][ T8688] team2: entered promiscuous mode [ 1178.638502][ T8688] team2: entered allmulticast mode [ 1178.644184][ T8688] 8021q: adding VLAN 0 to HW filter on device team2 [ 1178.863607][ T8721] bond6: option resend_igmp: invalid value (2878) [ 1178.871637][ T8721] bond6: option resend_igmp: allowed values 0 - 255 [ 1178.913169][ T8721] bond6 (unregistering): Released all slaves [ 1178.987335][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1179.271041][ T8743] __nla_validate_parse: 15 callbacks suppressed [ 1179.271067][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10185'. [ 1179.484709][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10186'. [ 1179.637043][ T8739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10183'. [ 1179.936058][ T8754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10189'. [ 1179.989352][ T4320] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1180.017678][ T4320] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1180.025592][ T796] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1180.077332][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1180.275924][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10194'. [ 1180.304591][ T8765] xt_hashlimit: size too large, truncated to 1048576 [ 1180.365546][ T8765] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 1180.498985][ T796] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1180.909006][ T796] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1181.075583][ T8783] lo speed is unknown, defaulting to 1000 [ 1181.077205][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1181.117130][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1181.125323][ C1] lec:lec_tx_timeout: lec0 [ 1181.130109][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1181.206586][ T8790] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10197'. [ 1181.795779][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10201'. [ 1182.107319][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1182.385834][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10207'. [ 1182.395463][ T8785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.423057][ T8785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1182.469855][ T8783] lo speed is unknown, defaulting to 1000 [ 1183.177279][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1183.560390][ T8856] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10213'. [ 1183.950166][ T8868] netlink: 'syz.0.10218': attribute type 10 has an invalid length. [ 1183.974573][ T8868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10218'. [ 1183.985875][ T8868] dummy0: entered promiscuous mode [ 1183.998043][ T8868] bridge0: port 4(dummy0) entered blocking state [ 1184.004820][ T8868] bridge0: port 4(dummy0) entered disabled state [ 1184.042355][ T8868] dummy0: entered allmulticast mode [ 1184.075686][ T8868] bridge0: port 4(dummy0) entered blocking state [ 1184.082283][ T8868] bridge0: port 4(dummy0) entered forwarding state [ 1184.347285][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1184.427484][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1184.790739][ T8897] __nla_validate_parse: 3 callbacks suppressed [ 1184.790762][ T8897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10226'. [ 1184.885554][ T8901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10226'. [ 1185.070213][ T5208] block nbd0: Possible stuck request ffff8880ad068000: control (read@0,1024B). Runtime 210 seconds [ 1185.081243][ T5208] block nbd0: Possible stuck request ffff8880ad068200: control (read@1024,1024B). Runtime 210 seconds [ 1185.093420][ T5208] block nbd0: Possible stuck request ffff8880ad068400: control (read@2048,1024B). Runtime 210 seconds [ 1185.104622][ T5208] block nbd0: Possible stuck request ffff8880ad068600: control (read@3072,1024B). Runtime 210 seconds [ 1185.357156][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1185.760241][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10232'. [ 1185.770181][ T8935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10232'. [ 1185.782647][ T8934] lo speed is unknown, defaulting to 1000 [ 1185.796200][ T8934] lo speed is unknown, defaulting to 1000 [ 1185.821367][ T8934] lo speed is unknown, defaulting to 1000 [ 1185.836592][ T8937] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10231'. [ 1186.170019][ T8949] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10234'. [ 1186.198864][ T8934] infiniband sqz0: set active [ 1186.205438][ T2903] lo speed is unknown, defaulting to 1000 [ 1186.213258][ T8934] infiniband sqz0: added lo [ 1186.257467][ T8934] RDS/IB: sqz0: added [ 1186.261744][ T8934] smc: adding ib device sqz0 with port count 1 [ 1186.268580][ T8934] smc: ib device sqz0 port 1 has no pnetid [ 1186.276626][ T2903] lo speed is unknown, defaulting to 1000 [ 1186.284892][ T8934] lo speed is unknown, defaulting to 1000 [ 1186.287250][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1186.416610][ T8954] lo speed is unknown, defaulting to 1000 [ 1186.489775][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10238'. [ 1186.655825][ T8934] lo speed is unknown, defaulting to 1000 [ 1186.763635][ T8954] lo speed is unknown, defaulting to 1000 [ 1186.907085][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 1186.915189][ C1] lec:lec_tx_timeout: lec0 [ 1187.004385][ T8965] x_tables: duplicate underflow at hook 3 [ 1187.019696][ T8965] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 1187.137022][ T8967] netlink: 632 bytes leftover after parsing attributes in process `syz.2.10242'. [ 1187.156563][ T8934] lo speed is unknown, defaulting to 1000 [ 1187.174256][ T8967] netlink: 348 bytes leftover after parsing attributes in process `syz.2.10242'. [ 1187.307271][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1187.464914][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10245'. [ 1187.742603][ T8954] lo speed is unknown, defaulting to 1000 [ 1188.314861][ T8934] lo speed is unknown, defaulting to 1000 [ 1188.357223][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1189.013695][ T8934] lo speed is unknown, defaulting to 1000 [ 1189.517260][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1189.652900][ T8934] lo speed is unknown, defaulting to 1000 [ 1190.049091][ T9051] __nla_validate_parse: 2 callbacks suppressed [ 1190.049114][ T9051] netlink: 364 bytes leftover after parsing attributes in process `syz.4.10259'. [ 1190.270206][ T9061] netlink: 'syz.1.10262': attribute type 1 has an invalid length. [ 1190.342630][ T9061] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1190.370407][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10263'. [ 1190.393255][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10263'. [ 1190.437195][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1190.505541][ T9065] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1190.545132][ T8934] lo speed is unknown, defaulting to 1000 [ 1190.663499][ T9061] netlink: 'syz.1.10262': attribute type 1 has an invalid length. [ 1190.704658][ T9061] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1190.713182][ T9061] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1190.939168][ T8934] lo speed is unknown, defaulting to 1000 [ 1191.211011][ T8934] lo speed is unknown, defaulting to 1000 [ 1191.487216][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1191.572973][ T8934] lo speed is unknown, defaulting to 1000 [ 1191.959702][ T8934] lo speed is unknown, defaulting to 1000 [ 1192.048924][ T9101] netlink: 'syz.2.10274': attribute type 9 has an invalid length. [ 1192.058453][ T9101] netlink: 'syz.2.10274': attribute type 11 has an invalid length. [ 1192.066555][ T9101] netlink: 'syz.2.10274': attribute type 12 has an invalid length. [ 1192.076658][ T9101] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.10274'. [ 1192.086397][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10274'. [ 1192.637319][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1192.654180][ T9122] openvswitch: netlink: IP tunnel TTL not specified. [ 1192.666558][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10280'. [ 1192.749503][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1193.179079][ T9128] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1193.576728][ T9148] netlink: 'syz.4.10287': attribute type 49 has an invalid length. [ 1193.645879][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10287'. [ 1193.654435][ T9142] lo speed is unknown, defaulting to 1000 [ 1193.660822][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1193.842108][ T9156] lo speed is unknown, defaulting to 1000 [ 1193.877515][ T9158] netlink: 'syz.4.10289': attribute type 10 has an invalid length. [ 1193.919318][ T9158] dummy0: entered promiscuous mode [ 1193.924667][ T9158] dummy0: entered allmulticast mode [ 1193.928312][ T9162] netlink: 'syz.4.10289': attribute type 10 has an invalid length. [ 1194.004371][ T9158] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1194.039291][ T9158] team0: Failed to send options change via netlink (err -105) [ 1194.046829][ T9158] team0: Port device dummy0 added [ 1194.088442][ T9162] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1194.128160][ T9162] dummy0: left promiscuous mode [ 1194.139303][ T9162] dummy0: left allmulticast mode [ 1194.179196][ T9162] team0: Failed to send options change via netlink (err -105) [ 1194.186997][ T9162] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1194.234954][ T9162] team0: Port device dummy0 removed [ 1194.251385][ T9162] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1194.427979][ T9175] netlink: 'syz.3.10291': attribute type 1 has an invalid length. [ 1194.519189][ T9175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1194.647206][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1194.686195][ T9179] bond1: (slave veth9): Enslaving as an active interface with a down link [ 1194.772023][ T9179] netlink: 'syz.3.10291': attribute type 1 has an invalid length. [ 1194.818577][ T9179] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1194.834086][ T9179] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1194.879844][ T9187] geneve3: entered promiscuous mode [ 1194.890929][ T9187] geneve3: entered allmulticast mode [ 1194.896599][ T9142] lo speed is unknown, defaulting to 1000 [ 1195.261795][ T9193] lo speed is unknown, defaulting to 1000 [ 1195.282172][ T9197] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1195.326762][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1195.615612][ T9156] lo speed is unknown, defaulting to 1000 [ 1195.616538][ T9142] lo speed is unknown, defaulting to 1000 [ 1195.627650][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1195.699253][ T9205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10297'. [ 1195.817700][ T9208] validate_nla: 2 callbacks suppressed [ 1195.817722][ T9208] netlink: 'syz.3.10298': attribute type 2 has an invalid length. [ 1195.832025][ T9208] netlink: 'syz.3.10298': attribute type 9 has an invalid length. [ 1195.840066][ T9208] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10298'. [ 1196.109899][ T9193] lo speed is unknown, defaulting to 1000 [ 1196.184862][ T9156] lo speed is unknown, defaulting to 1000 [ 1196.292861][ T9222] netlink: 'syz.4.10302': attribute type 1 has an invalid length. [ 1196.346431][ T9222] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10302'. [ 1196.677237][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1196.792120][ T9193] lo speed is unknown, defaulting to 1000 [ 1196.896015][ T9232] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10305'. [ 1197.271535][ T9235] netlink: 'syz.3.10306': attribute type 1 has an invalid length. [ 1197.381343][ T9235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1197.481034][ T9236] bond2: (slave veth11): Enslaving as an active interface with a down link [ 1197.548047][ T9235] netlink: 'syz.3.10306': attribute type 1 has an invalid length. [ 1197.649507][ T9235] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1197.656674][ T9235] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1197.847250][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1198.405162][ T9260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10313'. [ 1198.472106][ T9258] syzkaller0: entered promiscuous mode [ 1198.489036][ T9258] syzkaller0: entered allmulticast mode [ 1198.729901][ T9267] netlink: 'syz.3.10317': attribute type 13 has an invalid length. [ 1198.747947][ T9267] netlink: 'syz.3.10317': attribute type 17 has an invalid length. [ 1198.766735][ T9269] netlink: 'syz.4.10318': attribute type 1 has an invalid length. [ 1198.877205][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1198.905030][ T9269] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1199.079253][ T9269] netlink: 'syz.4.10318': attribute type 1 has an invalid length. [ 1199.300704][ T9272] bond5: (slave veth9): Enslaving as an active interface with a down link [ 1199.324402][ T9269] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1199.347455][ T9269] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1199.538448][ T9281] netlink: 'syz.2.10319': attribute type 89 has an invalid length. [ 1199.817228][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1200.085141][ T9303] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1200.127732][ T9306] lo speed is unknown, defaulting to 1000 [ 1200.877168][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1201.200289][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10332'. [ 1201.406284][ T9306] lo speed is unknown, defaulting to 1000 [ 1201.408536][ T9345] lo speed is unknown, defaulting to 1000 [ 1201.719162][ T9355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10335'. [ 1201.917180][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1202.022488][ T9366] netlink: 'syz.2.10337': attribute type 1 has an invalid length. [ 1202.110909][ T9366] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1202.193367][ T9370] bond6: (slave veth5): Enslaving as an active interface with a down link [ 1202.279890][ T9369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1202.296183][ T2879] lo speed is unknown, defaulting to 1000 [ 1202.296234][ T9345] lo speed is unknown, defaulting to 1000 [ 1202.302756][ T9306] lo speed is unknown, defaulting to 1000 [ 1202.428633][ T9366] netlink: 'syz.2.10337': attribute type 1 has an invalid length. [ 1202.460622][ T9369] syzkaller0: entered promiscuous mode [ 1202.477180][ T9369] syzkaller0: entered allmulticast mode [ 1202.553650][ T9366] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1202.561121][ T9366] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1202.992754][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1202.999238][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1203.977489][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1204.779377][ T9345] lo speed is unknown, defaulting to 1000 [ 1205.057213][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1205.124260][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10345'. [ 1205.543897][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10350'. [ 1205.643852][ T9419] netlink: 'syz.2.10352': attribute type 21 has an invalid length. [ 1205.651367][ T9412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10350'. [ 1205.750318][ T9419] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10352'. [ 1205.830786][ T9416] syzkaller1: entered promiscuous mode [ 1205.836337][ T9416] syzkaller1: entered allmulticast mode [ 1206.076135][ T9421] lo speed is unknown, defaulting to 1000 [ 1206.207224][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1206.378624][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10359'. [ 1206.417706][ T9438] bond3: entered allmulticast mode [ 1206.423598][ T9438] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1206.480930][ T9446] tipc: Started in network mode [ 1206.486852][ T9446] tipc: Node identity 0acc02a45b88, cluster identity 4711 [ 1206.507513][ T9446] tipc: Enabled bearer , priority 0 [ 1206.699793][ T9450] syzkaller0: entered promiscuous mode [ 1206.705373][ T9450] syzkaller0: entered allmulticast mode [ 1206.730959][ T9421] lo speed is unknown, defaulting to 1000 [ 1206.741742][ T9438] tipc: Resetting bearer [ 1206.783015][ T9436] tipc: Resetting bearer [ 1206.858639][ T9436] tipc: Disabling bearer [ 1207.087243][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1207.476311][ T9421] lo speed is unknown, defaulting to 1000 [ 1207.742214][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10369'. [ 1207.924246][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10370'. [ 1208.127192][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1208.228059][ T9491] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10373'. [ 1208.468301][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10377'. [ 1208.747323][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1208.946197][ T9513] netlink: 'syz.1.10382': attribute type 1 has an invalid length. [ 1209.081000][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10384'. [ 1209.155911][ T9513] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1209.297246][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1209.311961][ T9513] netlink: 'syz.1.10382': attribute type 1 has an invalid length. [ 1209.400840][ T9515] bond6: (slave veth9): Enslaving as an active interface with a down link [ 1209.495141][ T9533] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10387'. [ 1209.515550][ T9530] tipc: Enabled bearer , priority 14 [ 1209.588038][ T9513] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1209.607597][ T9513] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1209.715470][ T9533] 0ªX¹¦À: renamed from caif0 [ 1209.722318][ T9540] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10391'. [ 1209.723519][ T9533] tipc: Disabling bearer [ 1209.738603][ T9533] 0ªX¹¦À: entered allmulticast mode [ 1209.745617][ T9533] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1209.797720][ T9540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10391'. [ 1210.190282][ T9565] netlink: 'syz.2.10399': attribute type 1 has an invalid length. [ 1210.257583][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10400'. [ 1210.267213][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1210.314058][ T9572] bond7: entered promiscuous mode [ 1210.328456][ T9572] bond7: entered allmulticast mode [ 1210.334242][ T9572] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1210.422574][ T9577] netlink: 'syz.1.10403': attribute type 1 has an invalid length. [ 1210.459086][ T9577] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1210.533176][ T9577] bond7: (slave veth11): Enslaving as an active interface with a down link [ 1210.622063][ T9581] netlink: 'syz.1.10403': attribute type 1 has an invalid length. [ 1210.644681][ T9577] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1210.656323][ T9577] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1210.712130][ T9586] IPVS: set_ctl: invalid protocol: 22 100.1.1.1:20003 [ 1210.720315][ T9586] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1210.733482][ T9586] pim6reg0: linktype set to 270 [ 1210.760241][ T9591] SET target dimension over the limit! [ 1210.965800][ T9596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.984908][ T9596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.003809][ T9596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1211.154899][ T9605] netlink: 'syz.2.10413': attribute type 10 has an invalid length. [ 1211.257181][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1211.448658][ T9620] netlink: 'syz.2.10419': attribute type 1 has an invalid length. [ 1211.540097][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10421'. [ 1211.546032][ T9620] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1211.680647][ T9627] bond8: (slave veth7): Enslaving as an active interface with a down link [ 1211.731263][ T9627] netlink: 'syz.2.10419': attribute type 1 has an invalid length. [ 1211.802399][ T9620] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1211.810058][ T9620] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1212.038286][ T9656] bond8: option ad_select: invalid value (34) [ 1212.050700][ T9656] bond8 (unregistering): Released all slaves [ 1212.091768][ T9661] pim6reg1: entered promiscuous mode [ 1212.117706][ T9661] pim6reg1: entered allmulticast mode [ 1212.140293][ T9664] pim6reg99999991: entered allmulticast mode [ 1212.271911][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10431'. [ 1212.281137][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1212.389480][ T9673] FAULT_INJECTION: forcing a failure. [ 1212.389480][ T9673] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.425855][ T9673] CPU: 0 UID: 0 PID: 9673 Comm: syz.1.10433 Not tainted syzkaller #0 PREEMPT(full) [ 1212.425887][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1212.425899][ T9673] Call Trace: [ 1212.425909][ T9673] [ 1212.425919][ T9673] dump_stack_lvl+0xe8/0x150 [ 1212.425955][ T9673] should_fail_ex+0x412/0x560 [ 1212.425990][ T9673] should_failslab+0xa8/0x100 [ 1212.426017][ T9673] __kvmalloc_node_noprof+0x178/0x8a0 [ 1212.426043][ T9673] ? alloc_netdev_mqs+0xa6/0x11b0 [ 1212.426084][ T9673] alloc_netdev_mqs+0xa6/0x11b0 [ 1212.426111][ T9673] ? __pfx_veth_setup+0x10/0x10 [ 1212.426147][ T9673] rtnl_create_link+0x31f/0xd70 [ 1212.426184][ T9673] rtnl_newlink_create+0x277/0xb70 [ 1212.426210][ T9673] ? __pfx___nla_validate_parse+0x10/0x10 [ 1212.426244][ T9673] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1212.426275][ T9673] ? __pfx___mutex_lock+0x10/0x10 [ 1212.426317][ T9673] ? ns_capable+0x89/0xe0 [ 1212.426348][ T9673] rtnl_newlink+0x1666/0x1be0 [ 1212.426390][ T9673] ? __pfx_rtnl_newlink+0x10/0x10 [ 1212.426410][ T9673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.426514][ T9673] ? __local_bh_enable_ip+0xd0/0x130 [ 1212.426542][ T9673] ? lockdep_hardirqs_on+0x7a/0x110 [ 1212.426571][ T9673] ? __dev_queue_xmit+0x28b/0x3870 [ 1212.426607][ T9673] ? __local_bh_enable_ip+0xd0/0x130 [ 1212.426631][ T9673] ? __dev_queue_xmit+0x28b/0x3870 [ 1212.426688][ T9673] ? __pfx_rtnl_newlink+0x10/0x10 [ 1212.426711][ T9673] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1212.426739][ T9673] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1212.426762][ T9673] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1212.426783][ T9673] ? ref_tracker_free+0x693/0x840 [ 1212.426801][ T9673] ? __copy_skb_header+0xa3/0x4a0 [ 1212.426837][ T9673] ? __pfx_ref_tracker_free+0x10/0x10 [ 1212.426876][ T9673] netlink_rcv_skb+0x232/0x4b0 [ 1212.426903][ T9673] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1212.426929][ T9673] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1212.426965][ T9673] ? netlink_deliver_tap+0x2e/0x1b0 [ 1212.427007][ T9673] netlink_unicast+0x80f/0x9b0 [ 1212.427067][ T9673] ? __pfx_netlink_unicast+0x10/0x10 [ 1212.427101][ T9673] ? netlink_sendmsg+0x650/0xb40 [ 1212.427122][ T9673] ? skb_put+0x11b/0x210 [ 1212.427150][ T9673] netlink_sendmsg+0x813/0xb40 [ 1212.427184][ T9673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1212.427210][ T9673] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1212.427242][ T9673] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1212.427269][ T9673] ____sys_sendmsg+0x972/0x9f0 [ 1212.427308][ T9673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1212.427346][ T9673] ? import_iovec+0x73/0xa0 [ 1212.427374][ T9673] ___sys_sendmsg+0x2a5/0x360 [ 1212.427409][ T9673] ? __pfx____sys_sendmsg+0x10/0x10 [ 1212.427477][ T9673] ? __fget_files+0x2a/0x420 [ 1212.427507][ T9673] ? __fget_files+0x3a0/0x420 [ 1212.427549][ T9673] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1212.427590][ T9673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1212.427629][ T9673] ? __pfx_ksys_write+0x10/0x10 [ 1212.427666][ T9673] do_syscall_64+0x14d/0xf80 [ 1212.427695][ T9673] ? trace_irq_disable+0x3b/0x150 [ 1212.427713][ T9673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.427735][ T9673] ? clear_bhb_loop+0x40/0x90 [ 1212.427761][ T9673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.427782][ T9673] RIP: 0033:0x7fd1e079c819 [ 1212.427803][ T9673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1212.427822][ T9673] RSP: 002b:00007fd1e1608028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1212.427845][ T9673] RAX: ffffffffffffffda RBX: 00007fd1e0a15fa0 RCX: 00007fd1e079c819 [ 1212.427860][ T9673] RDX: 0000000004048084 RSI: 0000200000000080 RDI: 0000000000000003 [ 1212.427874][ T9673] RBP: 00007fd1e1608090 R08: 0000000000000000 R09: 0000000000000000 [ 1212.427888][ T9673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.427900][ T9673] R13: 00007fd1e0a16038 R14: 00007fd1e0a15fa0 R15: 00007ffef43fb608 [ 1212.427936][ T9673] [ 1212.950900][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10434'. [ 1213.001467][ T9680] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10435'. [ 1213.048043][ T9680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10435'. [ 1213.073986][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10435'. [ 1213.100904][ T9686] netlink: 'syz.2.10437': attribute type 1 has an invalid length. [ 1213.138315][ T9686] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1213.235962][ T9686] bond9: (slave veth9): Enslaving as an active interface with a down link [ 1213.317172][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1213.375103][ T9690] netlink: 'syz.2.10437': attribute type 1 has an invalid length. [ 1213.432730][ T9686] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1213.443258][ T9686] bond9: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1213.619254][ T9720] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1213.865593][ T9726] lo speed is unknown, defaulting to 1000 [ 1213.916339][ T9716] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10445'. [ 1213.944125][ T9716] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10445'. [ 1214.130196][ T9735] Cannot find add_set index 3 as target [ 1214.343622][ T9726] lo speed is unknown, defaulting to 1000 [ 1214.357235][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1214.685521][ T9755] netlink: 'syz.1.10458': attribute type 1 has an invalid length. [ 1214.875432][ T9755] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1214.940391][ T9755] netlink: 'syz.1.10458': attribute type 1 has an invalid length. [ 1214.970238][ T9777] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10464'. [ 1214.980812][ T9761] bond8: (slave veth13): Enslaving as an active interface with a down link [ 1214.993425][ T9777] netlink: 260 bytes leftover after parsing attributes in process `syz.0.10464'. [ 1215.003387][ T9726] lo speed is unknown, defaulting to 1000 [ 1215.024884][ T9755] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1215.044578][ T9755] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1215.154102][ T5208] block nbd0: Possible stuck request ffff8880ad068000: control (read@0,1024B). Runtime 240 seconds [ 1215.165256][ T5208] block nbd0: Possible stuck request ffff8880ad068200: control (read@1024,1024B). Runtime 240 seconds [ 1215.176667][ T5208] block nbd0: Possible stuck request ffff8880ad068400: control (read@2048,1024B). Runtime 240 seconds [ 1215.188024][ T5208] block nbd0: Possible stuck request ffff8880ad068600: control (read@3072,1024B). Runtime 240 seconds [ 1215.457174][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1216.445364][ T9821] syzkaller0: entered promiscuous mode [ 1216.451001][ T9821] syzkaller0: entered allmulticast mode [ 1216.517209][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1216.958972][ T9844] __nla_validate_parse: 6 callbacks suppressed [ 1216.958994][ T9844] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10487'. [ 1217.498325][ T9877] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10500'. [ 1217.587665][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1217.720395][ T9892] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10501'. [ 1217.769786][ T9893] lo speed is unknown, defaulting to 1000 [ 1217.923179][ T9893] lo speed is unknown, defaulting to 1000 [ 1218.055305][ T9893] lo speed is unknown, defaulting to 1000 [ 1218.557326][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1219.567571][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1220.647286][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1221.757507][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1222.677257][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1223.757319][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1224.807276][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1225.837869][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1226.867391][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1227.917322][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1228.907557][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1230.097304][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1231.057477][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1232.137358][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1233.137321][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1234.187326][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1235.197454][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1236.297448][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1237.287248][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1238.377282][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1238.835663][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1239.427745][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1239.634900][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10507'. [ 1239.690577][ T9904] netlink: 632 bytes leftover after parsing attributes in process `syz.3.10507'. [ 1239.720744][ T9904] syzkaller1: entered promiscuous mode [ 1239.726512][ T9904] syzkaller1: entered allmulticast mode [ 1239.747806][ T9904] tipc: Enabling of bearer rejected, failed to enable media [ 1240.004179][ T9927] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10514'. [ 1240.052227][ T9930] erspan0: entered promiscuous mode [ 1240.348021][ T9948] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10517'. [ 1240.357297][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1240.357531][ T9944] netlink: 'syz.0.10520': attribute type 58 has an invalid length. [ 1240.357554][ T9944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10520'. [ 1240.398210][ T9947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10521'. [ 1240.482990][ T9954] syzkaller1: entered promiscuous mode [ 1240.490025][ T9954] syzkaller1: entered allmulticast mode [ 1240.517656][ T9957] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10524'. [ 1240.584453][ T9957] veth1_to_bond: left promiscuous mode [ 1240.590718][ T9957] veth1_to_bond: left allmulticast mode [ 1240.811079][ T9972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10527'. [ 1240.876108][ T9973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10526'. [ 1241.113407][ T29] audit: type=1804 audit(1775171191.021:11): pid=9988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.10530" name="/newroot/312/cgroup.controllers" dev="tmpfs" ino=1607 res=1 errno=0 [ 1241.200801][ T29] audit: type=1800 audit(1775171191.021:12): pid=9988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10530" name="cgroup.controllers" dev="tmpfs" ino=1607 res=0 errno=0 [ 1241.258107][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10534'. [ 1241.427188][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1241.481613][T10008] syzkaller0: entered promiscuous mode [ 1241.491401][T10008] syzkaller0: entered allmulticast mode [ 1241.566418][T10006] bond10: option tlb_dynamic_lb: invalid value (2) [ 1241.611592][T10006] bond10 (unregistering): Released all slaves [ 1241.677217][T10010] macvtap0: entered promiscuous mode [ 1241.725379][T10021] netlink: 'syz.4.10541': attribute type 4 has an invalid length. [ 1241.763393][T10021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1241.779764][T10016] macvtap0 (unregistering): left promiscuous mode [ 1241.818807][T10008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1241.870703][T10018] lo speed is unknown, defaulting to 1000 [ 1242.027641][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1242.274538][T10039] syzkaller1: entered promiscuous mode [ 1242.280366][T10039] syzkaller1: entered allmulticast mode [ 1242.424678][T10018] lo speed is unknown, defaulting to 1000 [ 1242.477222][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1242.818030][T10061] vlan0: entered promiscuous mode [ 1242.824879][T10061] bridge0: port 3(vlan0) entered blocking state [ 1242.834183][T10061] bridge0: port 3(vlan0) entered disabled state [ 1242.863422][T10061] vlan0: entered allmulticast mode [ 1242.880275][T10061] ip6gretap0: entered allmulticast mode [ 1242.903972][T10018] lo speed is unknown, defaulting to 1000 [ 1243.072750][T10068] FAULT_INJECTION: forcing a failure. [ 1243.072750][T10068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1243.104468][T10068] CPU: 0 UID: 0 PID: 10068 Comm: syz.4.10557 Not tainted syzkaller #0 PREEMPT(full) [ 1243.104499][T10068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1243.104511][T10068] Call Trace: [ 1243.104521][T10068] [ 1243.104530][T10068] dump_stack_lvl+0xe8/0x150 [ 1243.104567][T10068] should_fail_ex+0x412/0x560 [ 1243.104603][T10068] _copy_from_user+0x2d/0xb0 [ 1243.104628][T10068] kstrtouint_from_user+0xd6/0x180 [ 1243.104662][T10068] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1243.104712][T10068] proc_fail_nth_write+0x8e/0x210 [ 1243.104743][T10068] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1243.104780][T10068] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1243.104812][T10068] vfs_write+0x29a/0xb90 [ 1243.104846][T10068] ? __pfx_vfs_write+0x10/0x10 [ 1243.104871][T10068] ? __fget_files+0x2a/0x420 [ 1243.104907][T10068] ? __fget_files+0x3a0/0x420 [ 1243.104936][T10068] ? __fget_files+0x2a/0x420 [ 1243.104976][T10068] ksys_write+0x150/0x270 [ 1243.105004][T10068] ? __pfx_ksys_write+0x10/0x10 [ 1243.105041][T10068] do_syscall_64+0x14d/0xf80 [ 1243.105070][T10068] ? trace_irq_disable+0x3b/0x150 [ 1243.105089][T10068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.105111][T10068] ? clear_bhb_loop+0x40/0x90 [ 1243.105138][T10068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.105159][T10068] RIP: 0033:0x7f969175d04e [ 1243.105180][T10068] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1243.105198][T10068] RSP: 002b:00007f96925c4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1243.105222][T10068] RAX: ffffffffffffffda RBX: 00007f96925c56c0 RCX: 00007f969175d04e [ 1243.105238][T10068] RDX: 0000000000000001 RSI: 00007f96925c50a0 RDI: 000000000000000a [ 1243.105251][T10068] RBP: 00007f96925c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.105264][T10068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1243.105277][T10068] R13: 00007f9691a16128 R14: 00007f9691a16090 R15: 00007ffdf106d168 [ 1243.105311][T10068] [ 1243.467319][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1243.949455][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 1243.957573][ C1] lec:lec_tx_timeout: lec0 [ 1243.962513][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1244.256240][T10102] x_tables: unsorted entry at hook 2 [ 1244.314278][T10103] netlink: 'syz.4.10572': attribute type 3 has an invalid length. [ 1244.354374][T10103] netlink: 'syz.4.10572': attribute type 3 has an invalid length. [ 1244.409156][T10103] netlink: 'syz.4.10572': attribute type 3 has an invalid length. [ 1244.445886][T10103] netlink: 'syz.4.10572': attribute type 3 has an invalid length. [ 1244.486368][T10103] netlink: 'syz.4.10572': attribute type 3 has an invalid length. [ 1244.526609][T10103] netlink: 'syz.4.10572': attribute type 3 has an invalid length. [ 1244.558033][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1244.580918][T10103] netlink: 'syz.4.10572': attribute type 3 has an invalid length. [ 1244.610865][T10103] netlink: 'syz.4.10572': attribute type 3 has an invalid length. [ 1244.947836][T10113] lo speed is unknown, defaulting to 1000 [ 1245.237533][ T5208] block nbd0: Possible stuck request ffff8880ad068000: control (read@0,1024B). Runtime 270 seconds [ 1245.248499][ T5208] block nbd0: Possible stuck request ffff8880ad068200: control (read@1024,1024B). Runtime 270 seconds [ 1245.260691][ T5208] block nbd0: Possible stuck request ffff8880ad068400: control (read@2048,1024B). Runtime 270 seconds [ 1245.264238][T10124] __nla_validate_parse: 13 callbacks suppressed [ 1245.264257][T10124] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10580'. [ 1245.271947][ T5208] block nbd0: Possible stuck request ffff8880ad068600: control (read@3072,1024B). Runtime 270 seconds [ 1245.390581][T10113] lo speed is unknown, defaulting to 1000 [ 1245.601788][T10124] bond9: entered allmulticast mode [ 1245.610210][T10124] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1245.657237][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1245.683045][T10113] lo speed is unknown, defaulting to 1000 [ 1245.855344][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10587'. [ 1246.151441][T10155] validate_nla: 61 callbacks suppressed [ 1246.151467][T10155] netlink: 'syz.2.10592': attribute type 4 has an invalid length. [ 1246.372748][T10163] netlink: 'syz.2.10595': attribute type 1 has an invalid length. [ 1246.418817][T10166] vxcan3: entered promiscuous mode [ 1246.498463][T10163] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1246.521716][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10600'. [ 1246.650581][T10184] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10598'. [ 1246.693964][T10173] bond10: (slave veth11): Enslaving as an active interface with a down link [ 1246.727164][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1246.874933][T10163] netlink: 'syz.2.10595': attribute type 1 has an invalid length. [ 1246.996731][T10173] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1247.048675][T10173] bond10: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1247.638625][T10210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10613'. [ 1247.657511][T10210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1247.717570][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1248.283645][T10235] x_tables: duplicate underflow at hook 1 [ 1248.384884][T10242] veth1_macvtap: renamed from veth0_vlan [ 1248.815877][T10269] netlink: 'syz.3.10631': attribute type 1 has an invalid length. [ 1248.847229][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1248.865533][T10269] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10631'. [ 1248.977149][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1248.978412][T10278] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10632'. [ 1248.985248][ C1] lec:lec_tx_timeout: lec0 [ 1249.531347][T10297] FAULT_INJECTION: forcing a failure. [ 1249.531347][T10297] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.566456][T10297] CPU: 1 UID: 0 PID: 10297 Comm: syz.1.10636 Not tainted syzkaller #0 PREEMPT(full) [ 1249.566487][T10297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1249.566499][T10297] Call Trace: [ 1249.566507][T10297] [ 1249.566518][T10297] dump_stack_lvl+0xe8/0x150 [ 1249.566556][T10297] should_fail_ex+0x412/0x560 [ 1249.566592][T10297] should_failslab+0xa8/0x100 [ 1249.566622][T10297] __kmalloc_noprof+0xe8/0x760 [ 1249.566647][T10297] ? dev_prep_valid_name+0x1bc/0x630 [ 1249.566674][T10297] dev_prep_valid_name+0x1bc/0x630 [ 1249.566696][T10297] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 1249.566728][T10297] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 1249.566757][T10297] ? __raw_spin_lock_init+0x45/0x100 [ 1249.566783][T10297] register_netdevice+0x539/0x1cf0 [ 1249.566817][T10297] ? _get_random_bytes+0x1e7/0x260 [ 1249.566841][T10297] ? __pfx__get_random_bytes+0x10/0x10 [ 1249.566871][T10297] ? dev_addr_check+0x20/0x230 [ 1249.566896][T10297] ? __pfx_register_netdevice+0x10/0x10 [ 1249.566928][T10297] ? __asan_memset+0x22/0x50 [ 1249.566950][T10297] ? dev_addr_mod+0x354/0x520 [ 1249.566980][T10297] ? netif_inherit_tso_max+0x1ec/0x340 [ 1249.567015][T10297] veth_newlink+0x4a4/0xb70 [ 1249.567054][T10297] ? __pfx_veth_newlink+0x10/0x10 [ 1249.567081][T10297] ? alloc_netdev_mqs+0xc89/0x11b0 [ 1249.567107][T10297] ? rtnl_create_link+0x31f/0xd70 [ 1249.567134][T10297] ? rtnl_newlink_create+0x277/0xb70 [ 1249.567157][T10297] ? rtnl_newlink+0x1666/0x1be0 [ 1249.567177][T10297] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1249.567198][T10297] ? netlink_unicast+0x80f/0x9b0 [ 1249.567226][T10297] ? netlink_sendmsg+0x813/0xb40 [ 1249.567247][T10297] ? ____sys_sendmsg+0x972/0x9f0 [ 1249.567273][T10297] ? do_syscall_64+0x14d/0xf80 [ 1249.567301][T10297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.567398][T10297] ? validate_linkmsg+0x765/0x950 [ 1249.567438][T10297] ? __pfx_veth_newlink+0x10/0x10 [ 1249.567470][T10297] rtnl_newlink_create+0x329/0xb70 [ 1249.567496][T10297] ? __pfx___nla_validate_parse+0x10/0x10 [ 1249.567530][T10297] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1249.567560][T10297] ? __pfx___mutex_lock+0x10/0x10 [ 1249.567603][T10297] ? ns_capable+0x89/0xe0 [ 1249.567634][T10297] rtnl_newlink+0x1666/0x1be0 [ 1249.567675][T10297] ? __pfx_rtnl_newlink+0x10/0x10 [ 1249.567695][T10297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.567799][T10297] ? __local_bh_enable_ip+0xd0/0x130 [ 1249.567827][T10297] ? lockdep_hardirqs_on+0x7a/0x110 [ 1249.567856][T10297] ? __dev_queue_xmit+0x28b/0x3870 [ 1249.567883][T10297] ? __local_bh_enable_ip+0xd0/0x130 [ 1249.567908][T10297] ? __dev_queue_xmit+0x28b/0x3870 [ 1249.567966][T10297] ? __pfx_rtnl_newlink+0x10/0x10 [ 1249.567988][T10297] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1249.568016][T10297] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1249.568038][T10297] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1249.568059][T10297] ? ref_tracker_free+0x693/0x840 [ 1249.568077][T10297] ? __copy_skb_header+0xa3/0x4a0 [ 1249.568106][T10297] ? __pfx_ref_tracker_free+0x10/0x10 [ 1249.568139][T10297] netlink_rcv_skb+0x232/0x4b0 [ 1249.568164][T10297] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1249.568190][T10297] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1249.568226][T10297] ? netlink_deliver_tap+0x2e/0x1b0 [ 1249.568258][T10297] netlink_unicast+0x80f/0x9b0 [ 1249.568300][T10297] ? __pfx_netlink_unicast+0x10/0x10 [ 1249.568335][T10297] ? netlink_sendmsg+0x650/0xb40 [ 1249.568356][T10297] ? skb_put+0x11b/0x210 [ 1249.568384][T10297] netlink_sendmsg+0x813/0xb40 [ 1249.568427][T10297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1249.568454][T10297] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1249.568486][T10297] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1249.568514][T10297] ____sys_sendmsg+0x972/0x9f0 [ 1249.568551][T10297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1249.568588][T10297] ? import_iovec+0x73/0xa0 [ 1249.568616][T10297] ___sys_sendmsg+0x2a5/0x360 [ 1249.568649][T10297] ? __pfx____sys_sendmsg+0x10/0x10 [ 1249.568716][T10297] ? __fget_files+0x2a/0x420 [ 1249.568745][T10297] ? __fget_files+0x3a0/0x420 [ 1249.568785][T10297] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1249.568815][T10297] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1249.568852][T10297] ? __pfx_ksys_write+0x10/0x10 [ 1249.568887][T10297] do_syscall_64+0x14d/0xf80 [ 1249.568912][T10297] ? trace_irq_disable+0x3b/0x150 [ 1249.568930][T10297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.568951][T10297] ? clear_bhb_loop+0x40/0x90 [ 1249.568976][T10297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.568996][T10297] RIP: 0033:0x7fd1e079c819 [ 1249.569016][T10297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.569035][T10297] RSP: 002b:00007fd1e1608028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1249.569058][T10297] RAX: ffffffffffffffda RBX: 00007fd1e0a15fa0 RCX: 00007fd1e079c819 [ 1249.569073][T10297] RDX: 0000000004048084 RSI: 0000200000000080 RDI: 0000000000000003 [ 1249.569087][T10297] RBP: 00007fd1e1608090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.569099][T10297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1249.569111][T10297] R13: 00007fd1e0a16038 R14: 00007fd1e0a15fa0 R15: 00007ffef43fb608 [ 1249.569142][T10297] [ 1249.717140][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1250.241043][T10306] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1250.257586][T10314] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1250.287548][T10311] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10640'. [ 1250.667880][T10336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10645'. [ 1250.712043][ T5490] veth1_macvtap: left promiscuous mode [ 1250.753862][ T5490] veth1_macvtap: entered promiscuous mode [ 1250.803523][T10341] netlink: 'syz.1.10649': attribute type 10 has an invalid length. [ 1250.835523][T10341] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.883310][T10341] bond0: (slave team0): Enslaving as an active interface with an up link [ 1250.927164][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1251.289359][T10358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1251.390912][T10369] netlink: 'syz.0.10654': attribute type 2 has an invalid length. [ 1251.714334][T10394] netlink: 'syz.1.10658': attribute type 10 has an invalid length. [ 1251.757224][T10394] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10658'. [ 1251.779354][T10394] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1251.837197][T10394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1251.890996][T10394] hsr0: entered promiscuous mode [ 1251.896612][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10664'. [ 1251.910751][T10394] bridge0: port 3(hsr0) entered blocking state [ 1251.922987][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10664'. [ 1251.927267][T10394] bridge0: port 3(hsr0) entered disabled state [ 1251.937222][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1251.979989][T10394] hsr0: entered allmulticast mode [ 1252.002159][T10394] hsr_slave_0: entered allmulticast mode [ 1252.203427][T10394] hsr_slave_1: entered allmulticast mode [ 1252.411972][T10418] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10668'. [ 1252.459168][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10669'. [ 1252.557437][T10422] bond6: entered promiscuous mode [ 1252.573517][T10422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1252.583275][T10425] FAULT_INJECTION: forcing a failure. [ 1252.583275][T10425] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.601949][T10425] CPU: 0 UID: 0 PID: 10425 Comm: syz.2.10670 Not tainted syzkaller #0 PREEMPT(full) [ 1252.601979][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1252.601993][T10425] Call Trace: [ 1252.602001][T10425] [ 1252.602010][T10425] dump_stack_lvl+0xe8/0x150 [ 1252.602048][T10425] should_fail_ex+0x412/0x560 [ 1252.602086][T10425] should_failslab+0xa8/0x100 [ 1252.602116][T10425] __kvmalloc_node_noprof+0x178/0x8a0 [ 1252.602142][T10425] ? register_lock_class+0x31/0x2e0 [ 1252.602168][T10425] ? veth_dev_init+0x368/0x570 [ 1252.602208][T10425] veth_dev_init+0x368/0x570 [ 1252.602248][T10425] register_netdevice+0x6d1/0x1cf0 [ 1252.602283][T10425] ? _get_random_bytes+0x1e7/0x260 [ 1252.602308][T10425] ? __pfx__get_random_bytes+0x10/0x10 [ 1252.602338][T10425] ? dev_addr_check+0x20/0x230 [ 1252.602365][T10425] ? __pfx_register_netdevice+0x10/0x10 [ 1252.602397][T10425] ? __asan_memset+0x22/0x50 [ 1252.602419][T10425] ? dev_addr_mod+0x354/0x520 [ 1252.602449][T10425] ? netif_inherit_tso_max+0x1ec/0x340 [ 1252.602480][T10425] veth_newlink+0x4a4/0xb70 [ 1252.602519][T10425] ? __pfx_veth_newlink+0x10/0x10 [ 1252.602546][T10425] ? alloc_netdev_mqs+0xc89/0x11b0 [ 1252.602581][T10425] ? rtnl_create_link+0x31f/0xd70 [ 1252.602608][T10425] ? rtnl_newlink_create+0x277/0xb70 [ 1252.602632][T10425] ? rtnl_newlink+0x1666/0x1be0 [ 1252.602653][T10425] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1252.602675][T10425] ? netlink_unicast+0x80f/0x9b0 [ 1252.602704][T10425] ? netlink_sendmsg+0x813/0xb40 [ 1252.602725][T10425] ? ____sys_sendmsg+0x972/0x9f0 [ 1252.602752][T10425] ? do_syscall_64+0x14d/0xf80 [ 1252.602780][T10425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.602872][T10425] ? validate_linkmsg+0x765/0x950 [ 1252.602920][T10425] ? __pfx_veth_newlink+0x10/0x10 [ 1252.602951][T10425] rtnl_newlink_create+0x329/0xb70 [ 1252.602981][T10425] ? __mutex_lock+0x5ac/0x1300 [ 1252.603015][T10425] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1252.603044][T10425] ? __pfx___mutex_lock+0x10/0x10 [ 1252.603083][T10425] ? ns_capable+0x89/0xe0 [ 1252.603113][T10425] rtnl_newlink+0x1666/0x1be0 [ 1252.603152][T10425] ? __pfx_rtnl_newlink+0x10/0x10 [ 1252.603172][T10425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.603274][T10425] ? __local_bh_enable_ip+0xd0/0x130 [ 1252.603299][T10425] ? lockdep_hardirqs_on+0x7a/0x110 [ 1252.603325][T10425] ? __dev_queue_xmit+0x28b/0x3870 [ 1252.603349][T10425] ? __local_bh_enable_ip+0xd0/0x130 [ 1252.603372][T10425] ? __dev_queue_xmit+0x28b/0x3870 [ 1252.603425][T10425] ? __pfx_rtnl_newlink+0x10/0x10 [ 1252.603447][T10425] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1252.603473][T10425] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1252.603494][T10425] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1252.603513][T10425] ? ref_tracker_free+0x693/0x840 [ 1252.603530][T10425] ? __copy_skb_header+0xa3/0x4a0 [ 1252.603558][T10425] ? __pfx_ref_tracker_free+0x10/0x10 [ 1252.603597][T10425] netlink_rcv_skb+0x232/0x4b0 [ 1252.603620][T10425] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1252.603645][T10425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1252.603679][T10425] ? netlink_deliver_tap+0x2e/0x1b0 [ 1252.603710][T10425] netlink_unicast+0x80f/0x9b0 [ 1252.603749][T10425] ? __pfx_netlink_unicast+0x10/0x10 [ 1252.603781][T10425] ? netlink_sendmsg+0x650/0xb40 [ 1252.603801][T10425] ? skb_put+0x11b/0x210 [ 1252.603828][T10425] netlink_sendmsg+0x813/0xb40 [ 1252.603863][T10425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.603890][T10425] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1252.603924][T10425] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1252.603953][T10425] ____sys_sendmsg+0x972/0x9f0 [ 1252.603993][T10425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1252.604032][T10425] ? import_iovec+0x73/0xa0 [ 1252.604062][T10425] ___sys_sendmsg+0x2a5/0x360 [ 1252.604097][T10425] ? __pfx____sys_sendmsg+0x10/0x10 [ 1252.604166][T10425] ? __fget_files+0x2a/0x420 [ 1252.604196][T10425] ? __fget_files+0x3a0/0x420 [ 1252.604239][T10425] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1252.604270][T10425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1252.604309][T10425] ? __pfx_ksys_write+0x10/0x10 [ 1252.604347][T10425] do_syscall_64+0x14d/0xf80 [ 1252.604375][T10425] ? trace_irq_disable+0x3b/0x150 [ 1252.604394][T10425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.604415][T10425] ? clear_bhb_loop+0x40/0x90 [ 1252.604442][T10425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.604464][T10425] RIP: 0033:0x7fa59019c819 [ 1252.604485][T10425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.604503][T10425] RSP: 002b:00007fa590faa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1252.604527][T10425] RAX: ffffffffffffffda RBX: 00007fa590415fa0 RCX: 00007fa59019c819 [ 1252.604543][T10425] RDX: 0000000004048084 RSI: 0000200000000080 RDI: 0000000000000003 [ 1252.604556][T10425] RBP: 00007fa590faa090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.604569][T10425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1252.604589][T10425] R13: 00007fa590416038 R14: 00007fa590415fa0 R15: 00007ffe3ebb2448 [ 1252.604625][T10425] [ 1253.277191][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1253.284530][T10439] netlink: 'syz.2.10675': attribute type 2 has an invalid length. [ 1253.299866][T10439] netlink: 'syz.2.10675': attribute type 9 has an invalid length. [ 1253.318978][T10422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1253.326350][T10422] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 1253.328470][T10439] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10675'. [ 1253.339005][T10422] bond6: (slave vcan1): Error -95 calling set_mac_address [ 1253.464222][T10444] netlink: 'syz.0.10677': attribute type 29 has an invalid length. [ 1253.500483][T10444] netlink: 'syz.0.10677': attribute type 29 has an invalid length. [ 1253.509056][T10448] netlink: 'syz.2.10679': attribute type 7 has an invalid length. [ 1253.522671][T10444] netlink: 500 bytes leftover after parsing attributes in process `syz.0.10677'. [ 1253.533153][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10677'. [ 1253.571599][T19647] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1253.574226][T10448] netlink: 'syz.2.10679': attribute type 7 has an invalid length. [ 1253.593775][T19647] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1253.644205][T19647] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1253.673539][T19647] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1254.107511][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1254.583513][T10495] lo speed is unknown, defaulting to 1000 [ 1255.137765][T10495] lo speed is unknown, defaulting to 1000 [ 1255.157171][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1255.348839][T10524] geneve3: entered promiscuous mode [ 1255.365174][ T3004] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1255.394968][ T3004] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1255.415726][ T3004] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1255.436090][ T3004] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1255.456767][T10527] sctp: [Deprecated]: syz.1.10700 (pid 10527) Use of int in maxseg socket option. [ 1255.456767][T10527] Use struct sctp_assoc_value instead [ 1255.571692][T10495] lo speed is unknown, defaulting to 1000 [ 1255.681067][T10537] netlink: 'syz.4.10705': attribute type 1 has an invalid length. [ 1255.768654][T10537] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1255.872180][T10543] bond7: (slave veth11): Enslaving as an active interface with a down link [ 1255.978326][T10537] netlink: 'syz.4.10705': attribute type 1 has an invalid length. [ 1256.016534][T10537] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1256.024369][T10537] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1256.289759][T10557] __nla_validate_parse: 1 callbacks suppressed [ 1256.289783][T10557] netlink: 88 bytes leftover after parsing attributes in process `syz.1.10709'. [ 1256.346157][T10557] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10709'. [ 1256.364895][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1257.172148][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10718'. [ 1257.307519][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1258.035831][T10610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10730'. [ 1258.317203][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1258.755395][T10632] validate_nla: 1 callbacks suppressed [ 1258.755418][T10632] netlink: 'syz.3.10738': attribute type 1 has an invalid length. [ 1258.837464][T10632] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1258.896846][T10632] bond4 (unregistering): Released all slaves [ 1259.208356][T10658] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1259.307677][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1259.336047][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10749'. [ 1259.359559][T10666] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10748'. [ 1259.395819][T10668] FAULT_INJECTION: forcing a failure. [ 1259.395819][T10668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.412509][T10666] netlink: 'syz.3.10748': attribute type 13 has an invalid length. [ 1259.421220][T10666] netlink: 'syz.3.10748': attribute type 17 has an invalid length. [ 1259.440364][T10668] CPU: 0 UID: 0 PID: 10668 Comm: syz.2.10750 Not tainted syzkaller #0 PREEMPT(full) [ 1259.440395][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1259.440409][T10668] Call Trace: [ 1259.440417][T10668] [ 1259.440427][T10668] dump_stack_lvl+0xe8/0x150 [ 1259.440463][T10668] should_fail_ex+0x412/0x560 [ 1259.440505][T10668] _copy_to_user+0x31/0xb0 [ 1259.440531][T10668] simple_read_from_buffer+0xe1/0x170 [ 1259.440574][T10668] proc_fail_nth_read+0x1bb/0x230 [ 1259.440608][T10668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1259.440640][T10668] ? rw_verify_area+0x2a6/0x4d0 [ 1259.440663][T10668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1259.440694][T10668] vfs_read+0x20c/0xa70 [ 1259.440715][T10668] ? fdget_pos+0x246/0x320 [ 1259.440739][T10668] ? __pfx___mutex_lock+0x10/0x10 [ 1259.440770][T10668] ? __pfx_vfs_read+0x10/0x10 [ 1259.440794][T10668] ? __fget_files+0x2a/0x420 [ 1259.440828][T10668] ? __fget_files+0x3a0/0x420 [ 1259.440857][T10668] ? __fget_files+0x2a/0x420 [ 1259.440896][T10668] ksys_read+0x150/0x270 [ 1259.440923][T10668] ? __pfx_ksys_read+0x10/0x10 [ 1259.440959][T10668] do_syscall_64+0x14d/0xf80 [ 1259.440988][T10668] ? trace_irq_disable+0x3b/0x150 [ 1259.441006][T10668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.441027][T10668] ? clear_bhb_loop+0x40/0x90 [ 1259.441053][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.441073][T10668] RIP: 0033:0x7fa59015d04e [ 1259.441093][T10668] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1259.441111][T10668] RSP: 002b:00007fa590fa9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1259.441134][T10668] RAX: ffffffffffffffda RBX: 00007fa590faa6c0 RCX: 00007fa59015d04e [ 1259.441149][T10668] RDX: 000000000000000f RSI: 00007fa590faa0a0 RDI: 0000000000000004 [ 1259.441163][T10668] RBP: 00007fa590faa090 R08: 0000000000000000 R09: 0000000000000000 [ 1259.441176][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.441188][T10668] R13: 00007fa590416038 R14: 00007fa590415fa0 R15: 00007ffe3ebb2448 [ 1259.441223][T10668] [ 1259.754186][T10662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.761980][T10662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.900922][T10662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.347322][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1260.488043][T10666] erspan0: left promiscuous mode [ 1260.548328][T10666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1260.559023][T10666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.594117][T10666] 0ªX¹¦À: left allmulticast mode [ 1260.605085][T10666] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1260.722480][T24266] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.732591][T24266] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.777688][T24266] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.808209][T24266] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.871278][T24266] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.894928][T24266] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.927716][ T9541] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.980166][ T9541] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.018459][T10689] lo speed is unknown, defaulting to 1000 [ 1261.046655][T10713] syzkaller1: entered promiscuous mode [ 1261.078945][T10713] syzkaller1: entered allmulticast mode [ 1261.112239][T10720] xt_addrtype: ipv6 does not support BROADCAST matching [ 1261.392990][T10733] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 1261.417141][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1261.880170][T10689] lo speed is unknown, defaulting to 1000 [ 1262.434770][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10770'. [ 1262.461425][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10770'. [ 1262.470696][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1262.680728][T10689] lo speed is unknown, defaulting to 1000 [ 1263.537215][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1264.105846][T10823] syzkaller1: entered promiscuous mode [ 1264.127501][T10823] syzkaller1: entered allmulticast mode [ 1264.557214][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1265.547288][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1265.967513][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10795'. [ 1266.300966][T10896] pimreg0: tun_chr_ioctl cmd 1074025681 [ 1266.615231][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1266.741452][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10807'. [ 1266.767537][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10807'. [ 1266.794714][T10922] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 1266.806773][T10916] netlink: 124 bytes leftover after parsing attributes in process `syz.3.10807'. [ 1266.807606][T10923] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10807'. [ 1267.129977][T10926] gretap1: entered promiscuous mode [ 1267.166220][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10810'. [ 1267.198494][T10934] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1267.257666][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10809'. [ 1267.346414][T10938] vlan4: entered allmulticast mode [ 1267.368730][T10938] bond0: entered allmulticast mode [ 1267.390715][T10938] bond_slave_0: entered allmulticast mode [ 1267.400093][T10938] bond_slave_1: entered allmulticast mode [ 1267.431272][T10943] netlink: 'syz.3.10812': attribute type 1 has an invalid length. [ 1267.595757][T10943] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1267.704538][T10946] bond4: (slave veth15): Enslaving as an active interface with a down link [ 1267.777237][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1267.880995][T10946] netlink: 'syz.3.10812': attribute type 1 has an invalid length. [ 1267.986150][T10943] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1268.001347][T10943] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1268.189911][T10979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10818'. [ 1268.537418][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10823'. [ 1268.639535][T10997] netlink: 'syz.4.10824': attribute type 1 has an invalid length. [ 1268.807182][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1268.909644][T10997] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1268.948493][T10997] netlink: 'syz.4.10824': attribute type 1 has an invalid length. [ 1268.963435][T11001] bond8: (slave veth13): Enslaving as an active interface with a down link [ 1268.986544][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10827'. [ 1268.999065][T11008] hsr_slave_0: left promiscuous mode [ 1269.005475][T11008] hsr_slave_1: left promiscuous mode [ 1269.056333][T10996] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1269.063826][T10996] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1269.262012][T11021] netlink: 7 bytes leftover after parsing attributes in process `syz.1.10833'. [ 1269.278518][T11021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10833'. [ 1269.293581][T11021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10833'. [ 1269.353695][T11032] openvswitch: netlink: IPv4 tun info is not correct [ 1269.411113][T11033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10832'. [ 1269.436206][T11033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10832'. [ 1269.449236][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10836'. [ 1269.463676][T11037] dummy0: left allmulticast mode [ 1269.476783][T11039] netlink: 'syz.2.10837': attribute type 33 has an invalid length. [ 1269.485100][T11037] dummy0: left promiscuous mode [ 1269.490847][T11037] bridge0: port 4(dummy0) entered disabled state [ 1269.497881][T11039] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10837'. [ 1269.536129][T11037] batman_adv: batadv0: Adding interface: dummy0 [ 1269.546274][T11037] batman_adv: batadv0: Interface activated: dummy0 [ 1269.680050][T11024] batadv0: mtu less than device minimum [ 1269.698749][T11024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1269.711457][T11024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1269.723350][T11024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1269.735159][T11024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1269.746946][T11024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1269.758636][T11024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1269.790849][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1270.184460][T11060] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1270.622275][T11083] Cannot find del_set index 3 as target [ 1270.897193][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1271.378235][T11125] netlink: 'syz.1.10854': attribute type 1 has an invalid length. [ 1271.613275][T11137] bridge_slave_1: left allmulticast mode [ 1271.634306][T11137] bridge_slave_1: left promiscuous mode [ 1271.645712][T11137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.692376][T11137] xt_recent: hitcount (262143) is larger than allowed maximum (65535) [ 1271.741795][T11137] netlink: 'syz.1.10856': attribute type 1 has an invalid length. [ 1271.897422][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1272.713717][T11186] net_ratelimit: 14 callbacks suppressed [ 1272.713740][T11186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1272.967203][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1273.241164][T11209] lo speed is unknown, defaulting to 1000 [ 1273.364529][T11214] dvmrp8: left allmulticast mode [ 1273.617490][T11209] lo speed is unknown, defaulting to 1000 [ 1273.965456][T11209] lo speed is unknown, defaulting to 1000 [ 1273.997417][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1274.618578][T11264] __nla_validate_parse: 8 callbacks suppressed [ 1274.618601][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10898'. [ 1274.667662][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1274.724387][T11270] tipc: Enabled bearer , priority 0 [ 1274.759568][T11270] syzkaller0: entered promiscuous mode [ 1274.765270][T11270] syzkaller0: entered allmulticast mode [ 1274.791547][T11270] tipc: Resetting bearer [ 1274.843712][T11269] tipc: Resetting bearer [ 1274.893585][T11269] tipc: Disabling bearer [ 1274.944721][T11273] ipvlan2: entered promiscuous mode [ 1274.951604][T11273] bridge0: port 4(ipvlan2) entered blocking state [ 1274.959317][T11273] bridge0: port 4(ipvlan2) entered disabled state [ 1274.966184][T11273] ipvlan2: entered allmulticast mode [ 1274.973746][T11273] bridge0: entered allmulticast mode [ 1274.986331][T11273] ipvlan2: left allmulticast mode [ 1274.992187][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1275.008488][T11273] bridge0: left allmulticast mode [ 1275.035979][T11276] syzkaller1: entered promiscuous mode [ 1275.042340][T11276] syzkaller1: entered allmulticast mode [ 1275.238226][T11293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10906'. [ 1275.256586][T11293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10906'. [ 1275.310322][ T5208] block nbd0: Possible stuck request ffff8880ad068000: control (read@0,1024B). Runtime 300 seconds [ 1275.321724][ T5208] block nbd0: Possible stuck request ffff8880ad068200: control (read@1024,1024B). Runtime 300 seconds [ 1275.337503][ T5208] block nbd0: Possible stuck request ffff8880ad068400: control (read@2048,1024B). Runtime 300 seconds [ 1275.349234][ T5208] block nbd0: Possible stuck request ffff8880ad068600: control (read@3072,1024B). Runtime 300 seconds [ 1275.517811][T11298] lo speed is unknown, defaulting to 1000 [ 1275.586551][T11303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1275.691392][T11306] žÿ: renamed from team_slave_1 [ 1276.099066][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1276.258207][T11317] dvmrp1: entered allmulticast mode [ 1276.293655][T11322] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10917'. [ 1276.306341][T11318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1276.455117][T11298] lo speed is unknown, defaulting to 1000 [ 1276.661199][T11339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10921'. [ 1276.722892][T11337] netlink: 'syz.2.10920': attribute type 32 has an invalid length. [ 1276.743250][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10920'. [ 1276.812362][T11337] bond11: Setting coupled_control to off (0) [ 1276.862628][T11298] lo speed is unknown, defaulting to 1000 [ 1277.139455][T11351] netlink: 'syz.1.10924': attribute type 1 has an invalid length. [ 1277.157462][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1277.232719][T11351] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1277.289627][T11351] bond10: (slave dummy0): making interface the new active one [ 1277.301231][T11351] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 1277.315184][T11351] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10924'. [ 1277.372157][T11355] bond10: (slave veth15): Enslaving as an active interface with a down link [ 1277.390912][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10929'. [ 1277.402165][T11351] bond10: (slave dummy0): Releasing active interface [ 1277.409644][T11351] bond10: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1277.460352][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10927'. [ 1277.763150][T11379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10933'. [ 1277.883818][T11387] netlink: 'syz.2.10936': attribute type 1 has an invalid length. [ 1277.962604][T11387] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1278.147369][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1278.166659][T11391] bond12: (slave veth13): Enslaving as an active interface with a down link [ 1278.202794][T11395] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1278.339538][T11387] netlink: 'syz.2.10936': attribute type 1 has an invalid length. [ 1278.478852][T11387] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1278.493986][T11387] bond12: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1279.186022][T11425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1279.217204][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1279.292210][T11439] netlink: 'syz.1.10953': attribute type 34 has an invalid length. [ 1280.119482][T11496] netlink: 'syz.4.10970': attribute type 2 has an invalid length. [ 1280.127704][T11496] netlink: 'syz.4.10970': attribute type 1 has an invalid length. [ 1280.135546][T11496] __nla_validate_parse: 2 callbacks suppressed [ 1280.135564][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10970'. [ 1280.217415][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1280.326148][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10972'. [ 1280.637564][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10974'. [ 1281.387429][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1281.444831][T11537] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20002 [ 1281.557401][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10985'. [ 1281.688946][T11554] netlink: 'syz.3.10984': attribute type 1 has an invalid length. [ 1281.716886][T11551] gretap0: entered promiscuous mode [ 1281.737408][T11551] vlan5: entered promiscuous mode [ 1281.782990][T11561] netlink: 'syz.4.10989': attribute type 1 has an invalid length. [ 1281.871664][T11561] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1281.902015][T11561] bond0: (slave dummy0): Releasing backup interface [ 1281.916917][T11561] bond9: (slave dummy0): making interface the new active one [ 1281.926685][T11561] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1281.936101][T11544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10984'. [ 1282.277125][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1282.837717][T11604] sit2: entered promiscuous mode [ 1282.974929][T11611] netlink: 'syz.3.11005': attribute type 27 has an invalid length. [ 1283.268925][T11611] team1: left promiscuous mode [ 1283.274037][T11611] team1: left allmulticast mode [ 1283.297642][T11611] team2: left promiscuous mode [ 1283.302489][T11611] team2: left allmulticast mode [ 1283.343334][T11611] bond3: left allmulticast mode [ 1283.427447][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1283.468836][T11617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.477656][T11617] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.504202][T11617] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1283.771089][T11650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11018'. [ 1283.811720][T11650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11018'. [ 1283.851953][T11650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11018'. [ 1283.863776][T11650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11018'. [ 1283.874389][T11650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11018'. [ 1284.021951][T11665] netlink: 'syz.1.11022': attribute type 6 has an invalid length. [ 1284.175140][T11675] 8021q: VLANs not supported on vcan0 [ 1284.387371][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1284.411434][T11685] netlink: 'syz.1.11028': attribute type 29 has an invalid length. [ 1284.790694][T11710] tipc: Failed to remove unknown binding: 66,0,0/0:851334473/851334474 [ 1284.812300][T11712] tipc: Failed to remove unknown binding: 66,0,0/0:851334473/851334474 [ 1284.937115][T11718] tipc: Failed to remove unknown binding: 66,0,0/0:2836650776/2836650777 [ 1284.953960][T11718] tipc: Failed to remove unknown binding: 66,0,0/0:2836650776/2836650777 [ 1285.043835][T11720] sit0: entered promiscuous mode [ 1285.072373][T11720] netlink: 'syz.0.11038': attribute type 1 has an invalid length. [ 1285.268001][T11735] syzkaller0: entered promiscuous mode [ 1285.283852][T11735] syzkaller0: entered allmulticast mode [ 1285.350157][T11745] __nla_validate_parse: 37 callbacks suppressed [ 1285.350180][T11745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11047'. [ 1285.517171][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1285.812352][T11769] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11054'. [ 1285.856524][T11769] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11054'. [ 1286.458079][T11789] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11061'. [ 1286.538049][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1286.602331][T11795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1286.798026][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11067'. [ 1286.808058][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11067'. [ 1286.819566][T11807] netlink: 'syz.1.11067': attribute type 13 has an invalid length. [ 1286.828650][T11807] netlink: 'syz.1.11067': attribute type 11 has an invalid length. [ 1287.352776][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11071'. [ 1287.487184][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1287.584958][T11824] bridge0: Device is already in use. [ 1287.731963][T11828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11078'. [ 1287.903365][T11839] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11082'. [ 1287.924472][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11082'. [ 1287.993401][T11844] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1288.088159][T11849] syzkaller0: entered promiscuous mode [ 1288.093950][T11849] syzkaller0: entered allmulticast mode [ 1288.120057][T11844] tipc: Enabled bearer , priority 0 [ 1288.163788][T11852] netlink: 'syz.4.11086': attribute type 8 has an invalid length. [ 1288.172712][T11843] tipc: Resetting bearer [ 1288.241548][T11843] tipc: Disabling bearer [ 1288.259598][T11853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1288.266898][T11853] IPv6: NLM_F_CREATE should be set when creating new route [ 1288.274237][T11853] IPv6: NLM_F_CREATE should be set when creating new route [ 1288.507669][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1289.207788][T11904] vlan3: entered promiscuous mode [ 1289.547662][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1289.621955][T11923] lo speed is unknown, defaulting to 1000 [ 1289.885101][T11932] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1289.901828][T11923] lo speed is unknown, defaulting to 1000 [ 1290.399172][T11957] bond11: option all_slaves_active: invalid value (5) [ 1290.418916][T11957] bond11 (unregistering): Released all slaves [ 1290.449835][T11923] lo speed is unknown, defaulting to 1000 [ 1290.482520][T11967] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1290.536535][T11969] netlink: 'syz.2.11113': attribute type 39 has an invalid length. [ 1290.597365][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1291.516325][T12017] __nla_validate_parse: 2 callbacks suppressed [ 1291.516346][T12017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11132'. [ 1291.522673][T12014] lo speed is unknown, defaulting to 1000 [ 1291.687288][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1291.845880][T12028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11138'. [ 1291.946790][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11137'. [ 1292.121291][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11140'. [ 1292.425754][T12045] bond5: entered promiscuous mode [ 1292.728158][T12014] lo speed is unknown, defaulting to 1000 [ 1292.752205][T12055] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:5 [ 1292.827248][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1292.932662][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11151'. [ 1293.013145][T12068] netlink: 666 bytes leftover after parsing attributes in process `syz.3.11149'. [ 1293.208541][T12079] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11154'. [ 1293.286819][T12014] lo speed is unknown, defaulting to 1000 [ 1293.309929][T12075] xt_CT: No such helper "syz0" [ 1293.614977][T12088] syzkaller0: entered promiscuous mode [ 1293.655453][T12088] syzkaller0: entered allmulticast mode [ 1293.797197][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1294.073337][T12107] FAULT_INJECTION: forcing a failure. [ 1294.073337][T12107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1294.115543][T12107] CPU: 0 UID: 0 PID: 12107 Comm: syz.3.11164 Not tainted syzkaller #0 PREEMPT(full) [ 1294.115576][T12107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1294.115589][T12107] Call Trace: [ 1294.115598][T12107] [ 1294.115607][T12107] dump_stack_lvl+0xe8/0x150 [ 1294.115643][T12107] should_fail_ex+0x412/0x560 [ 1294.115679][T12107] _copy_from_iter+0x1d3/0x1670 [ 1294.115716][T12107] ? rcu_is_watching+0x15/0xb0 [ 1294.115752][T12107] ? __pfx__copy_from_iter+0x10/0x10 [ 1294.115792][T12107] ? netlink_sendmsg+0x650/0xb40 [ 1294.115814][T12107] ? skb_put+0x11b/0x210 [ 1294.115843][T12107] netlink_sendmsg+0x6c0/0xb40 [ 1294.115877][T12107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1294.115904][T12107] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1294.115937][T12107] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1294.115964][T12107] ____sys_sendmsg+0x972/0x9f0 [ 1294.116000][T12107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1294.116037][T12107] ? import_iovec+0x73/0xa0 [ 1294.116063][T12107] ___sys_sendmsg+0x2a5/0x360 [ 1294.116096][T12107] ? __pfx____sys_sendmsg+0x10/0x10 [ 1294.116160][T12107] ? __fget_files+0x2a/0x420 [ 1294.116202][T12107] ? __fget_files+0x3a0/0x420 [ 1294.116250][T12107] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1294.116281][T12107] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1294.116318][T12107] ? __pfx_ksys_write+0x10/0x10 [ 1294.116353][T12107] do_syscall_64+0x14d/0xf80 [ 1294.116383][T12107] ? trace_irq_disable+0x3b/0x150 [ 1294.116401][T12107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.116422][T12107] ? clear_bhb_loop+0x40/0x90 [ 1294.116448][T12107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.116469][T12107] RIP: 0033:0x7f509439c819 [ 1294.116489][T12107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1294.116507][T12107] RSP: 002b:00007f50951ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1294.116531][T12107] RAX: ffffffffffffffda RBX: 00007f5094615fa0 RCX: 00007f509439c819 [ 1294.116546][T12107] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 1294.116559][T12107] RBP: 00007f50951ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.116572][T12107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1294.116584][T12107] R13: 00007f5094616038 R14: 00007f5094615fa0 R15: 00007fffea04a4c8 [ 1294.116617][T12107] [ 1294.410085][T12113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11166'. [ 1294.536159][T12119] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11167'. [ 1294.608161][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11166'. [ 1294.757308][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1295.542296][T12147] FAULT_INJECTION: forcing a failure. [ 1295.542296][T12147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1295.555874][T12147] CPU: 1 UID: 0 PID: 12147 Comm: syz.2.11177 Not tainted syzkaller #0 PREEMPT(full) [ 1295.555902][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1295.555915][T12147] Call Trace: [ 1295.555923][T12147] [ 1295.555932][T12147] dump_stack_lvl+0xe8/0x150 [ 1295.555967][T12147] should_fail_ex+0x412/0x560 [ 1295.556003][T12147] _copy_from_iter+0x1d3/0x1670 [ 1295.556055][T12147] ? rcu_is_watching+0x15/0xb0 [ 1295.556090][T12147] ? __pfx__copy_from_iter+0x10/0x10 [ 1295.556128][T12147] ? netlink_sendmsg+0x650/0xb40 [ 1295.556150][T12147] ? skb_put+0x11b/0x210 [ 1295.556178][T12147] netlink_sendmsg+0x6c0/0xb40 [ 1295.556207][T12147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1295.556232][T12147] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1295.556262][T12147] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1295.556289][T12147] ____sys_sendmsg+0x972/0x9f0 [ 1295.556323][T12147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1295.556356][T12147] ? import_iovec+0x73/0xa0 [ 1295.556381][T12147] ___sys_sendmsg+0x2a5/0x360 [ 1295.556414][T12147] ? __pfx____sys_sendmsg+0x10/0x10 [ 1295.556475][T12147] ? __fget_files+0x2a/0x420 [ 1295.556504][T12147] ? __fget_files+0x3a0/0x420 [ 1295.556545][T12147] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1295.556584][T12147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1295.556620][T12147] ? __pfx_ksys_write+0x10/0x10 [ 1295.556655][T12147] do_syscall_64+0x14d/0xf80 [ 1295.556681][T12147] ? trace_irq_disable+0x3b/0x150 [ 1295.556699][T12147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.556720][T12147] ? clear_bhb_loop+0x40/0x90 [ 1295.556744][T12147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.556764][T12147] RIP: 0033:0x7fa59019c819 [ 1295.556784][T12147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.556800][T12147] RSP: 002b:00007fa590faa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1295.556823][T12147] RAX: ffffffffffffffda RBX: 00007fa590415fa0 RCX: 00007fa59019c819 [ 1295.556837][T12147] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 1295.556849][T12147] RBP: 00007fa590faa090 R08: 0000000000000000 R09: 0000000000000000 [ 1295.556862][T12147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1295.556874][T12147] R13: 00007fa590416038 R14: 00007fa590415fa0 R15: 00007ffe3ebb2448 [ 1295.556905][T12147] [ 1295.827155][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1296.419062][T12162] batman_adv: batadv0: Interface deactivated: dummy0 [ 1296.772265][ T2897] lo speed is unknown, defaulting to 1000 [ 1296.778897][ T2897] sqz0: Port: 1 Link DOWN [ 1296.822510][T12179] bond11: entered promiscuous mode [ 1296.828444][T12179] bond11: entered allmulticast mode [ 1296.834198][T12179] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1296.846984][T12181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1296.877156][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1296.923594][ T4310] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.933045][ T4310] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.948612][T12192] __nla_validate_parse: 3 callbacks suppressed [ 1296.948635][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11189'. [ 1296.971564][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11189'. [ 1296.981511][ T2898] lo speed is unknown, defaulting to 1000 [ 1297.039657][ T4310] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1297.048733][ T4310] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1297.145335][T12196] vxlan0: entered promiscuous mode [ 1297.153641][T12196] vxlan0: entered allmulticast mode [ 1297.186588][ T4310] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.208762][T12215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11192'. [ 1297.267284][T12215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11192'. [ 1297.339594][T12217] FAULT_INJECTION: forcing a failure. [ 1297.339594][T12217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1297.346308][ T4310] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.371597][T12217] CPU: 0 UID: 0 PID: 12217 Comm: syz.0.11195 Not tainted syzkaller #0 PREEMPT(full) [ 1297.371627][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1297.371641][T12217] Call Trace: [ 1297.371649][T12217] [ 1297.371659][T12217] dump_stack_lvl+0xe8/0x150 [ 1297.371693][T12217] should_fail_ex+0x412/0x560 [ 1297.371727][T12217] _copy_from_user+0x2d/0xb0 [ 1297.371752][T12217] ___sys_sendmsg+0x1c6/0x360 [ 1297.371784][T12217] ? __pfx____sys_sendmsg+0x10/0x10 [ 1297.371845][T12217] ? __fget_files+0x2a/0x420 [ 1297.371874][T12217] ? __fget_files+0x3a0/0x420 [ 1297.371913][T12217] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1297.371941][T12217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1297.371976][T12217] ? __pfx_ksys_write+0x10/0x10 [ 1297.372009][T12217] do_syscall_64+0x14d/0xf80 [ 1297.372037][T12217] ? trace_irq_disable+0x3b/0x150 [ 1297.372054][T12217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.372074][T12217] ? clear_bhb_loop+0x40/0x90 [ 1297.372098][T12217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.372117][T12217] RIP: 0033:0x7efd68b9c819 [ 1297.372135][T12217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.372152][T12217] RSP: 002b:00007efd69a76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1297.372173][T12217] RAX: ffffffffffffffda RBX: 00007efd68e15fa0 RCX: 00007efd68b9c819 [ 1297.372188][T12217] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1297.372200][T12217] RBP: 00007efd69a76090 R08: 0000000000000000 R09: 0000000000000000 [ 1297.372212][T12217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1297.372224][T12217] R13: 00007efd68e16038 R14: 00007efd68e15fa0 R15: 00007ffcf0ce0038 [ 1297.372264][T12217] [ 1297.391414][ T4310] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.582379][ T4310] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.771838][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11201'. [ 1297.787491][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11201'. [ 1297.804384][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11201'. [ 1297.817415][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11201'. [ 1297.834012][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11201'. [ 1297.853536][T12242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11199'. [ 1297.867786][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1298.138485][T12246] syzkaller0: entered promiscuous mode [ 1298.970067][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1299.001759][T12253] delete_channel: no stack [ 1300.107230][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1300.268081][ T30] INFO: task udevd:1350 blocked for more than 143 seconds. [ 1300.275655][ T30] Not tainted syzkaller #0 [ 1300.284963][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1300.294395][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1300.303941][ T30] task:udevd state:D stack:22456 pid:1350 tgid:1350 ppid:5194 task_flags:0x400140 flags:0x00080802 [ 1300.316381][ T30] Call Trace: [ 1300.320398][ T30] [ 1300.323371][ T30] __schedule+0x15dd/0x52d0 [ 1300.328744][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1300.333745][ T30] ? __pfx___schedule+0x10/0x10 [ 1300.339012][ T30] ? schedule+0x90/0x360 [ 1300.343307][ T30] schedule+0x164/0x360 [ 1300.348138][ T30] io_schedule+0x7f/0xd0 [ 1300.352660][ T30] folio_wait_bit_common+0x6d8/0xbc0 [ 1300.362350][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1300.369458][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1300.375067][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 1300.381177][ T30] do_read_cache_folio+0x1ad/0x590 [ 1300.386341][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1300.392433][ T30] read_part_sector+0xb6/0x2b0 [ 1300.398771][ T30] adfspart_check_POWERTEC+0x92/0xef0 [ 1300.404394][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1300.410401][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1300.416635][ T30] bdev_disk_changed+0x7ba/0x1550 [ 1300.422194][ T30] ? bdev_open+0xe0/0xd30 [ 1300.426822][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1300.433614][ T30] blkdev_get_whole+0x380/0x510 [ 1300.438901][ T30] bdev_open+0x31e/0xd30 [ 1300.443206][ T30] blkdev_open+0x470/0x610 [ 1300.448326][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1300.453511][ T30] do_dentry_open+0x785/0x14e0 [ 1300.458572][ T30] vfs_open+0x3b/0x340 [ 1300.462678][ T30] ? path_openat+0x2df0/0x3860 [ 1300.467730][ T30] path_openat+0x2e08/0x3860 [ 1300.472377][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1300.478317][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1300.483840][ T30] ? __pfx_path_openat+0x10/0x10 [ 1300.489392][ T30] ? __x64_sys_openat+0x138/0x170 [ 1300.494462][ T30] ? do_syscall_64+0x14d/0xf80 [ 1300.499839][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.506194][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1300.512376][ T30] do_file_open+0x23e/0x4a0 [ 1300.516941][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1300.522907][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1300.528317][ T30] ? alloc_fd+0x64b/0x6c0 [ 1300.532872][ T30] do_sys_openat2+0x113/0x200 [ 1300.538018][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1300.543675][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1300.549090][ T30] ? rcu_is_watching+0x15/0xb0 [ 1300.554054][ T30] __x64_sys_openat+0x138/0x170 [ 1300.559196][ T30] do_syscall_64+0x14d/0xf80 [ 1300.563844][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.570730][ T30] ? clear_bhb_loop+0x40/0x90 [ 1300.575466][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.581725][ T30] RIP: 0033:0x7f5e618a7407 [ 1300.586199][ T30] RSP: 002b:00007ffe62c60d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1300.594986][ T30] RAX: ffffffffffffffda RBX: 00007f5e61ffb880 RCX: 00007f5e618a7407 [ 1300.603454][ T30] RDX: 00000000000a0800 RSI: 0000555d4b8ca460 RDI: ffffffffffffff9c [ 1300.612320][ T30] RBP: 0000555d4b8a4910 R08: 0000000000000000 R09: 0000000000000000 [ 1300.620714][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555d4b8d6c20 [ 1300.630404][ T30] R13: 0000555d4b8b2190 R14: 0000000000000000 R15: 0000555d4b8d6c20 [ 1300.638731][ T30] [ 1300.642206][ T30] [ 1300.642206][ T30] Showing all locks held in the system: [ 1300.650639][ T30] 1 lock held by khungtaskd/30: [ 1300.655751][ T30] #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1300.666551][ T30] 2 locks held by getty/5585: [ 1300.671428][ T30] #0: ffff888036dd90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1300.681607][ T30] #1: ffffc9000322e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1300.692779][ T30] 1 lock held by syz-executor/5810: [ 1300.698184][ T30] #0: ffff8880b873ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1300.708576][ T30] 3 locks held by kworker/u8:1/19648: [ 1300.714006][ T30] #0: ffff88813fe54148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1300.726523][ T30] #1: ffffc900039e7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1300.738679][ T30] #2: ffffffff8fbc9588 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1300.750136][ T30] 1 lock held by udevd/1350: [ 1300.754837][ T30] #0: ffff88809adfd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1300.764539][ T30] 3 locks held by kworker/u8:17/4315: [ 1300.770396][ T30] #0: ffff888031f19148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1300.782609][ T30] #1: ffffc9000501fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1300.795907][ T30] #2: ffffffff8fbc9588 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1300.805707][ T30] 2 locks held by syz.1.11199/12234: [ 1300.811903][ T30] 2 locks held by syz.0.11204/12245: [ 1300.817517][ T30] #0: ffffffff8fbc9588 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1300.826792][ T30] #1: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1300.839533][ T30] 2 locks held by syz.4.11205/12254: [ 1300.845366][ T30] #0: ffffffff8fbbac70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1300.855523][ T30] #1: ffffffff8fbc9588 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1300.869379][ T30] 1 lock held by syz.3.11207/12255: [ 1300.874713][ T30] #0: ffffffff8fbc9588 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 1300.884024][ T30] 3 locks held by syz.2.11214/12277: [ 1300.890436][ T30] #0: ffffffff8fc379d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1300.899434][ T30] #1: ffffffff8fc37808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1300.908682][ T30] #2: ffffffff8fbc9588 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x37c2/0x4980 [ 1300.921320][ T30] 1 lock held by syz.2.11214/12278: [ 1300.926628][ T30] #0: ffffffff8fbc9588 (rtnl_mutex){+.+.}-{4:4}, at: tcx_link_attach+0xf6/0x860 [ 1300.936729][ T30] 2 locks held by syz.2.11214/12279: [ 1300.942213][ T30] #0: ffffffff8fc379d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1300.950861][ T30] #1: ffffffff8fc37808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1300.960373][ T30] [ 1300.962995][ T30] ============================================= [ 1300.962995][ T30] [ 1300.971925][ T30] NMI backtrace for cpu 0 [ 1300.971946][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1300.971968][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1300.971981][ T30] Call Trace: [ 1300.971990][ T30] [ 1300.971999][ T30] dump_stack_lvl+0xe8/0x150 [ 1300.972036][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1300.972060][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1300.972089][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1300.972118][ T30] sys_info+0x135/0x170 [ 1300.972139][ T30] watchdog+0xfd9/0x1030 [ 1300.972165][ T30] ? watchdog+0x21a/0x1030 [ 1300.972194][ T30] kthread+0x388/0x470 [ 1300.972216][ T30] ? __pfx_watchdog+0x10/0x10 [ 1300.972232][ T30] ? __pfx_kthread+0x10/0x10 [ 1300.972254][ T30] ret_from_fork+0x51e/0xb90 [ 1300.972284][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1300.972309][ T30] ? __switch_to+0xc7d/0x1450 [ 1300.972337][ T30] ? __pfx_kthread+0x10/0x10 [ 1300.972359][ T30] ret_from_fork_asm+0x1a/0x30 [ 1300.972405][ T30] [ 1300.972413][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1301.021256][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1301.095074][ C1] NMI backtrace for cpu 1 [ 1301.095094][ C1] CPU: 1 UID: 0 PID: 12234 Comm: syz.1.11199 Not tainted syzkaller #0 PREEMPT(full) [ 1301.095114][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1301.095124][ C1] RIP: 0010:unwind_next_frame+0x513/0x23c0 [ 1301.095155][ C1] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 [ 1301.095169][ C1] RSP: 0018:ffffc9000e14ea78 EFLAGS: 00000a03 [ 1301.095185][ C1] RAX: 0000000000000000 RBX: ffffffff9029e18c RCX: dffffc0000000000 [ 1301.095198][ C1] RDX: ffffffff9029e16c RSI: ffffffff90a609a8 RDI: ffffffff8c27ca20 [ 1301.095210][ C1] RBP: ffffffff9029e16c R08: 0000000000000009 R09: ffffffff8e75e620 [ 1301.095222][ C1] R10: ffffc9000e14eba8 R11: fffff52001c29d81 R12: ffffffff8176a786 [ 1301.095234][ C1] R13: ffffffff9029e16c R14: ffffc9000e14eba8 R15: ffffffff9029e17c [ 1301.095245][ C1] FS: 00007fd1e15e76c0(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 1301.095259][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1301.095271][ C1] CR2: 0000200000c84030 CR3: 000000008b2c4000 CR4: 00000000003526f0 [ 1301.095288][ C1] Call Trace: [ 1301.095295][ C1] [ 1301.095306][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1301.095329][ C1] ? get_stack_info_noinstr+0x1b/0x130 [ 1301.095352][ C1] ? __unwind_start+0xf7/0x760 [ 1301.095376][ C1] __unwind_start+0x5b8/0x760 [ 1301.095400][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1301.095418][ C1] arch_stack_walk+0xe3/0x150 [ 1301.095443][ C1] ? __unwind_start+0xf7/0x760 [ 1301.095466][ C1] stack_trace_save+0xa9/0x100 [ 1301.095483][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1301.095504][ C1] save_stack+0x122/0x230 [ 1301.095531][ C1] ? __pfx_save_stack+0x10/0x10 [ 1301.095553][ C1] ? __rmqueue_pcplist+0x18fa/0x1c40 [ 1301.095578][ C1] __set_page_owner+0x8d/0x4c0 [ 1301.095596][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1301.095612][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 1301.095628][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1301.095648][ C1] ? bad_range+0x8b/0x2c0 [ 1301.095672][ C1] post_alloc_hook+0x231/0x280 [ 1301.095690][ C1] get_page_from_freelist+0x24dc/0x2580 [ 1301.095725][ C1] ? prepare_alloc_pages+0x22a/0x650 [ 1301.095747][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1301.095768][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1301.095790][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 1301.095814][ C1] alloc_pages_mpol+0x232/0x4a0 [ 1301.095837][ C1] vma_alloc_folio_noprof+0xea/0x210 [ 1301.095858][ C1] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1301.095883][ C1] do_wp_page+0x1204/0x5a00 [ 1301.095908][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 1301.095931][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 1301.095951][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1301.095969][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1301.095990][ C1] handle_mm_fault+0x1520/0x3310 [ 1301.096019][ C1] ? handle_mm_fault+0xee/0x3310 [ 1301.096044][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1301.096072][ C1] ? skcipher_recvmsg+0x10d4/0x1140 [ 1301.096092][ C1] ? lock_mm_and_find_vma+0xa7/0x340 [ 1301.096110][ C1] do_user_addr_fault+0x75b/0x1340 [ 1301.096137][ C1] exc_page_fault+0x6a/0xc0 [ 1301.096159][ C1] asm_exc_page_fault+0x26/0x30 [ 1301.096175][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1301.096198][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 51 75 03 00 90 90 90 90 90 90 90 90 90 90 [ 1301.096211][ C1] RSP: 0018:ffffc9000e14f8b8 EFLAGS: 00050246 [ 1301.096225][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000c84030 [ 1301.096236][ C1] RDX: ffff888083f8db80 RSI: 0000000000000000 RDI: 00000000ffffffff [ 1301.096247][ C1] RBP: ffffc9000e14fa30 R08: ffffffff901187b7 R09: 1ffffffff20230f6 [ 1301.096259][ C1] R10: dffffc0000000000 R11: fffffbfff20230f7 R12: 1ffff92001c29f24 [ 1301.096270][ C1] R13: 0000000000000000 R14: 0000200000c84000 R15: dffffc0000000000 [ 1301.096291][ C1] ____sys_recvmsg+0x2be/0x4a0 [ 1301.096316][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1301.096344][ C1] ? import_iovec+0x73/0xa0 [ 1301.096363][ C1] ___sys_recvmsg+0x215/0x590 [ 1301.096382][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1301.096404][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1301.096441][ C1] do_recvmmsg+0x334/0x800 [ 1301.096466][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1301.096500][ C1] __x64_sys_recvmmsg+0x198/0x250 [ 1301.096529][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1301.096556][ C1] do_syscall_64+0x14d/0xf80 [ 1301.096576][ C1] ? trace_irq_disable+0x3b/0x150 [ 1301.096591][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.096607][ C1] ? clear_bhb_loop+0x40/0x90 [ 1301.096625][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.096641][ C1] RIP: 0033:0x7fd1e079c819 [ 1301.096656][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.096669][ C1] RSP: 002b:00007fd1e15e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1301.096685][ C1] RAX: ffffffffffffffda RBX: 00007fd1e0a16090 RCX: 00007fd1e079c819 [ 1301.096697][ C1] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000005 [ 1301.096708][ C1] RBP: 00007fd1e0832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1301.096719][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1301.096729][ C1] R13: 00007fd1e0a16128 R14: 00007fd1e0a16090 R15: 00007ffef43fb608 [ 1301.096749][ C1] [ 1301.102329][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1301.102348][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1301.102370][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1301.102382][ T30] Call Trace: [ 1301.102390][ T30] [ 1301.102400][ T30] vpanic+0x56c/0xa60 [ 1301.102430][ T30] ? __pfx___schedule+0x10/0x10 [ 1301.102456][ T30] ? __pfx_vpanic+0x10/0x10 [ 1301.102490][ T30] panic+0xc5/0xd0 [ 1301.102515][ T30] ? __pfx_panic+0x10/0x10 [ 1301.102542][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1301.102569][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1301.102596][ T30] watchdog+0x1023/0x1030 [ 1301.102620][ T30] ? watchdog+0x21a/0x1030 [ 1301.102645][ T30] kthread+0x388/0x470 [ 1301.102665][ T30] ? __pfx_watchdog+0x10/0x10 [ 1301.102682][ T30] ? __pfx_kthread+0x10/0x10 [ 1301.102702][ T30] ret_from_fork+0x51e/0xb90 [ 1301.102731][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1301.102754][ T30] ? __switch_to+0xc7d/0x1450 [ 1301.102779][ T30] ? __pfx_kthread+0x10/0x10 [ 1301.102800][ T30] ret_from_fork_asm+0x1a/0x30 [ 1301.102842][ T30] [ 1301.758008][ T30] Kernel Offset: disabled [ 1301.762331][ T30] Rebooting in 86400 seconds..