last executing test programs: 4.841365429s ago: executing program 3 (id=2528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'geneve0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r2, &(0x7f0000000180)="b740b78dfb510434eec7e4667af900b3b25396cb15b60c5cfca630c5481f0528704e05a966b7fb1888d2b0e516a886258224b800ad5edd2aae0856ca698a882029174d480a7e6d213f10c4576106918bf32f05b2a6a74e14ad445ca95143686a61126857af70e2e6edcf13c98046ff538e6a13b61bb3d7d7b7c4cb1fae6983e642a71d3b6945", 0x86, 0x40008c0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x14b42, 0x0) write$tun(r3, &(0x7f0000000480)={@val={0x0, 0x1c}, @void, @mpls={[{0x3, 0x0, 0x1}], @llc={@llc={0x4e, 0x7e, "94a5", "867cdf04a10408296b3f3097bbb426ea4632022e430b98756a969e110457fa567af85395a8e2c5e9e26bff5b3c91ae4b536327513f5f7c215c09377ba82ad920b8060368b704f2a01d8a15aeaff42678863db6062d296695dbbb9d05ca038d5f148e0143a0cc59d9f88e612f18b736b98f27cb7048efa8caef739ad24bb996e061bb551c8c05c3722214d626c2df46a57e505e16258c22857ba8c3627794c5eb920878b59e23c90a98ed9db68d0ffc81b7caf0c3234722086a9211c81a0cbe4144be20ed02d93d6a1c1a77f2"}}}}, 0xd8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000c08000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="a0005b", 0x3}], 0x1, 0x0, 0x0, 0x900}, 0x20000000) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r4, @ANYRESHEX=r1, @ANYRES8], 0xffe) 4.59402197s ago: executing program 3 (id=2533): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000280), 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="68060000", @ANYRES16=r0, @ANYRES8], 0x668}, 0x1, 0x0, 0x0, 0x24040044}, 0x4080010) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x2, @local, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000003c0)="db79bb9e3065cffea085088c6bde46e8984b5875da706146d06fdfa2721e1233274d2d5b648f14b55d389892634a915aa545c98d2fb69a6faa64eca78d9f760cc2bf9caa0a33a3e63994da598cf86a0fe77a1bf9bdb387fa3712a734b1206438e08b1706f65592573e5fd6f17249c7b12b5ff22f", 0x74}, {&(0x7f0000000480)="8cb0d8cd05b77a8d723d01d2949d58839643a5f065f8138c346e9fb2597cacae93d48464b554c5246d9b0ad2342c6e733ec0c3d33129ffa1568fbae8bdeafe739f96f31845", 0x45}, {&(0x7f00000005c0)="2bcfe0f8d6bbbe2cd20886645ddabe691bd4213b186cfd16ed442b28ab1c52e6b9325ebd85db6812b2220eef75dee0021d79ec30eceb8427106dbcdd8450fd681cf7172f30a43dec7db69fce57bd51ca088267c4f8159b0f25dc2627faaea1281ed33993613f05d298ec27dca3235f7cec02b6f86e16ec34f3ba5af5c955aae8d2808e5f6b19c4d5df583f9fad298b95871f42883f12eabf03911b61c5e3658732d9d3cdc944353e1ca07309bf304f2e45d06d94787e6a62bfeb0c1dd9d997dc7884a0eb3aedeb9f17f0313fd2263b94e515890961e92c52a2c770a78a1523", 0xdf}], 0x3, &(0x7f00000006c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)="948d2ed2253c9398e54d2a7a8b13d2b257f83d32bccaff6a5ec03ed8330184c5e69cc713ef93219f2ec7a428295ea7c663186132673fbd0a958c6b5a15fc17ece9ff221a4ef13fc9b3f4986121d1544e31047b7f36a4c56a73fc9200520d807228fed862fc18d846c8f686ddba243b428099adb71cdffeac51d1b598f41e799fd101428e15ad20c243e2d430dbf96647fe6a73c6fb57e7fa1633f7e577aa7c224d2275070aacf2b6e97342772d31dcccbc1780cb7ecdf938787454ce0c58c3eeb7561c0454f591992b0b9a224c9420", 0xcf}, {&(0x7f0000000940)="6a205d3e428a3aa7e048c0c01dc4eb8f22d3e90853fd4da25938609838bb6c1aa88292966f0a184b02209b763c1c949021a9924fbe806b639f802a60a1c0348da0bb0793db46f161f9d90d60983767acbe61a057", 0x54}, {&(0x7f00000009c0)="8b2fb217f3c557f6109c686a7e4d0a5d19c618c7bf52c00cde8f4a1e780d558c45725b3599d7ab09d4b368a12d1c0ea9accb531f4ea35cd59661563e9fbf9a8baf14fffd68fac49e50aaf4b5e3d10ba5857b6245ccd65e506f0e8b981ffd779982bda11d1c2ee65bae85938c7dc918da7212796ec7771de7cdc13017c65f6962da2b0c8087d05948741c23a832cac6f07cd5827dffc9c9f398baa32bfbb9", 0x9e}, {&(0x7f0000000a80)="e36aba414b7d49ac2071af3cc811278b77b4e622747891d80194abf3c561ccc2e6f33380c4afdf4d540538713a2cd11b6c9d6d9eb5d92e75dad9d1c0db4078acc4808afd352829b16afb416ec84320569d8c6bca7892f2745fc7f79b78f0cffbc3e3055f025fa70f36d485c64bd49227", 0xffffffffffffff8a}, {&(0x7f0000000b00)="a75aa92f8f74ad5ba3d9baf626278c7c154e2b6728fea107cc50d29b89d9905705686b3937a7d8a434c5025cd4265667f200fb5512c81e203d0a1e5bca884801812de16fb6eb05cf8d6066649987d68300d349ada4c0ed923976b1a1", 0x96}, {&(0x7f0000000b80)="9d340918e67dc9d384cb467d0c73d3334ac216a921624df8d4dd30d366f4db7d1a00faf85821d7193b817992bc775a8fa7b9414962a150d7832aa70acda509d88933e01d7f8b3b351ed0fe0bf3fcbc52ae4c6a73e2049efdeb93eddc94c4a85e9dafa211d155545eb12a2723a0149299ce4a6b71f1ae4159a6cbf953b4cc7bd1d94deced7f45b6bef1d208f44ebb79ea218c1bb1e65d94bc053926b398b04484a42323eeefcae220dcd8c49977eb601ad99462c7c4d8110744cbadf106f846c303b931e3bc88d291f1c64cbb353a0904f1f9", 0xd2}, {&(0x7f0000000c80)="f3ae6c807bb76455ad33b6ff2968a713746876f50fa9a98a7d9f3cc6d924f1fccfce18d5e1e01a9a62746413ad9f1806fcc0efd8abb5d87660116c75e012ec99e66a01a1daf029d8c7f381ee1feb3f83b98b989477bc837bf4d8e615c5984802158cfc0d8d1e", 0x66}], 0x7, &(0x7f0000001340)=[@dstopts_2292={{0x0, 0x29, 0x4, {0x11, 0x0, '\x00', [@generic={0x8, 0x0, "8c71d7b4ebc8b556928ce3a7d75c32a8692ba2726cf0f59f4d680e499395fe46eebf4a413ff81e20ba189f9a518e0c9c77e039eaa42885fe3a621d6df64612c2a707c0e1737e9afa2d9c76b69833897976a8fd5b39ff8d3c511f9307c075b3d1"}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0x0, "cc32e8dd60b8b7fa62b296486ebc2c5e192cc7d2473087056d46f41589feef8122948a792af591d3061721900d371ee9263e6c4e7197440760304774d67967a36d9c2c4a5a4981cda1da95ee9678d15b9fafaa9334222840e49bc38d3d36d09ab93dbc2a9bcf692c97db5d24c397cbb58894274864e3608e876922c852d9b055270729194d6a2f4b329803bece247f12a589"}, @ra={0x5, 0x2, 0xcb}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0x0, "057395267f368ab0105f04ec64636c2fccfae1d0eaf5bb07a085918f78afd19144b03f8e429d438093da9d69041b827c72534179d7bace048726e4ff3a5afa70c8f1b554ba565900bcb257c8556c5706e4ae6f689420363cf6759106489db324404d708acd6976f162239ffe9672f4ad4b3a0548edce048a5c269e7d2465fa72e450f19d529e4f2050cdd68b5454a78a0b532ff27d5cea95930d991c450364f839478f5f808bf3fc81b6d4df013f15f6a7cb31865b7831d6f928d2c0f10e8e05656eec74e87fd37104d5e4a9f908b0ba63a0040c98ba2b55d614a05f74b3c4994386b3b69229d7d1b5d3ca83ea6c22e28382245528ce"}, @calipso={0x7, 0x0, {0x3, 0x0, 0x2, 0x7f, [0xffffffffffffffff, 0x3e44, 0x22c, 0x4]}}, @ra={0x5, 0x2, 0x7}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @rthdrdstopts={{0x208, 0x29, 0x37, {0x2b, 0x3d, '\x00', [@ra={0x5, 0x2, 0xeeeb}, @calipso={0x7, 0x10, {0x0, 0x2, 0x9, 0xfffb, [0x0]}}, @generic={0x4, 0x70, "2f3ae4cd1e2ccf29d49ab4851b36df679d58276b6b2c85a72c3faa42fc64d3ef7edb47e7481443c503159959d24ad460b66cfb3338e4faf73a8c4e617a80d9065477ab353165000000000000020098c4ce26b65e6f16c13c20bdcc86dc402c6c5000000000000000000000000000305b42bfb9af128fffd947a2c0cd07ee2f84ab9cb8878368692a63b445595f3194cf68d1b9f15381223fdda869265a46cf929bd66d65966bb9affa617a853cd61df7b96672ce71fed30883e980be2ac71f68e5fe1f0b3b55d8ac9f74"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x8, 0x7, [0xffffffffffffffc4, 0x0, 0x9, 0x8, 0x800, 0x3]}}, @enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x0, {0x2, 0x0, 0x9, 0xee56, [0x7ff, 0x5, 0x6, 0xffffffff]}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x9000, [0x5, 0x100000000, 0x26b8, 0x2, 0x285c]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x298}}], 0x2, 0xc00c480) (async) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x2, @local, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000003c0)="db79bb9e3065cffea085088c6bde46e8984b5875da706146d06fdfa2721e1233274d2d5b648f14b55d389892634a915aa545c98d2fb69a6faa64eca78d9f760cc2bf9caa0a33a3e63994da598cf86a0fe77a1bf9bdb387fa3712a734b1206438e08b1706f65592573e5fd6f17249c7b12b5ff22f", 0x74}, {&(0x7f0000000480)="8cb0d8cd05b77a8d723d01d2949d58839643a5f065f8138c346e9fb2597cacae93d48464b554c5246d9b0ad2342c6e733ec0c3d33129ffa1568fbae8bdeafe739f96f31845", 0x45}, {&(0x7f00000005c0)="2bcfe0f8d6bbbe2cd20886645ddabe691bd4213b186cfd16ed442b28ab1c52e6b9325ebd85db6812b2220eef75dee0021d79ec30eceb8427106dbcdd8450fd681cf7172f30a43dec7db69fce57bd51ca088267c4f8159b0f25dc2627faaea1281ed33993613f05d298ec27dca3235f7cec02b6f86e16ec34f3ba5af5c955aae8d2808e5f6b19c4d5df583f9fad298b95871f42883f12eabf03911b61c5e3658732d9d3cdc944353e1ca07309bf304f2e45d06d94787e6a62bfeb0c1dd9d997dc7884a0eb3aedeb9f17f0313fd2263b94e515890961e92c52a2c770a78a1523", 0xdf}], 0x3, &(0x7f00000006c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)="948d2ed2253c9398e54d2a7a8b13d2b257f83d32bccaff6a5ec03ed8330184c5e69cc713ef93219f2ec7a428295ea7c663186132673fbd0a958c6b5a15fc17ece9ff221a4ef13fc9b3f4986121d1544e31047b7f36a4c56a73fc9200520d807228fed862fc18d846c8f686ddba243b428099adb71cdffeac51d1b598f41e799fd101428e15ad20c243e2d430dbf96647fe6a73c6fb57e7fa1633f7e577aa7c224d2275070aacf2b6e97342772d31dcccbc1780cb7ecdf938787454ce0c58c3eeb7561c0454f591992b0b9a224c9420", 0xcf}, {&(0x7f0000000940)="6a205d3e428a3aa7e048c0c01dc4eb8f22d3e90853fd4da25938609838bb6c1aa88292966f0a184b02209b763c1c949021a9924fbe806b639f802a60a1c0348da0bb0793db46f161f9d90d60983767acbe61a057", 0x54}, {&(0x7f00000009c0)="8b2fb217f3c557f6109c686a7e4d0a5d19c618c7bf52c00cde8f4a1e780d558c45725b3599d7ab09d4b368a12d1c0ea9accb531f4ea35cd59661563e9fbf9a8baf14fffd68fac49e50aaf4b5e3d10ba5857b6245ccd65e506f0e8b981ffd779982bda11d1c2ee65bae85938c7dc918da7212796ec7771de7cdc13017c65f6962da2b0c8087d05948741c23a832cac6f07cd5827dffc9c9f398baa32bfbb9", 0x9e}, {&(0x7f0000000a80)="e36aba414b7d49ac2071af3cc811278b77b4e622747891d80194abf3c561ccc2e6f33380c4afdf4d540538713a2cd11b6c9d6d9eb5d92e75dad9d1c0db4078acc4808afd352829b16afb416ec84320569d8c6bca7892f2745fc7f79b78f0cffbc3e3055f025fa70f36d485c64bd49227", 0xffffffffffffff8a}, {&(0x7f0000000b00)="a75aa92f8f74ad5ba3d9baf626278c7c154e2b6728fea107cc50d29b89d9905705686b3937a7d8a434c5025cd4265667f200fb5512c81e203d0a1e5bca884801812de16fb6eb05cf8d6066649987d68300d349ada4c0ed923976b1a1", 0x96}, {&(0x7f0000000b80)="9d340918e67dc9d384cb467d0c73d3334ac216a921624df8d4dd30d366f4db7d1a00faf85821d7193b817992bc775a8fa7b9414962a150d7832aa70acda509d88933e01d7f8b3b351ed0fe0bf3fcbc52ae4c6a73e2049efdeb93eddc94c4a85e9dafa211d155545eb12a2723a0149299ce4a6b71f1ae4159a6cbf953b4cc7bd1d94deced7f45b6bef1d208f44ebb79ea218c1bb1e65d94bc053926b398b04484a42323eeefcae220dcd8c49977eb601ad99462c7c4d8110744cbadf106f846c303b931e3bc88d291f1c64cbb353a0904f1f9", 0xd2}, {&(0x7f0000000c80)="f3ae6c807bb76455ad33b6ff2968a713746876f50fa9a98a7d9f3cc6d924f1fccfce18d5e1e01a9a62746413ad9f1806fcc0efd8abb5d87660116c75e012ec99e66a01a1daf029d8c7f381ee1feb3f83b98b989477bc837bf4d8e615c5984802158cfc0d8d1e", 0x66}], 0x7, &(0x7f0000001340)=[@dstopts_2292={{0x0, 0x29, 0x4, {0x11, 0x0, '\x00', [@generic={0x8, 0x0, "8c71d7b4ebc8b556928ce3a7d75c32a8692ba2726cf0f59f4d680e499395fe46eebf4a413ff81e20ba189f9a518e0c9c77e039eaa42885fe3a621d6df64612c2a707c0e1737e9afa2d9c76b69833897976a8fd5b39ff8d3c511f9307c075b3d1"}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0x0, "cc32e8dd60b8b7fa62b296486ebc2c5e192cc7d2473087056d46f41589feef8122948a792af591d3061721900d371ee9263e6c4e7197440760304774d67967a36d9c2c4a5a4981cda1da95ee9678d15b9fafaa9334222840e49bc38d3d36d09ab93dbc2a9bcf692c97db5d24c397cbb58894274864e3608e876922c852d9b055270729194d6a2f4b329803bece247f12a589"}, @ra={0x5, 0x2, 0xcb}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0x0, "057395267f368ab0105f04ec64636c2fccfae1d0eaf5bb07a085918f78afd19144b03f8e429d438093da9d69041b827c72534179d7bace048726e4ff3a5afa70c8f1b554ba565900bcb257c8556c5706e4ae6f689420363cf6759106489db324404d708acd6976f162239ffe9672f4ad4b3a0548edce048a5c269e7d2465fa72e450f19d529e4f2050cdd68b5454a78a0b532ff27d5cea95930d991c450364f839478f5f808bf3fc81b6d4df013f15f6a7cb31865b7831d6f928d2c0f10e8e05656eec74e87fd37104d5e4a9f908b0ba63a0040c98ba2b55d614a05f74b3c4994386b3b69229d7d1b5d3ca83ea6c22e28382245528ce"}, @calipso={0x7, 0x0, {0x3, 0x0, 0x2, 0x7f, [0xffffffffffffffff, 0x3e44, 0x22c, 0x4]}}, @ra={0x5, 0x2, 0x7}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @rthdrdstopts={{0x208, 0x29, 0x37, {0x2b, 0x3d, '\x00', [@ra={0x5, 0x2, 0xeeeb}, @calipso={0x7, 0x10, {0x0, 0x2, 0x9, 0xfffb, [0x0]}}, @generic={0x4, 0x70, "2f3ae4cd1e2ccf29d49ab4851b36df679d58276b6b2c85a72c3faa42fc64d3ef7edb47e7481443c503159959d24ad460b66cfb3338e4faf73a8c4e617a80d9065477ab353165000000000000020098c4ce26b65e6f16c13c20bdcc86dc402c6c5000000000000000000000000000305b42bfb9af128fffd947a2c0cd07ee2f84ab9cb8878368692a63b445595f3194cf68d1b9f15381223fdda869265a46cf929bd66d65966bb9affa617a853cd61df7b96672ce71fed30883e980be2ac71f68e5fe1f0b3b55d8ac9f74"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x8, 0x7, [0xffffffffffffffc4, 0x0, 0x9, 0x8, 0x800, 0x3]}}, @enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x0, {0x2, 0x0, 0x9, 0xee56, [0x7ff, 0x5, 0x6, 0xffffffff]}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x9000, [0x5, 0x100000000, 0x26b8, 0x2, 0x285c]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x298}}], 0x2, 0xc00c480) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl(r3, 0x1, &(0x7f00000002c0)="4bb0013111bccdba7b590a08bd9fea3e07580575dbfd8316be8b34d61ac72c5db0d7bf4187f542af245a8b021f8f31e3a004373768ccf91aecfb84012d84b768e746cb5058c37bbfa9") write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff02000000000000000000000000000144d34458b51353ea3d9ff354cf4ac4176a5c5413c1d1976b4392aff34fdf155abb0f5335db181923e43901d5e11efeef9db9dfd2ff08b86672ef0c148752da575bd61f509b22217a248b72e7ab7f4f83f87f12063dc42a6b786143e24ebca48c9502d1ba03288d"], 0xfdef) 4.409382908s ago: executing program 3 (id=2536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (fail_nth: 10) 3.92671273s ago: executing program 3 (id=2538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaeb", 0x22}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000080)="17a8a6c41e58e8b6cd38040d", 0xc}], 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xffffffe4) sendmmsg$unix(r4, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x40, 0x40844}}], 0x1, 0x1) ioctl$TUNSETGROUP(r0, 0x400454ce, r7) 3.469838868s ago: executing program 3 (id=2543): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xc}, 0x50) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@buf={0xfc, &(0x7f0000000300)="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"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0xb1840000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x101, 0x0}, 0x8) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x0, r0}, 0x18) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffff7f, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x16, 0x2c, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x386d15ab, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00', 0x87c, 0x21, &(0x7f00000005c0)=""/33, 0x41000, 0x70, '\x00', 0x0, @flow_dissector, r4, 0x8, &(0x7f0000000880)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x2, 0x37, 0x3}, 0x10, r5, 0xffffffffffffffff, 0x3, &(0x7f0000000a80)=[r1, r1, r6, r7, r1], &(0x7f0000000ac0)=[{0x0, 0x5, 0x10, 0x5}, {0x5, 0x4, 0x1, 0xd}, {0x3, 0x2, 0xd, 0x4}], 0x10, 0x6}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='cubic', 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f00000000c0), &(0x7f0000000140)=r9}, 0x20) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) r11 = socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xdc6e}]}, 0x38}}, 0x0) 3.070076848s ago: executing program 0 (id=2547): r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x2, &(0x7f0000001bc0)=0xfffffffd, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) writev(r3, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}], 0x1) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0xc) connect$x25(r4, &(0x7f0000000a80), 0x12) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x8016, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0xfdef) 2.730574722s ago: executing program 4 (id=2551): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000a40)=""/4067, &(0x7f00000000c0)=0xfe3) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 2.541398693s ago: executing program 4 (id=2554): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000010035bd7000fcdbdf2500000006", @ANYRES32=r2, @ANYBLOB="818c040001800700340016801800018014000a00000000800000000000000000000000001800018014000a000700000000000000090000000000000008000400ff"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) shutdown(0xffffffffffffffff, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sendto(r0, 0x0, 0x0, 0x8840, 0x0, 0xffffff36) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 2.39159956s ago: executing program 0 (id=2555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x40}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000800800030033db342bd45a2f980e4b265c4f4dc872fb3b875ba0d1c2e5a5c1bafcd67bb598c09130afdb7527dcaaedf062772d614ee8947706fde91f8d52e5", @ANYRES32=r2, @ANYBLOB="080026006c09000008009f00000000000800a00002000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, 0x0, 0x8, 0x99, &(0x7f0000000180)=""/153}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000300)={'erspan0\x00', r7, 0x80, 0x7800, 0x4, 0x3, {{0x11, 0x4, 0x3, 0x0, 0x44, 0x66, 0x0, 0x0, 0x29, 0x0, @empty, @local, {[@generic={0x86, 0xd, "01f7bf89989242e23d912c"}, @ssrr={0x89, 0x23, 0xc1, [@broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @empty, @empty, @local]}]}}}}}) r8 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_proto_private(r9, 0x89e3, &(0x7f0000000140)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xff\'%\xa0\x00\x00\x00,'}, 0x30) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)={[{0x2b, 'cpu'}, {0x2d, 'perf_event'}]}, 0x11) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x245000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 2.320235752s ago: executing program 2 (id=2556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a0000003d791bbb7287b2f42e59aedef24474ae3511d67d6997e294d7c7685732f1f90310291bda0bd2a572d08e0dc3e440deb790df05d59a0885abe18b5ab0567af3af1d591ed4077d3c76f114cd4142807e5e57810a943b640100000000000000a90620e02fb650f52131fddb0000000000000000", @ANYRES32=0x0, @ANYBLOB="4018000000000000240012800b00010062726964676500001400028005001600030000000800040000000000"], 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x1ec, r3, 0x2, 0x200, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x160, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!&^\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%:*\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+&\'\xdc\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':]$.\xf3\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(:$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x852c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}, @ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "b6d0172285ee3f7949c6b6d39951e94f530b44e7152332a4cdf9cbfad748444fed0aa5559cd93fe0003a79b248b254d4d57a9da111e0f21324fe9b48003d6213c400dffb0007814685ce8dc4d381cb1314709c435ff3b185a9ce311dc24f3c2a16ada2cebfbae4f9e18bda391264e84771e96e7de6a4520f136654c7f389f92e5ed0ed48b32e00e1325d2dc93670301af2e42a1695061916ba2149c713c6f1"}]}, @ETHTOOL_A_WOL_SOPASS={0x77, 0x3, "9993da427036900df1900306f53e0142436d7dc06e1518f79758ce020068ed129c79ec40b7cda072777c458d4a8b6c4ae2249c243307a9e0764e1088cf1a92203a06ccdb4f467cf622cac8c13eca59282965308ea5ad3a89d1a30e45ba75f72d9448da0e7e9798c891bd6941050f3b692eb407"}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x1ec, r3, 0x2, 0x200, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x160, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!&^\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%:*\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+&\'\xdc\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':]$.\xf3\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(:$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x852c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}, @ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "b6d0172285ee3f7949c6b6d39951e94f530b44e7152332a4cdf9cbfad748444fed0aa5559cd93fe0003a79b248b254d4d57a9da111e0f21324fe9b48003d6213c400dffb0007814685ce8dc4d381cb1314709c435ff3b185a9ce311dc24f3c2a16ada2cebfbae4f9e18bda391264e84771e96e7de6a4520f136654c7f389f92e5ed0ed48b32e00e1325d2dc93670301af2e42a1695061916ba2149c713c6f1"}]}, @ETHTOOL_A_WOL_SOPASS={0x77, 0x3, "9993da427036900df1900306f53e0142436d7dc06e1518f79758ce020068ed129c79ec40b7cda072777c458d4a8b6c4ae2249c243307a9e0764e1088cf1a92203a06ccdb4f467cf622cac8c13eca59282965308ea5ad3a89d1a30e45ba75f72d9448da0e7e9798c891bd6941050f3b692eb407"}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 2.204316619s ago: executing program 4 (id=2558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6de49e563b45c2cf}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfb}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xc}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x804}, 0x40) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f0000000bc0)={&(0x7f0000000180)=@tipc=@name, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000300)=""/90, 0x5a}, {&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000540)=""/246, 0xf6}, {&(0x7f0000000640)=""/235, 0xeb}, {&(0x7f0000000740)=""/191, 0xbf}, {&(0x7f0000000800)=""/193, 0xc1}, {&(0x7f0000000900)=""/203, 0xcb}], 0x9, &(0x7f0000000ac0)=""/240, 0xf0}, 0x10) socketpair(0x25, 0xa, 0x2, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000c40)={0x0, @private, @initdev}, &(0x7f0000000c80)=0xc) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000d00), r3) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x68, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) (async) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000e40)={{0x2, 0x4e23, @empty}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x20, {0x2, 0x4e24, @multicast2}, 'macvlan1\x00'}) (async) r6 = accept4(r2, &(0x7f0000000ec0)=@generic, &(0x7f0000000f40)=0x80, 0x800) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000f80)=@assoc_value, &(0x7f0000000fc0)=0x8) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001000)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000001040)={0x1d, r7, 0x1, {0x1, 0x0, 0x7}, 0xfe}, 0x18) socket$packet(0x11, 0x3, 0x300) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001080), 0x85342cb0691b135d, 0x0) ioctl$PPPIOCGIDLE64(r8, 0x8010743f, &(0x7f00000010c0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x80, r10, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x80}}, 0x40004) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000001280)) (async) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000012c0)=0x2) (async) getpeername$tipc(r2, &(0x7f0000001300)=@name, &(0x7f0000001340)=0x10) (async) bind$qrtr(r6, &(0x7f0000001380)={0x2a, 0xffffffffffffffff, 0x4000}, 0xc) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000013c0)={'xfrm0\x00'}) (async) connect$pptp(r6, &(0x7f0000001400)={0x18, 0x2, {0x0, @local}}, 0x1e) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001480), r3) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80018004}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r11, 0x800, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x800) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000001600)={@ll={0x11, 0xb, r7, 0x1, 0x9, 0x6, @remote}, {&(0x7f0000001580)=""/64, 0x40}, &(0x7f00000015c0)}, 0xa0) 2.071830502s ago: executing program 2 (id=2559): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000010000104"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f00000001c0)="010000000200060000071a80010061cc", 0x10) close(r2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/93, 0x5d}, {&(0x7f0000000640)=""/127, 0x7f}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000800)=""/218, 0xda}, {&(0x7f0000000380)=""/102, 0x66}], 0x5}, 0x5}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x40000020, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 2.009755237s ago: executing program 4 (id=2560): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) r2 = accept(r1, &(0x7f0000000300)=@tipc=@id, &(0x7f0000000000)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x818}, 0x4810) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8c040) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002e09000018000180140002006261746164765f736c6176655f31"], 0x2c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r8, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc, 0x13}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8, 0x3}}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004004}, 0x40000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="36df64c4277d0800000000000000", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x38, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x2400c800) r12 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r12, &(0x7f0000007a80)={0x0, 0x0, 0x0}, 0x10000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) 1.99779574s ago: executing program 1 (id=2561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x38}}, 0x4040020) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x3, 0x3c) (async) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x38}}, 0x4040020) (async) 1.743039165s ago: executing program 1 (id=2562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="11072abd7000fcdbdf250500000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) 1.597972322s ago: executing program 4 (id=2563): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x340}, 0x24048000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fcfffffffad3df250100000004000180100002800c0001800800010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c050) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) close(0x3) syz_emit_ethernet(0x200000, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x800) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001010080190001"], 0x114}], 0x1}, 0x0) 1.43947564s ago: executing program 0 (id=2564): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r2, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@ipv6_getnexthop={0x2c, 0x6a, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NHA_ID={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xfffffffffffffd80}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.385712872s ago: executing program 1 (id=2565): socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000640)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e1f, @multicast2}, @in6={0xa, 0x4e22, 0xc, @mcast1, 0xc7}, @in6={0xa, 0x4e20, 0x6f, @private1}], 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x78, 0x28, 0x800, 0x0, 0x0, {0x9}, [@generic="205a22c0cc7107125b936a72e1d6a2a6044552fc64f583194b55df16fc6c625d98267022ff313aaae2236eeeb6e2ca64415155f66d68c6affcb524d959e6a52a8b854dd3cb43b2f38fcf1e7e9988da41c20d36f3c02dbf2fb54459da", @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x78}}, 0x400c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5202) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000870000001801000020206925001e000000202020ae0e17ae2470d1567b1af8ff00000000bfa10000000000000701000300000100000085000000d000000095000000000000008120f532d4e03ef4d46efa5a0242410e8290196dd8c2c973c7f9"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r6}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r8, 0x0, 0x180000}, 0x18) close(r7) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000500)={0xfffffffffffffffc, 0x18, '\x00', 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) r9 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r9, &(0x7f0000000580)={&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x1}}, 0x80, 0x0}, 0x2000c884) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r13, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x13c, r11, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}, {0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xb, 0x2, "3320dd42f4c8c0"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf8, 0x3, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xe8, 0x2, "aaa5652dc6d97557f6bbdb15081d440d1cd825afc258e45edf7db21d941aa21408b8d368a988062487dda2991d527e8decac0e1718e2c84a454dd7d9102bf91c9c0414a827d4e325a6a9eb8c2909c4ecbca6760ade806ec8bac2666fdb228ebaff4df1634edd1625aef5055fbb01efab4614303f95f1696c9d476c94f96419b363bdd517bcd3b157daf622687453d68880fbcbc7baa6afb51ab34dbd47788a4299bb06a9e5577ff505905f8185c1f7aceb1ddabf2cbd25592682c9ee142d921de32721af30a1f8210d6d08a9e34a7551e548e2a568e0f32bfa615f6ddcc323cde23deec3"}}, {0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24040040}, 0x14) 1.289883243s ago: executing program 2 (id=2566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000a40), &(0x7f0000000a80)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.162534802s ago: executing program 1 (id=2567): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4}]}, 0x44}}, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000040)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 1.122820465s ago: executing program 0 (id=2568): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 1.013878525s ago: executing program 1 (id=2569): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xfff3, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x1, 0x2, 0x2, 0x8, 0x5, 0xa, 0xf, 0x9, 0xa, 0x2, 0x5, 0x1, 0x1, 0x9, 0x4, 0x9], 0x0, [0x3, 0xbbe, 0xff, 0x34, 0x3, 0x6, 0x6, 0x3, 0x9, 0xe4c, 0x9, 0x4, 0x1, 0x7, 0x7, 0x1], [0x2, 0xd, 0x5, 0x46b9, 0x1c0, 0xa, 0x1, 0x0, 0x0, 0x400, 0x5, 0x3, 0x7, 0x0, 0x4, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc021}, 0x4008000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000002c0)) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9f66}) close(r5) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200"/28, @ANYRES32=r8], 0x20, 0x2400e044}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff8}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x50}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 386.490989ms ago: executing program 2 (id=2570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x400000000000000, 0x0, 0x4000850}, 0x24000840) 239.655862ms ago: executing program 2 (id=2571): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004900010000000700000000000a008000", @ANYRES32=r0, @ANYBLOB="0000000008000200cf010000140001"], 0x38}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fbffffff00000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80440, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x6, 0xfc, 0x7, 0xeec0}, {0x7, 0x2, 0x6, 0x6}, {0x38eb, 0x3, 0x80, 0x4}, {0x101, 0x81, 0xa, 0x1}]}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 181.234705ms ago: executing program 4 (id=2572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x87) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x84000}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_type(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000002c0)={@multicast1, @remote, r6}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r8}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x4b) 147.569163ms ago: executing program 0 (id=2573): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x24048194}, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={r1, @broadcast, @multicast2}, 0xc) setsockopt$sock_int(r0, 0x1, 0x11, &(0x7f0000000140)=0x40, 0x4) socket$netlink(0x10, 0x3, 0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 132.442422ms ago: executing program 3 (id=2574): socket$caif_seqpacket(0x25, 0x5, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbe}]}, &(0x7f0000000080)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5f}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f00000005c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x80, @broadcast}}, 0x24) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x2}]}, 0x30}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x1, 0x40, 0x800, 0x803a, {{0x1f, 0x4, 0x1, 0x2, 0x7c, 0x67, 0x0, 0xa, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xb, 0x18, [@broadcast, @local]}, @noop, @timestamp_prespec={0x44, 0xc, 0xbc, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x7fff}]}, @end, @lsrr={0x83, 0x23, 0xa8, [@local, @multicast2, @multicast1, @broadcast, @rand_addr=0x64010100, @broadcast, @loopback, @multicast2]}, @rr={0x7, 0x7, 0x6f, [@private=0xa010100]}, @rr={0x7, 0x23, 0x91, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}, @remote]}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r9, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r9, 0x80) accept$netrom(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6, 0x0}, 0x8) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r7, @ANYBLOB="0300fcbb3700"/20, @ANYRES32=0x0, @ANYBLOB="04000000050000000300"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="789daf9e", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000640)=""/245, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x4, 0x5}, 0x10, r10, 0x0, 0x0, &(0x7f0000000880)=[r7, r7, r7, r11], 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x11, &(0x7f00000002c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ldst={0x3, 0x1, 0x6, 0x3, 0x7, 0x50, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xb}, @jmp={0x5, 0x1, 0xa, 0xb, 0x0, 0x4, 0xffffffffffffffff}]}, &(0x7f0000000380)='syzkaller\x00', 0xf, 0x3f, &(0x7f00000003c0)=""/63, 0x0, 0x0, '\x00', r4, @fallback=0x13, r5, 0x8, &(0x7f0000000540)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000580)=[{0x1, 0x1, 0x1}, {0x3, 0x1, 0x6, 0x3}, {0x0, 0x1, 0x3, 0x7}, {0x2, 0x1, 0x2, 0xa}], 0x10, 0x7}, 0x94) 41.976321ms ago: executing program 2 (id=2575): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) (async) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0xfc, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d04a0f1d0d47b2", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r3) r4 = socket$inet6(0xa, 0x2, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r5, &(0x7f00000002c0)=ANY=[], 0xfdef) (async) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) (async) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) (async) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="dacd5189a3831e198991e875a5b0e2a0631aadffd82be4a44a532a5c78916a94945addab2ba680d45927b0ed8f9b9c9addff71fbc1052f219d7d30a17c4ec05172dad26489", 0x45}], 0x1}}], 0x1, 0x4000040) 24.232106ms ago: executing program 0 (id=2576): socket(0x28, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x29, 0x9, 0x5, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7800, 0x0, 0xe7, 0x2}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x80000) setsockopt(r8, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0xb, 0x4, 0x1, 0x1, 0x2c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@rr={0x7, 0xf, 0x6f, [@private=0xa010101, @loopback, @private=0xa010100]}, @ssrr={0x89, 0x7, 0xbe, [@multicast2]}]}}}}}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @loopback}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) 0s ago: executing program 1 (id=2577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x3c, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0xe4, r6, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x23}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x74, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x56}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x54a6}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0xfff, 0x0, 0x8, 0x9, 0xd, 0x4, 0x5, r8}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r9, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) kernel console output (not intermixed with test programs): pe 83 has an invalid length. [ 192.981642][T10417] 8021q: VLANs not supported on ip6gre0 [ 193.270659][T10429] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1168'. [ 193.270667][T10430] netlink: 'syz.3.1167': attribute type 16 has an invalid length. [ 193.270683][T10430] netlink: 'syz.3.1167': attribute type 17 has an invalid length. [ 193.324197][T10432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1169'. [ 193.343415][T10430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.668892][T10449] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 193.792019][T10460] 8021q: VLANs not supported on ip6gre0 [ 193.932406][T10449] veth1_to_team: entered promiscuous mode [ 193.940193][T10449] bond0: entered promiscuous mode [ 193.946348][T10449] bond0: left promiscuous mode [ 193.953038][T10449] veth1_to_team: left promiscuous mode [ 194.185744][T10475] netlink: 'syz.0.1179': attribute type 1 has an invalid length. [ 194.291863][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.448872][T10488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.841622][T10502] team0: Port device team_slave_0 removed [ 194.920653][T10502] team0: Port device team_slave_1 removed [ 194.926913][T10502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.965599][T10502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.979151][T10502] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.018544][T10519] tipc: Enabling of bearer rejected, already enabled [ 195.177017][T10527] __nla_validate_parse: 2 callbacks suppressed [ 195.177054][T10527] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1190'. [ 195.198839][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1191'. [ 195.208269][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1191'. [ 196.283822][T10578] FAULT_INJECTION: forcing a failure. [ 196.283822][T10578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.306140][T10578] CPU: 0 UID: 0 PID: 10578 Comm: syz.0.1205 Not tainted syzkaller #0 PREEMPT(full) [ 196.306174][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.306191][T10578] Call Trace: [ 196.306198][T10578] [ 196.306205][T10578] dump_stack_lvl+0x189/0x250 [ 196.306231][T10578] ? __pfx____ratelimit+0x10/0x10 [ 196.306250][T10578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.306271][T10578] ? __pfx__printk+0x10/0x10 [ 196.306295][T10578] ? __might_fault+0xb0/0x130 [ 196.306330][T10578] should_fail_ex+0x414/0x560 [ 196.306361][T10578] _copy_from_user+0x2d/0xb0 [ 196.306386][T10578] ___sys_sendmsg+0x158/0x2a0 [ 196.306412][T10578] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.306487][T10578] ? __fget_files+0x2a/0x420 [ 196.306503][T10578] ? __fget_files+0x3a0/0x420 [ 196.306529][T10578] __x64_sys_sendmsg+0x19b/0x260 [ 196.306558][T10578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.306593][T10578] ? __pfx_ksys_write+0x10/0x10 [ 196.306615][T10578] ? rcu_is_watching+0x15/0xb0 [ 196.306639][T10578] ? do_syscall_64+0xbe/0x3b0 [ 196.306664][T10578] do_syscall_64+0xfa/0x3b0 [ 196.306683][T10578] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.306701][T10578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.306719][T10578] ? clear_bhb_loop+0x60/0xb0 [ 196.306742][T10578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.306759][T10578] RIP: 0033:0x7ff3d6f8eec9 [ 196.306775][T10578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.306790][T10578] RSP: 002b:00007ff3d7e0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.306809][T10578] RAX: ffffffffffffffda RBX: 00007ff3d71e5fa0 RCX: 00007ff3d6f8eec9 [ 196.306823][T10578] RDX: 0000000020044814 RSI: 00002000000000c0 RDI: 0000000000000007 [ 196.306834][T10578] RBP: 00007ff3d7e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 196.306845][T10578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.306855][T10578] R13: 00007ff3d71e6038 R14: 00007ff3d71e5fa0 R15: 00007ffc45a55b48 [ 196.306884][T10578] [ 196.542647][T10586] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 196.709496][T10593] syzkaller1: entered promiscuous mode [ 196.715016][T10593] syzkaller1: entered allmulticast mode [ 196.724589][T10590] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1209'. [ 196.953029][T10605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.961053][T10617] netlink: 'syz.1.1215': attribute type 1 has an invalid length. [ 196.962647][T10611] can: request_module (can-proto-0) failed. [ 197.132467][T10630] dvmrp8: entered allmulticast mode [ 197.322036][T10629] dvmrp8: left allmulticast mode [ 197.358976][T10645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.366950][T10643] FAULT_INJECTION: forcing a failure. [ 197.366950][T10643] name failslab, interval 1, probability 0, space 0, times 1 [ 197.380949][T10643] CPU: 0 UID: 0 PID: 10643 Comm: syz.2.1220 Not tainted syzkaller #0 PREEMPT(full) [ 197.380996][T10643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.381007][T10643] Call Trace: [ 197.381015][T10643] [ 197.381022][T10643] dump_stack_lvl+0x189/0x250 [ 197.381049][T10643] ? __pfx____ratelimit+0x10/0x10 [ 197.381069][T10643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.381091][T10643] ? __pfx__printk+0x10/0x10 [ 197.381121][T10643] ? __pfx___might_resched+0x10/0x10 [ 197.381144][T10643] should_fail_ex+0x414/0x560 [ 197.381176][T10643] should_failslab+0xa8/0x100 [ 197.381205][T10643] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 197.381239][T10643] ? __alloc_skb+0x112/0x2d0 [ 197.381265][T10643] __alloc_skb+0x112/0x2d0 [ 197.381290][T10643] netlink_sendmsg+0x5c6/0xb30 [ 197.381332][T10643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.381356][T10643] ? aa_sock_msg_perm+0xf1/0x1d0 [ 197.381376][T10643] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.381412][T10643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.381436][T10643] __sock_sendmsg+0x21c/0x270 [ 197.381457][T10643] ____sys_sendmsg+0x505/0x830 [ 197.381487][T10643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.381521][T10643] ? import_iovec+0x74/0xa0 [ 197.381549][T10643] ___sys_sendmsg+0x21f/0x2a0 [ 197.381576][T10643] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.381636][T10643] ? __fget_files+0x2a/0x420 [ 197.381652][T10643] ? __fget_files+0x3a0/0x420 [ 197.381678][T10643] __x64_sys_sendmsg+0x19b/0x260 [ 197.381706][T10643] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.381741][T10643] ? __pfx_ksys_write+0x10/0x10 [ 197.381764][T10643] ? rcu_is_watching+0x15/0xb0 [ 197.381788][T10643] ? do_syscall_64+0xbe/0x3b0 [ 197.381812][T10643] do_syscall_64+0xfa/0x3b0 [ 197.381831][T10643] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.381850][T10643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.381869][T10643] ? clear_bhb_loop+0x60/0xb0 [ 197.381891][T10643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.381908][T10643] RIP: 0033:0x7f3cf458eec9 [ 197.381925][T10643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.381939][T10643] RSP: 002b:00007f3cf540d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.381966][T10643] RAX: ffffffffffffffda RBX: 00007f3cf47e5fa0 RCX: 00007f3cf458eec9 [ 197.381980][T10643] RDX: 0000000020044814 RSI: 00002000000000c0 RDI: 0000000000000007 [ 197.381992][T10643] RBP: 00007f3cf540d090 R08: 0000000000000000 R09: 0000000000000000 [ 197.382003][T10643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.382013][T10643] R13: 00007f3cf47e6038 R14: 00007f3cf47e5fa0 R15: 00007ffd91234af8 [ 197.382042][T10643] [ 197.778577][T10650] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 198.064314][T10675] ip6gre1: entered allmulticast mode [ 198.648501][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 200.710878][T10781] sctp: [Deprecated]: syz.1.1253 (pid 10781) Use of int in max_burst socket option deprecated. [ 200.710878][T10781] Use struct sctp_assoc_value instead [ 201.247634][T10816] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1260'. [ 201.837890][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'. [ 201.877387][T10844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1267'. [ 201.934477][T10844] netlink: 'syz.2.1267': attribute type 6 has an invalid length. [ 204.109856][T10848] geneve4: entered promiscuous mode [ 204.151582][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'. [ 204.157123][T10862] syzkaller1: entered promiscuous mode [ 204.165832][T10844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1267'. [ 204.167861][T10862] syzkaller1: entered allmulticast mode [ 204.175423][T10844] netlink: 'syz.2.1267': attribute type 6 has an invalid length. [ 204.325661][ T6260] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.334843][ T6260] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.387389][T10872] batadv_slave_1: entered promiscuous mode [ 204.388154][T10871] block nbd0: not configured, cannot reconfigure [ 204.437598][ T6260] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.446373][ T6260] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.482248][T10871] tipc: Enabled bearer , priority 0 [ 204.498405][T10870] batadv_slave_1: left promiscuous mode [ 204.521484][T10871] tipc: Disabling bearer [ 204.743200][T10897] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1278'. [ 204.882012][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 204.891200][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 204.928515][T10899] netlink: 'syz.2.1279': attribute type 14 has an invalid length. [ 204.936379][T10899] netlink: 'syz.2.1279': attribute type 13 has an invalid length. [ 204.948761][T10897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1278'. [ 205.090494][T10917] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1280'. [ 205.403298][T10929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.579445][T10936] 8021q: VLANs not supported on ip6gre0 [ 205.611387][T10935] netlink: 'syz.3.1288': attribute type 12 has an invalid length. [ 205.917985][T10955] netlink: 'syz.4.1295': attribute type 21 has an invalid length. [ 205.951256][T10955] netlink: 'syz.4.1295': attribute type 6 has an invalid length. [ 206.311777][T10970] netlink: zone id is out of range [ 206.318277][T10970] netlink: zone id is out of range [ 206.325988][T10970] netlink: zone id is out of range [ 206.334376][T10970] netlink: zone id is out of range [ 206.421501][T10972] netlink: del zone limit has 4 unknown bytes [ 206.476693][T10970] netlink: set zone limit has 4 unknown bytes [ 206.591584][T10975] __nla_validate_parse: 6 callbacks suppressed [ 206.591601][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1300'. [ 206.609848][ T5185] Bluetooth: hci3: command 0x0406 tx timeout [ 206.616675][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 206.623062][ T5868] Bluetooth: hci2: command 0x0401 tx timeout [ 206.798642][T10985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1303'. [ 207.302381][T10998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1306'. [ 207.336828][T10996] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 207.403804][T11000] pimreg: entered allmulticast mode [ 207.444232][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1310'. [ 207.478668][T11009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'. [ 207.521597][T11014] netlink: 'syz.2.1309': attribute type 21 has an invalid length. [ 207.529594][T11014] netlink: 'syz.2.1309': attribute type 22 has an invalid length. [ 207.552913][T11014] netlink: 'syz.2.1309': attribute type 23 has an invalid length. [ 207.580708][T11017] pim6reg1: entered promiscuous mode [ 207.587325][T11014] netlink: 'syz.2.1309': attribute type 25 has an invalid length. [ 207.595160][T11014] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1309'. [ 207.615562][T11017] pim6reg1: entered allmulticast mode [ 207.660656][T11027] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1313'. [ 207.672491][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1309'. [ 207.786858][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1314'. [ 207.813810][T11036] tap0: tun_chr_ioctl cmd 1074025677 [ 207.819630][T11036] tap0: linktype set to 270 [ 207.965087][T11044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1321'. [ 208.125649][T11051] veth5: entered promiscuous mode [ 208.148954][T11050] erspan0: entered allmulticast mode [ 208.453651][T11075] !: renamed from dummy0 [ 208.600392][T11078] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (35) [ 208.632843][T11084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.550940][T11139] ip6gretap0: entered promiscuous mode [ 209.556867][T11139] macsec1: entered allmulticast mode [ 209.596546][T11139] ip6gretap0: entered allmulticast mode [ 209.835483][T11165] validate_nla: 3 callbacks suppressed [ 209.835500][T11165] netlink: 'syz.3.1353': attribute type 4 has an invalid length. [ 209.895512][T11166] block nbd0: not configured, cannot reconfigure [ 210.562655][T11202] bridge_slave_0: left allmulticast mode [ 210.569850][T11202] bridge_slave_0: left promiscuous mode [ 210.575905][T11202] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.590527][T11202] bridge_slave_1: left allmulticast mode [ 210.608656][T11202] bridge_slave_1: left promiscuous mode [ 210.636688][T11202] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.662354][T11202] bond0: (slave bond_slave_0): Releasing backup interface [ 210.672470][T11202] team0: Port device C removed [ 210.704979][T11202] team0: Port device team_slave_1 removed [ 210.722081][T11202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.751527][T11202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.778487][T11202] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 211.782844][T11265] tipc: New replicast peer: 172.20.20.187 [ 211.797705][T11265] tipc: Enabled bearer , priority 10 [ 212.142495][T11290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.309282][T11296] macsec0: entered promiscuous mode [ 212.314746][T11296] macsec0: entered allmulticast mode [ 212.352204][T11296] veth1_macvtap: entered allmulticast mode [ 212.358468][T11296] macsec0: left promiscuous mode [ 212.363607][T11296] macsec0: left allmulticast mode [ 212.369592][T11296] veth1_macvtap: left allmulticast mode [ 212.417708][T11308] openvswitch: netlink: nsh attr 7 is out of range max 3 [ 212.445509][T11308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.457210][T11308] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 212.566743][T11318] __nla_validate_parse: 12 callbacks suppressed [ 212.566760][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 212.634510][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1396'. [ 212.807369][ T8283] tipc: Node number set to 1156800366 [ 212.914509][T11329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1398'. [ 212.966840][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 213.011333][T11334] netlink: 'syz.1.1400': attribute type 10 has an invalid length. [ 213.019379][T11334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1400'. [ 213.047460][T11334] team0: Port device geneve0 added [ 213.080425][ T6258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.099289][ T6258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.129270][ T6258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.156682][ T6258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.166885][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 213.605569][T11367] macsec1: entered allmulticast mode [ 213.612277][T11367] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 213.658051][T11367] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 213.672907][T11372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1409'. [ 213.721804][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'. [ 213.732330][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1410'. [ 214.013661][T11387] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1415'. [ 214.104545][T11390] netlink: 'syz.2.1415': attribute type 16 has an invalid length. [ 214.114893][T11390] netlink: 'syz.2.1415': attribute type 5 has an invalid length. [ 214.134310][T11390] IPv6: NLM_F_REPLACE set, but no existing node found! [ 214.241577][T11396] syz_tun: entered promiscuous mode [ 214.260827][T11396] netlink: 'syz.4.1418': attribute type 8 has an invalid length. [ 214.263383][T11398] vlan2: entered promiscuous mode [ 214.274258][T11398] gretap0: entered promiscuous mode [ 214.511597][T11410] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 214.527518][T11410] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 214.773561][T11419] netem: change failed [ 215.351918][T11461] netlink: 'syz.4.1436': attribute type 10 has an invalid length. [ 215.419566][T11461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.479167][T11461] team0: Port device bond0 added [ 215.536044][ T8289] IPVS: starting estimator thread 0... [ 215.626312][T11469] syz_tun: refused to change device tx_queue_len [ 215.637641][T11467] IPVS: using max 27 ests per chain, 64800 per kthread [ 215.642353][T11469] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 215.713620][T11481] netlink: 'syz.4.1444': attribute type 1 has an invalid length. [ 215.760771][T11481] bond3: entered promiscuous mode [ 215.775137][T11481] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.827759][T11481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.835551][T11481] IPv6: NLM_F_CREATE should be set when creating new route [ 215.842865][T11481] IPv6: NLM_F_CREATE should be set when creating new route [ 215.852222][T11487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.859736][T11487] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 215.871008][T11487] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 215.882731][T11481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.901882][T11487] bond3: (slave wireguard0): making interface the new active one [ 215.909923][T11487] wireguard0: entered promiscuous mode [ 215.917210][T11487] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 216.334052][T11512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.652844][T11517] netlink: 'syz.3.1454': attribute type 1 has an invalid length. [ 216.708671][T11517] bond2: entered promiscuous mode [ 216.714202][T11517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.805134][T11521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.959427][T11523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.970940][T11523] bond2: (slave bond3): making interface the new active one [ 216.984841][T11523] bond3: entered promiscuous mode [ 216.990896][T11523] bond2: (slave bond3): Enslaving as an active interface with an up link [ 217.129542][T11521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.166123][T11545] vlan3: entered promiscuous mode [ 217.173269][T11545] bond0: entered promiscuous mode [ 217.180180][T11545] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 217.188659][T11545] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 217.306432][T11557] netlink: 'syz.1.1462': attribute type 1 has an invalid length. [ 217.318183][T11521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.538727][T11521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.590410][T11568] tipc: Enabling of bearer rejected, already enabled [ 217.614918][ T30] audit: type=1800 audit(1758595609.833:5): pid=11570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1467" name="memory.events" dev="tmpfs" ino=1568 res=0 errno=0 [ 217.768604][T11574] __nla_validate_parse: 13 callbacks suppressed [ 217.768621][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 217.772145][ T6262] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.788418][T11574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1468'. [ 217.845669][ T3021] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.887042][ T6260] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.931744][ T6260] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.941648][T11579] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1471'. [ 217.977240][T11585] netlink: 'syz.4.1472': attribute type 3 has an invalid length. [ 217.985188][T11585] netlink: 'syz.4.1472': attribute type 1 has an invalid length. [ 217.993521][T11585] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1472'. [ 218.029088][T11585] ip_vti0: entered allmulticast mode [ 218.374533][T11612] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1478'. [ 218.375916][T11609] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1478'. [ 218.465165][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1479'. [ 218.520841][T11611] team1: entered promiscuous mode [ 218.526162][T11611] team1: entered allmulticast mode [ 218.532398][T11611] 8021q: adding VLAN 0 to HW filter on device team1 [ 218.555998][T11614] tap0: tun_chr_ioctl cmd 2147767507 [ 218.759328][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 218.986080][T11632] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1483'. [ 219.789351][T11661] netlink: 'syz.1.1488': attribute type 1 has an invalid length. [ 219.883991][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1491'. [ 219.966042][ T8283] IPVS: starting estimator thread 0... [ 219.978316][T11668] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 219.992136][T11668] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 220.077931][T11677] IPVS: using max 29 ests per chain, 69600 per kthread [ 220.256460][T11689] netlink: 'syz.0.1494': attribute type 9 has an invalid length. [ 220.264748][T11689] openvswitch: netlink: Message has 8 unknown bytes. [ 220.279215][T11689] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20002 [ 220.352494][T11671] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 220.365107][T11671] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 220.408591][T11661] bond7: (slave bridge1): Enslaving as an active interface with a down link [ 220.619585][T11694] nbd: socks must be embedded in a SOCK_ITEM attr [ 220.626176][T11694] block nbd0: shutting down sockets [ 220.837745][ T30] audit: type=1804 audit(1758595613.043:6): pid=11706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1500" name="/newroot/307/cgroup.controllers" dev="tmpfs" ino=1599 res=1 errno=0 [ 220.922360][ T30] audit: type=1800 audit(1758595613.043:7): pid=11706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1500" name="cgroup.controllers" dev="tmpfs" ino=1599 res=0 errno=0 [ 221.328880][T11730] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 221.403334][T11728] netlink: 'syz.1.1505': attribute type 10 has an invalid length. [ 222.101467][T11775] netlink: 'syz.2.1522': attribute type 1 has an invalid length. [ 222.136185][T11775] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.163838][T11775] bond5: (slave ip6erspan0): making interface the new active one [ 222.173442][T11775] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 223.148122][T11818] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 223.372083][T11828] __nla_validate_parse: 10 callbacks suppressed [ 223.372101][T11828] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1537'. [ 223.421339][T11828] 8021q: VLANs not supported on ip6_vti0 [ 224.051553][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'. [ 224.272692][T11860] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1544'. [ 224.282235][T11860] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1544'. [ 224.511668][T11867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.679003][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 224.719618][ T8283] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0 [ 224.733923][ T8283] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 224.763671][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 224.834153][T11886] netlink: 'syz.1.1550': attribute type 83 has an invalid length. [ 224.956819][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 224.986848][T11885] pim6reg1: entered promiscuous mode [ 224.992486][T11885] pim6reg1: entered allmulticast mode [ 225.028275][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'. [ 225.057442][T11898] netlink: 'syz.4.1552': attribute type 5 has an invalid length. [ 225.078180][T11898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1552'. [ 225.128761][T11898] geneve3: entered promiscuous mode [ 225.144083][T11898] geneve3: entered allmulticast mode [ 225.162397][ T6260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 225.195446][ T6260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 225.292389][ T6260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 225.309545][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'. [ 225.321610][ T6260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 225.322690][ T8283] hid-generic 0005:0007:0008.0002: unknown main item tag 0x0 [ 225.345109][ T8283] hid-generic 0005:0007:0008.0002: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 225.807165][T11933] netlink: 'syz.3.1563': attribute type 7 has an invalid length. [ 225.907026][T11937] ip_vti0: left allmulticast mode [ 225.915109][T11937] syz_tun: left promiscuous mode [ 225.950874][T11937] veth0_to_bridge: left promiscuous mode [ 225.964591][T11937] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 225.972234][T11937] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 225.986814][T11937] ip6gre1: left allmulticast mode [ 226.004666][T11937] bond3: left promiscuous mode [ 226.009754][T11937] wireguard0: left promiscuous mode [ 226.026339][T11937] team1: left promiscuous mode [ 226.032230][T11937] team1: left allmulticast mode [ 226.040833][T11937] geneve3: left promiscuous mode [ 226.045963][T11937] geneve3: left allmulticast mode [ 226.061842][T11941] ip6tnl2: entered promiscuous mode [ 226.067212][T11941] ip6tnl2: entered allmulticast mode [ 226.074576][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 226.101985][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 226.118284][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 226.127103][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 226.300650][T11950] netlink: 'syz.3.1569': attribute type 1 has an invalid length. [ 226.460746][T11950] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.490574][T11955] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 226.564261][T11955] bond4: (slave batadv1): making interface the new active one [ 226.579149][T11955] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 227.311920][T11960] bond4 (unregistering): (slave batadv1): Releasing active interface [ 227.323103][T11960] bond4 (unregistering): Released all slaves [ 227.636292][T11988] netlink: 'syz.3.1578': attribute type 5 has an invalid length. [ 228.168888][T12012] netlink: 'syz.4.1584': attribute type 1 has an invalid length. [ 229.511178][T12020] __nla_validate_parse: 9 callbacks suppressed [ 229.511207][T12020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1588'. [ 229.564233][T12020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1588'. [ 229.690427][T12033] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1590'. [ 229.786659][T12037] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1592'. [ 229.807153][T12037] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1592'. [ 229.824205][T12037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1592'. [ 230.741384][T12069] tipc: Enabled bearer , priority 0 [ 230.784867][T12069] syzkaller0: entered promiscuous mode [ 230.806439][T12069] syzkaller0: entered allmulticast mode [ 230.866509][T12069] tipc: Resetting bearer [ 230.884231][T12068] tipc: Resetting bearer [ 230.958237][T12068] tipc: Disabling bearer [ 231.105226][T12094] netlink: 'syz.4.1612': attribute type 1 has an invalid length. [ 231.189269][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1613'. [ 231.220308][T12094] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 231.324415][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 231.408836][T12094] veth5: entered promiscuous mode [ 231.455208][ T6261] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 231.474417][T12099] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.571684][T12104] team0: Port device bond0 removed [ 231.580039][ T6260] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 231.617528][T12104] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.650266][T12112] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1616'. [ 231.742610][T12110] netlink: set zone limit has 4 unknown bytes [ 232.210956][T12131] tipc: Enabled bearer , priority 0 [ 232.246480][T12131] syzkaller0: entered promiscuous mode [ 232.277978][T12131] syzkaller0: entered allmulticast mode [ 232.354818][T12131] tipc: Resetting bearer [ 232.398414][T12130] tipc: Resetting bearer [ 232.469092][T12130] tipc: Disabling bearer [ 232.871511][T12161] netlink: 'syz.1.1629': attribute type 1 has an invalid length. [ 232.891284][T12161] netlink: 'syz.1.1629': attribute type 4 has an invalid length. [ 232.907656][T12161] netlink: 15538 bytes leftover after parsing attributes in process `syz.1.1629'. [ 233.813756][T12200] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.821359][T12200] bridge0: port 1(bond6) entered blocking state [ 233.827933][T12200] bridge0: port 1(bond6) entered disabled state [ 233.834437][T12200] bond6: entered allmulticast mode [ 233.842534][T12200] bond6: entered promiscuous mode [ 233.860096][T12204] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 234.019065][T12214] netlink: 'syz.2.1649': attribute type 25 has an invalid length. [ 234.031757][T12214] netlink: 'syz.2.1649': attribute type 10 has an invalid length. [ 234.044547][T12214] geneve0: entered promiscuous mode [ 234.050972][T12214] team0: Port device geneve0 added [ 234.062515][ T6258] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.071081][ T6258] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.081271][ T6258] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.089639][ T6258] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.155370][T12218] ip6gre1: entered allmulticast mode [ 234.302821][T12232] lo speed is unknown, defaulting to 1000 [ 234.309308][T12232] lo speed is unknown, defaulting to 1000 [ 234.318587][T12232] lo speed is unknown, defaulting to 1000 [ 234.338359][T12232] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 234.373472][T12232] lo speed is unknown, defaulting to 1000 [ 234.384219][T12232] lo speed is unknown, defaulting to 1000 [ 234.393549][T12232] lo speed is unknown, defaulting to 1000 [ 234.406571][T12232] lo speed is unknown, defaulting to 1000 [ 234.417864][T12232] lo speed is unknown, defaulting to 1000 [ 234.540359][T12240] tipc: Enabled bearer , priority 0 [ 234.602473][T12245] netlink: 'syz.4.1661': attribute type 13 has an invalid length. [ 234.613651][T12240] syzkaller0: entered promiscuous mode [ 234.621512][T12245] netlink: 'syz.4.1661': attribute type 17 has an invalid length. [ 234.631614][T12240] syzkaller0: entered allmulticast mode [ 234.689218][T12254] FAULT_INJECTION: forcing a failure. [ 234.689218][T12254] name failslab, interval 1, probability 0, space 0, times 0 [ 234.706239][T12254] CPU: 0 UID: 0 PID: 12254 Comm: syz.0.1663 Not tainted syzkaller #0 PREEMPT(full) [ 234.706264][T12254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 234.706275][T12254] Call Trace: [ 234.706283][T12254] [ 234.706291][T12254] dump_stack_lvl+0x189/0x250 [ 234.706319][T12254] ? __pfx____ratelimit+0x10/0x10 [ 234.706339][T12254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.706361][T12254] ? __pfx__printk+0x10/0x10 [ 234.706392][T12254] ? __pfx___might_resched+0x10/0x10 [ 234.706410][T12254] ? fs_reclaim_acquire+0x7d/0x100 [ 234.706432][T12254] should_fail_ex+0x414/0x560 [ 234.706464][T12254] should_failslab+0xa8/0x100 [ 234.706493][T12254] __kmalloc_cache_noprof+0x70/0x3d0 [ 234.706529][T12254] ? nf_tables_newchain+0xfeb/0x2900 [ 234.706558][T12254] nf_tables_newchain+0xfeb/0x2900 [ 234.706616][T12254] ? __pfx_nf_tables_newchain+0x10/0x10 [ 234.706686][T12254] ? nfnl_pernet+0x23/0x240 [ 234.706715][T12254] ? __nla_parse+0x40/0x60 [ 234.706739][T12254] nfnetlink_rcv+0x1132/0x2520 [ 234.706790][T12254] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 234.706857][T12254] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.706897][T12254] netlink_unicast+0x82f/0x9e0 [ 234.706925][T12254] ? __pfx_netlink_unicast+0x10/0x10 [ 234.706956][T12254] ? netlink_sendmsg+0x642/0xb30 [ 234.706974][T12254] ? skb_put+0x11b/0x210 [ 234.706999][T12254] netlink_sendmsg+0x805/0xb30 [ 234.707029][T12254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.707052][T12254] ? aa_sock_msg_perm+0xf1/0x1d0 [ 234.707070][T12254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 234.707089][T12254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.707111][T12254] __sock_sendmsg+0x21c/0x270 [ 234.707130][T12254] ____sys_sendmsg+0x505/0x830 [ 234.707157][T12254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.707190][T12254] ? import_iovec+0x74/0xa0 [ 234.707216][T12254] ___sys_sendmsg+0x21f/0x2a0 [ 234.707245][T12254] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.707301][T12254] ? __fget_files+0x2a/0x420 [ 234.707317][T12254] ? __fget_files+0x3a0/0x420 [ 234.707341][T12254] __x64_sys_sendmsg+0x19b/0x260 [ 234.707366][T12254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.707398][T12254] ? __pfx_ksys_write+0x10/0x10 [ 234.707418][T12254] ? rcu_is_watching+0x15/0xb0 [ 234.707439][T12254] ? do_syscall_64+0xbe/0x3b0 [ 234.707461][T12254] do_syscall_64+0xfa/0x3b0 [ 234.707479][T12254] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.707496][T12254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.707512][T12254] ? clear_bhb_loop+0x60/0xb0 [ 234.707531][T12254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.707547][T12254] RIP: 0033:0x7ff3d6f8eec9 [ 234.707563][T12254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.707578][T12254] RSP: 002b:00007ff3d7e0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.707597][T12254] RAX: ffffffffffffffda RBX: 00007ff3d71e5fa0 RCX: 00007ff3d6f8eec9 [ 234.707609][T12254] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 234.707621][T12254] RBP: 00007ff3d7e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 234.707632][T12254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.707642][T12254] R13: 00007ff3d71e6038 R14: 00007ff3d71e5fa0 R15: 00007ffc45a55b48 [ 234.707671][T12254] [ 235.067932][T12245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.086060][T12245] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.111569][T12245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.132251][T12238] tipc: Resetting bearer [ 235.150982][T12238] tipc: Disabling bearer [ 235.270689][T12252] lo speed is unknown, defaulting to 1000 [ 235.548326][T12279] __nla_validate_parse: 5 callbacks suppressed [ 235.548343][T12279] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.1671'. [ 235.725617][T12288] FAULT_INJECTION: forcing a failure. [ 235.725617][T12288] name failslab, interval 1, probability 0, space 0, times 0 [ 235.740645][T12288] CPU: 0 UID: 0 PID: 12288 Comm: syz.1.1674 Not tainted syzkaller #0 PREEMPT(full) [ 235.740671][T12288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 235.740684][T12288] Call Trace: [ 235.740692][T12288] [ 235.740700][T12288] dump_stack_lvl+0x189/0x250 [ 235.740729][T12288] ? __pfx____ratelimit+0x10/0x10 [ 235.740751][T12288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.740773][T12288] ? __pfx__printk+0x10/0x10 [ 235.740808][T12288] ? __pfx___might_resched+0x10/0x10 [ 235.740837][T12288] ? fs_reclaim_acquire+0x7d/0x100 [ 235.740860][T12288] should_fail_ex+0x414/0x560 [ 235.740912][T12288] should_failslab+0xa8/0x100 [ 235.740942][T12288] __kmalloc_cache_noprof+0x70/0x3d0 [ 235.740970][T12288] ? nf_tables_newchain+0xfeb/0x2900 [ 235.741003][T12288] nf_tables_newchain+0xfeb/0x2900 [ 235.741048][T12288] ? __pfx_nf_tables_newchain+0x10/0x10 [ 235.741112][T12288] ? nfnl_pernet+0x23/0x240 [ 235.741142][T12288] ? __nla_parse+0x40/0x60 [ 235.741167][T12288] nfnetlink_rcv+0x1132/0x2520 [ 235.741222][T12288] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 235.741260][T12288] ? ref_tracker_free+0x63a/0x7d0 [ 235.741310][T12288] ? __netlink_deliver_tap+0x807/0x850 [ 235.741333][T12288] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.741375][T12288] netlink_unicast+0x82f/0x9e0 [ 235.741405][T12288] ? __pfx_netlink_unicast+0x10/0x10 [ 235.741427][T12288] ? netlink_sendmsg+0x642/0xb30 [ 235.741449][T12288] ? skb_put+0x11b/0x210 [ 235.741478][T12288] netlink_sendmsg+0x805/0xb30 [ 235.741512][T12288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.741540][T12288] ? aa_sock_msg_perm+0xf1/0x1d0 [ 235.741563][T12288] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.741584][T12288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.741627][T12288] __sock_sendmsg+0x21c/0x270 [ 235.741650][T12288] ____sys_sendmsg+0x505/0x830 [ 235.741683][T12288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.741720][T12288] ? import_iovec+0x74/0xa0 [ 235.741751][T12288] ___sys_sendmsg+0x21f/0x2a0 [ 235.741781][T12288] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.741847][T12288] ? __fget_files+0x2a/0x420 [ 235.741865][T12288] ? __fget_files+0x3a0/0x420 [ 235.741894][T12288] __x64_sys_sendmsg+0x19b/0x260 [ 235.741925][T12288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.741963][T12288] ? __pfx_ksys_write+0x10/0x10 [ 235.741987][T12288] ? rcu_is_watching+0x15/0xb0 [ 235.742012][T12288] ? do_syscall_64+0xbe/0x3b0 [ 235.742040][T12288] do_syscall_64+0xfa/0x3b0 [ 235.742061][T12288] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.742081][T12288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.742101][T12288] ? clear_bhb_loop+0x60/0xb0 [ 235.742126][T12288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.742145][T12288] RIP: 0033:0x7f1050b8eec9 [ 235.742163][T12288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.742179][T12288] RSP: 002b:00007f10519e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.742200][T12288] RAX: ffffffffffffffda RBX: 00007f1050de5fa0 RCX: 00007f1050b8eec9 [ 235.742215][T12288] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 235.742228][T12288] RBP: 00007f10519e8090 R08: 0000000000000000 R09: 0000000000000000 [ 235.742240][T12288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.742252][T12288] R13: 00007f1050de6038 R14: 00007f1050de5fa0 R15: 00007ffc9995b908 [ 235.742285][T12288] [ 236.231447][T12293] netlink: 'syz.2.1676': attribute type 13 has an invalid length. [ 236.262295][T12293] netlink: 'syz.2.1676': attribute type 17 has an invalid length. [ 236.460940][T12293] sit0: left promiscuous mode [ 236.573451][T12293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.586769][T12293] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.612595][T12293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.683473][T12311] lo speed is unknown, defaulting to 1000 [ 236.922500][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1680'. [ 236.931687][T12314] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1680'. [ 237.048069][T12332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1680'. [ 237.557789][T12341] 8021q: VLANs not supported on ip6_vti0 [ 237.681974][T12347] FAULT_INJECTION: forcing a failure. [ 237.681974][T12347] name failslab, interval 1, probability 0, space 0, times 0 [ 237.697709][T12347] CPU: 0 UID: 0 PID: 12347 Comm: syz.2.1687 Not tainted syzkaller #0 PREEMPT(full) [ 237.697734][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 237.697746][T12347] Call Trace: [ 237.697754][T12347] [ 237.697762][T12347] dump_stack_lvl+0x189/0x250 [ 237.697788][T12347] ? __pfx____ratelimit+0x10/0x10 [ 237.697808][T12347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.697831][T12347] ? __pfx__printk+0x10/0x10 [ 237.697860][T12347] ? __pfx___might_resched+0x10/0x10 [ 237.697880][T12347] should_fail_ex+0x414/0x560 [ 237.697907][T12347] should_failslab+0xa8/0x100 [ 237.697936][T12347] __kmalloc_noprof+0xcb/0x4f0 [ 237.697961][T12347] ? __kasan_kmalloc+0x93/0xb0 [ 237.697983][T12347] ? nla_strdup+0x9d/0x140 [ 237.698007][T12347] nla_strdup+0x9d/0x140 [ 237.698028][T12347] nf_tables_newchain+0x1998/0x2900 [ 237.698070][T12347] ? __pfx_nf_tables_newchain+0x10/0x10 [ 237.698126][T12347] ? nfnl_pernet+0x23/0x240 [ 237.698155][T12347] ? __nla_parse+0x40/0x60 [ 237.698179][T12347] nfnetlink_rcv+0x1132/0x2520 [ 237.698227][T12347] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 237.698261][T12347] ? ref_tracker_free+0x63a/0x7d0 [ 237.698307][T12347] ? __netlink_deliver_tap+0x807/0x850 [ 237.698330][T12347] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.698365][T12347] netlink_unicast+0x82f/0x9e0 [ 237.698412][T12347] ? __pfx_netlink_unicast+0x10/0x10 [ 237.698448][T12347] ? netlink_sendmsg+0x642/0xb30 [ 237.698470][T12347] ? skb_put+0x11b/0x210 [ 237.698510][T12347] netlink_sendmsg+0x805/0xb30 [ 237.698542][T12347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.698567][T12347] ? aa_sock_msg_perm+0xf1/0x1d0 [ 237.698589][T12347] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.698609][T12347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.698633][T12347] __sock_sendmsg+0x21c/0x270 [ 237.698655][T12347] ____sys_sendmsg+0x505/0x830 [ 237.698685][T12347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.698719][T12347] ? import_iovec+0x74/0xa0 [ 237.698745][T12347] ___sys_sendmsg+0x21f/0x2a0 [ 237.698773][T12347] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.698835][T12347] ? __fget_files+0x2a/0x420 [ 237.698851][T12347] ? __fget_files+0x3a0/0x420 [ 237.698879][T12347] __x64_sys_sendmsg+0x19b/0x260 [ 237.698907][T12347] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.698942][T12347] ? __pfx_ksys_write+0x10/0x10 [ 237.698966][T12347] ? rcu_is_watching+0x15/0xb0 [ 237.698990][T12347] ? do_syscall_64+0xbe/0x3b0 [ 237.699015][T12347] do_syscall_64+0xfa/0x3b0 [ 237.699034][T12347] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.699052][T12347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.699070][T12347] ? clear_bhb_loop+0x60/0xb0 [ 237.699091][T12347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.699108][T12347] RIP: 0033:0x7f3cf458eec9 [ 237.699125][T12347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.699140][T12347] RSP: 002b:00007f3cf540d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.699159][T12347] RAX: ffffffffffffffda RBX: 00007f3cf47e5fa0 RCX: 00007f3cf458eec9 [ 237.699172][T12347] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 237.699194][T12347] RBP: 00007f3cf540d090 R08: 0000000000000000 R09: 0000000000000000 [ 237.699205][T12347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.699215][T12347] R13: 00007f3cf47e6038 R14: 00007f3cf47e5fa0 R15: 00007ffd91234af8 [ 237.699244][T12347] [ 238.212546][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1689'. [ 238.456659][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1692'. [ 238.807538][T12371] bridge: RTM_NEWNEIGH with invalid ether address [ 239.024007][T12373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1696'. [ 239.534562][T12384] FAULT_INJECTION: forcing a failure. [ 239.534562][T12384] name failslab, interval 1, probability 0, space 0, times 0 [ 239.578888][T12384] CPU: 1 UID: 0 PID: 12384 Comm: syz.2.1700 Not tainted syzkaller #0 PREEMPT(full) [ 239.578913][T12384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.578924][T12384] Call Trace: [ 239.578932][T12384] [ 239.578940][T12384] dump_stack_lvl+0x189/0x250 [ 239.578966][T12384] ? __pfx____ratelimit+0x10/0x10 [ 239.578985][T12384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.579006][T12384] ? __pfx__printk+0x10/0x10 [ 239.579036][T12384] ? __pfx___might_resched+0x10/0x10 [ 239.579058][T12384] should_fail_ex+0x414/0x560 [ 239.579089][T12384] ? nf_tables_newchain+0x1b7e/0x2900 [ 239.579112][T12384] should_failslab+0xa8/0x100 [ 239.579139][T12384] __kvmalloc_node_noprof+0x161/0x5f0 [ 239.579165][T12384] ? nf_tables_newchain+0x1b7e/0x2900 [ 239.579212][T12384] nf_tables_newchain+0x1b7e/0x2900 [ 239.579255][T12384] ? __pfx_nf_tables_newchain+0x10/0x10 [ 239.579316][T12384] ? nfnl_pernet+0x23/0x240 [ 239.579345][T12384] ? __nla_parse+0x40/0x60 [ 239.579369][T12384] nfnetlink_rcv+0x1132/0x2520 [ 239.579431][T12384] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 239.579482][T12384] ? ref_tracker_free+0x63a/0x7d0 [ 239.579536][T12384] ? __netlink_deliver_tap+0x807/0x850 [ 239.579558][T12384] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.579606][T12384] netlink_unicast+0x82f/0x9e0 [ 239.579633][T12384] ? __pfx_netlink_unicast+0x10/0x10 [ 239.579654][T12384] ? netlink_sendmsg+0x642/0xb30 [ 239.579672][T12384] ? skb_put+0x11b/0x210 [ 239.579698][T12384] netlink_sendmsg+0x805/0xb30 [ 239.579728][T12384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.579752][T12384] ? aa_sock_msg_perm+0xf1/0x1d0 [ 239.579772][T12384] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 239.579791][T12384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.579812][T12384] __sock_sendmsg+0x21c/0x270 [ 239.579833][T12384] ____sys_sendmsg+0x505/0x830 [ 239.579862][T12384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.579896][T12384] ? import_iovec+0x74/0xa0 [ 239.579922][T12384] ___sys_sendmsg+0x21f/0x2a0 [ 239.579947][T12384] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.580007][T12384] ? __fget_files+0x2a/0x420 [ 239.580022][T12384] ? __fget_files+0x3a0/0x420 [ 239.580047][T12384] __x64_sys_sendmsg+0x19b/0x260 [ 239.580074][T12384] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.580107][T12384] ? __pfx_ksys_write+0x10/0x10 [ 239.580129][T12384] ? rcu_is_watching+0x15/0xb0 [ 239.580151][T12384] ? do_syscall_64+0xbe/0x3b0 [ 239.580175][T12384] do_syscall_64+0xfa/0x3b0 [ 239.580193][T12384] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.580210][T12384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.580227][T12384] ? clear_bhb_loop+0x60/0xb0 [ 239.580249][T12384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.580266][T12384] RIP: 0033:0x7f3cf458eec9 [ 239.580282][T12384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.580297][T12384] RSP: 002b:00007f3cf540d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.580316][T12384] RAX: ffffffffffffffda RBX: 00007f3cf47e5fa0 RCX: 00007f3cf458eec9 [ 239.580329][T12384] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 239.580340][T12384] RBP: 00007f3cf540d090 R08: 0000000000000000 R09: 0000000000000000 [ 239.580368][T12384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.580379][T12384] R13: 00007f3cf47e6038 R14: 00007f3cf47e5fa0 R15: 00007ffd91234af8 [ 239.580410][T12384] [ 239.921345][T12388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1701'. [ 240.054208][T12388] bond2: entered promiscuous mode [ 240.059729][T12388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.087652][T12389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.094856][T12389] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 240.106835][T12389] bond2: (slave vcan0): Error -95 calling set_mac_address [ 240.137429][ T5876] Bluetooth: hci4: command 0x0401 tx timeout [ 240.172823][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1705'. [ 240.198202][T12398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1705'. [ 240.295920][T12408] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 240.320394][T12408] tipc: Enabled bearer , priority 0 [ 240.329449][T12411] tipc: Resetting bearer [ 240.354260][T12407] tipc: Disabling bearer [ 240.499629][T12419] geneve4: entered promiscuous mode [ 240.504887][T12419] geneve4: entered allmulticast mode [ 240.513217][ T6261] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.538781][ T6261] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.552082][ T6261] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 240.569513][ T6261] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.584078][ T6261] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.598831][ T6261] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 240.607616][T12429] __nla_validate_parse: 3 callbacks suppressed [ 240.607630][T12429] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1711'. [ 240.635454][T12430] tipc: Enabled bearer , priority 0 [ 240.637790][T12434] netlink: 'syz.2.1712': attribute type 1 has an invalid length. [ 240.643399][ T6261] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.658462][ T6261] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.666818][ T6261] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 240.715016][T12434] bond8: entered promiscuous mode [ 240.721082][T12434] 8021q: adding VLAN 0 to HW filter on device bond8 [ 240.731185][ T6261] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.740369][ T6261] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.749335][ T6261] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 240.760293][T12429] tipc: Disabling bearer [ 240.813987][T12437] 8021q: adding VLAN 0 to HW filter on device bond9 [ 240.839968][T12437] bond8: (slave bond9): making interface the new active one [ 240.858464][T12437] bond9: entered promiscuous mode [ 240.864789][T12437] bond8: (slave bond9): Enslaving as an active interface with an up link [ 240.956237][T12450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1716'. [ 241.095464][T12458] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1720'. [ 241.198110][T12466] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 241.206848][T12467] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1720'. [ 241.226751][T12464] tipc: Enabled bearer , priority 0 [ 241.248656][T12464] syzkaller0: entered promiscuous mode [ 241.254169][T12464] syzkaller0: entered allmulticast mode [ 241.302911][T12464] tipc: Resetting bearer [ 241.324291][T12475] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20002 [ 241.335495][T12463] tipc: Resetting bearer [ 241.381247][T12463] tipc: Disabling bearer [ 241.425444][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'. [ 241.450103][T12479] syzkaller1: entered promiscuous mode [ 241.465855][T12479] syzkaller1: entered allmulticast mode [ 241.599320][T12481] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1727'. [ 241.892379][T12500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1732'. [ 242.183674][T12514] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1735'. [ 242.208005][T12518] FAULT_INJECTION: forcing a failure. [ 242.208005][T12518] name failslab, interval 1, probability 0, space 0, times 0 [ 242.232606][T12519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.252578][T12518] CPU: 0 UID: 0 PID: 12518 Comm: syz.2.1738 Not tainted syzkaller #0 PREEMPT(full) [ 242.252607][T12518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 242.252619][T12518] Call Trace: [ 242.252627][T12518] [ 242.252635][T12518] dump_stack_lvl+0x189/0x250 [ 242.252663][T12518] ? __pfx____ratelimit+0x10/0x10 [ 242.252684][T12518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.252706][T12518] ? __pfx__printk+0x10/0x10 [ 242.252738][T12518] ? __pfx___might_resched+0x10/0x10 [ 242.252755][T12518] ? fs_reclaim_acquire+0x7d/0x100 [ 242.252777][T12518] should_fail_ex+0x414/0x560 [ 242.252810][T12518] should_failslab+0xa8/0x100 [ 242.252840][T12518] __kmalloc_cache_noprof+0x70/0x3d0 [ 242.252866][T12518] ? nfnetlink_rcv+0xeff/0x2520 [ 242.252928][T12518] nfnetlink_rcv+0xeff/0x2520 [ 242.252986][T12518] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 242.253064][T12518] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.253117][T12518] netlink_unicast+0x82f/0x9e0 [ 242.253150][T12518] ? __pfx_netlink_unicast+0x10/0x10 [ 242.253174][T12518] ? netlink_sendmsg+0x642/0xb30 [ 242.253197][T12518] ? skb_put+0x11b/0x210 [ 242.253227][T12518] netlink_sendmsg+0x805/0xb30 [ 242.253262][T12518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.253291][T12518] ? aa_sock_msg_perm+0xf1/0x1d0 [ 242.253315][T12518] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 242.253337][T12518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.253363][T12518] __sock_sendmsg+0x21c/0x270 [ 242.253387][T12518] ____sys_sendmsg+0x505/0x830 [ 242.253422][T12518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.253461][T12518] ? import_iovec+0x74/0xa0 [ 242.253493][T12518] ___sys_sendmsg+0x21f/0x2a0 [ 242.253524][T12518] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.253594][T12518] ? __fget_files+0x2a/0x420 [ 242.253611][T12518] ? __fget_files+0x3a0/0x420 [ 242.253643][T12518] __x64_sys_sendmsg+0x19b/0x260 [ 242.253674][T12518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.253714][T12518] ? __pfx_ksys_write+0x10/0x10 [ 242.253739][T12518] ? rcu_is_watching+0x15/0xb0 [ 242.253766][T12518] ? do_syscall_64+0xbe/0x3b0 [ 242.253794][T12518] do_syscall_64+0xfa/0x3b0 [ 242.253815][T12518] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.253837][T12518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.253858][T12518] ? clear_bhb_loop+0x60/0xb0 [ 242.253883][T12518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.253903][T12518] RIP: 0033:0x7f3cf458eec9 [ 242.253922][T12518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.253940][T12518] RSP: 002b:00007f3cf540d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.253962][T12518] RAX: ffffffffffffffda RBX: 00007f3cf47e5fa0 RCX: 00007f3cf458eec9 [ 242.253978][T12518] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 242.253991][T12518] RBP: 00007f3cf540d090 R08: 0000000000000000 R09: 0000000000000000 [ 242.254004][T12518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.254016][T12518] R13: 00007f3cf47e6038 R14: 00007f3cf47e5fa0 R15: 00007ffd91234af8 [ 242.254051][T12518] [ 242.662177][T12530] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1743'. [ 243.138876][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1754'. [ 243.379472][T12588] wg1: entered promiscuous mode [ 243.385755][T12588] wg1: entered allmulticast mode [ 243.448600][T12594] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 244.060506][T12625] lo speed is unknown, defaulting to 1000 [ 244.164515][T12627] lo speed is unknown, defaulting to 1000 [ 244.596279][T12636] lo speed is unknown, defaulting to 1000 [ 244.687735][T12657] veth0_to_bond: entered allmulticast mode [ 244.982082][T12672] FAULT_INJECTION: forcing a failure. [ 244.982082][T12672] name failslab, interval 1, probability 0, space 0, times 0 [ 244.995488][T12672] CPU: 0 UID: 0 PID: 12672 Comm: syz.4.1785 Not tainted syzkaller #0 PREEMPT(full) [ 244.995515][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.995528][T12672] Call Trace: [ 244.995536][T12672] [ 244.995545][T12672] dump_stack_lvl+0x189/0x250 [ 244.995574][T12672] ? __pfx____ratelimit+0x10/0x10 [ 244.995597][T12672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.995620][T12672] ? __pfx__printk+0x10/0x10 [ 244.995655][T12672] ? __pfx___might_resched+0x10/0x10 [ 244.995673][T12672] ? fs_reclaim_acquire+0x7d/0x100 [ 244.995715][T12672] should_fail_ex+0x414/0x560 [ 244.995752][T12672] should_failslab+0xa8/0x100 [ 244.995793][T12672] __kmalloc_cache_noprof+0x70/0x3d0 [ 244.995821][T12672] ? nf_tables_commit+0x79d/0x8710 [ 244.995866][T12672] nf_tables_commit+0x79d/0x8710 [ 244.995894][T12672] ? stack_trace_save+0x9c/0xe0 [ 244.995922][T12672] ? stack_depot_save_flags+0x40/0x860 [ 244.995982][T12672] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 244.996008][T12672] ? nfnetlink_rcv+0xeff/0x2520 [ 244.996026][T12672] ? netlink_unicast+0x82f/0x9e0 [ 244.996044][T12672] ? netlink_sendmsg+0x805/0xb30 [ 244.996066][T12672] ? __sock_sendmsg+0x21c/0x270 [ 244.996086][T12672] ? __pfx_nf_tables_commit+0x10/0x10 [ 244.996112][T12672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.996186][T12672] ? __kasan_kmalloc+0x93/0xb0 [ 244.996226][T12672] nfnetlink_rcv+0x1a4b/0x2520 [ 244.996284][T12672] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 244.996323][T12672] ? ref_tracker_free+0x63a/0x7d0 [ 244.996377][T12672] ? __netlink_deliver_tap+0x807/0x850 [ 244.996401][T12672] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.996446][T12672] netlink_unicast+0x82f/0x9e0 [ 244.996480][T12672] ? __pfx_netlink_unicast+0x10/0x10 [ 244.996504][T12672] ? netlink_sendmsg+0x642/0xb30 [ 244.996526][T12672] ? skb_put+0x11b/0x210 [ 244.996555][T12672] netlink_sendmsg+0x805/0xb30 [ 244.996590][T12672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.996619][T12672] ? aa_sock_msg_perm+0xf1/0x1d0 [ 244.996642][T12672] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.996664][T12672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.996690][T12672] __sock_sendmsg+0x21c/0x270 [ 244.996714][T12672] ____sys_sendmsg+0x505/0x830 [ 244.996748][T12672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.996793][T12672] ? import_iovec+0x74/0xa0 [ 244.996825][T12672] ___sys_sendmsg+0x21f/0x2a0 [ 244.996855][T12672] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.996925][T12672] ? __fget_files+0x2a/0x420 [ 244.996942][T12672] ? __fget_files+0x3a0/0x420 [ 244.996973][T12672] __x64_sys_sendmsg+0x19b/0x260 [ 244.997005][T12672] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.997045][T12672] ? __pfx_ksys_write+0x10/0x10 [ 244.997069][T12672] ? rcu_is_watching+0x15/0xb0 [ 244.997096][T12672] ? do_syscall_64+0xbe/0x3b0 [ 244.997124][T12672] do_syscall_64+0xfa/0x3b0 [ 244.997145][T12672] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.997166][T12672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.997186][T12672] ? clear_bhb_loop+0x60/0xb0 [ 244.997211][T12672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.997231][T12672] RIP: 0033:0x7f230098eec9 [ 244.997249][T12672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.997267][T12672] RSP: 002b:00007f23018e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.997289][T12672] RAX: ffffffffffffffda RBX: 00007f2300be5fa0 RCX: 00007f230098eec9 [ 244.997304][T12672] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 244.997318][T12672] RBP: 00007f23018e7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.997331][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.997343][T12672] R13: 00007f2300be6038 R14: 00007f2300be5fa0 R15: 00007fff29ea6db8 [ 244.997378][T12672] [ 245.440738][T12674] netlink: zone id is out of range [ 245.445970][T12674] netlink: zone id is out of range [ 245.451917][T12674] netlink: zone id is out of range [ 245.457045][T12674] netlink: zone id is out of range [ 245.462790][T12674] netlink: zone id is out of range [ 245.468703][T12674] netlink: zone id is out of range [ 245.474534][T12674] netlink: zone id is out of range [ 245.480559][T12674] netlink: zone id is out of range [ 245.491829][T12674] netlink: zone id is out of range [ 245.502277][T12674] netlink: zone id is out of range [ 245.662630][T12683] __nla_validate_parse: 11 callbacks suppressed [ 245.662650][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'. [ 245.707686][T12688] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1790'. [ 245.795716][T12688] netlink: 'syz.1.1790': attribute type 2 has an invalid length. [ 245.996052][T12704] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1797'. [ 246.200506][T12725] vlan2: entered allmulticast mode [ 246.217816][T12725] bridge_slave_0: entered allmulticast mode [ 246.573129][T12737] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1802'. [ 246.745614][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1813'. [ 246.905163][T12773] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1816'. [ 246.916783][T12773] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1816'. [ 247.029640][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1818'. [ 247.061692][T12781] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 247.331703][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1820'. [ 247.343657][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1820'. [ 247.391328][T12790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.400529][T12790] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.410254][T12790] tipc: Resetting bearer [ 247.415799][T12790] tipc: Resetting bearer [ 247.427183][ T10] lo speed is unknown, defaulting to 1000 [ 247.445406][ T10] syz1: Port: 1 Link ACTIVE [ 247.495294][ T5876] block nbd0: Receive control failed (result -107) [ 247.567738][T12791] nbd0: detected capacity change from 0 to 32 [ 247.583039][T12807] netlink: 'syz.3.1824': attribute type 21 has an invalid length. [ 247.806728][T12821] vxcan1: entered allmulticast mode [ 247.815961][T12822] ..0·: renamed from hsr0 [ 247.826791][T12822] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.838318][T12822] ..0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.850124][T12822] ..0·: entered allmulticast mode [ 247.855198][T12822] hsr_slave_0: entered allmulticast mode [ 247.861173][T12822] hsr_slave_1: entered allmulticast mode [ 248.730468][T12853] IPv6: Can't replace route, no match found [ 248.855971][T12860] bond0: default FDB implementation only supports local addresses [ 249.123157][T12864] vlan3: entered allmulticast mode [ 249.138673][T12864] gretap0: entered allmulticast mode [ 249.819810][T12891] netlink: 'syz.0.1847': attribute type 11 has an invalid length. [ 250.272771][T12912] 8021q: adding VLAN 0 to HW filter on device bond10 [ 250.431462][T12917] veth9: entered promiscuous mode [ 251.002551][T12949] net_ratelimit: 18 callbacks suppressed [ 251.002571][T12949] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 251.235487][T12966] __nla_validate_parse: 29 callbacks suppressed [ 251.235506][T12966] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1871'. [ 251.512504][T12979] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 251.528017][T12981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1877'. [ 251.599600][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'. [ 251.638792][T12985] lo speed is unknown, defaulting to 1000 [ 252.024763][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'. [ 252.340105][T13040] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1891'. [ 252.353195][T13040] siw: device registration error -23 [ 252.469885][ T30] audit: type=1804 audit(1758595644.683:8): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1895" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1914 res=1 errno=0 [ 252.498508][ T30] audit: type=1800 audit(1758595644.683:9): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1895" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1914 res=0 errno=0 [ 252.557935][T13052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1896'. [ 252.568233][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1896'. [ 252.661339][T13057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1898'. [ 252.790374][T13068] syz_tun: entered allmulticast mode [ 252.814382][T13072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1900'. [ 252.844398][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1900'. [ 252.860616][T13068] dvmrp8: entered allmulticast mode [ 252.919021][T13074] syz_tun: left allmulticast mode [ 252.925078][T13074] dvmrp8: left allmulticast mode [ 252.968957][T13079] FAULT_INJECTION: forcing a failure. [ 252.968957][T13079] name failslab, interval 1, probability 0, space 0, times 0 [ 252.982433][T13079] CPU: 0 UID: 0 PID: 13079 Comm: syz.2.1904 Not tainted syzkaller #0 PREEMPT(full) [ 252.982457][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.982469][T13079] Call Trace: [ 252.982476][T13079] [ 252.982485][T13079] dump_stack_lvl+0x189/0x250 [ 252.982512][T13079] ? __pfx____ratelimit+0x10/0x10 [ 252.982532][T13079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.982553][T13079] ? __pfx__printk+0x10/0x10 [ 252.982585][T13079] ? __pfx___might_resched+0x10/0x10 [ 252.982607][T13079] should_fail_ex+0x414/0x560 [ 252.982640][T13079] should_failslab+0xa8/0x100 [ 252.982670][T13079] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 252.982696][T13079] ? __alloc_skb+0x112/0x2d0 [ 252.982722][T13079] __alloc_skb+0x112/0x2d0 [ 252.982748][T13079] nf_tables_commit+0x7492/0x8710 [ 252.982800][T13079] ? __pfx_nf_tables_commit+0x10/0x10 [ 252.982824][T13079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.982890][T13079] ? __kasan_kmalloc+0x93/0xb0 [ 252.982925][T13079] nfnetlink_rcv+0x1a4b/0x2520 [ 252.982979][T13079] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 252.983049][T13079] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.983123][T13079] netlink_unicast+0x82f/0x9e0 [ 252.983154][T13079] ? __pfx_netlink_unicast+0x10/0x10 [ 252.983177][T13079] ? netlink_sendmsg+0x642/0xb30 [ 252.983199][T13079] ? skb_put+0x11b/0x210 [ 252.983227][T13079] netlink_sendmsg+0x805/0xb30 [ 252.983262][T13079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.983289][T13079] ? aa_sock_msg_perm+0xf1/0x1d0 [ 252.983310][T13079] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.983332][T13079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.983362][T13079] __sock_sendmsg+0x21c/0x270 [ 252.983385][T13079] ____sys_sendmsg+0x505/0x830 [ 252.983436][T13079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.983475][T13079] ? import_iovec+0x74/0xa0 [ 252.983506][T13079] ___sys_sendmsg+0x21f/0x2a0 [ 252.983537][T13079] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.983606][T13079] ? __fget_files+0x2a/0x420 [ 252.983624][T13079] ? __fget_files+0x3a0/0x420 [ 252.983654][T13079] __x64_sys_sendmsg+0x19b/0x260 [ 252.983684][T13079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.983724][T13079] ? __pfx_ksys_write+0x10/0x10 [ 252.983748][T13079] ? rcu_is_watching+0x15/0xb0 [ 252.983775][T13079] ? do_syscall_64+0xbe/0x3b0 [ 252.983802][T13079] do_syscall_64+0xfa/0x3b0 [ 252.983822][T13079] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.983844][T13079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.983863][T13079] ? clear_bhb_loop+0x60/0xb0 [ 252.983887][T13079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.983906][T13079] RIP: 0033:0x7f3cf458eec9 [ 252.983925][T13079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.983943][T13079] RSP: 002b:00007f3cf540d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.983964][T13079] RAX: ffffffffffffffda RBX: 00007f3cf47e5fa0 RCX: 00007f3cf458eec9 [ 252.983986][T13079] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 252.984003][T13079] RBP: 00007f3cf540d090 R08: 0000000000000000 R09: 0000000000000000 [ 252.984015][T13079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.984027][T13079] R13: 00007f3cf47e6038 R14: 00007f3cf47e5fa0 R15: 00007ffd91234af8 [ 252.984069][T13079] [ 253.413131][T13088] sctp: [Deprecated]: syz.3.1907 (pid 13088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.413131][T13088] Use struct sctp_sack_info instead [ 254.185769][T13121] ..0·: left allmulticast mode [ 254.205876][T13121] hsr_slave_0: left allmulticast mode [ 254.223352][T13121] hsr_slave_1: left allmulticast mode [ 254.236051][T13129] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.258911][T13121] ip6tnl1: left promiscuous mode [ 254.273183][T13121] ip6tnl1: left allmulticast mode [ 254.327597][T13121] bond5: left promiscuous mode [ 254.341621][T13121] bond6: left promiscuous mode [ 254.375913][T13121] hsr1: left allmulticast mode [ 254.386834][T13121] !: left allmulticast mode [ 254.399263][T13121] batadv_slave_0: left allmulticast mode [ 254.456440][ T6261] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.476892][ T6261] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.511306][T13126] lo speed is unknown, defaulting to 1000 [ 254.577918][ T6261] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.623230][ T6261] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.749833][T13143] lo speed is unknown, defaulting to 1000 [ 255.088603][T13167] netlink: 'syz.0.1930': attribute type 1 has an invalid length. [ 255.096963][T13167] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 255.578401][T13182] lo speed is unknown, defaulting to 1000 [ 255.645335][T13185] netlink: 'syz.1.1934': attribute type 1 has an invalid length. [ 255.733355][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.818467][T13185] 8021q: adding VLAN 0 to HW filter on device bond9 [ 255.840691][T13185] bond8: (slave bond9): Enslaving as a backup interface with a down link [ 256.060155][T13196] netlink: 'syz.1.1935': attribute type 2 has an invalid length. [ 256.497868][T13223] __nla_validate_parse: 34 callbacks suppressed [ 256.497886][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1945'. [ 256.514379][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1945'. [ 256.757763][T13237] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 256.949036][T13252] lo speed is unknown, defaulting to 1000 [ 257.072906][T13263] pim6reg1: entered promiscuous mode [ 257.078384][T13263] pim6reg1: entered allmulticast mode [ 257.400655][T13280] lo speed is unknown, defaulting to 1000 [ 257.531175][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1962'. [ 257.579234][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1963'. [ 257.698694][T13298] netlink: 'syz.4.1963': attribute type 1 has an invalid length. [ 257.752195][T13300] vlan4: entered allmulticast mode [ 257.763451][T13300] bond5: entered allmulticast mode [ 257.796879][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1964'. [ 258.004434][T13269] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 258.013590][T13314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1966'. [ 258.019243][T13252] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 258.027577][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1966'. [ 258.246480][T13322] gre3: entered allmulticast mode [ 258.851552][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1974'. [ 258.896380][T13343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.903861][T13343] IPv6: NLM_F_CREATE should be set when creating new route [ 258.959636][T13343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.966923][T13343] IPv6: NLM_F_CREATE should be set when creating new route [ 259.226941][T13354] tipc: Enabling of bearer rejected, already enabled [ 259.404432][T13359] lo speed is unknown, defaulting to 1000 [ 259.452165][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'. [ 260.720246][T13394] netlink: 159784 bytes leftover after parsing attributes in process `syz.4.1990'. [ 260.881192][T13399] netlink: 'syz.4.1992': attribute type 1 has an invalid length. [ 260.959637][T13403] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 261.007594][T13403] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 261.018395][T13403] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 261.311260][T13417] af_packet: tpacket_rcv: packet too big, clamped from 104 to 4294967272. macoff=96 [ 261.674775][T13433] lo speed is unknown, defaulting to 1000 [ 261.786532][T13441] __nla_validate_parse: 3 callbacks suppressed [ 261.786561][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 261.815242][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2004'. [ 262.251482][T13448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2007'. [ 262.450987][T13452] lo speed is unknown, defaulting to 1000 [ 262.536332][T13477] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2010'. [ 262.725380][T13481] lo speed is unknown, defaulting to 1000 [ 262.835961][T13490] netlink: 'syz.1.2017': attribute type 1 has an invalid length. [ 262.989336][T13490] 8021q: adding VLAN 0 to HW filter on device bond10 [ 263.123130][T13493] bond10: (slave geneve2): making interface the new active one [ 263.138208][T13501] netlink: 'syz.2.2018': attribute type 1 has an invalid length. [ 263.174109][T13493] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 263.357685][ T6258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.410821][T13501] bond11: entered promiscuous mode [ 263.420383][T13501] 8021q: adding VLAN 0 to HW filter on device bond11 [ 263.603921][T13506] 8021q: adding VLAN 0 to HW filter on device bond11 [ 263.617919][T13506] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address [ 263.629006][T13506] bond11: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 263.650429][T13506] bond11: (slave wireguard0): making interface the new active one [ 263.662634][T13506] wireguard0: entered promiscuous mode [ 263.670113][T13506] bond11: (slave wireguard0): Enslaving as an active interface with an up link [ 263.710721][ T6258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.719843][ T6258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.760917][ T6258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.863257][T13523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2021'. [ 263.955248][T13528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2023'. [ 263.985354][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2023'. [ 263.995615][T13528] tipc: Enabling of bearer rejected, already enabled [ 264.141705][T13538] netlink: 'syz.3.2026': attribute type 101 has an invalid length. [ 264.163278][T13538] netlink: 'syz.3.2026': attribute type 7 has an invalid length. [ 264.209172][T13540] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (47) [ 264.255293][T13540] pim6reg1: entered promiscuous mode [ 264.272161][T13540] pim6reg1: entered allmulticast mode [ 264.313848][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2029'. [ 264.634730][T13571] netlink: 'syz.3.2037': attribute type 4 has an invalid length. [ 264.649090][T13571] netlink: 'syz.3.2037': attribute type 4 has an invalid length. [ 264.749398][T13571] syzkaller0: entered promiscuous mode [ 264.754925][T13571] syzkaller0: entered allmulticast mode [ 264.764882][T13579] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 264.896952][T13581] netlink: 'syz.0.2041': attribute type 6 has an invalid length. [ 265.015271][T13592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2043'. [ 265.459180][T13605] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2048'. [ 266.334049][T13619] geneve3: entered promiscuous mode [ 266.359432][T13619] geneve3: entered allmulticast mode [ 266.376199][ T6262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.395426][ T6262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.417789][ T6262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.607444][T13633] pim6reg1: entered promiscuous mode [ 266.613206][T13633] pim6reg1: entered allmulticast mode [ 266.654948][T13644] netlink: 'syz.4.2058': attribute type 15 has an invalid length. [ 266.822474][T13667] __nla_validate_parse: 5 callbacks suppressed [ 266.822493][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2061'. [ 266.872823][T13669] netlink: 'syz.2.2062': attribute type 13 has an invalid length. [ 266.891454][T13669] netlink: 'syz.2.2062': attribute type 17 has an invalid length. [ 266.946523][T13677] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 266.959650][T13675] block nbd1: Unsupported socket: shutdown callout must be supported. [ 266.983874][T13680] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2067'. [ 266.996381][T13675] IPv6: Can't replace route, no match found [ 267.074897][T13684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.136414][T13687] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2069'. [ 267.265593][T13678] lo speed is unknown, defaulting to 1000 [ 267.520120][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2070'. [ 267.663555][T13696] tipc: Enabling of bearer rejected, failed to enable media [ 268.129934][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2074'. [ 268.168074][T13723] macvtap1: entered promiscuous mode [ 268.173643][T13723] veth0: entered promiscuous mode [ 268.179113][T13723] macvtap1: entered allmulticast mode [ 268.184748][T13723] veth0: entered allmulticast mode [ 268.257848][T13722] veth0: left allmulticast mode [ 268.262966][T13722] veth0: left promiscuous mode [ 268.284405][T13725] tipc: Enabled bearer , priority 0 [ 268.383889][T13721] syzkaller0: entered promiscuous mode [ 268.391774][T13721] syzkaller0: entered allmulticast mode [ 268.404392][T13721] tipc: Resetting bearer [ 268.571633][T13719] tipc: Resetting bearer [ 268.737959][T13719] tipc: Disabling bearer [ 268.843291][T13735] lo speed is unknown, defaulting to 1000 [ 269.881167][T13800] tipc: Enabled bearer , priority 0 [ 269.906350][T13800] syzkaller0: entered promiscuous mode [ 269.926099][T13800] syzkaller0: entered allmulticast mode [ 269.959732][T13800] tipc: Resetting bearer [ 269.998043][T13798] tipc: Resetting bearer [ 270.053321][T13798] tipc: Disabling bearer [ 270.354102][T13812] lo speed is unknown, defaulting to 1000 [ 270.452369][T13818] lo speed is unknown, defaulting to 1000 [ 270.543996][T13827] FAULT_INJECTION: forcing a failure. [ 270.543996][T13827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.563426][T13827] CPU: 0 UID: 0 PID: 13827 Comm: syz.2.2099 Not tainted syzkaller #0 PREEMPT(full) [ 270.563459][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.563472][T13827] Call Trace: [ 270.563479][T13827] [ 270.563489][T13827] dump_stack_lvl+0x189/0x250 [ 270.563517][T13827] ? __pfx____ratelimit+0x10/0x10 [ 270.563539][T13827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.563562][T13827] ? __pfx__printk+0x10/0x10 [ 270.563588][T13827] ? __might_fault+0xb0/0x130 [ 270.563629][T13827] should_fail_ex+0x414/0x560 [ 270.563661][T13827] _copy_from_user+0x2d/0xb0 [ 270.563688][T13827] __sys_bpf+0x1ed/0x870 [ 270.563717][T13827] ? __pfx___sys_bpf+0x10/0x10 [ 270.563759][T13827] ? ksys_write+0x22a/0x250 [ 270.563789][T13827] ? __pfx_ksys_write+0x10/0x10 [ 270.563813][T13827] ? rcu_is_watching+0x15/0xb0 [ 270.563849][T13827] __x64_sys_bpf+0x7c/0x90 [ 270.563875][T13827] do_syscall_64+0xfa/0x3b0 [ 270.563898][T13827] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.563918][T13827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.563939][T13827] ? clear_bhb_loop+0x60/0xb0 [ 270.563963][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.563983][T13827] RIP: 0033:0x7f3cf458eec9 [ 270.564000][T13827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.564017][T13827] RSP: 002b:00007f3cf540d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 270.564039][T13827] RAX: ffffffffffffffda RBX: 00007f3cf47e5fa0 RCX: 00007f3cf458eec9 [ 270.564053][T13827] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 270.564067][T13827] RBP: 00007f3cf540d090 R08: 0000000000000000 R09: 0000000000000000 [ 270.564080][T13827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.564091][T13827] R13: 00007f3cf47e6038 R14: 00007f3cf47e5fa0 R15: 00007ffd91234af8 [ 270.564125][T13827] [ 270.999712][T13835] 8021q: adding VLAN 0 to HW filter on device bond12 [ 271.012467][T13835] openvswitch: netlink: Key type 1039 is out of range max 32 [ 271.328923][T13853] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2108'. [ 271.705625][T13858] netlink: 'syz.4.2110': attribute type 1 has an invalid length. [ 271.961649][T13863] FAULT_INJECTION: forcing a failure. [ 271.961649][T13863] name failslab, interval 1, probability 0, space 0, times 0 [ 271.977703][T13863] CPU: 1 UID: 0 PID: 13863 Comm: syz.4.2112 Not tainted syzkaller #0 PREEMPT(full) [ 271.977728][T13863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 271.977739][T13863] Call Trace: [ 271.977747][T13863] [ 271.977755][T13863] dump_stack_lvl+0x189/0x250 [ 271.977781][T13863] ? __pfx____ratelimit+0x10/0x10 [ 271.977800][T13863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.977820][T13863] ? __pfx__printk+0x10/0x10 [ 271.977849][T13863] ? __pfx___might_resched+0x10/0x10 [ 271.977870][T13863] should_fail_ex+0x414/0x560 [ 271.977900][T13863] should_failslab+0xa8/0x100 [ 271.977926][T13863] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 271.977950][T13863] ? __get_vm_area_node+0x13f/0x300 [ 271.977976][T13863] __get_vm_area_node+0x13f/0x300 [ 271.978005][T13863] __vmalloc_node_range_noprof+0x301/0x12f0 [ 271.978030][T13863] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 271.978055][T13863] ? __lock_acquire+0xab9/0xd20 [ 271.978104][T13863] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 271.978128][T13863] ? __might_fault+0xb0/0x130 [ 271.978154][T13863] ? _parse_integer_limit+0x1ae/0x1f0 [ 271.978176][T13863] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 271.978197][T13863] __vmalloc_noprof+0xb1/0xf0 [ 271.978221][T13863] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 271.978246][T13863] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 271.978274][T13863] bpf_prog_alloc+0x3c/0x1a0 [ 271.978300][T13863] bpf_prog_load+0x735/0x1930 [ 271.978335][T13863] ? __pfx_bpf_prog_load+0x10/0x10 [ 271.978379][T13863] ? bpf_lsm_bpf+0x9/0x20 [ 271.978401][T13863] ? security_bpf+0x7e/0x300 [ 271.978428][T13863] __sys_bpf+0x528/0x870 [ 271.978452][T13863] ? __pfx___sys_bpf+0x10/0x10 [ 271.978494][T13863] ? ksys_write+0x22a/0x250 [ 271.978520][T13863] ? __pfx_ksys_write+0x10/0x10 [ 271.978540][T13863] ? rcu_is_watching+0x15/0xb0 [ 271.978565][T13863] __x64_sys_bpf+0x7c/0x90 [ 271.978603][T13863] do_syscall_64+0xfa/0x3b0 [ 271.978623][T13863] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.978642][T13863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.978661][T13863] ? clear_bhb_loop+0x60/0xb0 [ 271.978683][T13863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.978700][T13863] RIP: 0033:0x7f230098eec9 [ 271.978720][T13863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.978736][T13863] RSP: 002b:00007f23018e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 271.978756][T13863] RAX: ffffffffffffffda RBX: 00007f2300be5fa0 RCX: 00007f230098eec9 [ 271.978769][T13863] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 271.978780][T13863] RBP: 00007f23018e7090 R08: 0000000000000000 R09: 0000000000000000 [ 271.978792][T13863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.978803][T13863] R13: 00007f2300be6038 R14: 00007f2300be5fa0 R15: 00007fff29ea6db8 [ 271.978833][T13863] [ 271.984414][T13863] syz.4.2112: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 272.291015][T13863] CPU: 1 UID: 0 PID: 13863 Comm: syz.4.2112 Not tainted syzkaller #0 PREEMPT(full) [ 272.291040][T13863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.291053][T13863] Call Trace: [ 272.291062][T13863] [ 272.291070][T13863] dump_stack_lvl+0x189/0x250 [ 272.291103][T13863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.291128][T13863] ? __pfx__printk+0x10/0x10 [ 272.291156][T13863] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 272.291181][T13863] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 272.291207][T13863] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 272.291233][T13863] warn_alloc+0x214/0x310 [ 272.291272][T13863] ? __pfx_warn_alloc+0x10/0x10 [ 272.291305][T13863] ? __get_vm_area_node+0x13f/0x300 [ 272.291336][T13863] ? __get_vm_area_node+0x2b5/0x300 [ 272.291369][T13863] __vmalloc_node_range_noprof+0x326/0x12f0 [ 272.291410][T13863] ? __lock_acquire+0xab9/0xd20 [ 272.291467][T13863] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 272.291494][T13863] ? __might_fault+0xb0/0x130 [ 272.291524][T13863] ? _parse_integer_limit+0x1ae/0x1f0 [ 272.291551][T13863] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 272.291578][T13863] __vmalloc_noprof+0xb1/0xf0 [ 272.291614][T13863] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 272.291655][T13863] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 272.291685][T13863] bpf_prog_alloc+0x3c/0x1a0 [ 272.291713][T13863] bpf_prog_load+0x735/0x1930 [ 272.291753][T13863] ? __pfx_bpf_prog_load+0x10/0x10 [ 272.291802][T13863] ? bpf_lsm_bpf+0x9/0x20 [ 272.291825][T13863] ? security_bpf+0x7e/0x300 [ 272.291853][T13863] __sys_bpf+0x528/0x870 [ 272.291880][T13863] ? __pfx___sys_bpf+0x10/0x10 [ 272.291917][T13863] ? ksys_write+0x22a/0x250 [ 272.291945][T13863] ? __pfx_ksys_write+0x10/0x10 [ 272.291967][T13863] ? rcu_is_watching+0x15/0xb0 [ 272.291994][T13863] __x64_sys_bpf+0x7c/0x90 [ 272.292017][T13863] do_syscall_64+0xfa/0x3b0 [ 272.292037][T13863] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.292056][T13863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.292075][T13863] ? clear_bhb_loop+0x60/0xb0 [ 272.292097][T13863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.292115][T13863] RIP: 0033:0x7f230098eec9 [ 272.292132][T13863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.292148][T13863] RSP: 002b:00007f23018e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.292168][T13863] RAX: ffffffffffffffda RBX: 00007f2300be5fa0 RCX: 00007f230098eec9 [ 272.292181][T13863] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 272.292194][T13863] RBP: 00007f23018e7090 R08: 0000000000000000 R09: 0000000000000000 [ 272.292205][T13863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.292215][T13863] R13: 00007f2300be6038 R14: 00007f2300be5fa0 R15: 00007fff29ea6db8 [ 272.292244][T13863] [ 272.292267][T13863] Mem-Info: [ 272.404587][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 272.405559][T13863] active_anon:9404 inactive_anon:0 isolated_anon:0 [ 272.405559][T13863] active_file:3225 inactive_file:39960 isolated_file:0 [ 272.405559][T13863] unevictable:768 dirty:176 writeback:0 [ 272.405559][T13863] slab_reclaimable:12316 slab_unreclaimable:241703 [ 272.405559][T13863] mapped:29259 shmem:1360 pagetables:1139 [ 272.405559][T13863] sec_pagetables:0 bounce:0 [ 272.405559][T13863] kernel_misc_reclaimable:0 [ 272.405559][T13863] free:1179614 free_pcp:10792 free_cma:0 [ 272.420119][T13866] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2113'. [ 272.421313][T13863] Node 0 active_anon:37616kB inactive_anon:0kB active_file:12900kB inactive_file:159640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117036kB dirty:704kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14048kB pagetables:4408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 272.672461][T13863] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 272.702770][T13863] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.731605][T13863] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 272.737555][T13863] Node 0 DMA32 free:815508kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37572kB inactive_anon:0kB active_file:12900kB inactive_file:158072kB unevictable:1536kB writepending:704kB present:3129332kB managed:2557376kB mlocked:0kB bounce:0kB free_pcp:23948kB local_pcp:3252kB free_cma:0kB [ 272.769883][T13863] lowmem_reserve[]: 0 0 1 1 1 [ 272.774661][T13863] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 272.803937][T13863] lowmem_reserve[]: 0 0 0 0 0 [ 272.808743][T13863] Node 1 Normal free:3887564kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19936kB local_pcp:9440kB free_cma:0kB [ 272.839960][T13863] lowmem_reserve[]: 0 0 0 0 0 [ 272.844702][T13863] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 272.857565][T13863] Node 0 DMA32: 2965*4kB (UME) 1141*8kB (UME) 498*16kB (UME) 410*32kB (UME) 129*64kB (UME) 71*128kB (UM) 43*256kB (UME) 13*512kB (UM) 5*1024kB (UM) 6*2048kB (UME) 176*4096kB (UM) = 815388kB [ 272.876486][T13863] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 272.888914][T13863] Node 1 Normal: 181*4kB (UE) 41*8kB (UME) 37*16kB (UME) 83*32kB (UME) 30*64kB (UME) 5*128kB (UME) 5*256kB (UM) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3887564kB [ 272.907376][T13863] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.916986][T13863] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 272.926439][T13863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.941377][T13863] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 272.950906][T13863] 44542 total pagecache pages [ 272.955610][T13863] 0 pages in swap cache [ 272.959832][T13863] Free swap = 124996kB [ 272.963999][T13863] Total swap = 124996kB [ 272.968237][T13863] 2097051 pages RAM [ 272.972067][T13863] 0 pages HighMem/MovableOnly [ 272.976784][T13863] 425681 pages reserved [ 272.981005][T13863] 0 pages cma reserved [ 273.966256][T13854] netlink: 'syz.2.2109': attribute type 13 has an invalid length. [ 273.975335][T13854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2109'. [ 274.100445][T13882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2116'. [ 274.126415][T13888] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2119'. [ 274.147427][T13884] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2118'. [ 274.270335][T13901] netlink: 'syz.3.2120': attribute type 1 has an invalid length. [ 274.291030][T13900] netlink: 'syz.4.2122': attribute type 58 has an invalid length. [ 274.303391][T13900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2122'. [ 274.314672][T13898] lo speed is unknown, defaulting to 1000 [ 274.328751][T13906] syz_tun: entered allmulticast mode [ 274.356737][T13910] tipc: Failed to remove unknown binding: 66,1,1/11578026:1484746419/1484746421 [ 274.393119][T13905] dvmrp8: entered allmulticast mode [ 274.433126][T13912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2126'. [ 274.505893][T13916] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2127'. [ 274.514870][T13905] syz_tun: left allmulticast mode [ 274.515021][T13905] dvmrp8: left allmulticast mode [ 274.530877][T13912] netlink: 'syz.0.2126': attribute type 10 has an invalid length. [ 274.539752][T13912] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2126'. [ 274.575346][T13912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.631376][T13912] netlink: 'syz.0.2126': attribute type 1 has an invalid length. [ 274.661775][T13912] netlink: 'syz.0.2126': attribute type 1 has an invalid length. [ 274.834936][T13935] netlink: 'syz.2.2132': attribute type 2 has an invalid length. [ 274.835500][T13936] netlink: 'syz.0.2133': attribute type 14 has an invalid length. [ 274.878111][T13936] netlink: 'syz.0.2133': attribute type 11 has an invalid length. [ 274.968272][T13929] veth0_to_bond: entered allmulticast mode [ 274.982550][T13929] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 275.546683][T13952] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 275.798170][T13958] tipc: Enabling of bearer rejected, already enabled [ 275.816286][T13958] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 275.830981][T13958] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 275.846101][T13958] tipc: Resetting bearer [ 275.856534][T13958] tipc: Resetting bearer [ 276.028487][T13654] tipc: Resetting bearer [ 276.053218][T13971] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 276.141916][T13988] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 276.143270][T13986] IPVS: stopping backup sync thread 13988 ... [ 276.292094][T14001] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 276.457195][T14010] lo speed is unknown, defaulting to 1000 [ 276.736404][T14027] !: renamed from dummy0 (while UP) [ 276.907507][T14037] macsec1: entered promiscuous mode [ 276.926915][T14037] macsec1: entered allmulticast mode [ 276.991602][T14033] lo speed is unknown, defaulting to 1000 [ 277.525104][T14075] validate_nla: 3 callbacks suppressed [ 277.525121][T14075] netlink: 'syz.0.2175': attribute type 1 has an invalid length. [ 277.538906][T14075] netlink: 'syz.0.2175': attribute type 4 has an invalid length. [ 277.546668][T14075] __nla_validate_parse: 6 callbacks suppressed [ 277.546681][T14075] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2175'. [ 277.572735][T14080] tipc: Enabling of bearer rejected, already enabled [ 277.738932][T14090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2181'. [ 277.767859][T14095] netlink: 'syz.4.2182': attribute type 2 has an invalid length. [ 277.776574][T14095] netlink: 'syz.4.2182': attribute type 2 has an invalid length. [ 277.965188][T14106] smc: net device bond0 applied user defined pnetid SYZ2 [ 278.570978][T14137] netlink: 'syz.2.2192': attribute type 4 has an invalid length. [ 278.579644][T14137] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2192'. [ 278.691898][T14130] bond0: (slave netdevsim0): Releasing backup interface [ 278.701240][T14130] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 278.760344][T14141] tipc: Can't bind to reserved service type 0 [ 278.781148][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'. [ 278.792281][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'. [ 279.068040][T14159] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2200'. [ 279.284115][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 279.616940][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2208'. [ 279.727099][T14185] lo speed is unknown, defaulting to 1000 [ 279.846089][T14188] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2209'. [ 280.247601][T14195] lo speed is unknown, defaulting to 1000 [ 280.505416][ T5876] Bluetooth: hci4: link tx timeout [ 280.511943][ T5876] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 280.524041][ T5876] Bluetooth: hci4: link tx timeout [ 280.529931][ T5876] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.076176][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 282.273154][T14275] netlink: 'syz.2.2229': attribute type 7 has an invalid length. [ 282.317957][T14275] netlink: 'syz.2.2229': attribute type 7 has an invalid length. [ 282.364039][T14281] ipvlan1: entered promiscuous mode [ 282.381099][T14281] ipvlan1 (unregistering): left promiscuous mode [ 282.607482][ T5876] Bluetooth: hci4: command 0x0401 tx timeout [ 282.638668][T14309] __nla_validate_parse: 2 callbacks suppressed [ 282.638684][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2238'. [ 282.708956][T14311] netlink: 'syz.3.2238': attribute type 1 has an invalid length. [ 282.726997][T14311] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2238'. [ 282.770048][T14311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2238'. [ 283.250317][T14295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.579918][T14320] lo speed is unknown, defaulting to 1000 [ 284.873561][T14371] dvmrp1: entered allmulticast mode [ 284.942347][T14379] netlink: 'syz.0.2258': attribute type 1 has an invalid length. [ 284.981274][T14371] dvmrp1: left allmulticast mode [ 285.331435][ T5876] Bluetooth: hci4: command 0x0401 tx timeout [ 285.664763][T14379] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 285.762411][T14386] lo speed is unknown, defaulting to 1000 [ 285.866419][T14370] lo speed is unknown, defaulting to 1000 [ 286.076437][T14403] lo speed is unknown, defaulting to 1000 [ 286.159593][T14412] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 286.178725][T14412] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 288.077118][T13652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.088237][T13652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.170351][T14447] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2274'. [ 288.661834][T14471] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.312635][T14490] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2287'. [ 289.336338][T14490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.343685][T14490] IPv6: NLM_F_CREATE should be set when creating new route [ 289.350986][T14490] IPv6: NLM_F_CREATE should be set when creating new route [ 289.645666][T14503] wg1: left promiscuous mode [ 289.650864][T14503] wg1: left allmulticast mode [ 289.673118][T14503] macsec1: left promiscuous mode [ 289.683542][T14503] macsec1: left allmulticast mode [ 289.693578][T14503] veth5: left promiscuous mode [ 289.705056][T14503] geneve4: left promiscuous mode [ 289.715311][T14503] geneve4: left allmulticast mode [ 289.733781][T14510] netlink: 'syz.0.2289': attribute type 10 has an invalid length. [ 289.745094][T14503] bond8: left promiscuous mode [ 289.760771][T14503] bond9: left promiscuous mode [ 289.773349][T14503] bond11: left promiscuous mode [ 289.779070][T14503] wireguard0: left promiscuous mode [ 289.792130][T13652] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 289.800991][T13652] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 289.816695][T14510] team0: Failed to send port change of device 0! via netlink (err -105) [ 289.832605][T14510] team0: Failed to send options change via netlink (err -105) [ 289.856680][T14510] team0: Port device 0! added [ 289.875276][T14513] netlink: 'syz.1.2294': attribute type 12 has an invalid length. [ 289.908201][T13652] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 289.930780][T13652] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 290.000249][T14520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2296'. [ 290.413542][T14536] netlink: 'syz.0.2301': attribute type 1 has an invalid length. [ 290.429969][T14536] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2301'. [ 290.440254][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2301'. [ 290.453863][T14536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2301'. [ 291.233062][T14566] lo speed is unknown, defaulting to 1000 [ 291.730725][T14579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.739584][T14579] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.752610][T14579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.809067][T14586] tipc: Resetting bearer [ 292.218791][ T10] lo speed is unknown, defaulting to 1000 [ 292.237587][ T10] syz1: Port: 1 Link DOWN [ 292.320743][T14597] tipc: Enabled bearer , priority 0 [ 292.332394][T14597] syzkaller0: entered promiscuous mode [ 292.357392][T14597] syzkaller0: entered allmulticast mode [ 292.383306][T14597] netlink: 212292 bytes leftover after parsing attributes in process `syz.1.2316'. [ 292.421283][T14597] tipc: Resetting bearer [ 292.441649][T14595] tipc: Resetting bearer [ 292.465205][T14595] tipc: Disabling bearer [ 292.866630][T14615] lo speed is unknown, defaulting to 1000 [ 293.438034][T14628] batadv1: entered promiscuous mode [ 293.452606][T14630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2327'. [ 293.462001][T14630] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2327'. [ 293.492421][T14633] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 293.542793][T14635] netlink: 'syz.3.2330': attribute type 9 has an invalid length. [ 293.723170][T14651] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2333'. [ 293.924283][T14660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2338'. [ 294.532290][T14672] netlink: 'syz.0.2340': attribute type 1 has an invalid length. [ 294.540882][T14672] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2340'. [ 294.773436][T14681] tipc: Enabled bearer , priority 0 [ 294.786023][T14686] syzkaller0: entered promiscuous mode [ 294.793137][T14686] syzkaller0: entered allmulticast mode [ 295.043762][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2348'. [ 295.097391][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2348'. [ 295.145685][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2348'. [ 295.160798][T14684] tipc: Resetting bearer [ 295.252148][T14684] tipc: Disabling bearer [ 295.374433][T14723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2351'. [ 295.631340][T14747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2356'. [ 295.869130][T14761] netlink: 'syz.4.2359': attribute type 2 has an invalid length. [ 296.020303][T14768] lo speed is unknown, defaulting to 1000 [ 296.105990][T14769] lo speed is unknown, defaulting to 1000 [ 296.172717][ T30] audit: type=1800 audit(1758595688.373:10): pid=14779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2360" name="memory.events" dev="tmpfs" ino=2457 res=0 errno=0 [ 296.387987][T14774] lo speed is unknown, defaulting to 1000 [ 297.142106][T14826] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 297.233542][T14837] netlink: 'syz.1.2377': attribute type 1 has an invalid length. [ 297.328851][T14837] 8021q: adding VLAN 0 to HW filter on device bond13 [ 297.377066][T14837] macvlan0: entered promiscuous mode [ 297.385791][T14837] macvlan0: entered allmulticast mode [ 297.392903][T14837] bond13: entered promiscuous mode [ 297.399342][T14837] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 297.417404][T14837] bond13: left promiscuous mode [ 297.508408][T14847] bond13: (slave veth7): Enslaving as an active interface with a down link [ 297.559463][T14858] netlink: 'syz.3.2379': attribute type 10 has an invalid length. [ 297.618861][T14858] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 297.806416][T14868] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 298.454302][T14893] netlink: 'syz.4.2387': attribute type 1 has an invalid length. [ 298.468461][T14893] netlink: 'syz.4.2387': attribute type 1 has an invalid length. [ 298.527657][ T5876] Bluetooth: hci4: command 0x0401 tx timeout [ 298.676599][T14898] sctp: [Deprecated]: syz.1.2388 (pid 14898) Use of int in maxseg socket option. [ 298.676599][T14898] Use struct sctp_assoc_value instead [ 299.172669][T14918] __nla_validate_parse: 4 callbacks suppressed [ 299.172687][T14918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2396'. [ 299.326402][T14926] lo speed is unknown, defaulting to 1000 [ 299.372811][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'. [ 299.447891][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'. [ 299.484247][T14931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2400'. [ 299.522539][T14938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2400'. [ 299.698832][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'. [ 299.719296][T14943] netlink: 'syz.2.2403': attribute type 2 has an invalid length. [ 299.741999][T14943] netlink: 'syz.2.2403': attribute type 2 has an invalid length. [ 299.919615][T14949] lo speed is unknown, defaulting to 1000 [ 300.251003][T14963] dvmrp0: left allmulticast mode [ 300.256376][T14963] pimreg: left allmulticast mode [ 300.369420][T14967] lo speed is unknown, defaulting to 1000 [ 300.386681][T14967] lo speed is unknown, defaulting to 1000 [ 300.410204][T14967] lo speed is unknown, defaulting to 1000 [ 300.578243][T14970] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2410'. [ 300.918892][T14984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2413'. [ 301.023296][T14967] infiniband syz0: set down [ 301.028380][T14967] infiniband syz0: added lo [ 301.042217][ T8283] lo speed is unknown, defaulting to 1000 [ 301.113190][T14967] RDS/IB: syz0: added [ 301.126738][T14967] smc: adding ib device syz0 with port count 1 [ 301.135676][T14967] smc: ib device syz0 port 1 has no pnetid [ 301.170931][ T8283] lo speed is unknown, defaulting to 1000 [ 301.192891][T14967] lo speed is unknown, defaulting to 1000 [ 301.204482][T14990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2414'. [ 301.620751][T15007] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2420'. [ 301.661432][T15007] netlink: zone id is out of range [ 301.676273][T15007] netlink: get zone limit has 8 unknown bytes [ 301.739689][T14967] lo speed is unknown, defaulting to 1000 [ 302.345981][T14967] lo speed is unknown, defaulting to 1000 [ 302.989775][T14967] lo speed is unknown, defaulting to 1000 [ 303.365036][T14967] lo speed is unknown, defaulting to 1000 [ 303.452650][T15051] 8021q: VLANs not supported on lo [ 303.461122][T15051] 8021q: VLANs not supported on lo [ 303.466419][T15051] 8021q: VLANs not supported on lo [ 303.537843][T15051] 8021q: VLANs not supported on lo [ 303.543172][T15051] 8021q: VLANs not supported on lo [ 303.565691][T15051] 8021q: VLANs not supported on lo [ 303.587585][T15051] 8021q: VLANs not supported on lo [ 303.592831][T15051] 8021q: VLANs not supported on lo [ 303.626091][T15051] 8021q: VLANs not supported on lo [ 303.658569][T15051] 8021q: VLANs not supported on lo [ 303.663805][T15051] 8021q: VLANs not supported on lo [ 303.688580][T15051] 8021q: VLANs not supported on lo [ 303.704389][T15059] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 303.727123][T15051] 8021q: VLANs not supported on lo [ 303.761260][T15051] 8021q: VLANs not supported on lo [ 303.768121][T15051] 8021q: VLANs not supported on lo [ 303.773350][T15051] 8021q: VLANs not supported on lo [ 303.837479][T15051] 8021q: VLANs not supported on lo [ 303.845693][T15051] 8021q: VLANs not supported on lo [ 303.868467][T15051] 8021q: VLANs not supported on lo [ 303.876694][T15056] lo speed is unknown, defaulting to 1000 [ 303.884631][T14967] lo speed is unknown, defaulting to 1000 [ 303.891449][T15051] 8021q: VLANs not supported on lo [ 303.896915][T15051] 8021q: VLANs not supported on lo [ 303.918793][T15051] 8021q: VLANs not supported on lo [ 303.935054][T15051] 8021q: VLANs not supported on lo [ 303.946955][T15051] 8021q: VLANs not supported on lo [ 303.964375][T15051] 8021q: VLANs not supported on lo [ 303.984494][T15051] 8021q: VLANs not supported on lo [ 304.004864][T15051] 8021q: VLANs not supported on lo [ 304.016539][T15051] 8021q: VLANs not supported on lo [ 304.038237][T15051] 8021q: VLANs not supported on lo [ 304.043470][T15051] 8021q: VLANs not supported on lo [ 304.107525][T15051] 8021q: VLANs not supported on lo [ 304.119602][T15051] 8021q: VLANs not supported on lo [ 304.135318][T15051] 8021q: VLANs not supported on lo [ 304.157452][T15051] 8021q: VLANs not supported on lo [ 304.162672][T15051] 8021q: VLANs not supported on lo [ 304.187552][T15051] 8021q: VLANs not supported on lo [ 304.230392][T15051] 8021q: VLANs not supported on lo [ 304.239180][T15051] 8021q: VLANs not supported on lo [ 304.262166][T15051] 8021q: VLANs not supported on lo [ 304.302409][T15049] lo speed is unknown, defaulting to 1000 [ 304.328149][T15057] __nla_validate_parse: 2 callbacks suppressed [ 304.328167][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2438'. [ 304.360117][T14967] lo speed is unknown, defaulting to 1000 [ 304.413927][T15072] netlink: 'syz.1.2442': attribute type 21 has an invalid length. [ 304.425747][T15072] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2442'. [ 304.435601][T15072] netlink: 'syz.1.2442': attribute type 4 has an invalid length. [ 304.443679][T15072] netlink: 'syz.1.2442': attribute type 5 has an invalid length. [ 304.452522][T15072] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2442'. [ 305.629975][T15102] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 305.897711][T15111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2452'. [ 305.938875][T15121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.702181][T15149] lo speed is unknown, defaulting to 1000 [ 306.723221][T15149] lo speed is unknown, defaulting to 1000 [ 306.723856][T15153] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2463'. [ 306.777786][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2462'. [ 306.834494][T15156] lo speed is unknown, defaulting to 1000 [ 307.065984][T15156] lo speed is unknown, defaulting to 1000 [ 307.267878][T15177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'. [ 307.479081][T15178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2470'. [ 308.590653][T15211] lo speed is unknown, defaulting to 1000 [ 308.640454][T15211] lo speed is unknown, defaulting to 1000 [ 308.975386][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2484'. [ 309.147410][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2487'. [ 309.960941][T15257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2493'. [ 309.970772][T15257] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2493'. [ 310.012470][T15261] can: request_module (can-proto-3) failed. [ 310.393716][T15268] lo speed is unknown, defaulting to 1000 [ 310.437145][T15268] lo speed is unknown, defaulting to 1000 [ 310.674934][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2496'. [ 310.685084][T15279] netlink: 'syz.2.2496': attribute type 4 has an invalid length. [ 310.695981][T15279] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2496'. [ 310.894427][T15290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.919053][T15290] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.933223][T15290] tipc: Resetting bearer [ 310.939851][T15290] tipc: Resetting bearer [ 310.948382][T15290] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 310.965885][ T10] lo speed is unknown, defaulting to 1000 [ 310.985147][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2502'. [ 310.994520][ T10] syz0: Port: 1 Link ACTIVE [ 311.008539][ T5964] lo speed is unknown, defaulting to 1000 [ 312.473844][T15358] tipc: Enabling of bearer rejected, failed to enable media [ 312.485282][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2516'. [ 312.503891][T15343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.663969][T15367] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2518'. [ 312.708399][T15367] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2518'. [ 313.646840][T15383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2525'. [ 313.662908][T15383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2525'. [ 313.983414][T15402] netlink: 'syz.0.2526': attribute type 10 has an invalid length. [ 314.018334][T15402] netlink: 'syz.0.2526': attribute type 10 has an invalid length. [ 314.039096][T15402] team0: Port device 0! removed [ 314.049455][T15402] bond0: (slave 0!): Enslaving as an active interface with an up link [ 314.283920][T15420] FAULT_INJECTION: forcing a failure. [ 314.283920][T15420] name failslab, interval 1, probability 0, space 0, times 0 [ 314.314342][T15420] CPU: 1 UID: 0 PID: 15420 Comm: syz.3.2536 Not tainted syzkaller #0 PREEMPT(full) [ 314.314372][T15420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 314.314398][T15420] Call Trace: [ 314.314408][T15420] [ 314.314417][T15420] dump_stack_lvl+0x189/0x250 [ 314.314446][T15420] ? __pfx____ratelimit+0x10/0x10 [ 314.314469][T15420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.314494][T15420] ? __pfx__printk+0x10/0x10 [ 314.314518][T15420] ? netlink_unicast+0x82f/0x9e0 [ 314.314541][T15420] ? ___sys_sendmsg+0x21f/0x2a0 [ 314.314581][T15420] ? do_syscall_64+0xfa/0x3b0 [ 314.314615][T15420] should_fail_ex+0x414/0x560 [ 314.314670][T15420] should_failslab+0xa8/0x100 [ 314.314701][T15420] kmem_cache_alloc_noprof+0x73/0x3c0 [ 314.314726][T15420] ? skb_clone+0x212/0x3a0 [ 314.314756][T15420] skb_clone+0x212/0x3a0 [ 314.314786][T15420] __netlink_deliver_tap+0x404/0x850 [ 314.314821][T15420] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.314845][T15420] netlink_deliver_tap+0x19c/0x1b0 [ 314.314869][T15420] netlink_sendskb+0x68/0x140 [ 314.314890][T15420] netlink_unicast+0x397/0x9e0 [ 314.314907][T15420] ? __asan_memcpy+0x40/0x70 [ 314.314937][T15420] ? __pfx_netlink_unicast+0x10/0x10 [ 314.314977][T15420] nfnetlink_rcv+0x2290/0x2520 [ 314.315046][T15420] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 314.315083][T15420] ? ref_tracker_free+0x63a/0x7d0 [ 314.315131][T15420] ? __netlink_deliver_tap+0x807/0x850 [ 314.315152][T15420] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.315193][T15420] netlink_unicast+0x82f/0x9e0 [ 314.315222][T15420] ? __pfx_netlink_unicast+0x10/0x10 [ 314.315244][T15420] ? netlink_sendmsg+0x642/0xb30 [ 314.315264][T15420] ? skb_put+0x11b/0x210 [ 314.315291][T15420] netlink_sendmsg+0x805/0xb30 [ 314.315323][T15420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.315350][T15420] ? aa_sock_msg_perm+0xf1/0x1d0 [ 314.315374][T15420] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 314.315395][T15420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.315418][T15420] __sock_sendmsg+0x21c/0x270 [ 314.315440][T15420] ____sys_sendmsg+0x505/0x830 [ 314.315470][T15420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.315505][T15420] ? import_iovec+0x74/0xa0 [ 314.315534][T15420] ___sys_sendmsg+0x21f/0x2a0 [ 314.315563][T15420] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.315627][T15420] ? __fget_files+0x2a/0x420 [ 314.315650][T15420] ? __fget_files+0x3a0/0x420 [ 314.315678][T15420] __x64_sys_sendmsg+0x19b/0x260 [ 314.315707][T15420] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.315743][T15420] ? __pfx_ksys_write+0x10/0x10 [ 314.315766][T15420] ? rcu_is_watching+0x15/0xb0 [ 314.315790][T15420] ? do_syscall_64+0xbe/0x3b0 [ 314.315815][T15420] do_syscall_64+0xfa/0x3b0 [ 314.315834][T15420] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.315853][T15420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.315871][T15420] ? clear_bhb_loop+0x60/0xb0 [ 314.315894][T15420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.315913][T15420] RIP: 0033:0x7f2288f8eec9 [ 314.315930][T15420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.315947][T15420] RSP: 002b:00007f2289e8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.315967][T15420] RAX: ffffffffffffffda RBX: 00007f22891e5fa0 RCX: 00007f2288f8eec9 [ 314.315980][T15420] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 314.315992][T15420] RBP: 00007f2289e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 314.316003][T15420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.316014][T15420] R13: 00007f22891e6038 R14: 00007f22891e5fa0 R15: 00007ffd5bef3c18 [ 314.316045][T15420] [ 315.193471][T15436] __nla_validate_parse: 7 callbacks suppressed [ 315.193493][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2542'. [ 315.248783][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2542'. [ 315.263412][T15440] lo speed is unknown, defaulting to 1000 [ 315.289353][T15440] lo speed is unknown, defaulting to 1000 [ 315.352217][T15445] lo speed is unknown, defaulting to 1000 [ 315.359081][T15443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2542'. [ 315.403315][T15436] tipc: Enabling of bearer rejected, failed to enable media [ 315.671242][T15450] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.671567][T15445] lo speed is unknown, defaulting to 1000 [ 315.702019][T15450] vxcan4: entered promiscuous mode [ 316.189650][T15483] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2552'. [ 316.230636][T15482] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 316.247650][T15481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2553'. [ 316.368472][T15486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2555'. [ 316.399045][T15490] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2556'. [ 316.404682][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2555'. [ 316.867666][T15505] syzkaller1: entered promiscuous mode [ 316.879505][T15505] syzkaller1: entered allmulticast mode [ 316.965027][T15514] lo: entered allmulticast mode [ 317.040043][T15514] lo: left allmulticast mode [ 317.170414][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.373970][T15531] netlink: 'syz.4.2563': attribute type 1 has an invalid length. [ 317.404239][T15531] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2563'. [ 317.404662][T15530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2564'. [ 317.537867][T15542] netlink: 'syz.1.2567': attribute type 29 has an invalid length. [ 318.040071][T15564] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 318.710440][T15594] ------------[ cut here ]------------ [ 318.716202][T15594] WARNING: CPU: 0 PID: 15594 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 318.726239][T15594] Modules linked in: [ 318.730540][T15594] CPU: 0 UID: 0 PID: 15594 Comm: syz.1.2577 Not tainted syzkaller #0 PREEMPT(full) [ 318.740008][T15594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 318.750174][T15594] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 318.756506][T15594] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 20 8c 00 cc e8 82 e1 cd f6 90 0f 0b 90 eb e1 e8 77 e1 cd f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 318.776207][T15594] RSP: 0018:ffffc9000accef60 EFLAGS: 00010287 [ 318.782344][T15594] RAX: ffffffff8af1cc19 RBX: ffff888026bd0000 RCX: 0000000000080000 [ 318.790422][T15594] RDX: ffffc9000bcd2000 RSI: 00000000000003c8 RDI: 00000000000003c9 [ 318.798537][T15594] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8af1c733 [ 318.806528][T15594] R10: dffffc0000000000 R11: ffffed1004d7a031 R12: 1ffff11004d7a00a [ 318.815068][T15594] R13: ffff8880266f8e40 R14: 0000000000000001 R15: ffffffff8af1c733 [ 318.823094][T15594] FS: 00007f10519e86c0(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 318.832693][T15594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.839805][T15594] CR2: 0000200000001080 CR3: 000000007a2bc000 CR4: 00000000003526f0 [ 318.847973][T15594] Call Trace: [ 318.851282][T15594] [ 318.854255][T15594] rate_control_rate_init_all_links+0x109/0x1a0 [ 318.860649][T15594] sta_apply_auth_flags+0x1c2/0x400 [ 318.865886][T15594] sta_apply_parameters+0xe24/0x1570 [ 318.871300][T15594] ieee80211_add_station+0x424/0x6a0 [ 318.876627][T15594] rdev_add_station+0x108/0x290 [ 318.881567][T15594] nl80211_new_station+0x1755/0x1b70 [ 318.886908][T15594] ? __pfx_nl80211_new_station+0x10/0x10 [ 318.892672][T15594] ? netdev_run_todo+0xe1d/0xea0 [ 318.897712][T15594] ? nl80211_pre_doit+0x4f1/0x930 [ 318.902848][T15594] genl_family_rcv_msg_doit+0x215/0x300 [ 318.908483][T15594] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 318.914602][T15594] ? bpf_lsm_capable+0x9/0x20 [ 318.919383][T15594] ? security_capable+0x7e/0x2e0 [ 318.924360][T15594] genl_rcv_msg+0x60e/0x790 [ 318.929024][T15594] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.934088][T15594] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 318.939553][T15594] ? __pfx_nl80211_new_station+0x10/0x10 [ 318.945213][T15594] ? __pfx_nl80211_post_doit+0x10/0x10 [ 318.950746][T15594] ? __asan_memcpy+0x40/0x70 [ 318.955364][T15594] ? __pfx_ref_tracker_free+0x10/0x10 [ 318.960805][T15594] netlink_rcv_skb+0x208/0x470 [ 318.965594][T15594] ? __lock_acquire+0xab9/0xd20 [ 318.970631][T15594] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.975691][T15594] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.980960][T15591] lo speed is unknown, defaulting to 1000 [ 318.982790][T15591] lo speed is unknown, defaulting to 1000 [ 318.986907][T15594] ? down_read+0x1ad/0x2e0 [ 318.997073][T15594] genl_rcv+0x28/0x40 [ 319.001164][T15594] netlink_unicast+0x82f/0x9e0 [ 319.005976][T15594] ? __pfx_netlink_unicast+0x10/0x10 [ 319.011609][T15594] ? netlink_sendmsg+0x642/0xb30 [ 319.016577][T15594] ? skb_put+0x11b/0x210 [ 319.020934][T15594] netlink_sendmsg+0x805/0xb30 [ 319.025736][T15594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.031125][T15594] ? aa_sock_msg_perm+0xf1/0x1d0 [ 319.036093][T15594] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.041485][T15594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.046805][T15594] __sock_sendmsg+0x21c/0x270 [ 319.051593][T15594] ____sys_sendmsg+0x505/0x830 [ 319.056405][T15594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.061846][T15594] ? import_iovec+0x74/0xa0 [ 319.066413][T15594] ___sys_sendmsg+0x21f/0x2a0 [ 319.071256][T15594] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.076545][T15594] ? __fget_files+0x2a/0x420 [ 319.081245][T15594] ? __fget_files+0x3a0/0x420 [ 319.085963][T15594] __x64_sys_sendmsg+0x19b/0x260 [ 319.091023][T15594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.096520][T15594] ? rcu_is_watching+0x15/0xb0 [ 319.101393][T15594] ? do_syscall_64+0xbe/0x3b0 [ 319.106115][T15594] do_syscall_64+0xfa/0x3b0 [ 319.110702][T15594] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.115920][T15594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.122086][T15594] ? clear_bhb_loop+0x60/0xb0 [ 319.126799][T15594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.132774][T15594] RIP: 0033:0x7f1050b8eec9 [ 319.137260][T15594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.157032][T15594] RSP: 002b:00007f10519e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.165530][T15594] RAX: ffffffffffffffda RBX: 00007f1050de5fa0 RCX: 00007f1050b8eec9 [ 319.173617][T15594] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 319.181649][T15594] RBP: 00007f1050c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 319.189701][T15594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.197729][T15594] R13: 00007f1050de6038 R14: 00007f1050de5fa0 R15: 00007ffc9995b908 [ 319.205745][T15594] [ 319.208851][T15594] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 319.216141][T15594] CPU: 0 UID: 0 PID: 15594 Comm: syz.1.2577 Not tainted syzkaller #0 PREEMPT(full) [ 319.225534][T15594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.235598][T15594] Call Trace: [ 319.238899][T15594] [ 319.241830][T15594] dump_stack_lvl+0x99/0x250 [ 319.246429][T15594] ? __asan_memcpy+0x40/0x70 [ 319.251033][T15594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.256326][T15594] ? __pfx__printk+0x10/0x10 [ 319.260935][T15594] vpanic+0x281/0x750 [ 319.265015][T15594] ? __pfx__printk+0x10/0x10 [ 319.269617][T15594] ? __pfx_vpanic+0x10/0x10 [ 319.274129][T15594] ? is_bpf_text_address+0x26/0x2b0 [ 319.279355][T15594] panic+0xb9/0xc0 [ 319.283079][T15594] ? __pfx_panic+0x10/0x10 [ 319.287517][T15594] __warn+0x31b/0x4b0 [ 319.291506][T15594] ? rate_control_rate_init+0x64a/0x6e0 [ 319.297055][T15594] ? rate_control_rate_init+0x64a/0x6e0 [ 319.302618][T15594] report_bug+0x2be/0x4f0 [ 319.306953][T15594] ? rate_control_rate_init+0x64a/0x6e0 [ 319.312528][T15594] ? rate_control_rate_init+0x64a/0x6e0 [ 319.318082][T15594] ? rate_control_rate_init+0x64c/0x6e0 [ 319.323632][T15594] handle_bug+0x84/0x160 [ 319.327884][T15594] exc_invalid_op+0x1a/0x50 [ 319.332408][T15594] asm_exc_invalid_op+0x1a/0x20 [ 319.337280][T15594] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 319.343472][T15594] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 20 8c 00 cc e8 82 e1 cd f6 90 0f 0b 90 eb e1 e8 77 e1 cd f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 319.363168][T15594] RSP: 0018:ffffc9000accef60 EFLAGS: 00010287 [ 319.369244][T15594] RAX: ffffffff8af1cc19 RBX: ffff888026bd0000 RCX: 0000000000080000 [ 319.377218][T15594] RDX: ffffc9000bcd2000 RSI: 00000000000003c8 RDI: 00000000000003c9 [ 319.385188][T15594] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8af1c733 [ 319.393154][T15594] R10: dffffc0000000000 R11: ffffed1004d7a031 R12: 1ffff11004d7a00a [ 319.401120][T15594] R13: ffff8880266f8e40 R14: 0000000000000001 R15: ffffffff8af1c733 [ 319.409093][T15594] ? rate_control_rate_init+0x163/0x6e0 [ 319.414674][T15594] ? rate_control_rate_init+0x163/0x6e0 [ 319.420218][T15594] ? rate_control_rate_init+0x649/0x6e0 [ 319.425864][T15594] rate_control_rate_init_all_links+0x109/0x1a0 [ 319.432120][T15594] sta_apply_auth_flags+0x1c2/0x400 [ 319.437329][T15594] sta_apply_parameters+0xe24/0x1570 [ 319.442628][T15594] ieee80211_add_station+0x424/0x6a0 [ 319.447914][T15594] rdev_add_station+0x108/0x290 [ 319.452792][T15594] nl80211_new_station+0x1755/0x1b70 [ 319.458093][T15594] ? __pfx_nl80211_new_station+0x10/0x10 [ 319.463729][T15594] ? netdev_run_todo+0xe1d/0xea0 [ 319.468698][T15594] ? nl80211_pre_doit+0x4f1/0x930 [ 319.473729][T15594] genl_family_rcv_msg_doit+0x215/0x300 [ 319.479317][T15594] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 319.485398][T15594] ? bpf_lsm_capable+0x9/0x20 [ 319.490089][T15594] ? security_capable+0x7e/0x2e0 [ 319.495056][T15594] genl_rcv_msg+0x60e/0x790 [ 319.499570][T15594] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.504612][T15594] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 319.509989][T15594] ? __pfx_nl80211_new_station+0x10/0x10 [ 319.515620][T15594] ? __pfx_nl80211_post_doit+0x10/0x10 [ 319.521073][T15594] ? __asan_memcpy+0x40/0x70 [ 319.525660][T15594] ? __pfx_ref_tracker_free+0x10/0x10 [ 319.531032][T15594] netlink_rcv_skb+0x208/0x470 [ 319.535792][T15594] ? __lock_acquire+0xab9/0xd20 [ 319.540651][T15594] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.545688][T15594] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.550989][T15594] ? down_read+0x1ad/0x2e0 [ 319.555420][T15594] genl_rcv+0x28/0x40 [ 319.559406][T15594] netlink_unicast+0x82f/0x9e0 [ 319.564184][T15594] ? __pfx_netlink_unicast+0x10/0x10 [ 319.569472][T15594] ? netlink_sendmsg+0x642/0xb30 [ 319.574409][T15594] ? skb_put+0x11b/0x210 [ 319.578667][T15594] netlink_sendmsg+0x805/0xb30 [ 319.583539][T15594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.588841][T15594] ? aa_sock_msg_perm+0xf1/0x1d0 [ 319.593787][T15594] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.599078][T15594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.604374][T15594] __sock_sendmsg+0x21c/0x270 [ 319.609056][T15594] ____sys_sendmsg+0x505/0x830 [ 319.613833][T15594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.619135][T15594] ? import_iovec+0x74/0xa0 [ 319.623657][T15594] ___sys_sendmsg+0x21f/0x2a0 [ 319.628366][T15594] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.633605][T15594] ? __fget_files+0x2a/0x420 [ 319.638197][T15594] ? __fget_files+0x3a0/0x420 [ 319.642879][T15594] __x64_sys_sendmsg+0x19b/0x260 [ 319.647830][T15594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.653313][T15594] ? rcu_is_watching+0x15/0xb0 [ 319.658098][T15594] ? do_syscall_64+0xbe/0x3b0 [ 319.662790][T15594] do_syscall_64+0xfa/0x3b0 [ 319.667300][T15594] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.672502][T15594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.678575][T15594] ? clear_bhb_loop+0x60/0xb0 [ 319.683262][T15594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.689164][T15594] RIP: 0033:0x7f1050b8eec9 [ 319.693584][T15594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.713189][T15594] RSP: 002b:00007f10519e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.721605][T15594] RAX: ffffffffffffffda RBX: 00007f1050de5fa0 RCX: 00007f1050b8eec9 [ 319.729578][T15594] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 319.737552][T15594] RBP: 00007f1050c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 319.745535][T15594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.753538][T15594] R13: 00007f1050de6038 R14: 00007f1050de5fa0 R15: 00007ffc9995b908 [ 319.761535][T15594] [ 319.765023][T15594] Kernel Offset: disabled [ 319.769347][T15594] Rebooting in 86400 seconds..