last executing test programs: 2.838150479s ago: executing program 2 (id=2060): unshare(0x20400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000449a6de1da84f479200008c224a00000000000000953cd93ded0c226131ac"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c810}, 0x4040000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c810}, 0x4040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$inet6(0xa, 0x1, 0x0) (async) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff1b}, &(0x7f0000000040)=0x40) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x303}, "a8a1c7317aacfa66", "21ea6d1a28b147a2b5a0c490889f28f4", "d589cb90", "ee368d1c68b11d24"}, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2fbc61aac78cc949", "d73cb7376ccdd961eb57c264df4580a7bf502983278b5d639eabe200", "549fec04", "a28bd07f456299e8"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2fbc61aac78cc949", "d73cb7376ccdd961eb57c264df4580a7bf502983278b5d639eabe200", "549fec04", "a28bd07f456299e8"}, 0x38) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xbb}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x400, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x9182, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x200080c1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x400, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x9182, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x200080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r4, &(0x7f00000004c0)='W', 0x1, 0x8005, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0, 0x8}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 2.815208015s ago: executing program 2 (id=2065): r0 = accept(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 2.662730137s ago: executing program 2 (id=2072): syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x81, 0x3, 0x204, 0xffff, 0x1, 0x1000, 0xfffffff4, 0xfffffffd, r2}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0xffff}}}}}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xf, 0xe61, 0xf, 0x7f}, 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRESOCT=r5, @ANYRES32=r9, @ANYRES8=r5], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) r10 = socket$inet6(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x401, 0x4, 0x100, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x3f, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendto$inet6(r10, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r12 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_MSFILTER(r12, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="030000000000000002004e2064010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000b4ff9652a8000000000000000000000000000001"], 0x190) 2.037121191s ago: executing program 1 (id=2093): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000004c0)=0x79, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@delpolicy={0x50, 0x14, 0x300, 0x70bd2d, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00', @in6=@private0, 0x4e23, 0x6, 0x4e21, 0x0, 0x8, 0x20, 0x20, 0x3b}, 0x6e6bb4, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtaction={0x58, 0x30, 0x53b, 0x0, 0x25dfdbff, {0x9}, [{0x44, 0x1, [@m_sample={0x40, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xe9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x58}}, 0xa098) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="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", 0xd62}], 0x1}}], 0x1, 0x8001) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001b00010000000000000000006401010100000000000000000000000000000000000000000000ffff0a01010100000000000000800a0000b000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000f00000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000002000000000000000200000000010000000000000000000002000000080000c4557dba00000000004400080008000000000000000000000000000001000004d40000000000000000fc02000000000000000000000000000100"/180], 0xfc}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f9, &(0x7f0000000a40)={'ip6gre0\x00', 0x0}) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x18}}, 0x4000) recvmmsg(r5, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x4008301}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000580)=""/226, 0xe2}, {&(0x7f0000000040)=""/53, 0x35}], 0x3}, 0x80000000}], 0x4, 0x2120, 0x0) 1.928189705s ago: executing program 0 (id=2096): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socket(0x21, 0x2, 0x2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x2c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x801) 1.823168967s ago: executing program 0 (id=2098): r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x86, &(0x7f0000000380)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x2, 0x3, 0x0, [{@private=0xa010132}, {@local, 0x4000}, {@empty}, {@remote}, {@private}, {@dev={0xac, 0x14, 0x14, 0x1f}}, {@private}]}]}}}}}}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80300001600010000000100fcffffff0a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080201d000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000001000004d332000000ff020000000000000000000000000001040000000000000001000000000000000800000000000000070000000000000002000000000000000100000000000000070000000000000035000000000000000100000000000000ffffffffffffff7f0100010000000000264a000000000000dd52000078070000bcbc00002abd7000063500000a0000ff61000000000000001f0102007863686163686131322d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8060000de36d16a4d3d3133db0c2db4721a0b1bf4670216ed84807f707f71ce0286f3cbc3604abbaea1ec0fdb659c3e827a9de929a80b6fec8db684a855ea16fe88fcf3f18869e1da3ffe7cb218a17a640d4080a351551a8093c68b475b42e373c240f8165988c339587cc95b34cf32eacc2b008c96a4a85a1105f0e2ff97163bfaf69fe23e5632608f14a90b1d742c44d4014528a79cc7c983bcfe7c301daf6873d65ac80dcee02ec890005ca87ca7c725fa238e5ded18f34eb38bd6dc4e20fc4a571dd25bf1a16f3573cc1412e46263fe4ca927fed06cdc2659006f0008"], 0x3c8}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) recvfrom$l2tp(r4, &(0x7f0000000080)=""/131, 0x83, 0x102, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.738524145s ago: executing program 2 (id=2099): r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000500)={0x400, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e23, @remote}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) unshare(0x64000600) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000596d1ad978fa", @ANYRES32, @ANYBLOB='\x00'/10], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4900000076000d0b00400000000000000300000000000000080001000200000009000a000000"], 0x28}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x11100000}, 0xc, &(0x7f0000000480)={&(0x7f00000078c0)={0x210, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc860}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x210}, 0x1, 0x0, 0x0, 0x858}, 0xc000) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cZrouz0'}, 0x30) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff2"], 0x20}, {&(0x7f0000006740)={0x1160, 0x19, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x8, 0x69, 0x0, 0x1, [@nested={0x4, 0x12c}]}, @generic="0574a443a64e158a2e01a873af15d4daa32f93e60a8ede8fb33dc7ca7cf7b783454eb1faaf4a3a7eda2865831bcf7a650ddd4d0c7234c0b6919a221d73d72f5359b94e57185432a949c6f134f795d1893ee987f73102dd4ce06384312bd911ff5739499d3424293e20d61ebecd00ee5e4adf2383827e7a8db2521a7c03e90f42dd3026d36d1b1b473444b72c56afac636010c2f46c4b59ebaf422f5086d43172", @generic="cffb7ca35591730430d0d2f281e23fa31fb09953d3719841a15a5bf788e03fc08f79fbb072eb1adb7d41bcedf5e41c974d1fea62a5d21bf18c7709e46f6d859630de620c49f2752b0e08075106702af615ca9209d4f127c1254452957d619c5d867975289ccec39a747aaec62bc71da8975879d413d8b2b3a4691b9b464c3bce859687d99a69398808deee79ab4472c29e4929592ac4632cb2fe3d5cfb0664f51bea6280aeadc1377c1bdf24dd4e2eda89fd34d27b233962fa818866abb04752ac0556b91d0a06d71c2277ceba88cb42750042b3be4d94d61ec5b1dedb047da4b2af", @typed={0x16, 0x32, 0x0, 0x0, @str='./cgroup.net/syz0\x00'}, @generic="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", @nested={0xc, 0xcb, 0x0, 0x1, [@typed={0x6, 0x2d, 0x0, 0x0, @str='}\x00'}]}]}, 0x1160}, {&(0x7f0000000300)=ANY=[@ANYBLOB="40000000190000022dbd7000fbdbdf2535ce77fe5cb6f9db0cc9944027ac059aec056d0c60fc232b07e8393d5667c4090723bb95f51f0285c3381720472d0800e500c516b354d736246f4e1ac515a3d4466196a30709f443cd2f171bee121c7f148ad475ab858da7317eb68866553260704ef92b8cbaa05aaae6b47d2a571a4d68c4ac0483ceb2a29670f240eeb9d5857407cad7f44c19b8b0e4947e2d5da75cf0d8a49db811614ed8de3ef7bcfb5de2b9631cda1ce72e9b4c264443a78f620da105e4149d2f3d41fae524c1d2548317a1d715a69e798d3ae96b88b58b3884a2e49eeb05a2fd6333a8c6f272", @ANYRES32=r3, @ANYBLOB="0400d6800000"], 0x40}], 0x3}, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000000b140bf327b97001f0dbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x48090}, 0x24004840) r5 = epoll_create(0x400) pipe(&(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000500)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f00000005c0)=""/94, 0x5e}], 0x2}, 0x1023) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f00000009c0)={0x3e4, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) socket$inet6_udp(0xa, 0x2, 0x0) 1.208340739s ago: executing program 2 (id=2103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1d}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.029254243s ago: executing program 2 (id=2105): r0 = socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x29, 0x7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.026613814s ago: executing program 3 (id=2107): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000008b5050000080000004608f0ff760000007d9800000000000056080000000000008500000305000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 904.081746ms ago: executing program 1 (id=2108): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080020851000000600000018000000", @ANYRES32, @ANYBLOB="00000700000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) 900.133ms ago: executing program 4 (id=2109): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000dc0)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208d}}], 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20009000) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x3f8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c8, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x4, 0x7, 0x0, 0x10, 0x2, 0x400f09, 0xfffffff8, 0x2542d461, 0xa000000, 0xa, 0x3, 0x9, 0xcc, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0xfffffe6c, 0x1, {0x6, 0x3f, 0x9, 0xa, 0x1, 0xaf, 0x0, 0x4, 0xfffffff8, 0x6, 0x2, 0x1f, 0x6, 0xe, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xf}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x2, 0x3, 0x5, 0x5, 0x34, 0x7fff, 0x5, 0x3fe000, 0x6603, 0x12, 0x18, 0x3, 0x1, 0x2, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x10}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x28, 0x0, &(0x7f0000000000)="e30080670000ec67838717bd86ddd5e91bac95b46d673f459dd48008b875d61d2bc505de08101356", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 899.678911ms ago: executing program 1 (id=2110): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200001"], 0x3c}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x11, 0x30, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x6a00}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r3}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef"], 0x33fe0) 883.411521ms ago: executing program 0 (id=2111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x70, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x47, 0x1, {0x7, 0x537, 0x1, 0x8100}}, {0x14, 0x1, {0x7, 0xbbd, 0x4, 0x8100}}]}]}]}, @IFLA_MASTER={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x6, 0x2878, 0x8001, 0xfffffff7, 0x5]}, &(0x7f0000000080)=0x54) 882.454067ms ago: executing program 3 (id=2112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000) splice(r2, 0x0, r1, &(0x7f0000000280), 0x5, 0x10) sendmsg$nl_route(r1, 0x0, 0x20000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r5, 0x1, 0x33, &(0x7f0000000040)=0x1000, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r6, 0x1, 0x27, &(0x7f0000000380), &(0x7f0000000400)=0x4) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x10000000}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="0000d20b06000500029700"], 0x24}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000001100)={0x5f0, r11, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x148, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x264, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x178, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xacce4099352cf818}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb76252aa8ffa8743}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x5f0}, 0x1, 0x0, 0x0, 0xc801}, 0x4000080) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r12, 0x83, &(0x7f0000000600)}, 0x10) 826.579655ms ago: executing program 0 (id=2113): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001"], 0xf0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ac0)={0xc0, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0xff}}]}]}]}]}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 768.014149ms ago: executing program 4 (id=2114): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a0000000c000000b30000007f"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x40004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66, 0x0, 0x0, 0x0, 0x1001}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x700}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 758.891523ms ago: executing program 3 (id=2115): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x500}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 720.706408ms ago: executing program 4 (id=2116): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x46}}, 0x4004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x82710}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0xffffffffffffff21, 0x0, 0x0, &(0x7f00000005c0)=""/108, 0x6c}, 0x7fff}], 0x3fffffffffffcbe, 0xfffe, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmsg(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40012022) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000010c0), &(0x7f0000001100)=0xe, 0x81800) setsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000001140)=0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000000000604000000080000000100000ff7ffffff0400000001000000fffffff70030615f5f002e305f"], 0x0, 0x46, 0x0, 0x1}, 0x28) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x1e}, 0x20) connect$netlink(r8, &(0x7f0000001080)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000001040)={'nicvf0\x00'}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r11}, &(0x7f00000008c0), 0x0}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, 0x0, 0x0) 717.663218ms ago: executing program 3 (id=2117): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 697.475774ms ago: executing program 1 (id=2118): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x400000013) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x0, 0x7}, 0x94) (async) r3 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r3, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) (async) accept4$llc(r5, 0x0, 0x0, 0x0) (async) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000200)) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmmsg$unix(r6, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x1}}], 0x2, 0x0) 603.961271ms ago: executing program 3 (id=2119): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040800) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000d7f9abc9dc7aaffd7fc9420e2c4dc72c0c0ee2f4169ebbc8c1d6dd36622c879c4a22a46504c9f8801f46f26480470f3352ab5d2f9c82004f41ce891d7684796eb9a6d1ac89de81cdf602c7ec99fe85f70cb4d91ddcb248c9d2f0c073a3fb43e504d306942a0a21aead893c4eac476179898d8f7564ad1817e0f200"/136, @ANYRES16=r3, @ANYBLOB="210f2dbd7000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8010) socketpair(0x5, 0x1, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r5, &(0x7f0000000e40)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=0x0, @ANYBLOB="20002abd7000ffdbdf2517000000900002800800020005000000040004002400038008000200050000000800010001000000080001000100000008000100ffffff7f0400040008000100070000000400040034000380080001004e00000000080001000700000008000100fc02000008000200050000000800010008000000040004000c000380080002000400000008000100000000001c0007800c00040006000000000000000c000300d30d401400"/186], 0xc0}, 0x1, 0x0, 0x0, 0x44850}, 0x40800) 554.808018ms ago: executing program 1 (id=2120): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="410305a1b727039dab30ac06db7f457fac5a"], 0x12) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedb000000000000013f0b0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4180) 257.694299ms ago: executing program 0 (id=2121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x40000}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 188.125433ms ago: executing program 4 (id=2122): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080020851000000600000018000000", @ANYRES32, @ANYBLOB="00000900000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) 152.529672ms ago: executing program 1 (id=2123): r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r5 = socket(0x1, 0x803, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket(0x10, 0x80000, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, &(0x7f0000000040)) r8 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r10], 0x50}}, 0x2) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) 114.747994ms ago: executing program 3 (id=2124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x7d}], 0x1) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r2, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x3, 0x0, 0xffdfffff}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000000400008004"], 0x1c}}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000580)=0x7, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={r6, 0xef6c, 0x10, 0x3, 0x9}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={r6, 0x3, 0xc4, 0x401}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r7, 0x0, 0x13, 0x0, &(0x7f0000000080)) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r8}, &(0x7f0000000300), &(0x7f0000000500)='%-5lx \x00'}, 0x20) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002609000000dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) sendmsg$nfc_llcp(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x27, r12, 0x1, 0x5, 0x7, 0xf8, "1351a1d788118a99b0d2b2fdfd709627b12f3b8697d28ee2aacc0ce920427bfa8b9443915b4b70725df635d7bfda4615d90ab51576f791d4276e15878ba3bf", 0x29}, 0x60, &(0x7f0000000800)=[{&(0x7f0000000740)="2ba510c221592dc9a40c0c959d84660b936277a3b2d831281427028b107f3f048f8f2b5c57854767626edbf96c674eb72fcae46149892a18819d277886356e481519f6db9f1073fe0f72ef5687f9e45b64d7d7d1032353818a3a761e1590c686343372046c0db9f18f6ea77322518e76e3b593133f797ac582ab19054fb06d64249d6dd7665e4c94b77494c665f4800c602a75", 0x93}, {&(0x7f00000001c0)="2f1f9d7187af6f4d8495ef30498db484141f", 0x12}], 0x2, &(0x7f0000000840)={0x90, 0x0, 0x1, "c6910701dacd500a79edba9ece21688057a46a364bfa029beb1b6505d8f1fe1e9bc347c41c3345d2a1fed6ce37ecb7bf48854944e3356ed1cdd89555b6a5102240b5dcc1b24d79b5b9f2a929ece73e24b38ddb4675ca56e0eb57d4db148537979be8904efa00aecb926bfa6f294a70788cc60df51ea2aeabaf54a495ae"}, 0x90, 0x8848}, 0x80) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7ea940f0d240614d1198c45714c73c9f82a6b95c16cf9ada9545b16927746dfebf26a4c2976545db14f4e070cf32b43183ad3b8d163104441555f9e0875c784b21", @ANYRES16=r1, @ANYBLOB="100001800000fcdbdf250b0000000500050002000000080003000800000008000200030000000800040000000100340006800800060010000000050002000e00000008000600080000000500020005000000080006000d00000005000200010000001c000180080003007f000001060001000a00000008000300e0000001"], 0x84}, 0x1, 0x0, 0x0, 0x4090}, 0x80) 112.816809ms ago: executing program 0 (id=2125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="310005000000000100dd6e41c9e300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000002001000000f0ffffffffffffff000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000040300"/180], 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x44, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x40480c0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0010000900000021caeec630650db546f89a5f5d2300000100a26e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r11}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x11, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r13}, 0x10) 107.122931ms ago: executing program 4 (id=2126): r0 = socket$key(0xf, 0x3, 0x2) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b000000000000000000000004000300000000000000000000fdff000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 0s ago: executing program 4 (id=2127): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x74, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffa}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x71}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c081}, 0x4) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x15) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfca2}) kernel console output (not intermixed with test programs): [ 95.344515][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.352723][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.371854][ T7027] bond1: (slave veth3): Releasing backup interface [ 95.425588][ T7031] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.471471][ T7036] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 95.537689][ T7021] vlan2: entered allmulticast mode [ 95.558499][ T7021] veth1: entered allmulticast mode [ 95.565080][ T7021] veth1: entered promiscuous mode [ 95.577331][ T7021] veth1: left promiscuous mode [ 95.612277][ T7021] bond1: (slave vlan2): making interface the new active one [ 95.632814][ T7060] netlink: 120 bytes leftover after parsing attributes in process `syz.0.307'. [ 95.650916][ T7021] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 95.691059][ T7021] veth1: entered promiscuous mode [ 95.696873][ T7021] vlan2: entered promiscuous mode [ 95.712223][ T7021] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 95.829467][ T7069] netlink: 68 bytes leftover after parsing attributes in process `syz.4.310'. [ 95.856361][ T7066] tipc: Enabled bearer , priority 0 [ 95.871486][ T7066] syzkaller0: entered promiscuous mode [ 95.888860][ T7066] syzkaller0: entered allmulticast mode [ 95.906477][ T7070] tipc: Enabling of bearer rejected, failed to enable media [ 95.956852][ T7073] tipc: Enabling of bearer rejected, failed to enable media [ 96.207880][ T7091] netlink: zone id is out of range [ 96.220839][ T7091] netlink: zone id is out of range [ 96.236982][ T7091] netlink: zone id is out of range [ 96.253986][ T7091] netlink: zone id is out of range [ 96.284730][ T7091] netlink: zone id is out of range [ 96.290050][ T7091] netlink: zone id is out of range [ 96.298612][ T7091] netlink: zone id is out of range [ 96.307277][ T7091] netlink: zone id is out of range [ 96.312605][ T7091] netlink: zone id is out of range [ 96.318041][ T7091] netlink: zone id is out of range [ 96.368672][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 96.370958][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 96.423091][ T7102] netlink: 120 bytes leftover after parsing attributes in process `syz.1.318'. [ 96.437129][ T7099] bridge1: port 1(veth5) entered blocking state [ 96.445965][ T7099] bridge1: port 1(veth5) entered disabled state [ 96.459188][ T7099] veth5: entered allmulticast mode [ 96.482856][ T7099] veth5: entered promiscuous mode [ 96.556856][ T7108] syzkaller0: left promiscuous mode [ 96.571810][ T7108] syzkaller0: left allmulticast mode [ 96.698586][ T7110] netlink: 'syz.3.321': attribute type 1 has an invalid length. [ 96.924846][ T7126] netlink: 'syz.1.325': attribute type 21 has an invalid length. [ 96.945979][ T7126] netlink: 'syz.1.325': attribute type 4 has an invalid length. [ 96.970140][ T7128] netlink: 'syz.4.327': attribute type 10 has an invalid length. [ 96.980924][ T5914] tipc: Node number set to 2661711665 [ 97.015268][ T7128] team0: Device hsr_slave_0 failed to register rx_handler [ 97.105479][ T7131] !: renamed from dummy0 (while UP) [ 98.491790][ T7149] __nla_validate_parse: 5 callbacks suppressed [ 98.491812][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.331'. [ 99.411662][ T7158] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96 [ 99.581837][ T7167] netlink: 32 bytes leftover after parsing attributes in process `syz.0.338'. [ 99.819358][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 99.889923][ T7177] netlink: 120 bytes leftover after parsing attributes in process `syz.0.342'. [ 100.127126][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.156159][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.189002][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.221532][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.258219][ T7181] lo speed is unknown, defaulting to 1000 [ 100.306608][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.316285][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.403255][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.442267][ T7198] netlink: 'syz.2.347': attribute type 13 has an invalid length. [ 100.450057][ T7198] netlink: 'syz.2.347': attribute type 17 has an invalid length. [ 100.480529][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.095096][ T7205] !: renamed from dummy0 [ 101.278195][ T7203] lo speed is unknown, defaulting to 1000 [ 101.285742][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.348'. [ 101.347930][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.349'. [ 101.968273][ T7234] net_ratelimit: 21 callbacks suppressed [ 101.968295][ T7234] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 102.014449][ T7234] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 102.036430][ T7234] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 102.140050][ T7239] lo speed is unknown, defaulting to 1000 [ 102.372211][ T7253] netlink: 'syz.2.361': attribute type 13 has an invalid length. [ 102.439349][ T7253] netlink: 'syz.2.361': attribute type 17 has an invalid length. [ 102.496812][ T7257] netlink: 'syz.1.363': attribute type 13 has an invalid length. [ 102.548333][ T7257] netlink: 'syz.1.363': attribute type 17 has an invalid length. [ 102.624696][ T7253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.657125][ T7263] netlink: 'syz.3.364': attribute type 5 has an invalid length. [ 102.662957][ T7239] netlink: 292 bytes leftover after parsing attributes in process `syz.4.358'. [ 102.757560][ T7253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.782818][ T7257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.858810][ T43] lo speed is unknown, defaulting to 1000 [ 103.028332][ T7255] lo speed is unknown, defaulting to 1000 [ 103.089814][ T7259] lo speed is unknown, defaulting to 1000 [ 103.603063][ T7293] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.642562][ T7293] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 103.863833][ T7290] bond2: (slave macvlan2): Releasing backup interface [ 103.920348][ T7306] sctp: [Deprecated]: syz.3.376 (pid 7306) Use of int in max_burst socket option deprecated. [ 103.920348][ T7306] Use struct sctp_assoc_value instead [ 104.126291][ T7317] netlink: 32 bytes leftover after parsing attributes in process `syz.0.378'. [ 104.138979][ T7303] lo speed is unknown, defaulting to 1000 [ 104.159232][ T7316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.482577][ T7336] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 104.528707][ T7339] !: renamed from dummy0 (while UP) [ 104.549856][ T7340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.386'. [ 104.589829][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'. [ 104.601576][ T7342] netlink: 256 bytes leftover after parsing attributes in process `syz.3.390'. [ 104.636757][ T7342] netlink: 48 bytes leftover after parsing attributes in process `syz.3.390'. [ 104.667754][ T7340] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 104.683761][ T7349] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 104.735871][ T7344] lo speed is unknown, defaulting to 1000 [ 104.945130][ T7342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.990263][ T7344] lo speed is unknown, defaulting to 1000 [ 105.000665][ T7344] lo speed is unknown, defaulting to 1000 [ 105.053691][ T7364] lo speed is unknown, defaulting to 1000 [ 105.128166][ T7371] netlink: 84 bytes leftover after parsing attributes in process `syz.1.400'. [ 105.141498][ T7371] netlink: 84 bytes leftover after parsing attributes in process `syz.1.400'. [ 105.154638][ T7371] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 105.287057][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.399'. [ 105.291367][ T7375] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 105.610599][ T7344] infiniband syz0: set active [ 105.615941][ T5934] lo speed is unknown, defaulting to 1000 [ 105.811079][ T7344] infiniband syz0: added lo [ 105.818875][ T7344] syz0: rxe_create_cq: returned err = -12 [ 105.845238][ T7344] infiniband syz0: Couldn't create ib_mad CQ [ 105.863455][ T7344] infiniband syz0: Couldn't open port 1 [ 105.950347][ T7375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.982435][ T7344] RDS/IB: syz0: added [ 105.990833][ T7344] smc: adding ib device syz0 with port count 1 [ 105.997124][ T7344] smc: ib device syz0 port 1 has pnetid [ 106.123831][ T7344] lo speed is unknown, defaulting to 1000 [ 106.129812][ T5934] lo speed is unknown, defaulting to 1000 [ 106.342750][ T7389] netlink: 120 bytes leftover after parsing attributes in process `syz.1.402'. [ 106.385503][ T7392] netlink: 'syz.4.405': attribute type 4 has an invalid length. [ 106.426528][ T7392] netlink: 'syz.4.405': attribute type 4 has an invalid length. [ 106.496578][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 106.551662][ T7407] Bluetooth: MGMT ver 1.23 [ 106.582695][ T7344] lo speed is unknown, defaulting to 1000 [ 106.777265][ T7344] lo speed is unknown, defaulting to 1000 [ 106.961673][ T7344] lo speed is unknown, defaulting to 1000 [ 107.155312][ T7344] lo speed is unknown, defaulting to 1000 [ 107.241788][ T6594] vlan2: left promiscuous mode [ 107.269744][ T7344] lo speed is unknown, defaulting to 1000 [ 107.362944][ T7344] lo speed is unknown, defaulting to 1000 [ 107.425311][ T7344] lo speed is unknown, defaulting to 1000 [ 107.487737][ T7344] lo speed is unknown, defaulting to 1000 [ 107.549779][ T7392] lo speed is unknown, defaulting to 1000 [ 107.564498][ T7396] lo speed is unknown, defaulting to 1000 [ 107.660216][ T7428] lo speed is unknown, defaulting to 1000 [ 108.228913][ T7452] siw: device registration error -23 [ 108.339198][ T7454] tipc: Enabled bearer , priority 0 [ 108.348281][ T7452] syzkaller0: entered promiscuous mode [ 108.354084][ T7452] syzkaller0: entered allmulticast mode [ 108.392897][ T7450] tipc: Resetting bearer [ 108.403643][ T7450] tipc: Disabling bearer [ 109.144841][ T7508] __nla_validate_parse: 7 callbacks suppressed [ 109.144863][ T7508] netlink: 16 bytes leftover after parsing attributes in process `syz.3.443'. [ 109.425086][ T7529] tipc: Enabled bearer , priority 0 [ 109.463819][ T7529] syzkaller0: entered promiscuous mode [ 109.469669][ T7529] syzkaller0: entered allmulticast mode [ 109.565854][ T7534] tipc: Resetting bearer [ 109.578767][ T7528] tipc: Resetting bearer [ 109.587185][ T7528] tipc: Disabling bearer [ 109.624964][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 109.640021][ T7536] batadv1: entered promiscuous mode [ 109.788322][ T5863] IPVS: starting estimator thread 0... [ 109.795055][ T7545] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 109.894446][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 109.906411][ T7557] lo speed is unknown, defaulting to 1000 [ 109.913028][ T7550] IPVS: using max 35 ests per chain, 84000 per kthread [ 109.927461][ T7557] lo speed is unknown, defaulting to 1000 [ 110.024394][ T7558] lo speed is unknown, defaulting to 1000 [ 110.105702][ T7567] netlink: 84 bytes leftover after parsing attributes in process `syz.3.462'. [ 110.117004][ T7567] netlink: 84 bytes leftover after parsing attributes in process `syz.3.462'. [ 110.126893][ T7567] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 110.159899][ T7558] lo speed is unknown, defaulting to 1000 [ 110.546144][ T7590] tipc: Enabling of bearer rejected, failed to enable media [ 110.589794][ T7596] syzkaller0: entered promiscuous mode [ 110.600048][ T7596] syzkaller0: entered allmulticast mode [ 110.618801][ T7595] tipc: Enabled bearer , priority 0 [ 110.640988][ T7596] tipc: Resetting bearer [ 110.650237][ T7594] tipc: Resetting bearer [ 110.667387][ T7594] tipc: Disabling bearer [ 110.698776][ T7602] netlink: 36 bytes leftover after parsing attributes in process `syz.0.473'. [ 110.724948][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 110.792061][ T7605] netlink: 44 bytes leftover after parsing attributes in process `syz.3.474'. [ 110.950175][ T7610] netlink: 84 bytes leftover after parsing attributes in process `syz.3.476'. [ 110.959292][ T7610] netlink: 84 bytes leftover after parsing attributes in process `syz.3.476'. [ 110.972293][ T7610] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 111.149324][ T7622] netlink: 'syz.3.480': attribute type 1 has an invalid length. [ 111.294699][ T7625] !: renamed from dummy0 [ 111.389108][ T7626] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 112.093126][ T7637] lo speed is unknown, defaulting to 1000 [ 112.099797][ T7637] lo speed is unknown, defaulting to 1000 [ 112.227813][ T7648] netlink: 'syz.1.488': attribute type 1 has an invalid length. [ 112.248976][ T7648] netlink: 'syz.1.488': attribute type 1 has an invalid length. [ 112.258576][ T7650] FAULT_INJECTION: forcing a failure. [ 112.258576][ T7650] name failslab, interval 1, probability 0, space 0, times 0 [ 112.310866][ T7650] CPU: 1 UID: 0 PID: 7650 Comm: syz.3.489 Not tainted syzkaller #0 PREEMPT(full) [ 112.310896][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.310908][ T7650] Call Trace: [ 112.310915][ T7650] [ 112.310923][ T7650] dump_stack_lvl+0x189/0x250 [ 112.310952][ T7650] ? __pfx____ratelimit+0x10/0x10 [ 112.310980][ T7650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.311003][ T7650] ? __pfx__printk+0x10/0x10 [ 112.311028][ T7650] ? fs_reclaim_acquire+0x7d/0x100 [ 112.311056][ T7650] ? rcu_is_watching+0x15/0xb0 [ 112.311074][ T7650] ? __pfx___might_resched+0x10/0x10 [ 112.311092][ T7650] ? lock_acquire+0x5f/0x360 [ 112.311119][ T7650] should_fail_ex+0x414/0x560 [ 112.311145][ T7650] should_failslab+0xa8/0x100 [ 112.311173][ T7650] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 112.311198][ T7650] ? __alloc_skb+0x112/0x2d0 [ 112.311217][ T7650] __alloc_skb+0x112/0x2d0 [ 112.311236][ T7650] netlink_sendmsg+0x5c6/0xb30 [ 112.311259][ T7650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.311278][ T7650] ? aa_sock_msg_perm+0xf1/0x1d0 [ 112.311296][ T7650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.311316][ T7650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.311334][ T7650] __sock_sendmsg+0x21c/0x270 [ 112.311360][ T7650] ____sys_sendmsg+0x505/0x830 [ 112.311382][ T7650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.311416][ T7650] ? import_iovec+0x74/0xa0 [ 112.311439][ T7650] ___sys_sendmsg+0x21f/0x2a0 [ 112.311460][ T7650] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.311496][ T7650] ? __fget_files+0x2a/0x420 [ 112.311512][ T7650] ? __fget_files+0x3a0/0x420 [ 112.311533][ T7650] __x64_sys_sendmsg+0x19b/0x260 [ 112.311554][ T7650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.311579][ T7650] ? __pfx_ksys_write+0x10/0x10 [ 112.311603][ T7650] ? rcu_is_watching+0x15/0xb0 [ 112.311623][ T7650] ? rcu_is_watching+0x15/0xb0 [ 112.311643][ T7650] do_syscall_64+0xfa/0x3b0 [ 112.311661][ T7650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.311680][ T7650] ? clear_bhb_loop+0x60/0xb0 [ 112.311701][ T7650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.311719][ T7650] RIP: 0033:0x7f499a38ebe9 [ 112.311737][ T7650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.311753][ T7650] RSP: 002b:00007f499b2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.311776][ T7650] RAX: ffffffffffffffda RBX: 00007f499a5b5fa0 RCX: 00007f499a38ebe9 [ 112.311791][ T7650] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 112.311803][ T7650] RBP: 00007f499b2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.311815][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.311826][ T7650] R13: 00007f499a5b6038 R14: 00007f499a5b5fa0 R15: 00007ffe7369f098 [ 112.311846][ T7650] [ 112.391113][ T7652] netlink: 'syz.1.488': attribute type 1 has an invalid length. [ 112.575114][ T7656] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 112.676801][ T7652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.754994][ T7663] netlink: 'syz.1.492': attribute type 1 has an invalid length. [ 112.805852][ T7663] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.839714][ T7667] ipvlan2: entered allmulticast mode [ 112.896630][ T7667] bond2: entered allmulticast mode [ 113.055618][ T7673] veth3: entered promiscuous mode [ 114.091737][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 114.191287][ T7698] tipc: Enabled bearer , priority 0 [ 114.221777][ T7698] syzkaller0: entered promiscuous mode [ 114.227279][ T7698] syzkaller0: entered allmulticast mode [ 114.247607][ T7701] lo speed is unknown, defaulting to 1000 [ 114.268269][ T7703] __nla_validate_parse: 5 callbacks suppressed [ 114.268288][ T7703] netlink: 168 bytes leftover after parsing attributes in process `syz.1.505'. [ 114.311335][ T7701] lo speed is unknown, defaulting to 1000 [ 114.318652][ T7707] tipc: Resetting bearer [ 114.334270][ T7697] tipc: Resetting bearer [ 114.343584][ T7697] tipc: Disabling bearer [ 114.594494][ T7719] netlink: 172 bytes leftover after parsing attributes in process `syz.3.508'. [ 115.761733][ T7744] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 115.934367][ T7753] dvmrp0: entered allmulticast mode [ 117.163361][ T7793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.530'. [ 117.182921][ T7793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.530'. [ 117.223952][ T7793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.530'. [ 117.433380][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.537'. [ 117.466004][ T7816] netlink: 64 bytes leftover after parsing attributes in process `syz.1.537'. [ 117.511942][ T7824] netlink: 'syz.1.537': attribute type 21 has an invalid length. [ 117.527213][ T7825] netlink: 40 bytes leftover after parsing attributes in process `syz.0.540'. [ 117.577029][ T7816] geneve2: entered promiscuous mode [ 117.813102][ T7846] lo speed is unknown, defaulting to 1000 [ 117.843843][ T7846] lo speed is unknown, defaulting to 1000 [ 117.909734][ T7852] lo speed is unknown, defaulting to 1000 [ 118.377784][ T7852] lo speed is unknown, defaulting to 1000 [ 118.625531][ T7862] vlan0: entered promiscuous mode [ 118.630907][ T7862] vlan0: entered allmulticast mode [ 118.636302][ T7862] hsr_slave_1: entered allmulticast mode [ 118.647019][ T7860] netlink: 44 bytes leftover after parsing attributes in process `syz.3.549'. [ 118.726112][ T7873] netlink: 40 bytes leftover after parsing attributes in process `syz.1.551'. [ 118.739716][ T7873] FAULT_INJECTION: forcing a failure. [ 118.739716][ T7873] name failslab, interval 1, probability 0, space 0, times 0 [ 118.779891][ T7873] CPU: 1 UID: 0 PID: 7873 Comm: syz.1.551 Not tainted syzkaller #0 PREEMPT(full) [ 118.779919][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.779930][ T7873] Call Trace: [ 118.779938][ T7873] [ 118.779946][ T7873] dump_stack_lvl+0x189/0x250 [ 118.779973][ T7873] ? __pfx____ratelimit+0x10/0x10 [ 118.779999][ T7873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.780020][ T7873] ? __pfx__printk+0x10/0x10 [ 118.780046][ T7873] ? fs_reclaim_acquire+0x7d/0x100 [ 118.780072][ T7873] ? rcu_is_watching+0x15/0xb0 [ 118.780091][ T7873] ? __pfx___might_resched+0x10/0x10 [ 118.780107][ T7873] ? lock_acquire+0x5f/0x360 [ 118.780134][ T7873] should_fail_ex+0x414/0x560 [ 118.780160][ T7873] should_failslab+0xa8/0x100 [ 118.780187][ T7873] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 118.780221][ T7873] ? xfrm_add_sa+0x2868/0x4070 [ 118.780247][ T7873] kmemdup_noprof+0x2b/0x70 [ 118.780267][ T7873] xfrm_add_sa+0x2868/0x4070 [ 118.780293][ T7873] ? __pfx_xfrm_add_sa+0x10/0x10 [ 118.780314][ T7873] ? apparmor_capable+0x137/0x1b0 [ 118.780338][ T7873] ? __nla_parse+0x40/0x60 [ 118.780366][ T7873] xfrm_user_rcv_msg+0x7a3/0xab0 [ 118.780389][ T7873] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 118.780425][ T7873] ? __pfx___mutex_trylock_common+0x10/0x10 [ 118.780448][ T7873] ? rcu_is_watching+0x15/0xb0 [ 118.780465][ T7873] ? trace_contention_end+0x39/0x120 [ 118.780485][ T7873] ? __mutex_lock+0x335/0x1350 [ 118.780504][ T7873] netlink_rcv_skb+0x205/0x470 [ 118.780532][ T7873] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 118.780555][ T7873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.780586][ T7873] ? lock_release+0x4b/0x3e0 [ 118.780613][ T7873] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.780640][ T7873] xfrm_netlink_rcv+0x79/0x90 [ 118.780660][ T7873] netlink_unicast+0x82f/0x9e0 [ 118.780688][ T7873] ? __pfx_netlink_unicast+0x10/0x10 [ 118.780718][ T7873] ? netlink_sendmsg+0x687/0xb30 [ 118.780738][ T7873] netlink_sendmsg+0x805/0xb30 [ 118.780758][ T7873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.780775][ T7873] ? aa_sock_msg_perm+0xf1/0x1d0 [ 118.780793][ T7873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 118.780813][ T7873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.780831][ T7873] __sock_sendmsg+0x21c/0x270 [ 118.780857][ T7873] ____sys_sendmsg+0x505/0x830 [ 118.780880][ T7873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.780903][ T7873] ? import_iovec+0x74/0xa0 [ 118.780926][ T7873] ___sys_sendmsg+0x21f/0x2a0 [ 118.780946][ T7873] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.780981][ T7873] ? __fget_files+0x2a/0x420 [ 118.780997][ T7873] ? __fget_files+0x3a0/0x420 [ 118.781018][ T7873] __x64_sys_sendmsg+0x19b/0x260 [ 118.781039][ T7873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.781063][ T7873] ? __pfx_ksys_write+0x10/0x10 [ 118.781086][ T7873] ? rcu_is_watching+0x15/0xb0 [ 118.781107][ T7873] ? rcu_is_watching+0x15/0xb0 [ 118.781127][ T7873] do_syscall_64+0xfa/0x3b0 [ 118.781145][ T7873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.781164][ T7873] ? clear_bhb_loop+0x60/0xb0 [ 118.781184][ T7873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.781202][ T7873] RIP: 0033:0x7fa575b8ebe9 [ 118.781228][ T7873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.781245][ T7873] RSP: 002b:00007fa576969038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.781267][ T7873] RAX: ffffffffffffffda RBX: 00007fa575db5fa0 RCX: 00007fa575b8ebe9 [ 118.781281][ T7873] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 118.781293][ T7873] RBP: 00007fa576969090 R08: 0000000000000000 R09: 0000000000000000 [ 118.781305][ T7873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.781317][ T7873] R13: 00007fa575db6038 R14: 00007fa575db5fa0 R15: 00007fff3cef6468 [ 118.781337][ T7873] [ 119.312909][ T5863] lo speed is unknown, defaulting to 1000 [ 119.340664][ T7887] syzkaller0: entered promiscuous mode [ 119.348534][ T7887] syzkaller0: entered allmulticast mode [ 119.503082][ T7894] netlink: 'syz.1.557': attribute type 21 has an invalid length. [ 119.565082][ T7894] __nla_validate_parse: 2 callbacks suppressed [ 119.565102][ T7894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.557'. [ 119.694117][ T7902] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 119.733270][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.559'. [ 119.752159][ T7906] netlink: 248 bytes leftover after parsing attributes in process `syz.2.561'. [ 120.739843][ T7919] syzkaller0: entered promiscuous mode [ 120.767243][ T7919] syzkaller0: entered allmulticast mode [ 120.783491][ T7924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.565'. [ 120.812925][ T7925] FAULT_INJECTION: forcing a failure. [ 120.812925][ T7925] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 120.830032][ T7925] CPU: 1 UID: 0 PID: 7925 Comm: syz.0.566 Not tainted syzkaller #0 PREEMPT(full) [ 120.830061][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.830072][ T7925] Call Trace: [ 120.830080][ T7925] [ 120.830087][ T7925] dump_stack_lvl+0x189/0x250 [ 120.830121][ T7925] ? __pfx____ratelimit+0x10/0x10 [ 120.830150][ T7925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.830171][ T7925] ? __pfx__printk+0x10/0x10 [ 120.830194][ T7925] ? __might_fault+0xb0/0x130 [ 120.830228][ T7925] ? rcu_is_watching+0x15/0xb0 [ 120.830248][ T7925] should_fail_ex+0x414/0x560 [ 120.830275][ T7925] _copy_from_user+0x2d/0xb0 [ 120.830295][ T7925] ___sys_sendmsg+0x158/0x2a0 [ 120.830316][ T7925] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.830338][ T7925] ? kstrtouint+0x6e/0xe0 [ 120.830375][ T7925] ? __fget_files+0x2a/0x420 [ 120.830405][ T7925] ? __fget_files+0x3a0/0x420 [ 120.830424][ T7925] __sys_sendmmsg+0x227/0x430 [ 120.830445][ T7925] ? __pfx___sys_sendmmsg+0x10/0x10 [ 120.830476][ T7925] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 120.830503][ T7925] ? ksys_write+0x22a/0x250 [ 120.830528][ T7925] ? __pfx_ksys_write+0x10/0x10 [ 120.830551][ T7925] ? rcu_is_watching+0x15/0xb0 [ 120.830580][ T7925] __x64_sys_sendmmsg+0xa0/0xc0 [ 120.830600][ T7925] do_syscall_64+0xfa/0x3b0 [ 120.830618][ T7925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.830637][ T7925] ? clear_bhb_loop+0x60/0xb0 [ 120.830658][ T7925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.830675][ T7925] RIP: 0033:0x7f722218ebe9 [ 120.830693][ T7925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.830713][ T7925] RSP: 002b:00007f7222f65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 120.830734][ T7925] RAX: ffffffffffffffda RBX: 00007f72223b5fa0 RCX: 00007f722218ebe9 [ 120.830749][ T7925] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 120.830761][ T7925] RBP: 00007f7222f65090 R08: 0000000000000000 R09: 0000000000000000 [ 120.830772][ T7925] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 120.830783][ T7925] R13: 00007f72223b6038 R14: 00007f72223b5fa0 R15: 00007ffc78349418 [ 120.830802][ T7925] [ 121.052929][ T7929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.567'. [ 121.413708][ T7958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.578'. [ 122.691197][ T7966] netlink: 48 bytes leftover after parsing attributes in process `syz.2.580'. [ 122.850312][ T7976] FAULT_INJECTION: forcing a failure. [ 122.850312][ T7976] name failslab, interval 1, probability 0, space 0, times 0 [ 122.868788][ T7976] CPU: 1 UID: 0 PID: 7976 Comm: syz.1.585 Not tainted syzkaller #0 PREEMPT(full) [ 122.868815][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.868825][ T7976] Call Trace: [ 122.868832][ T7976] [ 122.868841][ T7976] dump_stack_lvl+0x189/0x250 [ 122.868869][ T7976] ? __pfx____ratelimit+0x10/0x10 [ 122.868897][ T7976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.868919][ T7976] ? __pfx__printk+0x10/0x10 [ 122.868946][ T7976] ? fs_reclaim_acquire+0x7d/0x100 [ 122.868984][ T7976] ? __pfx___might_resched+0x10/0x10 [ 122.869001][ T7976] ? lock_acquire+0x5f/0x360 [ 122.869029][ T7976] should_fail_ex+0x414/0x560 [ 122.869056][ T7976] should_failslab+0xa8/0x100 [ 122.869084][ T7976] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 122.869111][ T7976] ? __alloc_skb+0x112/0x2d0 [ 122.869130][ T7976] __alloc_skb+0x112/0x2d0 [ 122.869149][ T7976] sock_omalloc+0xd8/0x1e0 [ 122.869171][ T7976] msg_zerocopy_realloc+0x9c/0x850 [ 122.869198][ T7976] __ip6_append_data+0xca2/0x3f30 [ 122.869234][ T7976] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 122.869257][ T7976] ? rcu_is_watching+0x15/0xb0 [ 122.869277][ T7976] ? rcu_is_watching+0x15/0xb0 [ 122.869295][ T7976] ? lock_release+0x4b/0x3e0 [ 122.869325][ T7976] ? __pfx___ip6_append_data+0x10/0x10 [ 122.869351][ T7976] ? ip6_setup_cork+0xa1c/0x10e0 [ 122.869376][ T7976] ? rcu_is_watching+0x15/0xb0 [ 122.869395][ T7976] ip6_make_skb+0x2ce/0x410 [ 122.869421][ T7976] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 122.869446][ T7976] ? __pfx_ip6_make_skb+0x10/0x10 [ 122.869478][ T7976] ? udpv6_sendmsg+0x16f1/0x24b0 [ 122.869503][ T7976] udpv6_sendmsg+0x1b78/0x24b0 [ 122.869532][ T7976] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 122.869557][ T7976] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 122.869583][ T7976] ? __pfx___might_resched+0x10/0x10 [ 122.869608][ T7976] ? aa_sk_perm+0x81e/0x950 [ 122.869636][ T7976] ? unwind_next_frame+0xa5/0x2390 [ 122.869661][ T7976] ? inet_send_prepare+0x5c/0x270 [ 122.869687][ T7976] ? inet6_sendmsg+0xe4/0x120 [ 122.869707][ T7976] __sock_sendmsg+0xe5/0x270 [ 122.869732][ T7976] ____sys_sendmsg+0x52d/0x830 [ 122.869755][ T7976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.869779][ T7976] ? import_iovec+0x74/0xa0 [ 122.869803][ T7976] ___sys_sendmsg+0x21f/0x2a0 [ 122.869823][ T7976] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.869845][ T7976] ? kstrtouint+0x6e/0xe0 [ 122.869884][ T7976] ? __fget_files+0x2a/0x420 [ 122.869900][ T7976] ? __fget_files+0x3a0/0x420 [ 122.869921][ T7976] __sys_sendmmsg+0x227/0x430 [ 122.869943][ T7976] ? __pfx___sys_sendmmsg+0x10/0x10 [ 122.869970][ T7976] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 122.870000][ T7976] ? ksys_write+0x22a/0x250 [ 122.870026][ T7976] ? __pfx_ksys_write+0x10/0x10 [ 122.870048][ T7976] ? rcu_is_watching+0x15/0xb0 [ 122.870068][ T7976] __x64_sys_sendmmsg+0xa0/0xc0 [ 122.870090][ T7976] do_syscall_64+0xfa/0x3b0 [ 122.870108][ T7976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.870127][ T7976] ? clear_bhb_loop+0x60/0xb0 [ 122.870147][ T7976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.870166][ T7976] RIP: 0033:0x7fa575b8ebe9 [ 122.870182][ T7976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.870200][ T7976] RSP: 002b:00007fa576969038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 122.870221][ T7976] RAX: ffffffffffffffda RBX: 00007fa575db5fa0 RCX: 00007fa575b8ebe9 [ 122.870236][ T7976] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 122.870248][ T7976] RBP: 00007fa576969090 R08: 0000000000000000 R09: 0000000000000000 [ 122.870261][ T7976] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 122.870273][ T7976] R13: 00007fa575db6038 R14: 00007fa575db5fa0 R15: 00007fff3cef6468 [ 122.870294][ T7976] [ 122.951872][ T7986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.587'. [ 123.048596][ T7974] syzkaller0: entered promiscuous mode [ 123.261643][ T7974] syzkaller0: entered allmulticast mode [ 123.397842][ T7986] IPv6: sit2: Disabled Multicast RS [ 123.441087][ T7986] sit2: entered allmulticast mode [ 123.889117][ T7981] lo speed is unknown, defaulting to 1000 [ 123.898373][ T7981] lo speed is unknown, defaulting to 1000 [ 124.287844][ T8011] netlink: 84 bytes leftover after parsing attributes in process `syz.1.596'. [ 124.305081][ T8011] netlink: 84 bytes leftover after parsing attributes in process `syz.1.596'. [ 124.326219][ T8011] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 124.363081][ T8016] netlink: 'syz.4.598': attribute type 8 has an invalid length. [ 124.749547][ T8037] __nla_validate_parse: 1 callbacks suppressed [ 124.749568][ T8037] netlink: 40 bytes leftover after parsing attributes in process `syz.1.604'. [ 125.806286][ T8053] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 125.866979][ T8056] netlink: 44 bytes leftover after parsing attributes in process `syz.3.611'. [ 125.925046][ T8062] netlink: 'syz.1.613': attribute type 11 has an invalid length. [ 126.074929][ T8071] lo speed is unknown, defaulting to 1000 [ 126.082745][ T8071] lo speed is unknown, defaulting to 1000 [ 126.151393][ T8075] lo speed is unknown, defaulting to 1000 [ 126.197965][ T8081] lo speed is unknown, defaulting to 1000 [ 126.385596][ T8075] lo speed is unknown, defaulting to 1000 [ 126.649401][ T8081] lo speed is unknown, defaulting to 1000 [ 126.697275][ T8088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.617'. [ 127.053726][ T8094] tipc: New replicast peer: 0.0.0.0 [ 127.066469][ T8094] tipc: Enabled bearer , priority 10 [ 127.081290][ T8095] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 127.100046][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'. [ 127.217723][ T8098] netlink: 260 bytes leftover after parsing attributes in process `syz.2.620'. [ 128.260839][ T8111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.622'. [ 128.382820][ T8116] tipc: Enabled bearer , priority 0 [ 128.426887][ T8116] syzkaller0: entered promiscuous mode [ 128.441509][ T8116] syzkaller0: entered allmulticast mode [ 128.473806][ T8116] tipc: Resetting bearer [ 128.482964][ T8114] tipc: Resetting bearer [ 128.494742][ T8114] tipc: Disabling bearer [ 130.177474][ T8158] netlink: 44 bytes leftover after parsing attributes in process `syz.3.641'. [ 130.246447][ T8161] netlink: 'syz.2.640': attribute type 13 has an invalid length. [ 130.260523][ T8160] _ÐZ`Ô€@: entered promiscuous mode [ 130.271118][ T8161] netlink: 'syz.2.640': attribute type 17 has an invalid length. [ 130.309715][ T8161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.428168][ T8164] lo speed is unknown, defaulting to 1000 [ 130.446866][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 130.477250][ T8161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.509733][ T8164] lo speed is unknown, defaulting to 1000 [ 130.607252][ T8179] lo speed is unknown, defaulting to 1000 [ 130.647582][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'. [ 130.864940][ T8179] lo speed is unknown, defaulting to 1000 [ 130.937712][ T8197] lo speed is unknown, defaulting to 1000 [ 131.023268][ T8201] netlink: 'syz.1.656': attribute type 1 has an invalid length. [ 131.034862][ T8201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.656'. [ 131.122531][ T8197] lo speed is unknown, defaulting to 1000 [ 131.162742][ T8204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.657'. [ 131.547303][ T8220] netlink: 84 bytes leftover after parsing attributes in process `syz.0.663'. [ 131.574629][ T8220] netlink: 84 bytes leftover after parsing attributes in process `syz.0.663'. [ 131.585246][ T8220] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 131.690327][ T8224] netlink: 40 bytes leftover after parsing attributes in process `syz.4.664'. [ 131.817071][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 131.915690][ T8236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.669'. [ 131.966656][ T8238] vlan3: entered allmulticast mode [ 132.030940][ T30] audit: type=1800 audit(1756440270.244:2): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.668" name="memory.events" dev="tmpfs" ino=569 res=0 errno=0 [ 132.614941][ T8267] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 132.981271][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.987766][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.039014][ T8290] lo speed is unknown, defaulting to 1000 [ 133.061735][ T8290] lo speed is unknown, defaulting to 1000 [ 133.318156][ T8306] lo speed is unknown, defaulting to 1000 [ 133.396782][ T8306] lo speed is unknown, defaulting to 1000 [ 134.301378][ T8341] netlink: 'syz.2.702': attribute type 21 has an invalid length. [ 134.354679][ T8341] netlink: 'syz.2.702': attribute type 4 has an invalid length. [ 134.766592][ T8350] netlink: 'syz.4.707': attribute type 1 has an invalid length. [ 134.819187][ T8348] lo speed is unknown, defaulting to 1000 [ 134.827169][ T8348] lo speed is unknown, defaulting to 1000 [ 135.855464][ T8403] __nla_validate_parse: 11 callbacks suppressed [ 135.855488][ T8403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.723'. [ 136.048112][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.730'. [ 136.086860][ T8413] netlink: 'syz.0.727': attribute type 5 has an invalid length. [ 136.116981][ T8420] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144) [ 136.324841][ T8426] syzkaller1: entered promiscuous mode [ 136.382155][ T8426] syzkaller1: entered allmulticast mode [ 136.500602][ T8413] lo speed is unknown, defaulting to 1000 [ 136.516068][ T8413] lo speed is unknown, defaulting to 1000 [ 136.604072][ T8439] vlan2: entered allmulticast mode [ 136.619479][ T8439] bridge_slave_0: entered allmulticast mode [ 136.742683][ T8442] netlink: 'syz.1.737': attribute type 6 has an invalid length. [ 136.823764][ T8442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.737'. [ 136.976207][ T8452] netlink: 40 bytes leftover after parsing attributes in process `syz.1.740'. [ 137.279389][ T8470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.746'. [ 137.299242][ T8472] netlink: 'syz.1.747': attribute type 10 has an invalid length. [ 137.308830][ T8472] macvlan1: entered allmulticast mode [ 137.328970][ T8472] veth1_vlan: entered allmulticast mode [ 137.338485][ T8472] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 137.471333][ T8475] vlan3: entered allmulticast mode [ 137.514459][ T8482] netlink: 'syz.3.750': attribute type 1 has an invalid length. [ 137.538094][ T8482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.750'. [ 137.547474][ T8482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.750'. [ 138.504122][ T8510] netlink: 'syz.0.761': attribute type 4 has an invalid length. [ 138.522831][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'. [ 138.528460][ T8510] netlink: 17 bytes leftover after parsing attributes in process `syz.0.761'. [ 138.836154][ T8533] batadv_slave_1: entered promiscuous mode [ 138.862366][ T8531] lo speed is unknown, defaulting to 1000 [ 138.869130][ T8531] lo speed is unknown, defaulting to 1000 [ 138.870553][ T8533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.770'. [ 138.927588][ T8532] batadv_slave_1: left promiscuous mode [ 139.580286][ T8570] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 139.640510][ T8572] geneve2: entered promiscuous mode [ 140.421211][ T8611] syzkaller1: entered promiscuous mode [ 140.469891][ T8611] syzkaller1: entered allmulticast mode [ 140.473789][ T8615] netlink: 'syz.2.796': attribute type 83 has an invalid length. [ 140.915756][ T8647] __nla_validate_parse: 9 callbacks suppressed [ 140.915776][ T8647] netlink: 40 bytes leftover after parsing attributes in process `syz.2.810'. [ 140.992189][ T8652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.812'. [ 141.024904][ T8653] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 141.180579][ T8664] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 141.217283][ T8666] netlink: 'syz.1.818': attribute type 7 has an invalid length. [ 141.226137][ T8666] netlink: 'syz.1.818': attribute type 8 has an invalid length. [ 141.233969][ T8666] netlink: 'syz.1.818': attribute type 15 has an invalid length. [ 141.489596][ T8682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.822'. [ 144.699942][ T8693] netlink: 44 bytes leftover after parsing attributes in process `syz.4.826'. [ 144.779214][ T8701] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.836099][ T8704] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 144.858400][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 144.859844][ T8701] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.896820][ T8704] bridge1: entered promiscuous mode [ 144.904438][ T8704] bridge1: entered allmulticast mode [ 144.925310][ T8704] team0: Port device bridge1 added [ 144.955353][ T8701] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.015273][ T8701] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.058895][ T8722] netlink: 40 bytes leftover after parsing attributes in process `syz.4.834'. [ 145.144592][ T8726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.836'. [ 145.189935][ T6594] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.238610][ T8730] netlink: 36 bytes leftover after parsing attributes in process `syz.1.838'. [ 145.240796][ T1342] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.255366][ T8728] netlink: 48 bytes leftover after parsing attributes in process `syz.2.837'. [ 145.279069][ T1342] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.300890][ T1342] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.087044][ T8743] netlink: 44 bytes leftover after parsing attributes in process `syz.1.842'. [ 146.187626][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'. [ 146.206310][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'. [ 146.231120][ T8752] netlink: 40 bytes leftover after parsing attributes in process `syz.4.847'. [ 146.373448][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 146.480532][ T8761] lo speed is unknown, defaulting to 1000 [ 146.487820][ T8761] lo speed is unknown, defaulting to 1000 [ 147.458601][ T8798] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.463141][ T8801] lo speed is unknown, defaulting to 1000 [ 147.486966][ T8801] lo speed is unknown, defaulting to 1000 [ 147.491868][ T8808] netlink: 44 bytes leftover after parsing attributes in process `syz.2.857'. [ 147.840146][ T8819] lo speed is unknown, defaulting to 1000 [ 147.848797][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.862'. [ 147.898860][ T8819] lo speed is unknown, defaulting to 1000 [ 147.918468][ T8834] vlan3: entered promiscuous mode [ 147.925768][ T8834] macvtap0: entered promiscuous mode [ 147.970158][ T8838] netlink: 104 bytes leftover after parsing attributes in process `syz.3.865'. [ 148.040018][ T8832] bond2 (unregistering): Released all slaves [ 149.303734][ T8862] netlink: 40 bytes leftover after parsing attributes in process `syz.1.871'. [ 149.422734][ T8866] netlink: 72 bytes leftover after parsing attributes in process `syz.2.873'. [ 149.554218][ T8878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.625066][ T8885] netlink: 'syz.1.879': attribute type 27 has an invalid length. [ 149.811642][ T8894] siw: device registration error -23 [ 150.012393][ T8899] lo speed is unknown, defaulting to 1000 [ 150.021752][ T8899] lo speed is unknown, defaulting to 1000 [ 150.396065][ T30] audit: type=1800 audit(1756440288.614:3): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.883" name="memory.events" dev="tmpfs" ino=1015 res=0 errno=0 [ 151.624914][ T8933] tipc: Enabled bearer , priority 0 [ 151.634231][ T8933] syzkaller0: entered promiscuous mode [ 151.639827][ T8933] syzkaller0: entered allmulticast mode [ 151.674534][ T8941] netlink: 'syz.2.902': attribute type 1 has an invalid length. [ 151.689253][ T8941] __nla_validate_parse: 5 callbacks suppressed [ 151.689274][ T8941] netlink: 140 bytes leftover after parsing attributes in process `syz.2.902'. [ 151.719244][ T8941] netlink: 96 bytes leftover after parsing attributes in process `syz.2.902'. [ 151.731115][ T8933] tipc: Resetting bearer [ 151.762205][ T8944] netlink: 56 bytes leftover after parsing attributes in process `syz.0.894'. [ 152.021375][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.897'. [ 152.035025][ T8964] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.901'. [ 152.116167][ T8965] bond1 (unregistering): Released all slaves [ 152.711109][ T6099] tipc: Node number set to 4173228286 [ 153.349717][ T9017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.376844][ T9016] netlink: 'syz.0.908': attribute type 1 has an invalid length. [ 153.378786][ T9020] netlink: 40 bytes leftover after parsing attributes in process `syz.4.910'. [ 153.390015][ T9016] netlink: 184 bytes leftover after parsing attributes in process `syz.0.908'. [ 153.498487][ T9025] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.511835][ T9029] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.525072][ T9031] netlink: 104 bytes leftover after parsing attributes in process `syz.0.915'. [ 153.579628][ T9031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.587997][ T9031] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 153.608700][ T9040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.649235][ T9039] FAULT_INJECTION: forcing a failure. [ 153.649235][ T9039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.669175][ T9039] CPU: 1 UID: 0 PID: 9039 Comm: syz.4.918 Not tainted syzkaller #0 PREEMPT(full) [ 153.669206][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.669217][ T9039] Call Trace: [ 153.669224][ T9039] [ 153.669232][ T9039] dump_stack_lvl+0x189/0x250 [ 153.669262][ T9039] ? __pfx____ratelimit+0x10/0x10 [ 153.669290][ T9039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.669312][ T9039] ? __pfx__printk+0x10/0x10 [ 153.669338][ T9039] ? ktime_get+0x3e/0x1f0 [ 153.669360][ T9039] ? rcu_is_watching+0x15/0xb0 [ 153.669380][ T9039] should_fail_ex+0x414/0x560 [ 153.669407][ T9039] _copy_to_user+0x31/0xb0 [ 153.669429][ T9039] bpf_test_finish+0x1ab/0x700 [ 153.669462][ T9039] ? __pfx_bpf_test_finish+0x10/0x10 [ 153.669487][ T9039] ? rcu_is_watching+0x15/0xb0 [ 153.669518][ T9039] ? lock_release+0x4b/0x3e0 [ 153.669549][ T9039] bpf_prog_test_run_flow_dissector+0x44e/0x5c0 [ 153.669578][ T9039] ? lock_release+0x4b/0x3e0 [ 153.669609][ T9039] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 153.669639][ T9039] ? rcu_is_watching+0x15/0xb0 [ 153.669660][ T9039] ? __fget_files+0x2a/0x420 [ 153.669679][ T9039] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 153.669708][ T9039] bpf_prog_test_run+0x2c7/0x340 [ 153.669737][ T9039] __sys_bpf+0x581/0x870 [ 153.669759][ T9039] ? __pfx___sys_bpf+0x10/0x10 [ 153.669788][ T9039] ? ksys_write+0x22a/0x250 [ 153.669813][ T9039] ? __pfx_ksys_write+0x10/0x10 [ 153.669834][ T9039] ? rcu_is_watching+0x15/0xb0 [ 153.669856][ T9039] __x64_sys_bpf+0x7c/0x90 [ 153.669877][ T9039] do_syscall_64+0xfa/0x3b0 [ 153.669896][ T9039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.669914][ T9039] ? clear_bhb_loop+0x60/0xb0 [ 153.669935][ T9039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.669953][ T9039] RIP: 0033:0x7f35b118ebe9 [ 153.669971][ T9039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.669987][ T9039] RSP: 002b:00007f35b1fbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.670009][ T9039] RAX: ffffffffffffffda RBX: 00007f35b13b5fa0 RCX: 00007f35b118ebe9 [ 153.670022][ T9039] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 153.670041][ T9039] RBP: 00007f35b1fbe090 R08: 0000000000000000 R09: 0000000000000000 [ 153.670052][ T9039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.670063][ T9039] R13: 00007f35b13b6038 R14: 00007f35b13b5fa0 R15: 00007fff4ff77688 [ 153.670084][ T9039] [ 153.957534][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'. [ 153.968769][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'. [ 154.316619][ T9062] can: request_module (can-proto-3) failed. [ 154.715343][ T9094] lo speed is unknown, defaulting to 1000 [ 154.729119][ T9094] lo speed is unknown, defaulting to 1000 [ 154.804904][ T9097] lo speed is unknown, defaulting to 1000 [ 155.222999][ T9097] lo speed is unknown, defaulting to 1000 [ 155.612201][ T9133] tipc: Enabling of bearer rejected, failed to enable media [ 156.595251][ T9178] FAULT_INJECTION: forcing a failure. [ 156.595251][ T9178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.609330][ T9178] CPU: 1 UID: 0 PID: 9178 Comm: syz.0.964 Not tainted syzkaller #0 PREEMPT(full) [ 156.609368][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.609379][ T9178] Call Trace: [ 156.609386][ T9178] [ 156.609393][ T9178] dump_stack_lvl+0x189/0x250 [ 156.609421][ T9178] ? __pfx____ratelimit+0x10/0x10 [ 156.609449][ T9178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.609470][ T9178] ? __pfx__printk+0x10/0x10 [ 156.609496][ T9178] ? ktime_get+0x3e/0x1f0 [ 156.609518][ T9178] ? rcu_is_watching+0x15/0xb0 [ 156.609537][ T9178] should_fail_ex+0x414/0x560 [ 156.609564][ T9178] _copy_to_user+0x31/0xb0 [ 156.609585][ T9178] bpf_test_finish+0x56f/0x700 [ 156.609617][ T9178] ? __pfx_bpf_test_finish+0x10/0x10 [ 156.609642][ T9178] ? rcu_is_watching+0x15/0xb0 [ 156.609659][ T9178] ? lock_release+0x4b/0x3e0 [ 156.609689][ T9178] bpf_prog_test_run_flow_dissector+0x44e/0x5c0 [ 156.609718][ T9178] ? lock_release+0x4b/0x3e0 [ 156.609748][ T9178] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 156.609778][ T9178] ? rcu_is_watching+0x15/0xb0 [ 156.609799][ T9178] ? __fget_files+0x2a/0x420 [ 156.609818][ T9178] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 156.609848][ T9178] bpf_prog_test_run+0x2c7/0x340 [ 156.609875][ T9178] __sys_bpf+0x581/0x870 [ 156.609899][ T9178] ? __pfx___sys_bpf+0x10/0x10 [ 156.609928][ T9178] ? ksys_write+0x22a/0x250 [ 156.609952][ T9178] ? __pfx_ksys_write+0x10/0x10 [ 156.609974][ T9178] ? rcu_is_watching+0x15/0xb0 [ 156.609994][ T9178] __x64_sys_bpf+0x7c/0x90 [ 156.610015][ T9178] do_syscall_64+0xfa/0x3b0 [ 156.610032][ T9178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.610050][ T9178] ? clear_bhb_loop+0x60/0xb0 [ 156.610072][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.610089][ T9178] RIP: 0033:0x7f722218ebe9 [ 156.610106][ T9178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.610122][ T9178] RSP: 002b:00007f7222f65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.610144][ T9178] RAX: ffffffffffffffda RBX: 00007f72223b5fa0 RCX: 00007f722218ebe9 [ 156.610158][ T9178] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 156.610171][ T9178] RBP: 00007f7222f65090 R08: 0000000000000000 R09: 0000000000000000 [ 156.610182][ T9178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.610193][ T9178] R13: 00007f72223b6038 R14: 00007f72223b5fa0 R15: 00007ffc78349418 [ 156.610214][ T9178] [ 156.879951][ T9182] __nla_validate_parse: 5 callbacks suppressed [ 156.879974][ T9182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.966'. [ 156.942216][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.966'. [ 157.278285][ T9207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.973'. [ 157.281038][ T9201] block nbd2: server does not support multiple connections per device. [ 157.297632][ T9201] block nbd2: shutting down sockets [ 157.299792][ T9207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.973'. [ 157.450467][ T9214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.976'. [ 157.596121][ T9221] FAULT_INJECTION: forcing a failure. [ 157.596121][ T9221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.644920][ T9221] CPU: 1 UID: 0 PID: 9221 Comm: syz.2.978 Not tainted syzkaller #0 PREEMPT(full) [ 157.644953][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.644965][ T9221] Call Trace: [ 157.644973][ T9221] [ 157.644981][ T9221] dump_stack_lvl+0x189/0x250 [ 157.645012][ T9221] ? __pfx____ratelimit+0x10/0x10 [ 157.645041][ T9221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.645064][ T9221] ? __pfx__printk+0x10/0x10 [ 157.645093][ T9221] ? rcu_is_watching+0x15/0xb0 [ 157.645114][ T9221] should_fail_ex+0x414/0x560 [ 157.645141][ T9221] _copy_to_user+0x31/0xb0 [ 157.645165][ T9221] simple_read_from_buffer+0xe1/0x170 [ 157.645195][ T9221] proc_fail_nth_read+0x1b3/0x220 [ 157.645218][ T9221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.645241][ T9221] ? rw_verify_area+0x2a6/0x4d0 [ 157.645266][ T9221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.645287][ T9221] vfs_read+0x1fd/0xa30 [ 157.645310][ T9221] ? fdget_pos+0x247/0x320 [ 157.645328][ T9221] ? __pfx___mutex_lock+0x10/0x10 [ 157.645347][ T9221] ? __pfx_vfs_read+0x10/0x10 [ 157.645375][ T9221] ? __fget_files+0x3a0/0x420 [ 157.645391][ T9221] ? __fget_files+0x2a/0x420 [ 157.645411][ T9221] ksys_read+0x145/0x250 [ 157.645449][ T9221] ? __pfx_ksys_read+0x10/0x10 [ 157.645472][ T9221] ? rcu_is_watching+0x15/0xb0 [ 157.645492][ T9221] ? rcu_is_watching+0x15/0xb0 [ 157.645511][ T9221] do_syscall_64+0xfa/0x3b0 [ 157.645530][ T9221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.645549][ T9221] ? clear_bhb_loop+0x60/0xb0 [ 157.645570][ T9221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.645588][ T9221] RIP: 0033:0x7f4bcfb8d5fc [ 157.645607][ T9221] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 157.645623][ T9221] RSP: 002b:00007f4bd0a94030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.645646][ T9221] RAX: ffffffffffffffda RBX: 00007f4bcfdb5fa0 RCX: 00007f4bcfb8d5fc [ 157.645661][ T9221] RDX: 000000000000000f RSI: 00007f4bd0a940a0 RDI: 0000000000000005 [ 157.645672][ T9221] RBP: 00007f4bd0a94090 R08: 0000000000000000 R09: 0000000000000000 [ 157.645683][ T9221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.645695][ T9221] R13: 00007f4bcfdb6038 R14: 00007f4bcfdb5fa0 R15: 00007ffd5a6c72f8 [ 157.645722][ T9221] [ 158.135293][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 158.355996][ T9257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.992'. [ 158.675543][ T9281] lo speed is unknown, defaulting to 1000 [ 158.682886][ T9281] lo speed is unknown, defaulting to 1000 [ 159.914334][ T9300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1005'. [ 159.924606][ T9304] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1007'. [ 159.946672][ T9309] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1009'. [ 161.997500][ T9355] __nla_validate_parse: 2 callbacks suppressed [ 161.997522][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1025'. [ 163.780252][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 163.792862][ T9396] netlink: 'syz.1.1038': attribute type 6 has an invalid length. [ 164.100367][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1044'. [ 164.348580][ T9431] lo speed is unknown, defaulting to 1000 [ 164.389147][ T9431] lo speed is unknown, defaulting to 1000 [ 164.447755][ T9435] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 164.457455][ T9435] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1052'. [ 164.467510][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 164.663026][ T9441] lo speed is unknown, defaulting to 1000 [ 164.675270][ T9441] lo speed is unknown, defaulting to 1000 [ 165.005297][ T9457] syz_tun: entered allmulticast mode [ 165.135760][ T9457] syz_tun: left allmulticast mode [ 165.657694][ T9496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1069'. [ 165.700136][ T9499] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1070'. [ 166.298865][ T9534] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1082'. [ 166.356191][ T9536] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1083'. [ 166.400213][ T9540] netlink: 'syz.0.1084': attribute type 1 has an invalid length. [ 166.408242][ T9540] netlink: 'syz.0.1084': attribute type 1 has an invalid length. [ 166.419541][ T9540] netlink: 'syz.0.1084': attribute type 1 has an invalid length. [ 166.429066][ T9540] netlink: 'syz.0.1084': attribute type 1 has an invalid length. [ 166.444270][ T9540] vlan3: entered allmulticast mode [ 166.572528][ T9542] netlink: 'syz.0.1085': attribute type 3 has an invalid length. [ 166.598254][ T9542] syz_tun: entered allmulticast mode [ 166.675236][ T9545] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1085'. [ 166.804752][ T9552] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 166.835422][ T9554] ip6gretap0: entered promiscuous mode [ 166.845648][ T9554] macsec1: entered allmulticast mode [ 166.865017][ T9554] ip6gretap0: entered allmulticast mode [ 166.897824][ T9554] ip6gretap0: left allmulticast mode [ 166.925420][ T9554] ip6gretap0: left promiscuous mode [ 166.997185][ T9541] syz_tun: left allmulticast mode [ 167.141558][ T9551] lo speed is unknown, defaulting to 1000 [ 167.158226][ T9551] lo speed is unknown, defaulting to 1000 [ 167.209619][ T9555] macvtap1: entered allmulticast mode [ 167.225650][ T9555] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 167.245182][ T9578] __nla_validate_parse: 1 callbacks suppressed [ 167.245201][ T9578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1097'. [ 167.262898][ T9555] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 167.488879][ T9587] tipc: Enabling of bearer rejected, already enabled [ 167.518750][ T9591] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1099'. [ 167.529917][ T9591] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1099'. [ 167.542796][ T9591] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 168.021988][ T9619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1110'. [ 168.035528][ T9619] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1110'. [ 168.052910][ T9619] vlan0: entered promiscuous mode [ 168.140885][ T9627] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1113'. [ 168.157613][ T9627] vlan3: entered allmulticast mode [ 168.448707][ T9639] lo speed is unknown, defaulting to 1000 [ 168.473286][ T9639] lo speed is unknown, defaulting to 1000 [ 168.701412][ T9653] netlink: 'syz.2.1120': attribute type 21 has an invalid length. [ 168.717321][ T9653] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1120'. [ 168.729402][ T9653] netlink: 'syz.2.1120': attribute type 4 has an invalid length. [ 168.738643][ T9653] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1120'. [ 169.015357][ T9672] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1126'. [ 169.072680][ T9672] vlan2: entered allmulticast mode [ 169.220379][ T9680] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1130'. [ 169.230138][ T9680] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 170.026638][ T9716] vlan3: entered allmulticast mode [ 170.067967][ T9718] lo speed is unknown, defaulting to 1000 [ 170.094570][ T9718] lo speed is unknown, defaulting to 1000 [ 170.917499][ T9720] netlink: 'syz.1.1142': attribute type 13 has an invalid length. [ 170.960822][ T9720] netlink: 'syz.1.1142': attribute type 17 has an invalid length. [ 171.104074][ T9720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.512914][ T9761] lo speed is unknown, defaulting to 1000 [ 171.568704][ T9761] lo speed is unknown, defaulting to 1000 [ 171.756739][ T9777] vlan3: entered allmulticast mode [ 171.780458][ T9778] netlink: 'syz.1.1162': attribute type 10 has an invalid length. [ 171.813922][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.821518][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.835272][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.842590][ T9778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.850058][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.857389][ T9778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.879633][ T9778] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 171.954959][ T9781] bridge_slave_1: left allmulticast mode [ 171.978977][ T9781] bridge_slave_1: left promiscuous mode [ 172.026445][ T9781] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.057134][ T9781] bridge_slave_0: left allmulticast mode [ 172.077616][ T9781] bridge_slave_0: left promiscuous mode [ 172.095849][ T9781] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.173095][ T9781] bond0: (slave bridge0): Releasing backup interface [ 172.271357][ T9806] __nla_validate_parse: 8 callbacks suppressed [ 172.271378][ T9806] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1173'. [ 172.483698][ T9818] netlink: 'syz.2.1177': attribute type 13 has an invalid length. [ 172.516722][ T9821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1178'. [ 172.529065][ T9818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1177'. [ 172.594797][ T9818] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 172.747535][ T9834] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1181'. [ 172.776072][ T9834] vlan3: entered allmulticast mode [ 173.138365][ T9856] netlink: 'syz.3.1186': attribute type 21 has an invalid length. [ 173.160606][ T9856] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1186'. [ 173.180923][ T9856] netlink: 'syz.3.1186': attribute type 4 has an invalid length. [ 173.209320][ T9856] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1186'. [ 173.421204][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1191'. [ 173.502558][ T9866] syzkaller0: entered promiscuous mode [ 173.560885][ T9866] syzkaller0: entered allmulticast mode [ 173.605584][ T9867] tipc: Enabled bearer , priority 0 [ 173.658788][ T9864] tipc: Resetting bearer [ 173.687128][ T9864] tipc: Disabling bearer [ 173.719515][ T9871] netlink: 'syz.1.1193': attribute type 4 has an invalid length. [ 173.728428][ T9869] tipc: Enabling of bearer rejected, failed to enable media [ 173.763493][ T10] lo speed is unknown, defaulting to 1000 [ 173.773714][ T10] syz2: Port: 1 Link DOWN [ 173.789351][ T9871] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1193'. [ 173.898076][ T9877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1193'. [ 174.156627][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'. [ 174.644617][ T9920] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 175.253650][ T9955] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 175.528071][ T9971] vlan2: entered allmulticast mode [ 175.546525][ T9971] bridge_slave_0: entered allmulticast mode [ 175.933420][T10002] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 176.085783][T10016] vlan2: entered allmulticast mode [ 176.427716][T10032] netlink: 'syz.2.1250': attribute type 21 has an invalid length. [ 176.443668][T10024] bond1: (slave wlan0): Releasing active interface [ 176.450228][T10024] bond1: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 176.501385][T10024] vlan2: entered promiscuous mode [ 176.515653][T10024] bond1: (slave vlan2): Releasing active interface [ 176.530419][T10024] vlan2: left promiscuous mode [ 176.537657][T10024] veth1: left promiscuous mode [ 176.545246][T10024] veth5: left allmulticast mode [ 176.550383][T10024] veth5: left promiscuous mode [ 176.555581][T10024] bridge1: port 1(veth5) entered disabled state [ 176.562433][T10040] netlink: 'syz.3.1245': attribute type 10 has an invalid length. [ 176.574219][T10024] bond3: (slave ip6gretap1): Releasing backup interface [ 176.613258][T10040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.653870][T10040] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 176.699263][T10045] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 177.246067][T10081] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 177.404766][T10090] vlan2: entered allmulticast mode [ 177.575420][T10099] bond0: Error: Cannot enslave bond to itself. [ 177.586394][T10099] __nla_validate_parse: 25 callbacks suppressed [ 177.586428][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 177.602330][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1277'. [ 177.786273][T10112] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1282'. [ 177.998788][T10125] vlan2: entered allmulticast mode [ 178.067679][T10131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1289'. [ 178.151703][T10134] tipc: Enabling of bearer rejected, already enabled [ 178.174046][T10135] siw: device registration error -23 [ 178.182855][T10135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1289'. [ 178.430015][T10149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1296'. [ 178.812922][ T30] audit: type=1107 audit(1756440317.034:4): pid=10165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 178.827514][T10166] netlink: 'syz.0.1303': attribute type 1 has an invalid length. [ 179.003763][T10166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.023521][T10174] macvlan2: entered promiscuous mode [ 179.039628][T10174] macvlan2: entered allmulticast mode [ 179.066006][T10174] bond2: entered promiscuous mode [ 179.076705][T10174] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.225161][T10174] bond2: left promiscuous mode [ 179.970508][T10211] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1316'. [ 180.848131][T10223] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1320'. [ 180.873592][T10229] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1321'. [ 180.981361][T10232] ip6gre1: entered allmulticast mode [ 181.056801][T10240] syzkaller0: left promiscuous mode [ 181.070208][T10240] syzkaller0: left allmulticast mode [ 181.216108][T10250] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1332'. [ 181.248068][T10252] netlink: zone id is out of range [ 181.260448][T10252] netlink: zone id is out of range [ 181.285221][T10252] netlink: zone id is out of range [ 181.290654][T10252] netlink: zone id is out of range [ 181.298525][T10252] netlink: zone id is out of range [ 181.306782][T10252] netlink: zone id is out of range [ 181.316307][T10252] netlink: zone id is out of range [ 181.327589][T10252] netlink: zone id is out of range [ 181.334564][T10252] netlink: zone id is out of range [ 181.336686][T10257] tipc: Enabled bearer , priority 0 [ 181.343734][T10252] netlink: zone id is out of range [ 181.406411][T10252] syzkaller0: entered promiscuous mode [ 181.419921][T10252] syzkaller0: entered allmulticast mode [ 181.472707][T10252] tipc: Resetting bearer [ 181.510171][T10251] tipc: Resetting bearer [ 181.737087][T10251] tipc: Disabling bearer [ 181.754497][T10264] bridge_slave_0: left promiscuous mode [ 181.830078][T10264] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.923178][T10264] bridge_slave_1: left allmulticast mode [ 181.968476][T10264] bridge_slave_1: left promiscuous mode [ 182.013245][T10264] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.091334][T10264] bond0: (slave bond_slave_0): Releasing backup interface [ 182.176810][T10268] netlink: 'syz.2.1334': attribute type 10 has an invalid length. [ 182.258190][T10264] bond0: (slave bond_slave_1): Releasing backup interface [ 182.294693][T10264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.360901][T10264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.379900][T10264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.398812][T10264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.636735][T10301] __nla_validate_parse: 6 callbacks suppressed [ 182.636756][T10301] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1349'. [ 182.665280][T10305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1348'. [ 182.706552][T10310] vlan2: entered allmulticast mode [ 182.878538][T10327] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.911727][T10327] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.009474][T10327] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.030209][T10327] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.070555][T10338] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1359'. [ 183.136380][T10327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.147026][T10327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.240436][T10327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.252664][T10327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.307646][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.652314][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.726984][ T6585] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.740865][ T6585] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.803930][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.843418][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.887129][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.920765][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.225731][T10362] netlink: 'syz.1.1362': attribute type 1 has an invalid length. [ 184.250916][T10362] netlink: 'syz.1.1362': attribute type 4 has an invalid length. [ 184.263704][T10362] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1362'. [ 184.290024][T10370] netlink: 'syz.1.1362': attribute type 1 has an invalid length. [ 184.308508][T10374] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1370'. [ 184.317882][T10370] netlink: 'syz.1.1362': attribute type 4 has an invalid length. [ 184.326447][T10370] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1362'. [ 184.338921][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'. [ 184.354676][T10375] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1369'. [ 184.366615][T10377] netlink: 'syz.3.1371': attribute type 15 has an invalid length. [ 184.376924][T10375] gretap1: entered promiscuous mode [ 184.438575][T10384] 8021q: VLANs not supported on caif0 [ 185.939110][T10429] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1389'. [ 186.016660][ T30] audit: type=1107 audit(1756440324.234:5): pid=10433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='x.§' [ 186.112299][T10448] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1394'. [ 186.210023][T10454] FAULT_INJECTION: forcing a failure. [ 186.210023][T10454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.264282][T10454] CPU: 0 UID: 0 PID: 10454 Comm: syz.3.1396 Not tainted syzkaller #0 PREEMPT(full) [ 186.264314][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.264326][T10454] Call Trace: [ 186.264333][T10454] [ 186.264341][T10454] dump_stack_lvl+0x189/0x250 [ 186.264370][T10454] ? __pfx____ratelimit+0x10/0x10 [ 186.264398][T10454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.264421][T10454] ? __pfx__printk+0x10/0x10 [ 186.264450][T10454] ? rcu_is_watching+0x15/0xb0 [ 186.264472][T10454] should_fail_ex+0x414/0x560 [ 186.264500][T10454] _copy_to_user+0x31/0xb0 [ 186.264523][T10454] simple_read_from_buffer+0xe1/0x170 [ 186.264553][T10454] proc_fail_nth_read+0x1b3/0x220 [ 186.264577][T10454] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.264598][T10454] ? rw_verify_area+0x2a6/0x4d0 [ 186.264622][T10454] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.264643][T10454] vfs_read+0x1fd/0xa30 [ 186.264667][T10454] ? fdget_pos+0x247/0x320 [ 186.264686][T10454] ? __pfx___mutex_lock+0x10/0x10 [ 186.264704][T10454] ? __pfx_vfs_read+0x10/0x10 [ 186.264731][T10454] ? __fget_files+0x3a0/0x420 [ 186.264747][T10454] ? __fget_files+0x2a/0x420 [ 186.264768][T10454] ksys_read+0x145/0x250 [ 186.264793][T10454] ? __pfx_ksys_read+0x10/0x10 [ 186.264819][T10454] ? rcu_is_watching+0x15/0xb0 [ 186.264839][T10454] do_syscall_64+0xfa/0x3b0 [ 186.264858][T10454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.264877][T10454] ? clear_bhb_loop+0x60/0xb0 [ 186.264897][T10454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.264916][T10454] RIP: 0033:0x7f499a38d5fc [ 186.264934][T10454] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 186.264952][T10454] RSP: 002b:00007f499b296030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.264975][T10454] RAX: ffffffffffffffda RBX: 00007f499a5b6090 RCX: 00007f499a38d5fc [ 186.264990][T10454] RDX: 000000000000000f RSI: 00007f499b2960a0 RDI: 0000000000000003 [ 186.265002][T10454] RBP: 00007f499b296090 R08: 0000000000000000 R09: 0000000000000000 [ 186.265015][T10454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.265028][T10454] R13: 00007f499a5b6128 R14: 00007f499a5b6090 R15: 00007ffe7369f098 [ 186.265050][T10454] [ 186.937816][ T30] audit: type=1107 audit(1756440325.154:6): pid=10474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='x.§' [ 187.344154][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.353425][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.384907][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.405931][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.846732][T10536] lo speed is unknown, defaulting to 1000 [ 187.855371][T10536] lo speed is unknown, defaulting to 1000 [ 187.913367][T10538] netlink: 'syz.3.1427': attribute type 1 has an invalid length. [ 187.933309][T10538] __nla_validate_parse: 9 callbacks suppressed [ 187.933331][T10538] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1427'. [ 187.994781][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 188.080021][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 188.095185][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 188.338659][T10570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1440'. [ 188.347512][T10569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1439'. [ 188.472813][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 188.796334][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 188.905027][T10602] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.966244][T10602] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.013381][T10608] bridge3: entered promiscuous mode [ 189.024458][T10608] bridge3: entered allmulticast mode [ 189.036745][T10608] team0: Port device bridge3 added [ 189.066807][T10602] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.085986][T10602] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.147572][T10602] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.158269][T10602] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.256417][T10602] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.268725][T10602] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.406796][T10633] net_ratelimit: 5 callbacks suppressed [ 189.406817][T10633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.431040][ T6596] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.454122][ T6596] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.480850][ T6596] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.499261][ T6596] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.518731][ T6596] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.533351][ T6596] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.544722][T10636] netlink: 'syz.3.1461': attribute type 3 has an invalid length. [ 189.574945][ T1342] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.592648][ T1342] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.609305][T10636] syz_tun: entered allmulticast mode [ 189.667862][T10644] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1461'. [ 189.916910][T10644] veth3: left promiscuous mode [ 189.947777][T10644] vlan2: left allmulticast mode [ 189.953240][T10644] veth1: left allmulticast mode [ 189.966828][T10644] sit2: left allmulticast mode [ 189.973812][T10644] ip6gre1: left allmulticast mode [ 189.983193][ T5934] lo speed is unknown, defaulting to 1000 [ 189.993816][ T5934] syz0: Port: 1 Link DOWN [ 190.043452][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.059270][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.083859][ T5934] lo speed is unknown, defaulting to 1000 [ 190.089872][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.110291][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.128628][T10635] syz_tun: left allmulticast mode [ 190.292367][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1474'. [ 190.503571][T10688] tipc: Enabling of bearer rejected, failed to enable media [ 190.654191][T10690] vlan2: entered allmulticast mode [ 190.805064][T10695] team0: Port device gtp2 added [ 190.932746][T10698] bridge: RTM_NEWNEIGH with invalid ether address [ 191.117848][ T6577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.143847][ T6577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.373077][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 191.373096][ T5859] Bluetooth: hci3: command 0x0406 tx timeout [ 191.373131][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 191.379693][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 191.470333][T10720] tipc: Enabled bearer , priority 0 [ 191.513344][T10720] syzkaller0: entered promiscuous mode [ 191.535720][T10720] syzkaller0: entered allmulticast mode [ 191.623294][T10720] tipc: Resetting bearer [ 191.639064][T10719] tipc: Resetting bearer [ 191.649243][T10731] netlink: 'syz.0.1495': attribute type 1 has an invalid length. [ 191.664783][T10731] netlink: 'syz.0.1495': attribute type 1 has an invalid length. [ 191.673461][T10719] tipc: Disabling bearer [ 191.679968][T10732] netlink: 'syz.0.1495': attribute type 1 has an invalid length. [ 191.688878][T10732] netlink: 'syz.0.1495': attribute type 1 has an invalid length. [ 191.951335][T10746] netlink: 'syz.2.1500': attribute type 4 has an invalid length. [ 192.359696][T10763] ip6gretap0: entered promiscuous mode [ 192.390326][T10763] macsec1: entered allmulticast mode [ 192.406533][T10763] ip6gretap0: entered allmulticast mode [ 192.414640][T10763] ip6gretap0: left allmulticast mode [ 192.420072][T10763] ip6gretap0: left promiscuous mode [ 193.502122][T10813] FAULT_INJECTION: forcing a failure. [ 193.502122][T10813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.516072][T10813] CPU: 0 UID: 0 PID: 10813 Comm: syz.2.1528 Not tainted syzkaller #0 PREEMPT(full) [ 193.516099][T10813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.516110][T10813] Call Trace: [ 193.516115][T10813] [ 193.516121][T10813] dump_stack_lvl+0x189/0x250 [ 193.516151][T10813] ? __pfx____ratelimit+0x10/0x10 [ 193.516174][T10813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.516192][T10813] ? __pfx__printk+0x10/0x10 [ 193.516212][T10813] ? __might_fault+0xb0/0x130 [ 193.516233][T10813] ? __pfx_get_page_from_freelist+0x10/0x10 [ 193.516250][T10813] ? rcu_is_watching+0x15/0xb0 [ 193.516266][T10813] should_fail_ex+0x414/0x560 [ 193.516288][T10813] _copy_from_iter+0x1db/0x16f0 [ 193.516305][T10813] ? unwind_next_frame+0xa5/0x2390 [ 193.516323][T10813] ? policy_nodemask+0x27c/0x720 [ 193.516344][T10813] ? __pfx__copy_from_iter+0x10/0x10 [ 193.516361][T10813] ? set_page_refcounted+0xa0/0x1e0 [ 193.516382][T10813] ? page_copy_sane+0x4e/0x280 [ 193.516396][T10813] copy_page_from_iter+0xdd/0x170 [ 193.516413][T10813] tun_get_user+0x1d7b/0x3e20 [ 193.516432][T10813] ? tun_get_user+0x6f6/0x3e20 [ 193.516449][T10813] ? aa_file_perm+0x44d/0x1550 [ 193.516464][T10813] ? __pfx_tun_get_user+0x10/0x10 [ 193.516478][T10813] ? _parse_integer_limit+0x1ae/0x1f0 [ 193.516503][T10813] ? kstrtoull+0x12f/0x1d0 [ 193.516526][T10813] ? ref_tracker_alloc+0x318/0x460 [ 193.516547][T10813] ? get_pid_task+0x20/0x1f0 [ 193.516565][T10813] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 193.516587][T10813] ? tun_get+0x1c/0x2f0 [ 193.516600][T10813] ? tun_get+0x1c/0x2f0 [ 193.516613][T10813] ? rcu_is_watching+0x15/0xb0 [ 193.516627][T10813] ? tun_get+0x1c/0x2f0 [ 193.516639][T10813] ? lock_release+0x4b/0x3e0 [ 193.516660][T10813] ? common_file_perm+0x1b5/0x230 [ 193.516674][T10813] ? tun_get+0x1c/0x2f0 [ 193.516689][T10813] tun_chr_write_iter+0x113/0x200 [ 193.516704][T10813] vfs_write+0x5c9/0xb30 [ 193.516726][T10813] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 193.516740][T10813] ? __pfx_vfs_write+0x10/0x10 [ 193.516763][T10813] ? __fget_files+0x2a/0x420 [ 193.516780][T10813] ksys_write+0x145/0x250 [ 193.516800][T10813] ? __pfx_ksys_write+0x10/0x10 [ 193.516822][T10813] ? rcu_is_watching+0x15/0xb0 [ 193.516837][T10813] do_syscall_64+0xfa/0x3b0 [ 193.516852][T10813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.516868][T10813] ? clear_bhb_loop+0x60/0xb0 [ 193.516884][T10813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.516899][T10813] RIP: 0033:0x7f4bcfb8d69f [ 193.516913][T10813] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 193.516927][T10813] RSP: 002b:00007f4bd0a73000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 193.516945][T10813] RAX: ffffffffffffffda RBX: 00007f4bcfdb6090 RCX: 00007f4bcfb8d69f [ 193.516957][T10813] RDX: 000000000000004a RSI: 0000200000000180 RDI: 00000000000000c8 [ 193.516967][T10813] RBP: 00007f4bd0a73090 R08: 0000000000000000 R09: 0000000000000000 [ 193.516977][T10813] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 193.516987][T10813] R13: 00007f4bcfdb6128 R14: 00007f4bcfdb6090 R15: 00007ffd5a6c72f8 [ 193.517004][T10813] [ 193.876477][T10810] __nla_validate_parse: 6 callbacks suppressed [ 193.876500][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'. [ 194.445305][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.454953][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.479908][T10826] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1533'. [ 196.599786][T10837] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 196.823638][T10856] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1536'. [ 197.135743][T10868] FAULT_INJECTION: forcing a failure. [ 197.135743][T10868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.170226][T10868] CPU: 1 UID: 0 PID: 10868 Comm: syz.3.1546 Not tainted syzkaller #0 PREEMPT(full) [ 197.170259][T10868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.170272][T10868] Call Trace: [ 197.170279][T10868] [ 197.170287][T10868] dump_stack_lvl+0x189/0x250 [ 197.170317][T10868] ? __pfx____ratelimit+0x10/0x10 [ 197.170345][T10868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.170368][T10868] ? __pfx__printk+0x10/0x10 [ 197.170398][T10868] ? rcu_is_watching+0x15/0xb0 [ 197.170419][T10868] should_fail_ex+0x414/0x560 [ 197.170448][T10868] _copy_to_user+0x31/0xb0 [ 197.170471][T10868] simple_read_from_buffer+0xe1/0x170 [ 197.170501][T10868] proc_fail_nth_read+0x1b3/0x220 [ 197.170525][T10868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.170548][T10868] ? rw_verify_area+0x2a6/0x4d0 [ 197.170572][T10868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.170595][T10868] vfs_read+0x1fd/0xa30 [ 197.170618][T10868] ? fdget_pos+0x247/0x320 [ 197.170638][T10868] ? __pfx___mutex_lock+0x10/0x10 [ 197.170657][T10868] ? __pfx_vfs_read+0x10/0x10 [ 197.170690][T10868] ? __fget_files+0x3a0/0x420 [ 197.170707][T10868] ? __fget_files+0x2a/0x420 [ 197.170726][T10868] ksys_read+0x145/0x250 [ 197.170763][T10868] ? __pfx_ksys_read+0x10/0x10 [ 197.170788][T10868] ? rcu_is_watching+0x15/0xb0 [ 197.170808][T10868] do_syscall_64+0xfa/0x3b0 [ 197.170827][T10868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.170846][T10868] ? clear_bhb_loop+0x60/0xb0 [ 197.170868][T10868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.170886][T10868] RIP: 0033:0x7f499a38d5fc [ 197.170905][T10868] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 197.170923][T10868] RSP: 002b:00007f499b296030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.170947][T10868] RAX: ffffffffffffffda RBX: 00007f499a5b6090 RCX: 00007f499a38d5fc [ 197.170962][T10868] RDX: 000000000000000f RSI: 00007f499b2960a0 RDI: 0000000000000003 [ 197.170975][T10868] RBP: 00007f499b296090 R08: 0000000000000000 R09: 0000000000000000 [ 197.170988][T10868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.171000][T10868] R13: 00007f499a5b6128 R14: 00007f499a5b6090 R15: 00007ffe7369f098 [ 197.171022][T10868] [ 197.727296][T10893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1554'. [ 197.957446][T10911] lo speed is unknown, defaulting to 1000 [ 197.970380][T10911] lo speed is unknown, defaulting to 1000 [ 198.247165][T10932] raw_sendmsg: syz.1.1565 forgot to set AF_INET. Fix it! [ 198.256661][T10929] "syz.1.1565" (10929) uses obsolete ecb(arc4) skcipher [ 198.474761][T10943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1568'. [ 198.759275][T10958] lo speed is unknown, defaulting to 1000 [ 198.822260][T10958] lo speed is unknown, defaulting to 1000 [ 199.894316][T10992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1583'. [ 199.909228][T10993] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 200.025103][ T30] audit: type=1800 audit(1756440338.244:7): pid=10985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1577" name="memory.events" dev="tmpfs" ino=1702 res=0 errno=0 [ 200.049525][T11000] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1584'. [ 200.290112][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 200.355708][T11016] hsr_slave_1 (unregistering): left promiscuous mode [ 200.527608][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 200.608577][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1596'. [ 200.788181][T11060] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 200.903837][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 200.909252][T11065] lo speed is unknown, defaulting to 1000 [ 200.933730][T11065] lo speed is unknown, defaulting to 1000 [ 200.946448][T11072] openvswitch: netlink: IP tunnel dst address not specified [ 201.185783][T11085] syzkaller0: entered promiscuous mode [ 201.200852][T11085] syzkaller0: entered allmulticast mode [ 201.348847][T11101] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 201.473839][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1620'. [ 201.540376][T11123] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1623'. [ 201.573497][T11124] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 201.614720][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1627'. [ 201.815048][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'. [ 201.873738][T11149] bond0: entered promiscuous mode [ 201.939641][T11148] lo speed is unknown, defaulting to 1000 [ 201.969232][T11155] netlink: 'syz.0.1635': attribute type 12 has an invalid length. [ 201.992242][T11148] lo speed is unknown, defaulting to 1000 [ 202.274072][T11173] lo speed is unknown, defaulting to 1000 [ 202.359510][T11173] lo speed is unknown, defaulting to 1000 [ 202.395334][T11181] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002 [ 202.445553][T11183] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002 [ 203.133457][T11232] netlink: 'syz.2.1658': attribute type 1 has an invalid length. [ 203.207110][T11235] netlink: 'syz.0.1661': attribute type 1 has an invalid length. [ 203.376018][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 205.119772][T11310] __nla_validate_parse: 9 callbacks suppressed [ 205.119795][T11310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1683'. [ 205.215161][T11314] lo speed is unknown, defaulting to 1000 [ 205.227764][T11314] lo speed is unknown, defaulting to 1000 [ 205.308636][T11322] bond0: (slave vlan2): Opening slave failed [ 205.830013][T11340] tap0: tun_chr_ioctl cmd 1074025677 [ 205.837584][T11340] tap0: linktype set to 774 [ 205.855010][T11340] tap0: tun_chr_ioctl cmd 2147767507 [ 206.085902][T11353] lo speed is unknown, defaulting to 1000 [ 206.111197][T11355] netlink: 'syz.2.1700': attribute type 1 has an invalid length. [ 206.163554][T11353] lo speed is unknown, defaulting to 1000 [ 206.179882][T11355] bond1: (slave geneve3): making interface the new active one [ 206.232391][T11364] netlink: 'syz.4.1702': attribute type 21 has an invalid length. [ 206.247289][T11355] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 206.274256][ T3508] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 206.283078][T11364] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1702'. [ 206.424482][ T3508] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 206.433006][ T3508] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 206.728688][ T3508] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 207.202744][T11381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1707'. [ 207.339446][T11391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1713'. [ 207.349014][T11393] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1712'. [ 207.357183][T11392] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1711'. [ 207.380841][T11393] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1712'. [ 207.390087][T11393] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 207.462002][T11399] tipc: Enabled bearer , priority 0 [ 207.479840][T11399] syzkaller0: entered promiscuous mode [ 207.492927][T11401] FAULT_INJECTION: forcing a failure. [ 207.492927][T11401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.499836][T11399] syzkaller0: entered allmulticast mode [ 207.521195][T11401] CPU: 0 UID: 0 PID: 11401 Comm: syz.4.1716 Not tainted syzkaller #0 PREEMPT(full) [ 207.521225][T11401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.521238][T11401] Call Trace: [ 207.521246][T11401] [ 207.521254][T11401] dump_stack_lvl+0x189/0x250 [ 207.521283][T11401] ? __pfx____ratelimit+0x10/0x10 [ 207.521312][T11401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.521334][T11401] ? __pfx__printk+0x10/0x10 [ 207.521358][T11401] ? __might_fault+0xb0/0x130 [ 207.521385][T11401] ? __pfx_get_page_from_freelist+0x10/0x10 [ 207.521406][T11401] ? rcu_is_watching+0x15/0xb0 [ 207.521427][T11401] should_fail_ex+0x414/0x560 [ 207.521456][T11401] _copy_from_iter+0x1db/0x16f0 [ 207.521477][T11401] ? unwind_next_frame+0xa5/0x2390 [ 207.521501][T11401] ? policy_nodemask+0x27c/0x720 [ 207.521527][T11401] ? __pfx__copy_from_iter+0x10/0x10 [ 207.521548][T11401] ? set_page_refcounted+0xa0/0x1e0 [ 207.521574][T11401] ? page_copy_sane+0x4e/0x280 [ 207.521593][T11401] copy_page_from_iter+0xdd/0x170 [ 207.521615][T11401] tun_get_user+0x1d7b/0x3e20 [ 207.521640][T11401] ? tun_get_user+0x6f6/0x3e20 [ 207.521662][T11401] ? aa_file_perm+0x44d/0x1550 [ 207.521682][T11401] ? __pfx_tun_get_user+0x10/0x10 [ 207.521701][T11401] ? _parse_integer_limit+0x1ae/0x1f0 [ 207.521733][T11401] ? kstrtoull+0x12f/0x1d0 [ 207.521764][T11401] ? ref_tracker_alloc+0x318/0x460 [ 207.521789][T11401] ? get_pid_task+0x20/0x1f0 [ 207.521814][T11401] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 207.521842][T11401] ? tun_get+0x1c/0x2f0 [ 207.521860][T11401] ? tun_get+0x1c/0x2f0 [ 207.521878][T11401] ? rcu_is_watching+0x15/0xb0 [ 207.521904][T11401] ? tun_get+0x1c/0x2f0 [ 207.521921][T11401] ? lock_release+0x4b/0x3e0 [ 207.521947][T11401] ? common_file_perm+0x1b5/0x230 [ 207.521965][T11401] ? tun_get+0x1c/0x2f0 [ 207.521984][T11401] tun_chr_write_iter+0x113/0x200 [ 207.522004][T11401] vfs_write+0x5c9/0xb30 [ 207.522031][T11401] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 207.522050][T11401] ? __pfx_vfs_write+0x10/0x10 [ 207.522078][T11401] ? __fget_files+0x2a/0x420 [ 207.522097][T11401] ksys_write+0x145/0x250 [ 207.522122][T11401] ? __pfx_ksys_write+0x10/0x10 [ 207.522145][T11401] ? rcu_is_watching+0x15/0xb0 [ 207.522164][T11401] ? rcu_is_watching+0x15/0xb0 [ 207.522182][T11401] do_syscall_64+0xfa/0x3b0 [ 207.522201][T11401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.522220][T11401] ? clear_bhb_loop+0x60/0xb0 [ 207.522241][T11401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.522258][T11401] RIP: 0033:0x7f35b118d69f [ 207.522277][T11401] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 207.522294][T11401] RSP: 002b:00007f35b1fbe000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 207.522316][T11401] RAX: ffffffffffffffda RBX: 00007f35b13b5fa0 RCX: 00007f35b118d69f [ 207.522330][T11401] RDX: 0000000000000086 RSI: 0000200000002480 RDI: 00000000000000c8 [ 207.522343][T11401] RBP: 00007f35b1fbe090 R08: 0000000000000000 R09: 0000000000000000 [ 207.522355][T11401] R10: 0000000000000086 R11: 0000000000000293 R12: 0000000000000001 [ 207.522367][T11401] R13: 00007f35b13b6038 R14: 00007f35b13b5fa0 R15: 00007fff4ff77688 [ 207.522387][T11401] [ 207.892085][T11407] tipc: Resetting bearer [ 207.909708][T11398] tipc: Resetting bearer [ 208.022692][T11398] tipc: Disabling bearer [ 208.411667][T11422] netlink: 'syz.1.1721': attribute type 6 has an invalid length. [ 208.713467][T11438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1726'. [ 208.797701][T11444] netlink: 'syz.0.1730': attribute type 4 has an invalid length. [ 209.289412][T11468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1738'. [ 209.353711][T11472] tipc: Enabling of bearer rejected, already enabled [ 209.531265][T11478] lo speed is unknown, defaulting to 1000 [ 209.547343][T11479] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.548211][T11478] lo speed is unknown, defaulting to 1000 [ 210.040320][T11498] tipc: Enabling of bearer rejected, already enabled [ 210.098041][T11498] tipc: Resetting bearer [ 210.318075][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1752'. [ 210.327251][T11512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1752'. [ 210.349673][T11512] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1752'. [ 210.385300][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1754'. [ 210.495913][T11514] bridge5: port 1(veth0_to_bond) entered blocking state [ 210.509071][T11514] bridge5: port 1(veth0_to_bond) entered disabled state [ 210.550430][T11514] veth0_to_bond: entered allmulticast mode [ 210.559540][T11514] veth0_to_bond: entered promiscuous mode [ 210.567556][T11516] lo speed is unknown, defaulting to 1000 [ 210.602009][T11514] vlan3: entered allmulticast mode [ 210.610732][T11514] veth1: entered allmulticast mode [ 210.622381][T11514] bridge5: port 2(vlan3) entered blocking state [ 210.628885][T11514] bridge5: port 2(vlan3) entered disabled state [ 210.636597][T11514] vlan3: entered promiscuous mode [ 210.642903][T11514] veth1: entered promiscuous mode [ 210.660330][T11528] lo speed is unknown, defaulting to 1000 [ 210.666404][T11516] lo speed is unknown, defaulting to 1000 [ 210.739548][T11529] lo speed is unknown, defaulting to 1000 [ 210.935176][T11528] lo speed is unknown, defaulting to 1000 [ 211.786966][T11529] lo speed is unknown, defaulting to 1000 [ 211.901664][T11552] tipc: Enabling of bearer rejected, already enabled [ 212.008454][T11562] netlink: 'syz.3.1770': attribute type 3 has an invalid length. [ 212.022464][T11562] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1770'. [ 212.043414][T11560] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1769'. [ 212.052691][T11560] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1769'. [ 212.085229][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1770'. [ 212.090795][T11560] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 212.151071][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1770'. [ 212.263931][T11568] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1773'. [ 212.721124][T11593] ..0·: renamed from hsr0 (while UP) [ 212.743807][T11593] ..0·: entered allmulticast mode [ 212.749211][T11593] hsr_slave_0: entered allmulticast mode [ 212.801325][T11593] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 212.848429][T11598] tipc: Enabled bearer , priority 0 [ 212.946128][T11598] syzkaller0: entered promiscuous mode [ 212.952086][T11598] syzkaller0: entered allmulticast mode [ 212.977169][T11598] tipc: Resetting bearer [ 212.992011][T11597] tipc: Resetting bearer [ 213.001109][T11597] tipc: Disabling bearer [ 214.772592][T11670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.395666][T11680] __nla_validate_parse: 3 callbacks suppressed [ 215.395687][T11680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1814'. [ 215.510272][T11687] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1817'. [ 215.646021][T11703] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1821'. [ 215.707974][T11708] sit0: entered promiscuous mode [ 215.716925][T11708] netlink: 'syz.3.1823': attribute type 1 has an invalid length. [ 215.726836][T11708] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1823'. [ 216.937278][T11718] lo speed is unknown, defaulting to 1000 [ 216.996856][T11718] lo speed is unknown, defaulting to 1000 [ 217.153116][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'. [ 217.258495][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1833'. [ 217.768262][T11741] hsr_slave_1 (unregistering): left promiscuous mode [ 217.826540][T11754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1837'. [ 217.918387][T11758] netlink: 'syz.3.1838': attribute type 1 has an invalid length. [ 217.942343][T11761] syzkaller0: entered promiscuous mode [ 217.948774][T11761] syzkaller0: entered allmulticast mode [ 217.957944][T11760] tipc: Enabled bearer , priority 0 [ 217.979993][T11758] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 217.992721][T11758] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 218.017119][T11758] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 218.056004][T11760] tipc: Resetting bearer [ 218.064477][T11760] tipc: Disabling bearer [ 218.466322][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1852'. [ 218.595301][T11807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1853'. [ 218.677203][T11813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1856'. [ 218.747759][T11813] 0ªX¹¦À: renamed from caif0 [ 218.757878][T11813] 0ªX¹¦À: entered allmulticast mode [ 218.769781][T11813] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 219.082414][T11827] netlink: 'syz.3.1862': attribute type 1 has an invalid length. [ 219.146111][T11822] netlink: 'syz.2.1860': attribute type 10 has an invalid length. [ 219.224933][T11835] netlink: 'syz.2.1860': attribute type 10 has an invalid length. [ 219.372186][T11833] 8021q: adding VLAN 0 to HW filter on device bond6 [ 219.432625][T11833] bond5: (slave bond6): Enslaving as a backup interface with a down link [ 219.447333][T11835] bond0: (slave 0!): Enslaving as an active interface with an up link [ 220.013244][T11854] netlink: 'syz.4.1870': attribute type 3 has an invalid length. [ 220.054107][T11855] netlink: 'syz.4.1870': attribute type 3 has an invalid length. [ 220.224885][T11865] netlink: 'syz.2.1869': attribute type 1 has an invalid length. [ 220.636810][T11868] lo speed is unknown, defaulting to 1000 [ 220.760105][T11868] lo speed is unknown, defaulting to 1000 [ 221.324337][T11876] __nla_validate_parse: 1 callbacks suppressed [ 221.324357][T11876] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1873'. [ 221.348238][T11876] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1873'. [ 221.367387][T11876] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 221.492817][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1879'. [ 221.526239][T11882] lo speed is unknown, defaulting to 1000 [ 221.540555][T11882] lo speed is unknown, defaulting to 1000 [ 221.558313][T11892] lo speed is unknown, defaulting to 1000 [ 221.842158][T11898] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 221.868627][T11892] lo speed is unknown, defaulting to 1000 [ 221.912889][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1881'. [ 222.239133][T11914] tipc: Enabling of bearer rejected, already enabled [ 222.401195][T11921] pimreg: entered allmulticast mode [ 222.457734][T11928] netlink: 'syz.1.1889': attribute type 1 has an invalid length. [ 222.513567][T11928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.520004][T11931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1890'. [ 222.723905][T11933] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.731256][T11933] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 222.772632][T11933] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 223.014352][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1895'. [ 223.036594][T11947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1895'. [ 223.223201][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 223.242556][T11957] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 223.260578][T11954] macvtap1: entered promiscuous mode [ 223.268293][T11954] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 223.303363][T11960] lo speed is unknown, defaulting to 1000 [ 223.310425][T11960] lo speed is unknown, defaulting to 1000 [ 223.432582][T11963] lo speed is unknown, defaulting to 1000 [ 223.446898][T11964] netlink: 'syz.3.1901': attribute type 1 has an invalid length. [ 223.472762][T11969] tipc: Enabling of bearer rejected, already enabled [ 223.500853][T11963] lo speed is unknown, defaulting to 1000 [ 223.507313][T11967] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1903'. [ 223.537951][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 223.561907][T11967] netlink: 'syz.0.1903': attribute type 5 has an invalid length. [ 223.686588][T11982] veth0_vlan: entered allmulticast mode [ 223.775137][T11973] lo speed is unknown, defaulting to 1000 [ 223.953786][T11997] netlink: 'syz.1.1914': attribute type 11 has an invalid length. [ 223.971592][T11973] lo speed is unknown, defaulting to 1000 [ 224.114909][T12002] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 224.619245][T12031] netlink: 'syz.4.1924': attribute type 3 has an invalid length. [ 224.630128][T12016] lo speed is unknown, defaulting to 1000 [ 224.643749][T12031] netlink: 'syz.4.1924': attribute type 1 has an invalid length. [ 224.692341][T12031] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.730958][T12030] lo speed is unknown, defaulting to 1000 [ 224.746061][T12031] bond3: (slave geneve2): making interface the new active one [ 224.755323][T12031] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 224.769259][T12016] lo speed is unknown, defaulting to 1000 [ 224.780250][ T6596] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.798891][ T6596] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.836859][ T6596] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.859318][ T6596] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.890353][T12040] netlink: 'syz.4.1927': attribute type 4 has an invalid length. [ 224.900875][T12041] netlink: 'syz.4.1927': attribute type 4 has an invalid length. [ 224.984219][T12030] lo speed is unknown, defaulting to 1000 [ 225.123447][T12055] openvswitch: netlink: Message has 20 unknown bytes. [ 225.130616][T12055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.143753][T12042] netlink: 'syz.0.1920': attribute type 13 has an invalid length. [ 225.152443][T12042] netlink: 'syz.0.1920': attribute type 17 has an invalid length. [ 225.279232][T12042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.293333][T12042] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.317457][T12042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.985214][T12091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.997584][T12092] macvlan0: entered promiscuous mode [ 226.003932][T12092] macvlan0: entered allmulticast mode [ 226.016336][T12092] bond2: entered promiscuous mode [ 226.022210][T12092] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 226.032319][T12092] bond2: left promiscuous mode [ 226.063900][T12096] batadv1: entered promiscuous mode [ 226.069263][T12096] batadv1: entered allmulticast mode [ 226.114441][T12092] macvlan0: entered promiscuous mode [ 226.145373][T12092] macvlan0: entered allmulticast mode [ 226.173093][T12092] bond2: entered promiscuous mode [ 226.187047][T12092] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 226.206567][T12092] bond2: left promiscuous mode [ 226.299206][T12092] macvlan0: entered promiscuous mode [ 226.305026][T12092] macvlan0: entered allmulticast mode [ 226.314742][T12092] bond2: entered promiscuous mode [ 226.326016][T12092] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 226.360838][T12092] bond2: left promiscuous mode [ 226.437619][T12092] macvlan0: entered promiscuous mode [ 226.443760][T12092] macvlan0: entered allmulticast mode [ 226.461375][T12092] bond2: entered promiscuous mode [ 226.467153][T12092] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 226.497494][T12092] bond2: left promiscuous mode [ 226.566748][T12092] macvlan0: entered promiscuous mode [ 226.581428][T12092] macvlan0: entered allmulticast mode [ 226.592478][T12092] bond2: entered promiscuous mode [ 226.602543][T12092] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 226.614578][T12092] bond2: left promiscuous mode [ 226.697422][T12092] macvlan0: entered promiscuous mode [ 226.711935][T12092] macvlan0: entered allmulticast mode [ 226.731631][T12092] bond2: entered promiscuous mode [ 226.737420][T12092] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 226.765612][T12092] bond2: left promiscuous mode [ 226.842667][T12125] __nla_validate_parse: 13 callbacks suppressed [ 226.842689][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1950'. [ 227.010630][T12135] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1953'. [ 227.022413][T12135] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1953'. [ 227.038677][T12135] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1953'. [ 227.057181][T12132] lo speed is unknown, defaulting to 1000 [ 227.085858][T12132] lo speed is unknown, defaulting to 1000 [ 227.213454][T12146] syzkaller1: entered promiscuous mode [ 227.250921][T12146] syzkaller1: entered allmulticast mode [ 227.276332][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'. [ 227.378100][ T6585] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 227.497319][T12164] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1963'. [ 227.826163][T12175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1969'. [ 227.835407][T12175] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1969'. [ 228.085240][T12145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1958'. [ 228.235039][T12192] syzkaller1: entered promiscuous mode [ 228.257315][T12192] syzkaller1: entered allmulticast mode [ 228.293187][T12200] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (9) [ 228.316744][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 228.525031][T12214] lo speed is unknown, defaulting to 1000 [ 228.536724][T12214] lo speed is unknown, defaulting to 1000 [ 228.602169][T12224] 0ªX¹¦À: left allmulticast mode [ 228.607159][T12224] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 228.633624][T12221] geneve0: entered promiscuous mode [ 228.641738][ T6577] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.650837][ T5863] lo speed is unknown, defaulting to 1000 [ 228.656594][ T5863] syz2: Port: 1 Link ACTIVE [ 228.666769][ T6577] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.718021][ T6577] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.731606][ T6577] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.759595][T12232] 8021q: VLANs not supported on ipvlan1 [ 228.774620][T12232] macsec1: entered promiscuous mode [ 228.780140][T12232] macsec1: entered allmulticast mode [ 229.032242][T12248] lo speed is unknown, defaulting to 1000 [ 229.045731][T12248] lo speed is unknown, defaulting to 1000 [ 229.952496][T12310] tipc: Enabled bearer , priority 0 [ 230.009378][T12310] syzkaller0: entered promiscuous mode [ 230.044440][T12310] syzkaller0: entered allmulticast mode [ 230.145902][T12310] tipc: Resetting bearer [ 230.198125][T12310] tipc: Resetting bearer [ 230.211738][T12310] tipc: Disabling bearer [ 231.672347][T12375] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 231.686707][T12358] validate_nla: 1 callbacks suppressed [ 231.686728][T12358] netlink: 'syz.3.2029': attribute type 4 has an invalid length. [ 231.689306][T12377] FAULT_INJECTION: forcing a failure. [ 231.689306][T12377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.720971][T12377] CPU: 1 UID: 0 PID: 12377 Comm: syz.4.2033 Not tainted syzkaller #0 PREEMPT(full) [ 231.721002][T12377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.721014][T12377] Call Trace: [ 231.721021][T12377] [ 231.721030][T12377] dump_stack_lvl+0x189/0x250 [ 231.721059][T12377] ? __pfx____ratelimit+0x10/0x10 [ 231.721088][T12377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.721110][T12377] ? __pfx__printk+0x10/0x10 [ 231.721139][T12377] ? rcu_is_watching+0x15/0xb0 [ 231.721159][T12377] should_fail_ex+0x414/0x560 [ 231.721186][T12377] _copy_to_user+0x31/0xb0 [ 231.721208][T12377] simple_read_from_buffer+0xe1/0x170 [ 231.721237][T12377] proc_fail_nth_read+0x1b3/0x220 [ 231.721261][T12377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.721283][T12377] ? rw_verify_area+0x2a6/0x4d0 [ 231.721307][T12377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.721329][T12377] vfs_read+0x1fd/0xa30 [ 231.721352][T12377] ? fdget_pos+0x247/0x320 [ 231.721371][T12377] ? __pfx___mutex_lock+0x10/0x10 [ 231.721390][T12377] ? __pfx_vfs_read+0x10/0x10 [ 231.721417][T12377] ? __fget_files+0x3a0/0x420 [ 231.721433][T12377] ? __fget_files+0x2a/0x420 [ 231.721462][T12377] ksys_read+0x145/0x250 [ 231.721487][T12377] ? __pfx_ksys_read+0x10/0x10 [ 231.721509][T12377] ? rcu_is_watching+0x15/0xb0 [ 231.721529][T12377] ? rcu_is_watching+0x15/0xb0 [ 231.721550][T12377] do_syscall_64+0xfa/0x3b0 [ 231.721569][T12377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.721588][T12377] ? clear_bhb_loop+0x60/0xb0 [ 231.721610][T12377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.721628][T12377] RIP: 0033:0x7f35b118d5fc [ 231.721646][T12377] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 231.721664][T12377] RSP: 002b:00007f35b1f9d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.721687][T12377] RAX: ffffffffffffffda RBX: 00007f35b13b6090 RCX: 00007f35b118d5fc [ 231.721702][T12377] RDX: 000000000000000f RSI: 00007f35b1f9d0a0 RDI: 0000000000000004 [ 231.721715][T12377] RBP: 00007f35b1f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 231.721728][T12377] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 231.721741][T12377] R13: 00007f35b13b6128 R14: 00007f35b13b6090 R15: 00007fff4ff77688 [ 231.721764][T12377] [ 232.713625][T12448] __nla_validate_parse: 4 callbacks suppressed [ 232.713647][T12448] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2055'. [ 232.770076][T12449] netlink: 'syz.3.2058': attribute type 8 has an invalid length. [ 233.380198][T12482] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2068'. [ 233.432079][T12485] tipc: Enabled bearer , priority 0 [ 233.441669][T12485] syzkaller0: entered promiscuous mode [ 233.447894][T12485] syzkaller0: entered allmulticast mode [ 233.466602][T12485] tipc: Enabling of bearer rejected, failed to enable media [ 233.482938][T12488] netlink: 464 bytes leftover after parsing attributes in process `syz.3.2070'. [ 233.501317][T12485] tipc: Resetting bearer [ 233.515731][T12484] tipc: Resetting bearer [ 233.516116][T12491] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2072'. [ 233.533744][T12484] tipc: Disabling bearer [ 233.733323][T12514] macvlan2: entered allmulticast mode [ 233.824299][T12520] netlink: 'syz.3.2084': attribute type 10 has an invalid length. [ 233.837493][T12520] !: entered promiscuous mode [ 233.844628][T12520] team0: Port device 0! added [ 233.867625][T12520] netlink: 'syz.3.2084': attribute type 10 has an invalid length. [ 233.892909][T12520] !: left promiscuous mode [ 233.903212][T12520] team0: Port device 0! removed [ 233.978589][T12533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2088'. [ 233.988631][T12533] team0: invalid flags given to default FDB implementation [ 234.088473][T12540] lo speed is unknown, defaulting to 1000 [ 234.097889][T12540] lo speed is unknown, defaulting to 1000 [ 234.228740][T12552] syz_tun: entered allmulticast mode [ 234.258045][T12552] dvmrp8: entered allmulticast mode [ 234.301169][T12552] lo speed is unknown, defaulting to 1000 [ 234.337031][T12557] netlink: 'syz.3.2097': attribute type 23 has an invalid length. [ 234.383642][T12558] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2098'. [ 234.424853][T12552] lo speed is unknown, defaulting to 1000 [ 234.475139][T12561] lo speed is unknown, defaulting to 1000 [ 234.534806][T12540] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2093'. [ 234.564668][T12540] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2093'. [ 234.597022][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2099'. [ 234.639716][T12561] lo speed is unknown, defaulting to 1000 [ 234.659997][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'. [ 234.725854][T12551] syz_tun: left allmulticast mode [ 234.742095][T12551] dvmrp8: left allmulticast mode [ 235.098591][T12589] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.110526][T12589] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.126654][T12589] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 235.153969][T12556] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 235.218341][T12589] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.230857][T12589] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.258477][T12589] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 235.362758][T12589] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.403967][T12589] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.427082][T12589] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 235.496741][T12589] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.518780][T12589] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.539835][T12589] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 235.827291][ T6585] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.843616][ T6585] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 235.852520][ T6585] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 235.902044][ T6585] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.911973][ T6585] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 235.936028][ T6585] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 235.960961][ T6585] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.969294][ T6585] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 235.998703][ T6585] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 236.027266][ T6585] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.037252][ T6585] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 236.053885][ T6585] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 236.065417][T12593] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.077625][T12593] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 236.087905][T12593] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 236.177128][T12648] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 236.186241][T12659] netlink: 'syz.3.2124': attribute type 8 has an invalid length. [ 236.199799][ T6585] ================================================================== [ 236.207994][ T6585] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 236.215573][ T6585] Read of size 8 at addr ffff8880309046b0 by task kworker/u8:13/6585 [ 236.223662][ T6585] [ 236.226006][ T6585] CPU: 1 UID: 0 PID: 6585 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 236.226028][ T6585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.226039][ T6585] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 236.226071][ T6585] Call Trace: [ 236.226077][ T6585] [ 236.226084][ T6585] dump_stack_lvl+0x189/0x250 [ 236.226105][ T6585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.226125][ T6585] ? lock_release+0x4b/0x3e0 [ 236.226150][ T6585] ? __virt_addr_valid+0x4a5/0x5c0 [ 236.226172][ T6585] print_report+0xca/0x240 [ 236.226187][ T6585] ? __mutex_lock+0x147/0x1350 [ 236.226200][ T6585] kasan_report+0x118/0x150 [ 236.226222][ T6585] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 236.226244][ T6585] ? __mutex_lock+0x147/0x1350 [ 236.226260][ T6585] __mutex_lock+0x147/0x1350 [ 236.226275][ T6585] ? __mutex_lock+0x5bb/0x1350 [ 236.226290][ T6585] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 236.226314][ T6585] ? __pfx___mutex_lock+0x10/0x10 [ 236.226328][ T6585] ? do_raw_spin_unlock+0x122/0x240 [ 236.226349][ T6585] ? rcu_is_watching+0x15/0xb0 [ 236.226374][ T6585] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 236.226400][ T6585] ? process_scheduled_works+0x9ef/0x17b0 [ 236.226415][ T6585] ? process_scheduled_works+0x9ef/0x17b0 [ 236.226431][ T6585] process_scheduled_works+0xae1/0x17b0 [ 236.226454][ T6585] ? __pfx_process_scheduled_works+0x10/0x10 [ 236.226475][ T6585] worker_thread+0x8a0/0xda0 [ 236.226499][ T6585] kthread+0x70e/0x8a0 [ 236.226519][ T6585] ? __pfx_worker_thread+0x10/0x10 [ 236.226535][ T6585] ? __pfx_kthread+0x10/0x10 [ 236.226554][ T6585] ? rcu_is_watching+0x15/0xb0 [ 236.226568][ T6585] ? __pfx_kthread+0x10/0x10 [ 236.226587][ T6585] ret_from_fork+0x3f9/0x770 [ 236.226603][ T6585] ? __pfx_ret_from_fork+0x10/0x10 [ 236.226620][ T6585] ? __switch_to_asm+0x39/0x70 [ 236.226640][ T6585] ? __switch_to_asm+0x33/0x70 [ 236.226658][ T6585] ? __pfx_kthread+0x10/0x10 [ 236.226677][ T6585] ret_from_fork_asm+0x1a/0x30 [ 236.226702][ T6585] [ 236.226708][ T6585] [ 236.425629][ T6585] Allocated by task 12589: [ 236.430039][ T6585] kasan_save_track+0x3e/0x80 [ 236.434827][ T6585] __kasan_kmalloc+0x93/0xb0 [ 236.439534][ T6585] __kmalloc_noprof+0x27a/0x4f0 [ 236.444411][ T6585] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 236.450591][ T6585] notifier_call_chain+0x1b3/0x3e0 [ 236.455795][ T6585] register_netdevice+0x1608/0x1ae0 [ 236.461003][ T6585] nsim_create+0xae8/0xf10 [ 236.465419][ T6585] __nsim_dev_port_add+0x6b6/0xb10 [ 236.470537][ T6585] nsim_dev_port_add_all+0x37/0xf0 [ 236.475842][ T6585] nsim_dev_reload_up+0x451/0x780 [ 236.480873][ T6585] devlink_reload+0x4e9/0x8d0 [ 236.485555][ T6585] devlink_nl_reload_doit+0xb35/0xd50 [ 236.490935][ T6585] genl_family_rcv_msg_doit+0x212/0x300 [ 236.496513][ T6585] genl_rcv_msg+0x60e/0x790 [ 236.501046][ T6585] netlink_rcv_skb+0x205/0x470 [ 236.505857][ T6585] genl_rcv+0x28/0x40 [ 236.509846][ T6585] netlink_unicast+0x82f/0x9e0 [ 236.514620][ T6585] netlink_sendmsg+0x805/0xb30 [ 236.519425][ T6585] __sock_sendmsg+0x21c/0x270 [ 236.524126][ T6585] ____sys_sendmsg+0x505/0x830 [ 236.528904][ T6585] ___sys_sendmsg+0x21f/0x2a0 [ 236.533692][ T6585] __x64_sys_sendmsg+0x19b/0x260 [ 236.538722][ T6585] do_syscall_64+0xfa/0x3b0 [ 236.543221][ T6585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.549169][ T6585] [ 236.551511][ T6585] Freed by task 12593: [ 236.555596][ T6585] kasan_save_track+0x3e/0x80 [ 236.560282][ T6585] kasan_save_free_info+0x46/0x50 [ 236.565305][ T6585] __kasan_slab_free+0x5b/0x80 [ 236.570073][ T6585] kfree+0x18e/0x440 [ 236.573971][ T6585] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 236.580224][ T6585] notifier_call_chain+0x1b3/0x3e0 [ 236.585339][ T6585] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 236.591764][ T6585] unregister_netdevice_queue+0x33c/0x380 [ 236.597571][ T6585] nsim_destroy+0x1dd/0x670 [ 236.602076][ T6585] __nsim_dev_port_del+0x14d/0x1b0 [ 236.607194][ T6585] nsim_dev_reload_destroy+0x288/0x490 [ 236.612667][ T6585] nsim_dev_reload_down+0x8a/0xc0 [ 236.617695][ T6585] devlink_reload+0x1b3/0x8d0 [ 236.622463][ T6585] devlink_nl_reload_doit+0xb35/0xd50 [ 236.627836][ T6585] genl_family_rcv_msg_doit+0x212/0x300 [ 236.633406][ T6585] genl_rcv_msg+0x60e/0x790 [ 236.637942][ T6585] netlink_rcv_skb+0x205/0x470 [ 236.642719][ T6585] genl_rcv+0x28/0x40 [ 236.646708][ T6585] netlink_unicast+0x82f/0x9e0 [ 236.651479][ T6585] netlink_sendmsg+0x805/0xb30 [ 236.656242][ T6585] __sock_sendmsg+0x21c/0x270 [ 236.661010][ T6585] ____sys_sendmsg+0x505/0x830 [ 236.665772][ T6585] ___sys_sendmsg+0x21f/0x2a0 [ 236.670458][ T6585] __x64_sys_sendmsg+0x19b/0x260 [ 236.675398][ T6585] do_syscall_64+0xfa/0x3b0 [ 236.680026][ T6585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.685916][ T6585] [ 236.688251][ T6585] Last potentially related work creation: [ 236.693974][ T6585] kasan_save_stack+0x3e/0x60 [ 236.698684][ T6585] kasan_record_aux_stack+0xbd/0xd0 [ 236.703904][ T6585] insert_work+0x3d/0x330 [ 236.708341][ T6585] __queue_work+0xbaf/0xfb0 [ 236.712856][ T6585] queue_work_on+0x181/0x270 [ 236.717577][ T6585] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 236.723214][ T6585] udp_tunnel_push_rx_port+0x180/0x200 [ 236.728679][ T6585] geneve_offload_rx_ports+0xd7/0x160 [ 236.734054][ T6585] geneve_netdevice_event+0x6a/0x80 [ 236.739353][ T6585] notifier_call_chain+0x1b3/0x3e0 [ 236.744475][ T6585] call_netdevice_notifiers+0x88/0xc0 [ 236.750025][ T6585] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 236.756273][ T6585] notifier_call_chain+0x1b3/0x3e0 [ 236.761734][ T6585] register_netdevice+0x1608/0x1ae0 [ 236.766948][ T6585] nsim_create+0xae8/0xf10 [ 236.771375][ T6585] __nsim_dev_port_add+0x6b6/0xb10 [ 236.776504][ T6585] nsim_dev_port_add_all+0x37/0xf0 [ 236.781638][ T6585] nsim_dev_reload_up+0x451/0x780 [ 236.786670][ T6585] devlink_reload+0x4e9/0x8d0 [ 236.791356][ T6585] devlink_nl_reload_doit+0xb35/0xd50 [ 236.796732][ T6585] genl_family_rcv_msg_doit+0x212/0x300 [ 236.802281][ T6585] genl_rcv_msg+0x60e/0x790 [ 236.806791][ T6585] netlink_rcv_skb+0x205/0x470 [ 236.811669][ T6585] genl_rcv+0x28/0x40 [ 236.815843][ T6585] netlink_unicast+0x82f/0x9e0 [ 236.820638][ T6585] netlink_sendmsg+0x805/0xb30 [ 236.825527][ T6585] __sock_sendmsg+0x21c/0x270 [ 236.830262][ T6585] ____sys_sendmsg+0x505/0x830 [ 236.835032][ T6585] ___sys_sendmsg+0x21f/0x2a0 [ 236.839717][ T6585] __x64_sys_sendmsg+0x19b/0x260 [ 236.844652][ T6585] do_syscall_64+0xfa/0x3b0 [ 236.849176][ T6585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.855067][ T6585] [ 236.857408][ T6585] Second to last potentially related work creation: [ 236.864000][ T6585] kasan_save_stack+0x3e/0x60 [ 236.868858][ T6585] kasan_record_aux_stack+0xbd/0xd0 [ 236.874060][ T6585] insert_work+0x3d/0x330 [ 236.878405][ T6585] __queue_work+0xcd2/0xfb0 [ 236.883427][ T6585] queue_work_on+0x181/0x270 [ 236.888014][ T6585] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 236.893654][ T6585] udp_tunnel_push_rx_port+0x180/0x200 [ 236.899126][ T6585] vxlan_offload_rx_ports+0x139/0x200 [ 236.904505][ T6585] vxlan_netdevice_event+0x111/0x470 [ 236.909853][ T6585] notifier_call_chain+0x1b3/0x3e0 [ 236.914963][ T6585] call_netdevice_notifiers+0x88/0xc0 [ 236.920426][ T6585] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 236.926671][ T6585] notifier_call_chain+0x1b3/0x3e0 [ 236.931870][ T6585] register_netdevice+0x1608/0x1ae0 [ 236.937088][ T6585] nsim_create+0xae8/0xf10 [ 236.941504][ T6585] __nsim_dev_port_add+0x6b6/0xb10 [ 236.946619][ T6585] nsim_dev_port_add_all+0x37/0xf0 [ 236.951733][ T6585] nsim_dev_reload_up+0x451/0x780 [ 236.956763][ T6585] devlink_reload+0x4e9/0x8d0 [ 236.961526][ T6585] devlink_nl_reload_doit+0xb35/0xd50 [ 236.966900][ T6585] genl_family_rcv_msg_doit+0x212/0x300 [ 236.972536][ T6585] genl_rcv_msg+0x60e/0x790 [ 236.977216][ T6585] netlink_rcv_skb+0x205/0x470 [ 236.981987][ T6585] genl_rcv+0x28/0x40 [ 236.985973][ T6585] netlink_unicast+0x82f/0x9e0 [ 236.990741][ T6585] netlink_sendmsg+0x805/0xb30 [ 236.995606][ T6585] __sock_sendmsg+0x21c/0x270 [ 237.000284][ T6585] ____sys_sendmsg+0x505/0x830 [ 237.005068][ T6585] ___sys_sendmsg+0x21f/0x2a0 [ 237.009776][ T6585] __x64_sys_sendmsg+0x19b/0x260 [ 237.014895][ T6585] do_syscall_64+0xfa/0x3b0 [ 237.019570][ T6585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.025467][ T6585] [ 237.027793][ T6585] The buggy address belongs to the object at ffff888030904600 [ 237.027793][ T6585] which belongs to the cache kmalloc-256 of size 256 [ 237.042284][ T6585] The buggy address is located 176 bytes inside of [ 237.042284][ T6585] freed 256-byte region [ffff888030904600, ffff888030904700) [ 237.056170][ T6585] [ 237.058496][ T6585] The buggy address belongs to the physical page: [ 237.065074][ T6585] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30904 [ 237.074022][ T6585] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 237.082542][ T6585] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 237.090136][ T6585] page_type: f5(slab) [ 237.094128][ T6585] raw: 00fff00000000040 ffff88801a441b40 ffffea0001e64d80 0000000000000002 [ 237.102712][ T6585] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 237.111296][ T6585] head: 00fff00000000040 ffff88801a441b40 ffffea0001e64d80 0000000000000002 [ 237.120191][ T6585] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 237.128953][ T6585] head: 00fff00000000001 ffffea0000c24101 00000000ffffffff 00000000ffffffff [ 237.137812][ T6585] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 237.146496][ T6585] page dumped because: kasan: bad access detected [ 237.152956][ T6585] page_owner tracks the page as allocated [ 237.158680][ T6585] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11964, tgid 11958 (syz.3.1901), ts 223493566596, free_ts 222493217574 [ 237.180307][ T6585] post_alloc_hook+0x240/0x2a0 [ 237.185088][ T6585] get_page_from_freelist+0x21e4/0x22c0 [ 237.190653][ T6585] __alloc_frozen_pages_noprof+0x181/0x370 [ 237.196462][ T6585] alloc_pages_mpol+0x232/0x4a0 [ 237.201348][ T6585] allocate_slab+0x8a/0x370 [ 237.205849][ T6585] ___slab_alloc+0xbeb/0x1410 [ 237.210542][ T6585] __kmalloc_noprof+0x305/0x4f0 [ 237.215424][ T6585] iter_file_splice_write+0x1c6/0x10e0 [ 237.220910][ T6585] direct_splice_actor+0xfe/0x160 [ 237.225964][ T6585] splice_direct_to_actor+0x5a8/0xcc0 [ 237.231440][ T6585] do_splice_direct+0x181/0x270 [ 237.236296][ T6585] do_sendfile+0x4da/0x7e0 [ 237.240713][ T6585] __se_sys_sendfile64+0x13e/0x190 [ 237.245919][ T6585] do_syscall_64+0xfa/0x3b0 [ 237.250421][ T6585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.256312][ T6585] page last free pid 11928 tgid 11927 stack trace: [ 237.262810][ T6585] __free_frozen_pages+0xbc4/0xd30 [ 237.267949][ T6585] __slab_free+0x303/0x3c0 [ 237.272382][ T6585] qlist_free_all+0x97/0x140 [ 237.277074][ T6585] kasan_quarantine_reduce+0x148/0x160 [ 237.282544][ T6585] __kasan_slab_alloc+0x22/0x80 [ 237.287398][ T6585] __kmalloc_cache_noprof+0x1be/0x3d0 [ 237.293034][ T6585] register_netdevice+0x58b/0x1ae0 [ 237.298330][ T6585] bond_newlink+0x60/0xb0 [ 237.302678][ T6585] rtnl_newlink_create+0x30d/0xb00 [ 237.307795][ T6585] rtnl_newlink+0x16d6/0x1c70 [ 237.312566][ T6585] rtnetlink_rcv_msg+0x7cc/0xb70 [ 237.317525][ T6585] netlink_rcv_skb+0x205/0x470 [ 237.322305][ T6585] netlink_unicast+0x82f/0x9e0 [ 237.327108][ T6585] netlink_sendmsg+0x805/0xb30 [ 237.331889][ T6585] __sock_sendmsg+0x21c/0x270 [ 237.336573][ T6585] ____sys_sendmsg+0x505/0x830 [ 237.341510][ T6585] [ 237.343834][ T6585] Memory state around the buggy address: [ 237.349468][ T6585] ffff888030904580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 237.357616][ T6585] ffff888030904600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 237.365675][ T6585] >ffff888030904680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 237.373818][ T6585] ^ [ 237.379444][ T6585] ffff888030904700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 237.387505][ T6585] ffff888030904780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 237.395581][ T6585] ================================================================== [ 237.409813][ T6585] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 237.417049][ T6585] CPU: 0 UID: 0 PID: 6585 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 237.426614][ T6585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.436848][ T6585] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 237.444149][ T6585] Call Trace: [ 237.447448][ T6585] [ 237.450378][ T6585] dump_stack_lvl+0x99/0x250 [ 237.454975][ T6585] ? __asan_memcpy+0x40/0x70 [ 237.459570][ T6585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.464770][ T6585] ? __pfx__printk+0x10/0x10 [ 237.469371][ T6585] vpanic+0x281/0x750 [ 237.473465][ T6585] ? preempt_schedule+0xae/0xc0 [ 237.478333][ T6585] ? __pfx_vpanic+0x10/0x10 [ 237.482841][ T6585] ? preempt_schedule_common+0x83/0xd0 [ 237.488308][ T6585] ? preempt_schedule+0xae/0xc0 [ 237.493169][ T6585] ? __pfx_preempt_schedule+0x10/0x10 [ 237.498551][ T6585] panic+0xb9/0xc0 [ 237.502286][ T6585] ? __pfx_panic+0x10/0x10 [ 237.506709][ T6585] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 237.512617][ T6585] ? __mutex_lock+0x147/0x1350 [ 237.517376][ T6585] check_panic_on_warn+0x89/0xb0 [ 237.522422][ T6585] ? __mutex_lock+0x147/0x1350 [ 237.527296][ T6585] end_report+0x78/0x160 [ 237.531656][ T6585] kasan_report+0x129/0x150 [ 237.536197][ T6585] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 237.542105][ T6585] ? __mutex_lock+0x147/0x1350 [ 237.546880][ T6585] __mutex_lock+0x147/0x1350 [ 237.551483][ T6585] ? __mutex_lock+0x5bb/0x1350 [ 237.556254][ T6585] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 237.562539][ T6585] ? __pfx___mutex_lock+0x10/0x10 [ 237.567657][ T6585] ? do_raw_spin_unlock+0x122/0x240 [ 237.572947][ T6585] ? rcu_is_watching+0x15/0xb0 [ 237.577717][ T6585] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 237.583805][ T6585] ? process_scheduled_works+0x9ef/0x17b0 [ 237.589525][ T6585] ? process_scheduled_works+0x9ef/0x17b0 [ 237.595244][ T6585] process_scheduled_works+0xae1/0x17b0 [ 237.600796][ T6585] ? __pfx_process_scheduled_works+0x10/0x10 [ 237.606783][ T6585] worker_thread+0x8a0/0xda0 [ 237.611385][ T6585] kthread+0x70e/0x8a0 [ 237.615460][ T6585] ? __pfx_worker_thread+0x10/0x10 [ 237.620664][ T6585] ? __pfx_kthread+0x10/0x10 [ 237.625262][ T6585] ? rcu_is_watching+0x15/0xb0 [ 237.630041][ T6585] ? __pfx_kthread+0x10/0x10 [ 237.634637][ T6585] ret_from_fork+0x3f9/0x770 [ 237.639246][ T6585] ? __pfx_ret_from_fork+0x10/0x10 [ 237.644360][ T6585] ? __switch_to_asm+0x39/0x70 [ 237.649215][ T6585] ? __switch_to_asm+0x33/0x70 [ 237.653982][ T6585] ? __pfx_kthread+0x10/0x10 [ 237.658583][ T6585] ret_from_fork_asm+0x1a/0x30 [ 237.663370][ T6585] [ 237.666657][ T6585] Kernel Offset: disabled [ 237.670986][ T6585] Rebooting in 86400 seconds..