last executing test programs: 2.262271263s ago: executing program 4 (id=1655): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000007301a400000000009500000000009c8d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xa, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4}, @NHA_GATEWAY={0x0, 0x6, @ip4=@multicast1}, @NHA_BLACKHOLE]}, 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r2 = socket(0x25, 0x5, 0x3) connect$802154_dgram(r2, &(0x7f0000000880), 0x14) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 2.064610524s ago: executing program 4 (id=1658): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xffffffff}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 1.909103316s ago: executing program 4 (id=1662): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r2) ppoll(0x0, 0x0, 0x0, &(0x7f000000c240), 0x8) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0xa, 0x3) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40}}}]}, 0x38}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4000041}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002e40)=@delchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x2, 0xfff3}, {0x0, 0xd}, {0xb, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000280)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r9], 0x2cc}, 0x1, 0x0, 0x0, 0x18080}, 0x80) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_buf(r11, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'veth0_virt_wifi\x00', &(0x7f0000000000)=@ethtool_rxfh={0x46, 0x9, 0xb, 0x8, 0x5, "218108", 0x1, [0x4, 0x4, 0xd, 0x1000, 0x1, 0x10]}}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r12) sendmsg$IEEE802154_LLSEC_LIST_KEY(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r13, 0x325}, 0x14}}, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r14) sendmsg$NLBL_MGMT_C_ADDDEF(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4eab70f6e2b8333073bf0fd697f59232754af9d957db9580b793731961bceb997a9d9411d0a1563799974aec2009900db72daebc05c04b790450a9992d0e03ca273c6d13af70020b40135ff88f420dcdd5ea22ca0dbfeb3698e3063b174bd113c03242a1725754eb88709f7ebd", @ANYRES16=r15, @ANYBLOB="110500000000feffffff05000000"], 0x21}}, 0xa000000) 1.56477272s ago: executing program 1 (id=1666): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100030e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2, 0x15, 0x9, 0x3, 0xc, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x33, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_lifetime={0x4, 0x2, 0x7, 0x100000000, 0x3, 0x9}, @sadb_x_nat_t_type={0x1, 0x14, 0x96}, @sadb_ident={0x2, 0xb, 0x1, 0x0, 0xfff}]}, 0x60}}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000171401"], 0x20}}, 0x0) 1.396057797s ago: executing program 1 (id=1669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x488180, 0x0) close(r4) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) (async) close(0x3) (async) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) (async) r12 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001400b59500000000000000b1fde0000a4000003a3ef392829eee6e68e5f1dffe9212334a6ff59bab8b64550c4168ffbb190bd91088ad07f3766daab0913fc3bfb887cb91b0345e81d7e55a8469b655e87923fe8655c528de9a235a2af9c07900dd25ddf7c19c18c1e7aa157c4ef1c9854fd9106e827fe54ec4a14da326458d686135bd31be70a057d86dc68c84b03762658e086dbba59a6f332f69f663fc5ffee5183e06094cd1d9770930cded64c813114247c6379ad395904fe98ed20c791bdc0f5f149d9795638341", @ANYRES32=r13, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) 1.350109004s ago: executing program 0 (id=1670): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) syz_emit_ethernet(0x82, &(0x7f0000000a40)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527a", 0x4c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x73}], {{}, {}, {}, {0x8, 0x88be, 0x1}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100"], 0xd8}}, 0x80) 1.317894464s ago: executing program 2 (id=1672): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x3, 0x1}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$inet_udplite(0x2, 0x2, 0x88) socket$pptp(0x18, 0x1, 0x2) socket(0x10, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES8=r4], 0x30}}, 0x94) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) 1.181725451s ago: executing program 0 (id=1673): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="880ad36d166ce61427e493a400ff00000000710900000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1.181078611s ago: executing program 3 (id=1674): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xcc65}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0}]}}}]}, 0x54}}, 0x0) 1.143316457s ago: executing program 0 (id=1675): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b3"], 0x48) (async) r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t\n'], 0xa) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r3}, 0x10, &(0x7f0000000080)={&(0x7f0000000400)=@can={{0x0, 0x1, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "dcb016b7374b51bf"}, 0x10}, 0x2, 0x0, 0x0, 0x95}, 0x10044009) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x31, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', r3, 0x2f, 0xf9, 0x4, 0x9, 0x11, @loopback, @loopback, 0x40, 0x40, 0x5, 0x2}}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) (async) shutdown(r6, 0x0) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000000000)={0x1, 'geneve0\x00', {}, 0xf041}) (async) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x18, r10, 0xd, 0x0, 0x3, {0x1a}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r11, 0x3, 0x6, @remote}, 0x10) 1.1130127s ago: executing program 2 (id=1676): syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000206050000000000000000000000000a05000400000000000900020073797a30000000000c00078008000600000000d2050005000000000005000100060000000d000300686173683a6d6163"], 0x54}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x140c, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x6c7d4000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x404c000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x38, 0x1403, 0x100, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) 1.029324396s ago: executing program 3 (id=1677): r0 = socket(0x1d, 0x2, 0x6) (async) r1 = epoll_create(0x9660) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) (async, rerun: 32) close(r0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0, 0x4}, 0x94) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYRES32, @ANYRES16=r1, @ANYRES16=r2, @ANYRESHEX=r3, @ANYRES8=r0, @ANYRESHEX=r1], 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x8693520b55c7826d) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_open_procfs$namespace(0x0, 0x0) (async) unshare(0x6a040000) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x2, 0x1}, 0x10) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000200)=@req3={0x0, 0x1ff, 0xcf00000, 0x6, 0x401, 0x10000, 0x5}, 0x1c) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x541b, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000140)=""/81, 0x51, 0x326ca1e7, 0x8}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e20, @loopback}], 0x10) r9 = socket(0xa, 0x3, 0x1) setsockopt$MRT_TABLE(r9, 0x0, 0xcf, 0x0, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) (async) sendto$inet(r6, &(0x7f0000000000)='7', 0x34000, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e5, &(0x7f0000000340)="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") (async) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x56, 0x800000, 0x6, 0x8, 0x7}) 1.018053493s ago: executing program 1 (id=1678): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80003000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x384, r0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3624, 0x25}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x3}}}, @NL80211_ATTR_FRAME={0x1cc, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_a, @from_mac, {0x0, 0x1}, "", @void, @value=@ver_80211n={0x0, 0xbf8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0x52, "df53c8f99b80048b76eb8d9902d98152fadbc56526365fae0dc45da8989e62117e5f8ee6ebe391d830a000c8a08d5161249f6f68a12f9782a4ea5a31d504280424eae110be631119fcb16a540338f009dd33"}, {@device_a, @device_a, 0x3a, "f92101e759d28a2c1f4fdcf784ac30e85031b74548e1ea0c40071e377112329830576d3283103774a391c0a578a42b3c19c14b8980be7b2a8d0c"}, {@broadcast, @device_a, 0xf5, "9234bb962ab568de6edf8bd709a3b1f3e5421fc61096916ab6c77f9a5493cb34a4c3cecf8fb721bc38d0f38de18515ef125a9589b575d032bdbad999f428e086e4375afa3d079be3575de901d1de83049e7a960c3dae567b1abdaee7a652e48d5b810adf9817b2e3dda9153f967c01c9f4e59542d17f4eaf4e0411c0040095b41f59850f27eb4e7d556ac4aca3f2dd6206764bedf3904616ce50dc5ca936983c08c6cf9b334d987dd9826a25e33c0681d9707febfb8f87c489c59ff5c422a58c0970600fb8d9c5bdc518779dfbc8de9d9ab437877df9f1bd98d323fcfda8b53474942c13d9fa78f13ce8d57eb61d0ead281a47371a"}]}}, @NL80211_ATTR_FRAME={0x129, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7f}, @device_a, @device_a, @initial, {0x5, 0xffa}, @value=@ver_80211n={0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x10, 0x2a, @default, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x1, 0x0, {0xcbfc, 0x7, 0x0, 0x9, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x300, 0x9, 0x1}}, [{0xdd, 0x9c, "f7a7c05eaaf2e8470377c0eb41734ec3bd3589564f0b186f21fe3a2760adc4c9829a7bb8fd5760ba858a4cd4f545e1f1e682e2de46fd03e1f2f0f20d485e38bead68270a9012b069184bef79dba4f3bebdbe269095e64c9d52db9f3e1712536260ee14fc48c1fce42591901faa52828be49399c64dc5cd14a29b05439e0d75ee1fbf3e45aabf32914c2b471a792c2d1b8fb1f5a60fe38c4d38a78815"}, {0xdd, 0x47, "68c3e6efbb8bb526285e05fe9303988334044cc0098a15f7b600072ff49121a2531b266efe77c0d1237148652dfb026f330b8a2e52ec8f1d19d982e6bf9ca4393706b97f8de8b1"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x3c, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @broadcast, @broadcast, @random="1735347bc5db", {0x6, 0x1}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x14, {0x1, 0x0, @void, @void, @val="63e826951a93d6cd9c2287f5b4bf775c"}}}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1a}]}, 0x384}, 0x1, 0x0, 0x0, 0x854}, 0x440000d1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="54010000210001000000000000000000e0000001000000000000000000000000e00000010000000000000000000000000000000000000000000000000000000068c1e086931e949afed3793d657b1298eb0da704ad21b1318743acdbe222b52f1052db957798e69c9af68217dfad23bfe23d929fa7be4d19f0cbaac0219819cf668a4cce173f4dbfeb74200b13f6501c0cd54dad248012340865786f4d590b8c221f4c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001c0004000000000000000000e0000002000000000000000000000000e8001100"], 0x154}}, 0x0) 985.057471ms ago: executing program 3 (id=1679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000028000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000000020000000000000070018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000014000700b5020000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xb, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0xb}, {0x20, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x6}]}) 923.661398ms ago: executing program 0 (id=1680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000004080001400000000014000000110001"], 0x68}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}]}]}]}], {0x14}}, 0x80}}, 0x4000000) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 821.492028ms ago: executing program 1 (id=1681): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg(0xffffffffffffffff, &(0x7f0000009d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x20}}], 0x1, 0x4000400) socketpair(0x2c, 0x5, 0x2, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r2}, 0x38) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0xfdef) 819.915577ms ago: executing program 2 (id=1682): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000100)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001400"/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f00000002c0)="08001ebbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r8 = accept(r6, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) writev(r7, &(0x7f0000002640)=[{&(0x7f00000001c0)="80aceb0fe4", 0x5}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r8}, 0x47) recvmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r12 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x7}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r12, 0x84, 0x77, &(0x7f0000000200)={r13, 0x800, 0x8, [0xf, 0xa7c, 0x4918, 0x3, 0x0, 0x7, 0x6, 0x0]}, &(0x7f0000000240)=0x18) connect$netrom(r12, &(0x7f0000000480)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 818.524184ms ago: executing program 4 (id=1683): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x44}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e30080670000ec67838717bd86dd", 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r4, @ANYBLOB="18002f00000008000100"/24], 0x34}}, 0x44040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r5 = socket$kcm(0x2d, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)=0x0) unshare(0x2a020480) r8 = socket(0xa, 0x3, 0x3a) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2711, @hyper}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES16, @ANYRESDEC], 0x38}}, 0x0) write$cgroup_pid(r5, &(0x7f0000000280)=r7, 0x12) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r6) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="fba70000e80000867f0004"], 0x14}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r12, &(0x7f00000002c0)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000040)="8ece37b4e2d66e5245eb5b9b5d371c", 0xf}], 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r11}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 646.979868ms ago: executing program 1 (id=1684): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0xb722, 0x2b, 0x643, 0x1, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) 543.82802ms ago: executing program 3 (id=1685): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xec0}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) (async) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c, 0x800) sendmsg$inet(r3, &(0x7f0000001440)={&(0x7f0000000280)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f00000013c0)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000002c0)="26768b5d5e0e939c7fc94836cc48c3c076691926c000bbcfd0fe94e18ddf825ca1cce8bad4e33f10ba3b033ad5658ae65127df99fef5cff214aa1bcef516467f43b0ebb1b90c257624bdd4635decf21707c7d9010466e792c5c7429702bad1bbbee607773085aef3", 0x68}], 0x2, &(0x7f0000001400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7f}}], 0x18}, 0x40000) (async) r4 = socket$inet_icmp(0x2, 0x2, 0x1) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001480)={0x0}, &(0x7f00000014c0)=0xc) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000001500)=r5) (async) sendmmsg(r0, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="25aa6ebff965", 0x6}], 0x1}}], 0x1, 0x44810) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) (async) r6 = accept$ax25(0xffffffffffffffff, &(0x7f0000001540)={{0x3, @null}, [@remote, @bcast, @null, @bcast, @rose, @null, @remote, @default]}, &(0x7f00000015c0)=0x48) ioctl$SIOCAX25GETINFO(r6, 0x89ed, &(0x7f0000001600)) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000002a40)={0x9, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) connect$qrtr(r8, &(0x7f0000000040), 0xc) r10 = socket$qrtr(0x2a, 0x2, 0x0) (async) read(r8, &(0x7f0000000180)=""/119, 0x77) connect$qrtr(r10, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r8, 0x8916, 0x0) (async) writev(r10, &(0x7f0000000340)=[{&(0x7f0000000380)='Q', 0x1}], 0x1) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000100)="18c39fc5446e725295ce860be5c1ab7e01a2de50c005c55298d1211481c203471ebd1b5f08f0fde28c0cd09f724e490ddeb4f26ec0987289bbacc4eb36eaf561a980bd944f5d1c26d5d914903e25152c7606a7093b05ef6cccf05081bc3f8ba4646b8b37e1cf1a47", 0x68) 529.957005ms ago: executing program 2 (id=1686): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="880ad36d166ce61427e493a400ff00000000710900000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 468.19774ms ago: executing program 0 (id=1687): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffffffffffffff080041000030000000000067907800000000ff2100907812000228250000090000df00000000279f454300e0000002e0000000"], 0x0) (async, rerun: 32) r0 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x1, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x18, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffb}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @map_fd, @map_val={0x18, 0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000005c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async, rerun: 32) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000880)={&(0x7f0000000340)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000600)="a39de0103385", 0x6}, {&(0x7f0000000740)="7aeefbeda1da7f18bc167559a82617e690181a6d732dc20b8c82eaa306dee94454b15ce15b244222a4668eb73ec90f63b69de9b22272edf0504d6bdb20365830a4a55ac5f9d1272064c0d541d77464eed967565bb6f6be8c5129aa4f5fef7df3fecd54d168f2deb0bf8aeb7e2cb1c76b6dd07943f23bf9abca9d18c4d2a4ad851af00b6da9a68d2fb9629bc033f56b90", 0x90}, {&(0x7f00000008c0)="5e2b5f580d8b8dd6c96e35d71e29c4173c1ad4987cdd160ea4fb318fc77c393a2ebd1ec2ec676c646e49239061e2514bdb60f6aac10c4216a758238928", 0x3d}], 0x3, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x435}}], 0x30}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000001e5ffff0800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x400c4) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1e, 0x80000001, 0x0, 0x446, 0x40021, r5, 0x6, '\x00', r8, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={0xffffffffffffffff, r10}, 0xc) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) (async, rerun: 64) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"/278], 0x110}}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r10}, 0xc) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 467.105402ms ago: executing program 1 (id=1688): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000980)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7fb}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) readv(r5, &(0x7f0000000480)=[{&(0x7f0000000880)=""/232, 0xe8}], 0x1) (async) readv(r5, &(0x7f0000000480)=[{&(0x7f0000000880)=""/232, 0xe8}], 0x1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000500), 0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xdc}, 0x2000) pwrite64(r7, 0x0, 0x0, 0x1fb) (async) pwrite64(r7, 0x0, 0x0, 0x1fb) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f0000000440)=0xfffffffd, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r9, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg$sock(r9, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x1}}], 0x2, 0x4) (async) sendmmsg$sock(r9, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x1}}], 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x24, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3ff}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000280)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xa, 0x3b3f, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000300), &(0x7f0000000340)=[{0x2, 0x2, 0x8, 0x5}, {0x4, 0x2, 0x3, 0x1}, {0x2, 0x1, 0x6}]}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x24, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3ff}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000280)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xa, 0x3b3f, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000300), &(0x7f0000000340)=[{0x2, 0x2, 0x8, 0x5}, {0x4, 0x2, 0x3, 0x1}, {0x2, 0x1, 0x6}]}, 0x94) 393.468824ms ago: executing program 2 (id=1689): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r10, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 362.97119ms ago: executing program 4 (id=1690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b004000000000000003000000000000000800010002000000"], 0x20}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x6, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000300)={'syztnl0\x00', r5, 0x8, 0x20, 0x2, 0x15, {{0x30, 0x4, 0x3, 0x2, 0xc0, 0x68, 0x0, 0xe, 0x29, 0x0, @multicast1, @local, {[@cipso={0x86, 0x40, 0x0, [{0x0, 0x5, "d1db92"}, {0x5, 0x8, "846b1db1f38f"}, {0x2, 0x2}, {0x1, 0x8, "c8f97a0527d0"}, {0x6, 0x12, "c2df2c3495b7bede3cfdc0b7b608fc8d"}, {0x2, 0x5, "749c14"}, {0x2, 0xc, "7f6f42b2054e97f49a4f"}]}, @noop, @lsrr={0x83, 0x7, 0x5c, [@broadcast]}, @ssrr={0x89, 0x1b, 0xee, [@loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @multicast2, @private=0xa010102, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xc0, 0x1, 0x3, [{@broadcast, 0x3}, {@private=0xa010101, 0x9}, {@broadcast, 0x7}, {@loopback, 0x1ff}]}, @ssrr={0x89, 0x7, 0x4a, [@loopback]}, @ssrr={0x89, 0x17, 0xfd, [@private=0xa010100, @empty, @broadcast, @rand_addr=0x64010100, @private=0xa010102]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000001300)={0x6a8, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'fw\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '..,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '*,.@*(&.\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x16}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'multiq\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x7f, 0x4, "0ff6d6fb1f1c210fa7eb4d16882075b1cef62916874a8530f7ae643397a6021b4f24abb61385aea58c13b3cbebbd25f3abf60f1c5aac22f03a24393b3264070b429362ebcb132e1d52630cb790f32f791faeb5c494ba83d91074c51eaa3416d411f4099eb2368765cef864554dfae716c97fdfe98f02be6bf5def6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "f0bb3de788feea7d9b6067597852672cba9b612a6716eab30998e065bbe90557512dca7993d418909f1de11c5a86b96764847f9fec34bbad54b0d135dde2a5b1f39e22feaab9c98a61d6f2c277fbd5982432d437e766"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vlan\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x4a, 0x5, "745ab6830a37458a01484e41e32c0b1a23c0a400e83304a0410c04553338ac5e5887386f8784ed1e9d9d9d88542f0353301a330f6dd215f8e35c29b4ee304d79b1633c3655b4"}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'dJ@,\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '.%$+(-!$\xd7/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd0b0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6cba}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x16, 0x4, "077a3606348c207989a885ee49029bac9f55"}, @ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "ca9f4f3faf4596cb7e74f787ca0925aaebb07c7db2fe8282d4274949bdab4223fcc99d41d495d33687c8249554ff488e1f8fe1b9f482499faf52f563a21416b0b1c6a88c65067ad29231af08601d3b191ea745dc10ff585f598c74533e04f4fc391c3a33c5db496bebe8c7e04e5c6e2af9c3a8e9b984ec1dfcdfc82d535faa9ad7ee57f4c5b06dcc1650e5bbbc0de8b6e769f6ea338b4631"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'fw\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xa6^\\$\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xb9, 0x5, "635b9c07e4503b2c89829898d4c07597426ac9e496c00c0884cecfc6588fbafb03936d097954fd5d93d4b12e6a59a77460d601346a66b7ccd3320500d25a3f834e0032da36018e99e23b4890f0c0023411895bec19dc4f0c8c6952ba02359b4a5bc6a9379b17bd4bccc2d97b9278b66ef1b444aaca8fcd0f1ef9258ad689f1b4ec51c6a693d0fd18fc76309282760c54a1646146fbb7d236619e7f6c3701db989bad0ec911d8497d399465e27b7108d82c4bc55859"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x99}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'multiq\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd84}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'multiq\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x6a8}, 0x1, 0x0, 0x0, 0xc000}, 0x20000008) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000002e00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x1002, &(0x7f00000017c0)=""/4098, 0x40f00}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) 261.513225ms ago: executing program 3 (id=1691): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x201, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x10}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x4000000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, r4, 0x0, 0x1, 0x0, 0x49, "c46eb652a86bcf2c156e32baba4a765ccbe47b7b9aa6d8d701a3ba00295c0ca87800005e51a1ba263d0f9100", 0x3e}, 0x60) getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, &(0x7f0000000040)) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 180.969655ms ago: executing program 0 (id=1692): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800010000100000000000000200000000000009000000000600150006000000200016801c000280170002058a0921c85eb6316f6dda54a86a96f457ec462765632d1f1de76d5c0a22f631882c8943f29c0b689eb26660f496064b0613fb205f52d6f1a202589993deef904d64d89f83302b8b94bc5c16329a3ee47b6ecf5ffb48b86f5eb4cd3d1412cccb66de329e138943d5711cfbc8a843322cbb4eaa845479413571f412c643e962c2233fc192f373ff400000536e237895b8933196541cc4a4ad7fb6c1712d4d6915e8181560126a062936c11dec2dc20437c4631aa34a4352205ee2748c8d0500ec6f1108d912f33fd3c2242d4252d8a391d2452112bf9537c52d80a698d6e1b30430e6b6e771f3dbe01e021b76fb87d5c70000"], 0x44}}, 0x44890) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000300)=0x3598, 0x4) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@mcast1, 0x0, 0x32}, 0xa, @in6=@private1, 0x0, 0x1, 0x3, 0x2}]}]}, 0x1fc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000180)={@generic={0x26, "6eca868881c13e9202d18b4320e212c3c369df031932e63cf7e44244f9f1439a9e7f0fc6056c6ea434840f206019d3fa6d858500b1b39aa8a8f925ef8de49b1bc24f9ca2e2ca221889dcb93e21536556e1c45cb548ac0f5aa75063f8f748cde466d9001d09bfdbe5f40ff2e7d31e40fd11c981f39a53809f18b977f4c94e"}, {&(0x7f0000000c00)=""/4096, 0x1000}, &(0x7f0000000040), 0x20}, 0xa0) 151.169495ms ago: executing program 2 (id=1693): getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000240)=""/37, 0x25, 0x0, &(0x7f00000003c0)=""/237, 0xed}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xa3ab54105ced1d5, &(0x7f0000003900)=ANY=[@ANYRES8=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10, r1}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) (async) listen(0xffffffffffffffff, 0x0) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x726, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000340)={r3}) (async, rerun: 64) r5 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000640)=0x6d93, 0x4) sendmsg$sock(r5, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @remote, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x18, 0x1, 0x51, 0x1}}], 0x18}, 0x2004c0c1) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440099b8b29d88b8d13ec9000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4018000000000000240012800b00010062726964676500001400028005001600030000000800040000000000"], 0x44}}, 0x0) (rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 9.571968ms ago: executing program 3 (id=1694): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r2], 0x40}}, 0x0) close(0x4) sendmsg$nl_route(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x30}}, 0x0) 0s ago: executing program 4 (id=1695): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_simple={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x9, 0x3, 'vlan\x00'}, @TCA_DEF_PARMS={0x18}]}, {0xa, 0x6, "cddc3445408c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x8c}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4000044) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0), 0x0, 0x24000045) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012cbd7000fddbdf2508000000050038000100000008003400050000000800340002000000bd99c4feb9cc14673fc4bd27235ba4209fec727c715016ca9bb00bc0e6010ab0d6e7a0acb067cd263cc3c8f705d9db815b5c81334503ebda83f3d66267f5126b2abe445a33daafdc2716363c343d1fb039"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040080) shutdown(0xffffffffffffffff, 0x1) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300020c00070000000000007700000200080008000000fd000000000000000300060000000000be9555b2ac141436000000000000000006db0100000000000000d5000000000003000500000000000200000000000000e400000000000000"], 0x60}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r3) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r7, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x517a1add674e2882}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80010}, 0x8000) kernel console output (not intermixed with test programs): [ 123.932144][ T6646] vlan2: entered promiscuous mode [ 123.945989][ T6646] bond0: entered promiscuous mode [ 123.951072][ T6646] ÿ: entered promiscuous mode [ 123.968427][ T6646] bond_slave_1: entered promiscuous mode [ 123.978515][ T6646] vlan2: entered allmulticast mode [ 123.983778][ T6646] bond0: entered allmulticast mode [ 124.012017][ T6646] ÿ: entered allmulticast mode [ 124.026645][ T6646] bond_slave_1: entered allmulticast mode [ 124.350934][ T6673] net_ratelimit: 11 callbacks suppressed [ 124.350956][ T6673] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 124.433754][ T5848] IPVS: starting estimator thread 0... [ 124.537239][ T6679] IPVS: using max 27 ests per chain, 64800 per kthread [ 125.900435][ T6724] __nla_validate_parse: 3 callbacks suppressed [ 125.900465][ T6724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.200'. [ 125.932322][ T6724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.200'. [ 126.114555][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'. [ 126.328135][ T6729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.373966][ T6731] ip6tnl0 speed is unknown, defaulting to 1000 [ 126.395979][ T6729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.574416][ T6740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.755625][ T6742] syzkaller0: entered promiscuous mode [ 126.789109][ T6742] syzkaller0: entered allmulticast mode [ 127.146382][ T6756] tun0: tun_chr_ioctl cmd 21731 [ 127.324613][ T6760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.212'. [ 127.394096][ T6764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.212'. [ 127.408099][ T6764] bond0: option resend_igmp: invalid value (18446744072065384451) [ 127.417831][ T6764] bond0: option resend_igmp: allowed values 0 - 255 [ 127.522358][ T6760] veth1: mtu greater than device maximum [ 127.578583][ T6734] netlink: 248 bytes leftover after parsing attributes in process `syz.4.202'. [ 127.631396][ T6760] : entered promiscuous mode [ 127.726447][ T6777] Bluetooth: MGMT ver 1.23 [ 128.021181][ T6785] team_slave_0: entered promiscuous mode [ 128.027144][ T6785] team_slave_1: entered promiscuous mode [ 128.047967][ T6785] macsec1: entered promiscuous mode [ 128.053355][ T6785] team0: entered promiscuous mode [ 128.073241][ T6788] netlink: 4208 bytes leftover after parsing attributes in process `syz.2.218'. [ 129.178529][ T6808] validate_nla: 14 callbacks suppressed [ 129.178549][ T6808] netlink: 'syz.4.225': attribute type 4 has an invalid length. [ 129.248266][ T6810] netlink: 'syz.4.225': attribute type 4 has an invalid length. [ 129.276379][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.223'. [ 129.367671][ T6816] netlink: 52 bytes leftover after parsing attributes in process `syz.1.227'. [ 129.399312][ T6811] netlink: 'syz.0.223': attribute type 9 has an invalid length. [ 129.427878][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 129.798418][ T6834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.849276][ T6821] IPv6: Can't replace route, no match found [ 130.053757][ T6834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.169433][ T6823] ip6tnl0 speed is unknown, defaulting to 1000 [ 133.099177][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.987338][ T6870] __nla_validate_parse: 1 callbacks suppressed [ 185.987360][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 186.061187][ T6870] tc_dump_action: action bad kind [ 186.339256][ T6856] team0: Port device team_slave_0 removed [ 186.374662][ T6856] team0: Failed to send options change via netlink (err -105) [ 186.383503][ T6856] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 186.410512][ T6856] team0: Port device team_slave_1 removed [ 186.448227][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.515862][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.771620][ T6882] netlink: 'syz.2.245': attribute type 4 has an invalid length. [ 186.989938][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 187.098851][ T6893] vlan2: entered promiscuous mode [ 187.129750][ T6893] bond0: entered promiscuous mode [ 187.134934][ T6893] ÿ: entered promiscuous mode [ 187.140584][ T6893] bond_slave_1: entered promiscuous mode [ 187.185625][ T6899] netlink: 'syz.1.249': attribute type 10 has an invalid length. [ 187.224291][ T6890] bridge_slave_0: left allmulticast mode [ 187.270305][ T6890] bridge_slave_0: left promiscuous mode [ 187.284684][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.398595][ T6890] bridge_slave_1: left allmulticast mode [ 187.403859][ T6906] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 187.405262][ T6890] bridge_slave_1: left promiscuous mode [ 187.405564][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.535160][ T6890] bond0: (slave bond_slave_0): Releasing backup interface [ 187.603441][ T6890] bond0: (slave bond_slave_1): Releasing backup interface [ 187.704300][ T6890] team0: Port device team_slave_0 removed [ 187.782870][ T6890] team0: Port device team_slave_1 removed [ 187.795724][ T6890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.803560][ T6890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.822002][ T6890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.839999][ T6890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.881553][ T6895] tipc: Started in network mode [ 187.887843][ T6895] tipc: Node identity 7, cluster identity 1 [ 187.895648][ T6895] tipc: Node number set to 7 [ 187.903024][ T6895] tipc: Cannot configure node identity twice [ 187.961342][ T6899] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 187.993996][ T6912] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 188.014442][ T6912] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 188.421130][ T6928] tipc: Started in network mode [ 188.442637][ T6928] tipc: Node identity 268f3f99377c, cluster identity 4711 [ 188.466336][ T6928] tipc: Enabled bearer , priority 0 [ 188.516911][ T6929] netlink: 88 bytes leftover after parsing attributes in process `syz.4.254'. [ 188.564861][ T6941] syzkaller0: entered promiscuous mode [ 188.583173][ T6941] syzkaller0: entered allmulticast mode [ 188.911030][ T6950] caif0: mtu less than device minimum [ 188.953510][ T6926] tipc: Resetting bearer [ 189.074555][ T6926] tipc: Disabling bearer [ 189.099280][ T6956] netlink: 'syz.0.260': attribute type 2 has an invalid length. [ 189.244307][ T6949] ip6tnl0 speed is unknown, defaulting to 1000 [ 189.414992][ T6968] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20001 [ 189.480906][ T6968] syzkaller0: entered promiscuous mode [ 189.500502][ T6968] syzkaller0: entered allmulticast mode [ 189.582901][ T6968] tipc: Enabled bearer , priority 0 [ 189.631748][ T6967] tipc: Resetting bearer [ 189.798202][ T6967] tipc: Disabling bearer [ 190.381985][ T6992] netlink: 'syz.2.265': attribute type 3 has an invalid length. [ 190.904086][ T6934] netlink: 516 bytes leftover after parsing attributes in process `syz.1.257'. [ 191.032505][ T7019] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 191.469892][ T7026] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.274'. [ 191.495870][ T7001] ip6tnl0 speed is unknown, defaulting to 1000 [ 191.661131][ T7030] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.671926][ T7030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.275'. [ 191.804417][ T7033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.273'. [ 191.812826][ T7036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'. [ 191.891104][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 192.158932][ T7044] macvlan2: entered promiscuous mode [ 192.164476][ T7044] macvlan2: entered allmulticast mode [ 192.687479][ T7051] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 192.695182][ T7051] nbd: error processing sock list [ 192.733057][ T7051] block nbd0: shutting down sockets [ 193.124488][ T5986] IPVS: starting estimator thread 0... [ 193.134398][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 193.280909][ T7072] IPVS: using max 26 ests per chain, 62400 per kthread [ 193.281649][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 193.329848][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 193.391808][ T7073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.444463][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 194.542514][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.725579][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.301'. [ 194.826960][ T7135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.834309][ T7135] IPv6: NLM_F_CREATE should be set when creating new route [ 194.841600][ T7135] IPv6: NLM_F_CREATE should be set when creating new route [ 194.902156][ T7135] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 195.029499][ T7145] netlink: 'syz.3.307': attribute type 7 has an invalid length. [ 195.848788][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.004774][ T7183] bridge_slave_1 (unregistering): left allmulticast mode [ 196.024900][ T7183] bridge_slave_1 (unregistering): left promiscuous mode [ 196.050780][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.128658][ T7189] bridge: RTM_NEWNEIGH with invalid ether address [ 197.183370][ T7240] __nla_validate_parse: 3 callbacks suppressed [ 197.183391][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 197.434338][ T7248] netlink: 'syz.4.331': attribute type 1 has an invalid length. [ 197.492978][ T7248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.891526][ T7280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.338'. [ 197.911222][ T7280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.338'. [ 197.942731][ T7280] erspan0: entered promiscuous mode [ 197.951925][ T7280] gretap0: entered promiscuous mode [ 198.292234][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'. [ 198.310502][ T7288] netlink: 248 bytes leftover after parsing attributes in process `syz.1.340'. [ 198.577099][ T7303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.631895][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 198.893248][ T7309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.900880][ T7309] batadv0: mtu less than device minimum [ 198.912478][ T7309] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.923905][ T7309] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.935241][ T7309] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.947200][ T7309] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.958873][ T7309] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.970359][ T7309] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.982065][ T7309] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.994092][ T7309] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.085157][ T7309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.338744][ T7323] netlink: 'syz.2.347': attribute type 1 has an invalid length. [ 199.566880][ T7329] vlan3: entered allmulticast mode [ 199.577386][ T7329] bond2: entered allmulticast mode [ 199.632398][ T7345] ÿ: renamed from bond_slave_0 [ 199.652238][ T4877] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 199.710106][ T7342] rdma_rxe: rxe_newlink: failed to add lo [ 199.804561][ T7350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.356'. [ 200.567781][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 200.591204][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 200.849788][ T7383] tipc: Enabled bearer , priority 0 [ 200.858390][ T7383] syzkaller0: entered promiscuous mode [ 200.863905][ T7383] syzkaller0: entered allmulticast mode [ 200.891452][ T7383] tipc: Resetting bearer [ 200.903008][ T7382] tipc: Resetting bearer [ 200.929480][ T7382] tipc: Disabling bearer [ 201.027938][ T7385] netlink: 240 bytes leftover after parsing attributes in process `syz.4.368'. [ 201.075599][ T7387] netlink: 'syz.4.369': attribute type 1 has an invalid length. [ 201.293486][ T7400] ÿ: renamed from bond_slave_0 [ 201.380256][ T7404] netlink: 'syz.4.374': attribute type 1 has an invalid length. [ 201.485003][ T7409] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20002 [ 201.758016][ T7411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.769941][ T7415] ip6tnl0 speed is unknown, defaulting to 1000 [ 202.003769][ T7429] batadv1: entered allmulticast mode [ 202.022157][ T7429] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 202.065169][ T7431] bridge1: entered promiscuous mode [ 202.071841][ T7431] bridge1: entered allmulticast mode [ 202.091650][ T7431] team0: Port device bridge1 added [ 202.254353][ T7437] netlink: 'syz.3.385': attribute type 1 has an invalid length. [ 202.263614][ T7437] __nla_validate_parse: 6 callbacks suppressed [ 202.263634][ T7437] netlink: 36 bytes leftover after parsing attributes in process `syz.3.385'. [ 202.263705][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 202.552875][ T7414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.833259][ T7457] syz.0.393 uses old SIOCAX25GETINFO [ 202.916118][ T7455] ip6tnl0 speed is unknown, defaulting to 1000 [ 203.761352][ T7486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.399'. [ 203.892872][ T7458] ip6tnl0 speed is unknown, defaulting to 1000 [ 204.675640][ T7517] netlink: 'syz.3.407': attribute type 13 has an invalid length. [ 204.691224][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 204.699749][ T7508] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.708031][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.740707][ T7518] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001 [ 205.355146][ T7508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.535663][ T7508] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 205.554089][ T7508] vlan2: left promiscuous mode [ 205.559665][ T7508] bond0: left promiscuous mode [ 205.564546][ T7508] ÿ: left promiscuous mode [ 205.569598][ T7508] bond_slave_1: left promiscuous mode [ 205.575304][ T7508] vlan2: left allmulticast mode [ 205.580462][ T7508] bond0: left allmulticast mode [ 205.585338][ T7508] ÿ: left allmulticast mode [ 205.590365][ T7508] bond_slave_1: left allmulticast mode [ 205.597632][ T7508] team0: left promiscuous mode [ 205.602433][ T7508] team_slave_0: left promiscuous mode [ 205.611351][ T7508] team_slave_1: left promiscuous mode [ 205.618003][ T7508] macsec1: left promiscuous mode [ 205.636374][ T5986] ip6tnl0 speed is unknown, defaulting to 1000 [ 205.643768][ T5986] syz0: Port: 1 Link DOWN [ 205.735731][ T6076] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.753341][ T6076] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.771979][ T7494] ip6tnl0 speed is unknown, defaulting to 1000 [ 205.780600][ T6076] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.838000][ T5986] ip6tnl0 speed is unknown, defaulting to 1000 [ 205.839923][ T6076] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.262857][ T7532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 206.337992][ T7532] bridge1: port 1(veth0_to_bond) entered blocking state [ 206.352404][ T7532] bridge1: port 1(veth0_to_bond) entered disabled state [ 206.366456][ T7532] veth0_to_bond: entered allmulticast mode [ 206.462538][ T7532] veth0_to_bond: entered promiscuous mode [ 206.699360][ T7536] netlink: 272 bytes leftover after parsing attributes in process `syz.3.415'. [ 207.756361][ T7570] C: renamed from lo (while UP) [ 207.790317][ T7570] net_ratelimit: 13 callbacks suppressed [ 207.790351][ T7570] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 207.846282][ T7551] ip6tnl0 speed is unknown, defaulting to 1000 [ 208.323411][ T7589] syzkaller0: entered promiscuous mode [ 208.356954][ T7589] syzkaller0: entered allmulticast mode [ 208.382693][ T7588] tipc: Enabled bearer , priority 0 [ 208.455032][ T7588] tipc: Resetting bearer [ 208.516012][ T7588] tipc: Disabling bearer [ 208.610887][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'. [ 208.661935][ T7598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.668658][ T7602] netlink: 'syz.3.432': attribute type 1 has an invalid length. [ 208.668682][ T7602] netlink: 224 bytes leftover after parsing attributes in process `syz.3.432'. [ 208.692624][ T7596] netlink: 'syz.4.430': attribute type 28 has an invalid length. [ 208.730371][ T7603] macvlan3: entered promiscuous mode [ 208.738639][ T7603] macvlan3: entered allmulticast mode [ 209.153036][ T7624] netlink: 14 bytes leftover after parsing attributes in process `syz.0.438'. [ 209.489861][ T7624] bond0 (unregistering): (slave 77ÿ): Releasing backup interface [ 209.502794][ T7624] ÿ: left promiscuous mode [ 209.522833][ T7624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.533177][ T7624] bond_slave_1: left promiscuous mode [ 209.545564][ T7624] bond0 (unregistering): Released all slaves [ 209.608009][ T7627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.616102][ T7631] netlink: 56 bytes leftover after parsing attributes in process `syz.3.440'. [ 209.858504][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.001169][ T7637] batman_adv: batadv0: Interface deactivated: dummy0 [ 210.812424][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.347541][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.368438][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.390041][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.410359][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.504059][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 211.532592][ T7671] sctp: [Deprecated]: syz.0.447 (pid 7671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.532592][ T7671] Use struct sctp_sack_info instead [ 211.881124][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 211.942254][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'. [ 211.952821][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'. [ 212.020643][ T7685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.135287][ T7691] trusted_key: syz.3.454 sent an empty control message without MSG_MORE. [ 212.373001][ T7704] netlink: 27 bytes leftover after parsing attributes in process `syz.0.457'. [ 212.409364][ T7707] syzkaller0: entered promiscuous mode [ 212.414975][ T7707] syzkaller0: entered allmulticast mode [ 212.440993][ T7706] netlink: 48 bytes leftover after parsing attributes in process `syz.4.459'. [ 212.521037][ T7712] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 213.209807][ T7722] ip6tnl0 speed is unknown, defaulting to 1000 [ 213.902340][ T7749] __nla_validate_parse: 1 callbacks suppressed [ 213.902375][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 213.938544][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 214.192492][ T7757] !: renamed from dummy0 [ 214.323038][ T7759] tipc: Started in network mode [ 214.331624][ T7759] tipc: Node identity e648ab8434e6, cluster identity 4711 [ 214.343542][ T7759] tipc: Enabled bearer , priority 0 [ 214.367067][ T7761] syzkaller0: entered promiscuous mode [ 214.374175][ T7761] syzkaller0: entered allmulticast mode [ 214.539412][ T7754] tipc: Resetting bearer [ 214.560439][ T7752] tipc: Resetting bearer [ 214.645139][ T7752] tipc: Disabling bearer [ 214.835882][ T7760] ip6tnl0 speed is unknown, defaulting to 1000 [ 215.051944][ T7769] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 215.185970][ T7772] veth1: mtu greater than device maximum [ 215.724794][ T7789] tipc: Enabled bearer , priority 0 [ 215.734639][ T7789] syzkaller0: entered promiscuous mode [ 215.765122][ T7789] syzkaller0: entered allmulticast mode [ 215.852294][ T7789] tipc: Resetting bearer [ 216.410613][ T7783] tipc: Resetting bearer [ 216.433415][ T7783] tipc: Disabling bearer [ 216.741760][ T7836] netlink: 68 bytes leftover after parsing attributes in process `syz.1.490'. [ 216.829226][ T7836] tipc: Enabled bearer , priority 0 [ 216.840372][ T7836] syzkaller0: entered promiscuous mode [ 216.853677][ T7836] syzkaller0: entered allmulticast mode [ 216.938385][ T7833] tipc: Resetting bearer [ 216.998322][ T7833] tipc: Disabling bearer [ 217.041329][ T7845] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 217.097241][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 217.097912][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 217.103488][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 217.198765][ T5855] Bluetooth: hci4: link tx timeout [ 217.202422][ T7862] nbd: must specify at least one socket [ 217.204396][ T5855] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 217.219828][ T5855] Bluetooth: hci4: link tx timeout [ 217.225007][ T5855] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 217.235369][ T7863] nbd: must specify at least one socket [ 217.247404][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 217.556534][ T7881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.506'. [ 217.712336][ T7881] nbd: socks must be embedded in a SOCK_ITEM attr [ 218.494355][ T7916] netlink: 36 bytes leftover after parsing attributes in process `syz.3.512'. [ 218.697008][ T7922] syz_tun: entered allmulticast mode [ 218.749746][ T7921] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20001 [ 218.792226][ T7920] syz_tun: left allmulticast mode [ 218.802863][ T7925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.515'. [ 219.257280][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 219.923042][ T7965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.527'. [ 220.435711][ T7984] netlink: 'syz.3.533': attribute type 39 has an invalid length. [ 220.464691][ T7984] veth0_macvtap: left promiscuous mode [ 220.681520][ T7987] ip6tnl0 speed is unknown, defaulting to 1000 [ 221.580551][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 221.924134][ T8041] netlink: 'syz.0.549': attribute type 10 has an invalid length. [ 222.699342][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'. [ 222.745399][ T8067] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 223.726854][ T7655] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 223.906319][ T6076] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.031119][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 224.456113][ T7655] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.458720][ T8137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.667824][ T8148] IPv6: sit1: Disabled Multicast RS [ 224.936542][ T6076] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.962434][ T6076] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 225.069550][ T8166] netlink: 'syz.1.588': attribute type 8 has an invalid length. [ 225.080707][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 225.109899][ T8168] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 225.230513][ T8168] tipc: Enabled bearer , priority 0 [ 225.251024][ T8168] syzkaller0: entered promiscuous mode [ 225.283978][ T8168] syzkaller0: entered allmulticast mode [ 225.308703][ T8172] batadv2: entered promiscuous mode [ 225.335690][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 225.348511][ T8167] tipc: Resetting bearer [ 225.448050][ T8167] tipc: Disabling bearer [ 225.649069][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'. [ 225.737793][ T5936] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 225.820265][ T8194] netlink: 192 bytes leftover after parsing attributes in process `syz.2.596'. [ 225.841074][ T8194] netlink: zone id is out of range [ 225.850000][ T8194] netlink: zone id is out of range [ 225.864439][ T8194] netlink: zone id is out of range [ 225.883406][ T8194] netlink: zone id is out of range [ 225.902289][ T8194] netlink: zone id is out of range [ 225.926604][ T8194] netlink: zone id is out of range [ 225.946737][ T8194] netlink: zone id is out of range [ 225.962983][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 226.144959][ T8205] FAULT_INJECTION: forcing a failure. [ 226.144959][ T8205] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 226.185881][ T8205] CPU: 1 UID: 0 PID: 8205 Comm: syz.4.599 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 226.185914][ T8205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.185925][ T8205] Call Trace: [ 226.185933][ T8205] [ 226.185942][ T8205] dump_stack_lvl+0x189/0x250 [ 226.185971][ T8205] ? __pfx____ratelimit+0x10/0x10 [ 226.186000][ T8205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.186021][ T8205] ? __pfx__printk+0x10/0x10 [ 226.186046][ T8205] ? __might_fault+0xb0/0x130 [ 226.186089][ T8205] should_fail_ex+0x414/0x560 [ 226.186125][ T8205] _copy_from_user+0x2d/0xb0 [ 226.186154][ T8205] __sys_bpf+0x1ed/0x870 [ 226.186193][ T8205] ? __pfx___sys_bpf+0x10/0x10 [ 226.186235][ T8205] ? ksys_write+0x22a/0x250 [ 226.186265][ T8205] ? __pfx_ksys_write+0x10/0x10 [ 226.186289][ T8205] ? rcu_is_watching+0x15/0xb0 [ 226.186327][ T8205] __x64_sys_bpf+0x7c/0x90 [ 226.186352][ T8205] do_syscall_64+0xfa/0x3b0 [ 226.186379][ T8205] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.186405][ T8205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.186424][ T8205] ? clear_bhb_loop+0x60/0xb0 [ 226.186453][ T8205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.186471][ T8205] RIP: 0033:0x7fa3acf8eb69 [ 226.186489][ T8205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.186506][ T8205] RSP: 002b:00007fa3ade72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.186528][ T8205] RAX: ffffffffffffffda RBX: 00007fa3ad1b5fa0 RCX: 00007fa3acf8eb69 [ 226.186542][ T8205] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 226.186555][ T8205] RBP: 00007fa3ade72090 R08: 0000000000000000 R09: 0000000000000000 [ 226.186566][ T8205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.186578][ T8205] R13: 0000000000000000 R14: 00007fa3ad1b5fa0 R15: 00007ffcf466d008 [ 226.186611][ T8205] [ 226.422258][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 226.587891][ T8213] netlink: 'syz.4.602': attribute type 21 has an invalid length. [ 227.077425][ T8243] FAULT_INJECTION: forcing a failure. [ 227.077425][ T8243] name failslab, interval 1, probability 0, space 0, times 1 [ 227.122980][ T8243] CPU: 0 UID: 0 PID: 8243 Comm: syz.2.612 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 227.123011][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.123022][ T8243] Call Trace: [ 227.123029][ T8243] [ 227.123038][ T8243] dump_stack_lvl+0x189/0x250 [ 227.123065][ T8243] ? __pfx____ratelimit+0x10/0x10 [ 227.123093][ T8243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.123113][ T8243] ? __pfx__printk+0x10/0x10 [ 227.123145][ T8243] ? __pfx___might_resched+0x10/0x10 [ 227.123173][ T8243] ? fs_reclaim_acquire+0x7d/0x100 [ 227.123199][ T8243] should_fail_ex+0x414/0x560 [ 227.123235][ T8243] should_failslab+0xa8/0x100 [ 227.123256][ T8243] __kmalloc_noprof+0xcb/0x4f0 [ 227.123284][ T8243] ? bpf_test_init+0xc2/0x170 [ 227.123317][ T8243] bpf_test_init+0xc2/0x170 [ 227.123349][ T8243] bpf_prog_test_run_skb+0x1e9/0x1560 [ 227.123376][ T8243] ? __fget_files+0x2a/0x420 [ 227.123399][ T8243] ? __fget_files+0x2a/0x420 [ 227.123428][ T8243] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 227.123457][ T8243] bpf_prog_test_run+0x2c4/0x340 [ 227.123490][ T8243] __sys_bpf+0x581/0x870 [ 227.123520][ T8243] ? __pfx___sys_bpf+0x10/0x10 [ 227.123561][ T8243] ? ksys_write+0x22a/0x250 [ 227.123592][ T8243] ? __pfx_ksys_write+0x10/0x10 [ 227.123617][ T8243] ? rcu_is_watching+0x15/0xb0 [ 227.123655][ T8243] __x64_sys_bpf+0x7c/0x90 [ 227.123680][ T8243] do_syscall_64+0xfa/0x3b0 [ 227.123707][ T8243] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.123734][ T8243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.123753][ T8243] ? clear_bhb_loop+0x60/0xb0 [ 227.123778][ T8243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.123796][ T8243] RIP: 0033:0x7fd724d8eb69 [ 227.123815][ T8243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.123831][ T8243] RSP: 002b:00007fd725cb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.123861][ T8243] RAX: ffffffffffffffda RBX: 00007fd724fb5fa0 RCX: 00007fd724d8eb69 [ 227.123875][ T8243] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 227.123886][ T8243] RBP: 00007fd725cb4090 R08: 0000000000000000 R09: 0000000000000000 [ 227.123898][ T8243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.123909][ T8243] R13: 0000000000000000 R14: 00007fd724fb5fa0 R15: 00007fff58d95da8 [ 227.123942][ T8243] [ 227.138257][ T8245] syzkaller1: entered promiscuous mode [ 227.386036][ T8245] syzkaller1: entered allmulticast mode [ 227.681409][ T8266] netlink: 200 bytes leftover after parsing attributes in process `syz.2.620'. [ 227.707454][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 228.061868][ T8288] tipc: Enabled bearer , priority 0 [ 228.091810][ T8295] syzkaller1: entered promiscuous mode [ 228.104582][ T8295] syzkaller1: entered allmulticast mode [ 228.208926][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 228.235395][ T8298] ip6tnl0 speed is unknown, defaulting to 1000 [ 228.243474][ T8296] syzkaller0: entered promiscuous mode [ 228.265198][ T8296] syzkaller0: entered allmulticast mode [ 228.335170][ T8287] tipc: Resetting bearer [ 228.408733][ T8287] tipc: Disabling bearer [ 228.514657][ T8321] FAULT_INJECTION: forcing a failure. [ 228.514657][ T8321] name failslab, interval 1, probability 0, space 0, times 0 [ 228.565190][ T8321] CPU: 1 UID: 0 PID: 8321 Comm: syz.2.637 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 228.565220][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.565231][ T8321] Call Trace: [ 228.565239][ T8321] [ 228.565248][ T8321] dump_stack_lvl+0x189/0x250 [ 228.565275][ T8321] ? __pfx____ratelimit+0x10/0x10 [ 228.565302][ T8321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.565323][ T8321] ? __pfx__printk+0x10/0x10 [ 228.565355][ T8321] ? __pfx___might_resched+0x10/0x10 [ 228.565391][ T8321] should_fail_ex+0x414/0x560 [ 228.565429][ T8321] should_failslab+0xa8/0x100 [ 228.565449][ T8321] __kmalloc_noprof+0xcb/0x4f0 [ 228.565475][ T8321] ? sk_prot_alloc+0xe7/0x220 [ 228.565499][ T8321] sk_prot_alloc+0xe7/0x220 [ 228.565514][ T8321] ? sk_alloc+0x24/0x370 [ 228.565536][ T8321] sk_alloc+0x3a/0x370 [ 228.565553][ T8321] ? bpf_ctx_init+0x167/0x1d0 [ 228.565585][ T8321] bpf_prog_test_run_skb+0x2ed/0x1560 [ 228.565611][ T8321] ? __fget_files+0x2a/0x420 [ 228.565649][ T8321] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 228.565677][ T8321] bpf_prog_test_run+0x2c4/0x340 [ 228.565710][ T8321] __sys_bpf+0x581/0x870 [ 228.565744][ T8321] ? __pfx___sys_bpf+0x10/0x10 [ 228.565785][ T8321] ? ksys_write+0x22a/0x250 [ 228.565814][ T8321] ? __pfx_ksys_write+0x10/0x10 [ 228.565837][ T8321] ? rcu_is_watching+0x15/0xb0 [ 228.565876][ T8321] __x64_sys_bpf+0x7c/0x90 [ 228.565901][ T8321] do_syscall_64+0xfa/0x3b0 [ 228.565928][ T8321] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.565953][ T8321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.565972][ T8321] ? clear_bhb_loop+0x60/0xb0 [ 228.565995][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.566013][ T8321] RIP: 0033:0x7fd724d8eb69 [ 228.566032][ T8321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.566058][ T8321] RSP: 002b:00007fd725cb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.566080][ T8321] RAX: ffffffffffffffda RBX: 00007fd724fb5fa0 RCX: 00007fd724d8eb69 [ 228.566094][ T8321] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 228.566106][ T8321] RBP: 00007fd725cb4090 R08: 0000000000000000 R09: 0000000000000000 [ 228.566118][ T8321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.566130][ T8321] R13: 0000000000000000 R14: 00007fd724fb5fa0 R15: 00007fff58d95da8 [ 228.566164][ T8321] [ 228.918651][ T8329] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 228.937779][ T8329] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 229.025369][ T8332] netlink: 'syz.2.640': attribute type 10 has an invalid length. [ 229.034595][ T8332] netlink: 40 bytes leftover after parsing attributes in process `syz.2.640'. [ 229.151716][ T8332] team0: Port device geneve0 added [ 229.188749][ T5992] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.225590][ T5992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.257504][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 229.269356][ T5992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.297010][ T5992] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.782182][ T8358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.795117][ T8358] batadv_slave_0: entered promiscuous mode [ 229.920741][ T8367] tipc: Enabled bearer , priority 0 [ 230.055626][ T8379] syzkaller0: entered promiscuous mode [ 230.085305][ T8379] syzkaller0: entered allmulticast mode [ 230.133423][ T8382] netlink: 'syz.0.654': attribute type 29 has an invalid length. [ 230.191841][ T8387] veth1_vlan: entered allmulticast mode [ 230.723121][ T8366] tipc: Resetting bearer [ 230.779441][ T8366] tipc: Disabling bearer [ 230.975539][ T8435] vxcan1: entered allmulticast mode [ 230.990176][ T8438] __nla_validate_parse: 6 callbacks suppressed [ 230.990194][ T8438] netlink: 536 bytes leftover after parsing attributes in process `syz.2.666'. [ 231.443317][ T8459] netlink: 47 bytes leftover after parsing attributes in process `syz.3.671'. [ 231.568425][ T8457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.587761][ T8457] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.612086][ T8457] net_ratelimit: 31 callbacks suppressed [ 231.612099][ T8457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.749452][ T8470] netlink: 'syz.0.675': attribute type 3 has an invalid length. [ 231.759616][ T8470] netlink: 'syz.0.675': attribute type 6 has an invalid length. [ 231.768731][ T8470] netlink: 176 bytes leftover after parsing attributes in process `syz.0.675'. [ 231.779357][ T5936] ip6tnl0 speed is unknown, defaulting to 1000 [ 231.785656][ T5936] syz0: Port: 1 Link ACTIVE [ 231.807195][ T7649] ip6tnl0 speed is unknown, defaulting to 1000 [ 231.862768][ T8473] tipc: Enabled bearer , priority 0 [ 231.888651][ T8473] syzkaller0: entered promiscuous mode [ 231.894289][ T8473] syzkaller0: entered allmulticast mode [ 231.921651][ T8472] tipc: Resetting bearer [ 231.972085][ T8472] tipc: Disabling bearer [ 232.083165][ T8478] ip6tnl0 speed is unknown, defaulting to 1000 [ 232.286823][ T8483] netlink: 44 bytes leftover after parsing attributes in process `syz.4.680'. [ 232.331519][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'. [ 232.600309][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 232.665206][ T8496] netlink: 164 bytes leftover after parsing attributes in process `syz.1.684'. [ 232.684191][ T8496] netlink: 164 bytes leftover after parsing attributes in process `syz.1.684'. [ 232.698484][ T8496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.684'. [ 232.759652][ T8498] FAULT_INJECTION: forcing a failure. [ 232.759652][ T8498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.786031][ T8498] CPU: 0 UID: 0 PID: 8498 Comm: syz.0.685 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 232.786063][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.786074][ T8498] Call Trace: [ 232.786082][ T8498] [ 232.786091][ T8498] dump_stack_lvl+0x189/0x250 [ 232.786118][ T8498] ? __pfx____ratelimit+0x10/0x10 [ 232.786145][ T8498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.786165][ T8498] ? __pfx__printk+0x10/0x10 [ 232.786203][ T8498] should_fail_ex+0x414/0x560 [ 232.786240][ T8498] _copy_to_user+0x31/0xb0 [ 232.786269][ T8498] bpf_test_finish+0x1fd/0x700 [ 232.786308][ T8498] ? __pfx_bpf_test_finish+0x10/0x10 [ 232.786340][ T8498] ? slab_build_skb+0x273/0x3e0 [ 232.786374][ T8498] bpf_prog_test_run_skb+0xed5/0x1560 [ 232.786418][ T8498] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 232.786447][ T8498] bpf_prog_test_run+0x2c4/0x340 [ 232.786479][ T8498] __sys_bpf+0x581/0x870 [ 232.786508][ T8498] ? __pfx___sys_bpf+0x10/0x10 [ 232.786550][ T8498] ? ksys_write+0x22a/0x250 [ 232.786580][ T8498] ? __pfx_ksys_write+0x10/0x10 [ 232.786603][ T8498] ? rcu_is_watching+0x15/0xb0 [ 232.786642][ T8498] __x64_sys_bpf+0x7c/0x90 [ 232.786668][ T8498] do_syscall_64+0xfa/0x3b0 [ 232.786695][ T8498] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.786721][ T8498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.786742][ T8498] ? clear_bhb_loop+0x60/0xb0 [ 232.786766][ T8498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.786782][ T8498] RIP: 0033:0x7fc4dd98eb69 [ 232.786801][ T8498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.786818][ T8498] RSP: 002b:00007fc4de8ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.786841][ T8498] RAX: ffffffffffffffda RBX: 00007fc4ddbb5fa0 RCX: 00007fc4dd98eb69 [ 232.786867][ T8498] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 232.786879][ T8498] RBP: 00007fc4de8ac090 R08: 0000000000000000 R09: 0000000000000000 [ 232.786891][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.786902][ T8498] R13: 0000000000000000 R14: 00007fc4ddbb5fa0 R15: 00007ffc405e9538 [ 232.786934][ T8498] [ 233.282010][ T8501] netlink: 44 bytes leftover after parsing attributes in process `syz.1.686'. [ 233.328468][ T8501] netlink: 'syz.1.686': attribute type 5 has an invalid length. [ 233.714510][ T8518] tipc: Enabled bearer , priority 0 [ 233.881380][ T8523] tc_dump_action: action bad kind [ 233.892800][ T8526] syzkaller0: entered promiscuous mode [ 233.910770][ T8526] syzkaller0: entered allmulticast mode [ 234.009508][ T8526] caif0: mtu less than device minimum [ 234.186775][ T8537] FAULT_INJECTION: forcing a failure. [ 234.186775][ T8537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.216279][ T8537] CPU: 0 UID: 0 PID: 8537 Comm: syz.0.697 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 234.216310][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.216322][ T8537] Call Trace: [ 234.216330][ T8537] [ 234.216339][ T8537] dump_stack_lvl+0x189/0x250 [ 234.216365][ T8537] ? __pfx____ratelimit+0x10/0x10 [ 234.216393][ T8537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.216413][ T8537] ? __pfx__printk+0x10/0x10 [ 234.216440][ T8537] ? fs_reclaim_acquire+0x7d/0x100 [ 234.216470][ T8537] should_fail_ex+0x414/0x560 [ 234.216506][ T8537] prepare_alloc_pages+0x213/0x610 [ 234.216536][ T8537] __alloc_frozen_pages_noprof+0x123/0x370 [ 234.216563][ T8537] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 234.216599][ T8537] ? policy_nodemask+0x27c/0x720 [ 234.216626][ T8537] ? ima_match_policy+0x10b/0x2150 [ 234.216643][ T8537] ? look_up_lock_class+0x74/0x170 [ 234.216673][ T8537] alloc_pages_mpol+0x232/0x4a0 [ 234.216709][ T8537] vma_alloc_folio_noprof+0xe4/0x200 [ 234.216742][ T8537] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 234.216787][ T8537] folio_prealloc+0x30/0x180 [ 234.216819][ T8537] do_wp_page+0x1231/0x5800 [ 234.216871][ T8537] ? __pfx_do_wp_page+0x10/0x10 [ 234.216893][ T8537] ? do_raw_spin_lock+0x121/0x290 [ 234.216920][ T8537] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 234.216956][ T8537] __handle_mm_fault+0x1144/0x5620 [ 234.217007][ T8537] ? __pfx___handle_mm_fault+0x10/0x10 [ 234.217055][ T8537] ? find_vma+0xe7/0x160 [ 234.217090][ T8537] ? __pfx_find_vma+0x10/0x10 [ 234.217122][ T8537] handle_mm_fault+0x40a/0x8e0 [ 234.217162][ T8537] do_user_addr_fault+0x764/0x1390 [ 234.217211][ T8537] exc_page_fault+0x76/0xf0 [ 234.217240][ T8537] asm_exc_page_fault+0x26/0x30 [ 234.217258][ T8537] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 234.217280][ T8537] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 234.217296][ T8537] RSP: 0018:ffffc9000b5b7ac8 EFLAGS: 00050206 [ 234.217315][ T8537] RAX: ffffffff84c52101 RBX: 0000000000000e40 RCX: 0000000000000140 [ 234.217329][ T8537] RDX: 0000000000000000 RSI: ffff88804a1d4d40 RDI: 0000200000001000 [ 234.217341][ T8537] RBP: ffffc9000b5b7c08 R08: ffff88804a1d4e7f R09: 1ffff1100943a9cf [ 234.217354][ T8537] R10: dffffc0000000000 R11: ffffed100943a9d0 R12: 0000200000001140 [ 234.217367][ T8537] R13: 00007ffffffff000 R14: ffff88804a1d4040 R15: 0000200000000300 [ 234.217390][ T8537] ? _copy_to_user+0x11/0xb0 [ 234.217426][ T8537] _copy_to_user+0x8a/0xb0 [ 234.217453][ T8537] bpf_test_finish+0x1fd/0x700 [ 234.217494][ T8537] ? __pfx_bpf_test_finish+0x10/0x10 [ 234.217528][ T8537] ? slab_build_skb+0x273/0x3e0 [ 234.217561][ T8537] bpf_prog_test_run_skb+0xed5/0x1560 [ 234.217610][ T8537] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 234.217638][ T8537] bpf_prog_test_run+0x2c4/0x340 [ 234.217671][ T8537] __sys_bpf+0x581/0x870 [ 234.217699][ T8537] ? __pfx___sys_bpf+0x10/0x10 [ 234.217742][ T8537] ? ksys_write+0x22a/0x250 [ 234.217773][ T8537] ? __pfx_ksys_write+0x10/0x10 [ 234.217797][ T8537] ? rcu_is_watching+0x15/0xb0 [ 234.217834][ T8537] __x64_sys_bpf+0x7c/0x90 [ 234.217860][ T8537] do_syscall_64+0xfa/0x3b0 [ 234.217884][ T8537] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.217906][ T8537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.217921][ T8537] ? clear_bhb_loop+0x60/0xb0 [ 234.217941][ T8537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.217955][ T8537] RIP: 0033:0x7fc4dd98eb69 [ 234.217970][ T8537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.217982][ T8537] RSP: 002b:00007fc4de8ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.217998][ T8537] RAX: ffffffffffffffda RBX: 00007fc4ddbb5fa0 RCX: 00007fc4dd98eb69 [ 234.218009][ T8537] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 234.218019][ T8537] RBP: 00007fc4de8ac090 R08: 0000000000000000 R09: 0000000000000000 [ 234.218029][ T8537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.218038][ T8537] R13: 0000000000000000 R14: 00007fc4ddbb5fa0 R15: 00007ffc405e9538 [ 234.218064][ T8537] [ 234.644573][ T8516] tipc: Resetting bearer [ 234.696959][ T8540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.751659][ T8516] tipc: Disabling bearer [ 234.814609][ T8542] batman_adv: batadv0: Removing interface: 0! [ 234.825112][ T8542] bridge_slave_0: left allmulticast mode [ 234.833488][ T8542] bridge_slave_0: left promiscuous mode [ 234.843418][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.914505][ T8542] bond0: (slave 77ÿ): Releasing backup interface [ 234.924382][ T8542] bond0: (slave bond_slave_1): Releasing backup interface [ 234.973253][ T8542] team0: Port device team_slave_0 removed [ 235.021499][ T8542] team0: Port device team_slave_1 removed [ 235.048755][ T8542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.435686][ T8566] ip6tnl0 speed is unknown, defaulting to 1000 [ 236.017774][ T8577] ip6tnl0 speed is unknown, defaulting to 1000 [ 236.398092][ T8583] tipc: Enabled bearer , priority 0 [ 236.451445][ T8585] netlink: 'syz.1.714': attribute type 4 has an invalid length. [ 236.474333][ T8585] __nla_validate_parse: 7 callbacks suppressed [ 236.474354][ T8585] netlink: 152 bytes leftover after parsing attributes in process `syz.1.714'. [ 236.520832][ T8585] wlan1: mtu less than device minimum [ 236.552432][ T8589] syzkaller0: entered promiscuous mode [ 236.575609][ T8589] syzkaller0: entered allmulticast mode [ 236.636192][ T8576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.697603][ T8590] caif0: mtu less than device minimum [ 236.794356][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 236.808222][ T8598] netlink: 'syz.1.718': attribute type 1 has an invalid length. [ 236.823037][ T8598] netlink: 228 bytes leftover after parsing attributes in process `syz.1.718'. [ 236.834242][ T8598] NCSI netlink: No device for ifindex 0 [ 237.078395][ T5936] IPVS: starting estimator thread 0... [ 237.134001][ T8582] tipc: Resetting bearer [ 237.202934][ T8601] IPVS: using max 22 ests per chain, 52800 per kthread [ 237.217571][ T8582] tipc: Disabling bearer [ 237.452662][ T8610] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 237.454387][ T8609] IPVS: stopping backup sync thread 8610 ... [ 237.698509][ T8619] FAULT_INJECTION: forcing a failure. [ 237.698509][ T8619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.759720][ T8619] CPU: 0 UID: 0 PID: 8619 Comm: syz.1.725 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 237.759752][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.759764][ T8619] Call Trace: [ 237.759772][ T8619] [ 237.759780][ T8619] dump_stack_lvl+0x189/0x250 [ 237.759807][ T8619] ? __pfx____ratelimit+0x10/0x10 [ 237.759835][ T8619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.759855][ T8619] ? __pfx__printk+0x10/0x10 [ 237.759895][ T8619] should_fail_ex+0x414/0x560 [ 237.759933][ T8619] _copy_to_user+0x31/0xb0 [ 237.759963][ T8619] bpf_test_finish+0x24e/0x700 [ 237.760003][ T8619] ? __pfx_bpf_test_finish+0x10/0x10 [ 237.760048][ T8619] ? slab_build_skb+0x273/0x3e0 [ 237.760084][ T8619] bpf_prog_test_run_skb+0xed5/0x1560 [ 237.760130][ T8619] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 237.760158][ T8619] bpf_prog_test_run+0x2c4/0x340 [ 237.760190][ T8619] __sys_bpf+0x581/0x870 [ 237.760220][ T8619] ? __pfx___sys_bpf+0x10/0x10 [ 237.760261][ T8619] ? ksys_write+0x22a/0x250 [ 237.760292][ T8619] ? __pfx_ksys_write+0x10/0x10 [ 237.760317][ T8619] ? rcu_is_watching+0x15/0xb0 [ 237.760355][ T8619] __x64_sys_bpf+0x7c/0x90 [ 237.760382][ T8619] do_syscall_64+0xfa/0x3b0 [ 237.760411][ T8619] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.760437][ T8619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.760457][ T8619] ? clear_bhb_loop+0x60/0xb0 [ 237.760482][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.760500][ T8619] RIP: 0033:0x7f8bcbd8eb69 [ 237.760518][ T8619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.760534][ T8619] RSP: 002b:00007f8bccbb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.760556][ T8619] RAX: ffffffffffffffda RBX: 00007f8bcbfb5fa0 RCX: 00007f8bcbd8eb69 [ 237.760571][ T8619] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 237.760583][ T8619] RBP: 00007f8bccbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 237.760595][ T8619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.760607][ T8619] R13: 0000000000000000 R14: 00007f8bcbfb5fa0 R15: 00007ffeac517638 [ 237.760641][ T8619] [ 237.778147][ T8623] netlink: 'syz.2.726': attribute type 1 has an invalid length. [ 238.041905][ T8623] netlink: 'syz.2.726': attribute type 2 has an invalid length. [ 238.056677][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 238.252383][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.729'. [ 238.400412][ T8644] netlink: 'syz.0.732': attribute type 13 has an invalid length. [ 238.440068][ T8644] netlink: 'syz.0.732': attribute type 17 has an invalid length. [ 238.470425][ T8648] netlink: 32 bytes leftover after parsing attributes in process `syz.0.732'. [ 238.583333][ T8644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.663820][ T8652] tipc: Enabled bearer , priority 0 [ 238.673451][ T8652] syzkaller0: entered promiscuous mode [ 238.679116][ T8652] syzkaller0: entered allmulticast mode [ 238.699859][ T8652] caif0: mtu less than device minimum [ 238.736445][ T8651] tipc: Resetting bearer [ 238.801896][ T8661] netlink: 60 bytes leftover after parsing attributes in process `syz.0.737'. [ 238.813495][ T8651] tipc: Disabling bearer [ 238.817379][ T8662] netlink: 60 bytes leftover after parsing attributes in process `syz.0.737'. [ 238.849230][ T8666] FAULT_INJECTION: forcing a failure. [ 238.849230][ T8666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.863161][ T8666] CPU: 0 UID: 0 PID: 8666 Comm: syz.3.738 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 238.863191][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.863202][ T8666] Call Trace: [ 238.863210][ T8666] [ 238.863219][ T8666] dump_stack_lvl+0x189/0x250 [ 238.863245][ T8666] ? __pfx____ratelimit+0x10/0x10 [ 238.863274][ T8666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.863294][ T8666] ? __pfx__printk+0x10/0x10 [ 238.863335][ T8666] should_fail_ex+0x414/0x560 [ 238.863372][ T8666] _copy_to_user+0x31/0xb0 [ 238.863402][ T8666] bpf_test_finish+0x56f/0x700 [ 238.863441][ T8666] ? __pfx_bpf_test_finish+0x10/0x10 [ 238.863476][ T8666] ? slab_build_skb+0x273/0x3e0 [ 238.863510][ T8666] bpf_prog_test_run_skb+0xed5/0x1560 [ 238.863567][ T8666] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 238.863595][ T8666] bpf_prog_test_run+0x2c4/0x340 [ 238.863629][ T8666] __sys_bpf+0x581/0x870 [ 238.863658][ T8666] ? __pfx___sys_bpf+0x10/0x10 [ 238.863709][ T8666] ? ksys_write+0x22a/0x250 [ 238.863740][ T8666] ? __pfx_ksys_write+0x10/0x10 [ 238.863764][ T8666] ? rcu_is_watching+0x15/0xb0 [ 238.863803][ T8666] __x64_sys_bpf+0x7c/0x90 [ 238.863828][ T8666] do_syscall_64+0xfa/0x3b0 [ 238.863855][ T8666] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.863881][ T8666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.863900][ T8666] ? clear_bhb_loop+0x60/0xb0 [ 238.863923][ T8666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.863939][ T8666] RIP: 0033:0x7f3ef478eb69 [ 238.863961][ T8666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.863977][ T8666] RSP: 002b:00007f3ef5536038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.863998][ T8666] RAX: ffffffffffffffda RBX: 00007f3ef49b5fa0 RCX: 00007f3ef478eb69 [ 238.864012][ T8666] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 238.864025][ T8666] RBP: 00007f3ef5536090 R08: 0000000000000000 R09: 0000000000000000 [ 238.864037][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.864048][ T8666] R13: 0000000000000000 R14: 00007f3ef49b5fa0 R15: 00007ffe9adaebf8 [ 238.864080][ T8666] [ 239.387937][ T8674] ip6tnl0 speed is unknown, defaulting to 1000 [ 239.537955][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 239.547419][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'. [ 239.562203][ T8686] netlink: 'syz.1.745': attribute type 20 has an invalid length. [ 239.575544][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 239.586234][ T8687] netlink: 'syz.4.747': attribute type 2 has an invalid length. [ 239.608377][ T8686] netlink: 'syz.1.745': attribute type 20 has an invalid length. [ 240.332289][ T8716] tipc: Enabled bearer , priority 0 [ 240.344911][ T8716] syzkaller0: entered promiscuous mode [ 240.351703][ T8716] syzkaller0: entered allmulticast mode [ 240.366579][ T8716] caif0: mtu less than device minimum [ 240.410777][ T8714] tipc: Resetting bearer [ 240.471100][ T8714] tipc: Disabling bearer [ 240.702496][ T8734] tipc: Enabled bearer , priority 0 [ 240.721049][ T8741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.728353][ T8741] IPv6: NLM_F_CREATE should be set when creating new route [ 240.738694][ T8734] syzkaller0: entered promiscuous mode [ 240.744695][ T8734] syzkaller0: entered allmulticast mode [ 240.762474][ T8744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.925550][ T8749] tipc: Resetting bearer [ 240.980302][ T8733] tipc: Resetting bearer [ 241.048707][ T8733] tipc: Disabling bearer [ 241.744213][ T30] audit: type=1800 audit(1754361855.465:2): pid=8750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.764" name="memory.events" dev="tmpfs" ino=805 res=0 errno=0 [ 242.115940][ T8769] __nla_validate_parse: 1 callbacks suppressed [ 242.115963][ T8769] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.768'. [ 242.566150][ T8781] tipc: Enabled bearer , priority 0 [ 242.623650][ T8784] netlink: 32 bytes leftover after parsing attributes in process `syz.0.774'. [ 242.651322][ T8786] syzkaller0: entered promiscuous mode [ 242.657225][ T8786] syzkaller0: entered allmulticast mode [ 242.667105][ T8786] caif0: mtu less than device minimum [ 242.722327][ T8785] netlink: 'syz.3.773': attribute type 1 has an invalid length. [ 242.742452][ T8785] netlink: 180 bytes leftover after parsing attributes in process `syz.3.773'. [ 242.815375][ T8780] tipc: Resetting bearer [ 242.873829][ T8780] tipc: Disabling bearer [ 242.956813][ T8791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.777'. [ 243.252876][ T8804] siw: device registration error -23 [ 243.424629][ T8810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.780'. [ 243.844996][ T8831] tipc: Enabled bearer , priority 0 [ 243.909150][ T8832] syzkaller0: entered promiscuous mode [ 243.914686][ T8832] syzkaller0: entered allmulticast mode [ 243.939910][ T8832] caif0: mtu less than device minimum [ 244.075323][ T8830] tipc: Resetting bearer [ 244.132852][ T8830] tipc: Disabling bearer [ 244.202315][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 244.617194][ T8870] netlink: 3 bytes leftover after parsing attributes in process `syz.2.800'. [ 244.634400][ T8870] batadv1: entered promiscuous mode [ 244.664407][ T8870] batadv1: entered allmulticast mode [ 244.761726][ T8888] netlink: 48 bytes leftover after parsing attributes in process `syz.2.800'. [ 244.914333][ T8891] tipc: Enabled bearer , priority 0 [ 244.973235][ T8891] syzkaller0: entered promiscuous mode [ 244.997117][ T8891] syzkaller0: entered allmulticast mode [ 245.055658][ T8891] caif0: mtu less than device minimum [ 245.072475][ T8890] tipc: Resetting bearer [ 245.128657][ T8890] tipc: Disabling bearer [ 245.147511][ T8906] macsec0: entered promiscuous mode [ 245.151986][ T8908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.809'. [ 245.152754][ T8906] macsec0: entered allmulticast mode [ 245.542425][ T8931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.712068][ T8941] vlan2: entered promiscuous mode [ 245.717827][ T8941] vlan2: entered allmulticast mode [ 245.724975][ T8941] hsr_slave_1: entered allmulticast mode [ 245.817792][ T8946] tipc: Enabled bearer , priority 0 [ 245.841102][ T8946] syzkaller0: entered promiscuous mode [ 245.852726][ T8946] syzkaller0: entered allmulticast mode [ 245.864735][ T8946] caif0: mtu less than device minimum [ 245.879228][ T8945] tipc: Resetting bearer [ 245.922951][ T8945] tipc: Disabling bearer [ 246.052556][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 246.064650][ T8962] sctp: [Deprecated]: syz.4.827 (pid 8962) Use of int in max_burst socket option deprecated. [ 246.064650][ T8962] Use struct sctp_assoc_value instead [ 246.202391][ T8966] sctp: [Deprecated]: syz.4.829 (pid 8966) Use of int in max_burst socket option deprecated. [ 246.202391][ T8966] Use struct sctp_assoc_value instead [ 246.520182][ T8988] tipc: Enabling of bearer rejected, failed to enable media [ 246.910279][ T9012] tipc: Enabled bearer , priority 0 [ 247.027591][ T9017] syzkaller0: entered promiscuous mode [ 247.033471][ T9017] syzkaller0: entered allmulticast mode [ 247.055590][ T9017] caif0: mtu less than device minimum [ 247.762781][ T9011] tipc: Resetting bearer [ 247.817326][ T9011] tipc: Disabling bearer [ 248.013407][ T9052] __nla_validate_parse: 4 callbacks suppressed [ 248.013428][ T9052] netlink: 36 bytes leftover after parsing attributes in process `syz.4.847'. [ 248.163263][ T9060] netlink: 'syz.4.850': attribute type 11 has an invalid length. [ 248.361559][ T9070] IPVS: length: 209 != 24 [ 248.510316][ T9073] netlink: 72 bytes leftover after parsing attributes in process `syz.4.852'. [ 248.564209][ T9073] netlink: 60 bytes leftover after parsing attributes in process `syz.4.852'. [ 248.680567][ T9075] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 248.786244][ T9089] tipc: Enabled bearer , priority 0 [ 248.956312][ T9092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.984031][ T9092] bond0: (slave rose0): Enslaving as an active interface with an up link [ 248.994903][ T9099] tipc: Enabled bearer , priority 0 [ 249.024044][ T9098] syzkaller0: entered promiscuous mode [ 249.054818][ T9098] syzkaller0: entered allmulticast mode [ 249.090467][ T9102] syzkaller0: entered promiscuous mode [ 249.111310][ T9102] syzkaller0: entered allmulticast mode [ 249.134558][ T9106] caif0: mtu less than device minimum [ 249.286685][ T9114] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 249.302424][ T9083] tipc: Resetting bearer [ 249.328790][ T9083] tipc: Disabling bearer [ 249.507389][ T9120] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 249.601794][ T9120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.630271][ T9088] tipc: Resetting bearer [ 249.710242][ T9133] FAULT_INJECTION: forcing a failure. [ 249.710242][ T9133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.723548][ T9133] CPU: 0 UID: 0 PID: 9133 Comm: syz.2.864 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 249.723586][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.723597][ T9133] Call Trace: [ 249.723605][ T9133] [ 249.723613][ T9133] dump_stack_lvl+0x189/0x250 [ 249.723640][ T9133] ? __pfx____ratelimit+0x10/0x10 [ 249.723667][ T9133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.723687][ T9133] ? __pfx__printk+0x10/0x10 [ 249.723710][ T9133] ? __might_fault+0xb0/0x130 [ 249.723750][ T9133] should_fail_ex+0x414/0x560 [ 249.723785][ T9133] _copy_from_user+0x2d/0xb0 [ 249.723813][ T9133] __sys_bpf+0x1ed/0x870 [ 249.723843][ T9133] ? __pfx___sys_bpf+0x10/0x10 [ 249.723886][ T9133] ? ksys_write+0x22a/0x250 [ 249.723916][ T9133] ? __pfx_ksys_write+0x10/0x10 [ 249.723940][ T9133] ? rcu_is_watching+0x15/0xb0 [ 249.723979][ T9133] __x64_sys_bpf+0x7c/0x90 [ 249.724005][ T9133] do_syscall_64+0xfa/0x3b0 [ 249.724031][ T9133] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.724058][ T9133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.724077][ T9133] ? clear_bhb_loop+0x60/0xb0 [ 249.724102][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.724120][ T9133] RIP: 0033:0x7fd724d8eb69 [ 249.724138][ T9133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.724155][ T9133] RSP: 002b:00007fd725cb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.724176][ T9133] RAX: ffffffffffffffda RBX: 00007fd724fb5fa0 RCX: 00007fd724d8eb69 [ 249.724190][ T9133] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 249.724201][ T9133] RBP: 00007fd725cb4090 R08: 0000000000000000 R09: 0000000000000000 [ 249.724212][ T9133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.724224][ T9133] R13: 0000000000000000 R14: 00007fd724fb5fa0 R15: 00007fff58d95da8 [ 249.724254][ T9133] [ 249.938665][ T9088] tipc: Disabling bearer [ 250.444250][ T9164] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 250.454457][ T9164] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.872'. [ 250.497286][ T9165] netlink: 27 bytes leftover after parsing attributes in process `syz.4.869'. [ 250.595638][ T9160] ip6tnl0 speed is unknown, defaulting to 1000 [ 250.709239][ T9180] FAULT_INJECTION: forcing a failure. [ 250.709239][ T9180] name failslab, interval 1, probability 0, space 0, times 0 [ 250.723428][ T9178] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 250.734297][ T9177] netlink: 32 bytes leftover after parsing attributes in process `syz.0.876'. [ 250.789373][ T9180] CPU: 1 UID: 0 PID: 9180 Comm: syz.1.877 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 250.789404][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.789416][ T9180] Call Trace: [ 250.789424][ T9180] [ 250.789433][ T9180] dump_stack_lvl+0x189/0x250 [ 250.789461][ T9180] ? __pfx____ratelimit+0x10/0x10 [ 250.789490][ T9180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.789511][ T9180] ? __pfx__printk+0x10/0x10 [ 250.789540][ T9180] ? __pfx___might_resched+0x10/0x10 [ 250.789567][ T9180] ? fs_reclaim_acquire+0x7d/0x100 [ 250.789593][ T9180] should_fail_ex+0x414/0x560 [ 250.789629][ T9180] should_failslab+0xa8/0x100 [ 250.789650][ T9180] __kmalloc_noprof+0xcb/0x4f0 [ 250.789677][ T9180] ? bpf_test_init+0xc2/0x170 [ 250.789708][ T9180] bpf_test_init+0xc2/0x170 [ 250.789740][ T9180] bpf_prog_test_run_skb+0x1e9/0x1560 [ 250.789776][ T9180] ? __fget_files+0x2a/0x420 [ 250.789798][ T9180] ? __fget_files+0x2a/0x420 [ 250.789827][ T9180] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 250.789856][ T9180] bpf_prog_test_run+0x2c4/0x340 [ 250.789889][ T9180] __sys_bpf+0x581/0x870 [ 250.789918][ T9180] ? __pfx___sys_bpf+0x10/0x10 [ 250.789960][ T9180] ? ksys_write+0x22a/0x250 [ 250.789991][ T9180] ? __pfx_ksys_write+0x10/0x10 [ 250.790015][ T9180] ? rcu_is_watching+0x15/0xb0 [ 250.790054][ T9180] __x64_sys_bpf+0x7c/0x90 [ 250.790079][ T9180] do_syscall_64+0xfa/0x3b0 [ 250.790106][ T9180] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.790133][ T9180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.790152][ T9180] ? clear_bhb_loop+0x60/0xb0 [ 250.790176][ T9180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.790193][ T9180] RIP: 0033:0x7f8bcbd8eb69 [ 250.790211][ T9180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.790228][ T9180] RSP: 002b:00007f8bccbb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.790250][ T9180] RAX: ffffffffffffffda RBX: 00007f8bcbfb5fa0 RCX: 00007f8bcbd8eb69 [ 250.790264][ T9180] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 250.790277][ T9180] RBP: 00007f8bccbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 250.790289][ T9180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.790301][ T9180] R13: 0000000000000000 R14: 00007f8bcbfb5fa0 R15: 00007ffeac517638 [ 250.790335][ T9180] [ 251.265157][ T9165] ip6tnl0 speed is unknown, defaulting to 1000 [ 251.753255][ T9210] tipc: Enabled bearer , priority 0 [ 251.776529][ T9201] syzkaller0: entered promiscuous mode [ 251.782055][ T9201] syzkaller0: entered allmulticast mode [ 251.848037][ T9210] caif0: mtu less than device minimum [ 252.047436][ T9195] tipc: Resetting bearer [ 252.307998][ T9195] tipc: Disabling bearer [ 252.686258][ T9243] FAULT_INJECTION: forcing a failure. [ 252.686258][ T9243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.713816][ T9239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.885'. [ 252.776103][ T9243] CPU: 0 UID: 0 PID: 9243 Comm: syz.3.886 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 252.776133][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.776145][ T9243] Call Trace: [ 252.776152][ T9243] [ 252.776160][ T9243] dump_stack_lvl+0x189/0x250 [ 252.776187][ T9243] ? __pfx____ratelimit+0x10/0x10 [ 252.776214][ T9243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.776234][ T9243] ? __pfx__printk+0x10/0x10 [ 252.776258][ T9243] ? __might_fault+0xb0/0x130 [ 252.776300][ T9243] should_fail_ex+0x414/0x560 [ 252.776338][ T9243] _copy_from_user+0x2d/0xb0 [ 252.776367][ T9243] __sys_bpf+0x1ed/0x870 [ 252.776398][ T9243] ? __pfx___sys_bpf+0x10/0x10 [ 252.776441][ T9243] ? ksys_write+0x22a/0x250 [ 252.776472][ T9243] ? __pfx_ksys_write+0x10/0x10 [ 252.776496][ T9243] ? rcu_is_watching+0x15/0xb0 [ 252.776535][ T9243] __x64_sys_bpf+0x7c/0x90 [ 252.776561][ T9243] do_syscall_64+0xfa/0x3b0 [ 252.776587][ T9243] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.776612][ T9243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.776632][ T9243] ? clear_bhb_loop+0x60/0xb0 [ 252.776657][ T9243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.776676][ T9243] RIP: 0033:0x7f3ef478eb69 [ 252.776694][ T9243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.776710][ T9243] RSP: 002b:00007f3ef5536038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.776732][ T9243] RAX: ffffffffffffffda RBX: 00007f3ef49b5fa0 RCX: 00007f3ef478eb69 [ 252.776747][ T9243] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 252.776760][ T9243] RBP: 00007f3ef5536090 R08: 0000000000000000 R09: 0000000000000000 [ 252.776772][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.776784][ T9243] R13: 0000000000000000 R14: 00007f3ef49b5fa0 R15: 00007ffe9adaebf8 [ 252.776825][ T9243] [ 253.119284][ T9246] netlink: 88 bytes leftover after parsing attributes in process `syz.1.887'. [ 253.424178][ T9244] delete_channel: no stack [ 253.735380][ T9283] FAULT_INJECTION: forcing a failure. [ 253.735380][ T9283] name failslab, interval 1, probability 0, space 0, times 0 [ 253.805903][ T9283] CPU: 0 UID: 0 PID: 9283 Comm: syz.0.895 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 253.805934][ T9283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.805946][ T9283] Call Trace: [ 253.805954][ T9283] [ 253.805963][ T9283] dump_stack_lvl+0x189/0x250 [ 253.805991][ T9283] ? __pfx____ratelimit+0x10/0x10 [ 253.806019][ T9283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.806040][ T9283] ? __pfx__printk+0x10/0x10 [ 253.806073][ T9283] ? __pfx___might_resched+0x10/0x10 [ 253.806108][ T9283] should_fail_ex+0x414/0x560 [ 253.806145][ T9283] should_failslab+0xa8/0x100 [ 253.806167][ T9283] __kmalloc_noprof+0xcb/0x4f0 [ 253.806194][ T9283] ? sk_prot_alloc+0xe7/0x220 [ 253.806219][ T9283] sk_prot_alloc+0xe7/0x220 [ 253.806236][ T9283] ? sk_alloc+0x24/0x370 [ 253.806258][ T9283] sk_alloc+0x3a/0x370 [ 253.806275][ T9283] ? bpf_ctx_init+0x167/0x1d0 [ 253.806306][ T9283] bpf_prog_test_run_skb+0x2ed/0x1560 [ 253.806332][ T9283] ? __fget_files+0x2a/0x420 [ 253.806369][ T9283] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 253.806398][ T9283] bpf_prog_test_run+0x2c4/0x340 [ 253.806432][ T9283] __sys_bpf+0x581/0x870 [ 253.806462][ T9283] ? __pfx___sys_bpf+0x10/0x10 [ 253.806513][ T9283] ? ksys_write+0x22a/0x250 [ 253.806544][ T9283] ? __pfx_ksys_write+0x10/0x10 [ 253.806568][ T9283] ? rcu_is_watching+0x15/0xb0 [ 253.806605][ T9283] __x64_sys_bpf+0x7c/0x90 [ 253.806629][ T9283] do_syscall_64+0xfa/0x3b0 [ 253.806656][ T9283] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.806683][ T9283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.806703][ T9283] ? clear_bhb_loop+0x60/0xb0 [ 253.806727][ T9283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.806746][ T9283] RIP: 0033:0x7fc4dd98eb69 [ 253.806764][ T9283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.806780][ T9283] RSP: 002b:00007fc4de8ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.806803][ T9283] RAX: ffffffffffffffda RBX: 00007fc4ddbb5fa0 RCX: 00007fc4dd98eb69 [ 253.806818][ T9283] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 253.806831][ T9283] RBP: 00007fc4de8ac090 R08: 0000000000000000 R09: 0000000000000000 [ 253.806844][ T9283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.806856][ T9283] R13: 0000000000000000 R14: 00007fc4ddbb5fa0 R15: 00007ffc405e9538 [ 253.806889][ T9283] [ 254.326229][ T9299] tipc: Enabled bearer , priority 0 [ 254.444436][ T9302] syzkaller0: entered promiscuous mode [ 254.450195][ T9302] syzkaller0: entered allmulticast mode [ 254.470834][ T9302] caif0: mtu less than device minimum [ 255.112829][ T9336] FAULT_INJECTION: forcing a failure. [ 255.112829][ T9336] name failslab, interval 1, probability 0, space 0, times 0 [ 255.132884][ T9336] CPU: 0 UID: 0 PID: 9336 Comm: syz.3.907 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 255.132915][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.132926][ T9336] Call Trace: [ 255.132934][ T9336] [ 255.132943][ T9336] dump_stack_lvl+0x189/0x250 [ 255.132970][ T9336] ? __pfx____ratelimit+0x10/0x10 [ 255.132998][ T9336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.133019][ T9336] ? __pfx__printk+0x10/0x10 [ 255.133050][ T9336] ? __pfx___might_resched+0x10/0x10 [ 255.133076][ T9336] ? fs_reclaim_acquire+0x7d/0x100 [ 255.133104][ T9336] should_fail_ex+0x414/0x560 [ 255.133140][ T9336] should_failslab+0xa8/0x100 [ 255.133161][ T9336] __kmalloc_noprof+0xcb/0x4f0 [ 255.133187][ T9336] ? security_sk_alloc+0x52/0x390 [ 255.133212][ T9336] security_sk_alloc+0x52/0x390 [ 255.133235][ T9336] sk_prot_alloc+0x101/0x220 [ 255.133253][ T9336] ? sk_alloc+0x24/0x370 [ 255.133275][ T9336] sk_alloc+0x3a/0x370 [ 255.133293][ T9336] ? bpf_ctx_init+0x167/0x1d0 [ 255.133322][ T9336] bpf_prog_test_run_skb+0x2ed/0x1560 [ 255.133348][ T9336] ? __fget_files+0x2a/0x420 [ 255.133384][ T9336] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 255.133412][ T9336] bpf_prog_test_run+0x2c4/0x340 [ 255.133444][ T9336] __sys_bpf+0x581/0x870 [ 255.133481][ T9336] ? __pfx___sys_bpf+0x10/0x10 [ 255.133523][ T9336] ? ksys_write+0x22a/0x250 [ 255.133554][ T9336] ? __pfx_ksys_write+0x10/0x10 [ 255.133579][ T9336] ? rcu_is_watching+0x15/0xb0 [ 255.133616][ T9336] __x64_sys_bpf+0x7c/0x90 [ 255.133641][ T9336] do_syscall_64+0xfa/0x3b0 [ 255.133667][ T9336] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.133692][ T9336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.133710][ T9336] ? clear_bhb_loop+0x60/0xb0 [ 255.133733][ T9336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.133751][ T9336] RIP: 0033:0x7f3ef478eb69 [ 255.133768][ T9336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.133783][ T9336] RSP: 002b:00007f3ef5536038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.133804][ T9336] RAX: ffffffffffffffda RBX: 00007f3ef49b5fa0 RCX: 00007f3ef478eb69 [ 255.133818][ T9336] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 255.133830][ T9336] RBP: 00007f3ef5536090 R08: 0000000000000000 R09: 0000000000000000 [ 255.133842][ T9336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.133854][ T9336] R13: 0000000000000000 R14: 00007f3ef49b5fa0 R15: 00007ffe9adaebf8 [ 255.133886][ T9336] [ 255.156112][ T9298] tipc: Resetting bearer [ 255.335142][ T9344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.906'. [ 255.338448][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.462474][ T9298] tipc: Disabling bearer [ 256.113807][ T9373] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 256.298381][ T9373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.397509][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.914'. [ 256.434145][ T9388] netlink: 'syz.0.920': attribute type 1 has an invalid length. [ 256.587677][ T9377] bridge0: port 1(erspan0) entered blocking state [ 256.601116][ T9377] bridge0: port 1(erspan0) entered disabled state [ 256.613942][ T9377] erspan0: entered allmulticast mode [ 256.650359][ T9377] erspan0: entered promiscuous mode [ 256.708155][ T9383] erspan0: left allmulticast mode [ 256.747716][ T9383] erspan0: left promiscuous mode [ 256.771765][ T9383] bridge0: port 1(erspan0) entered disabled state [ 256.927725][ T9384] veth3: entered promiscuous mode [ 256.999363][ T9384] bond2: (slave veth3): Enslaving as an active interface with a down link [ 257.030132][ T9373] erspan0: entered allmulticast mode [ 257.084248][ T9373] bond2: (slave erspan0): making interface the new active one [ 257.109523][ T9373] erspan0: entered promiscuous mode [ 257.129553][ T9373] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 257.144407][ T9369] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 257.170534][ T9369] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 257.192052][ T9369] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 257.286989][ T9388] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.400233][ T9409] tipc: Enabled bearer , priority 0 [ 257.432270][ T9402] caif0: mtu less than device minimum [ 257.679957][ T9413] syzkaller0: entered promiscuous mode [ 257.701905][ T9413] syzkaller0: entered allmulticast mode [ 257.801049][ T9401] tipc: Resetting bearer [ 257.873518][ T9401] tipc: Disabling bearer [ 258.084777][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.924'. [ 258.124935][ T9416] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 258.147489][ T9416] tipc: Enabled bearer , priority 10 [ 258.235704][ T9432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.927'. [ 258.246173][ T9432] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 258.341506][ T9445] netlink: 'syz.4.930': attribute type 1 has an invalid length. [ 258.619138][ T9448] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 258.679040][ T9448] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 258.870023][ T9456] netlink: 272 bytes leftover after parsing attributes in process `syz.0.932'. [ 259.019294][ T9463] ip6tnl0 speed is unknown, defaulting to 1000 [ 259.100310][ T9466] IPv6: Can't replace route, no match found [ 259.137235][ T7653] tipc: Node number set to 2157483057 [ 259.225255][ T9472] bridge3: entered promiscuous mode [ 259.238862][ T9472] bridge3: entered allmulticast mode [ 259.808361][ T9494] netlink: 224 bytes leftover after parsing attributes in process `syz.2.943'. [ 259.826068][ T9494] netlink: 'syz.2.943': attribute type 1 has an invalid length. [ 259.883914][ T9494] 8021q: adding VLAN 0 to HW filter on device bond3 [ 259.994516][ T9496] bond3: (slave gretap1): making interface the new active one [ 260.046344][ T9496] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 260.087511][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 260.111137][ T9500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.157153][ T9500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.179574][ T9500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.260879][ T9507] netlink: 68 bytes leftover after parsing attributes in process `syz.1.946'. [ 260.273703][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.947'. [ 260.498965][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 260.513190][ T9520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.660555][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 260.692432][ T9530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.953'. [ 260.694153][ T9528] veth1_macvtap: left promiscuous mode [ 260.758051][ T9530] bridge4: entered promiscuous mode [ 260.777633][ T9533] tipc: Enabled bearer , priority 0 [ 260.785296][ T9533] syzkaller0: entered promiscuous mode [ 260.794033][ T9533] syzkaller0: entered allmulticast mode [ 260.810508][ T9533] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 260.821881][ T9533] netlink: 224 bytes leftover after parsing attributes in process `syz.2.954'. [ 260.838885][ T9527] ip6tnl0 speed is unknown, defaulting to 1000 [ 261.544359][ T9533] tipc: Resetting bearer [ 261.575635][ T9532] tipc: Resetting bearer [ 261.696286][ T9532] tipc: Disabling bearer [ 262.919635][ T9579] team0: entered promiscuous mode [ 262.926149][ T9579] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 262.934035][ T9579] bridge1: port 1(macvlan3) entered blocking state [ 262.973720][ T9579] bridge1: port 1(macvlan3) entered disabled state [ 263.036084][ T9579] macvlan3: entered allmulticast mode [ 263.041929][ T9579] team0: entered allmulticast mode [ 263.072719][ T9579] macvlan3: left allmulticast mode [ 263.083935][ T9579] team0: left allmulticast mode [ 263.101349][ T9579] team0: left promiscuous mode [ 263.430750][ T9601] __nla_validate_parse: 3 callbacks suppressed [ 263.430769][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'. [ 263.474698][ T9601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.972'. [ 263.520927][ T196] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.521071][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'. [ 263.554467][ T196] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.588790][ T9601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.972'. [ 263.590739][ T196] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.640562][ T196] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.871894][ T9619] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 264.517072][ T9633] ip6tnl0 speed is unknown, defaulting to 1000 [ 264.895718][ T9638] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 264.912851][ T9638] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 264.946506][ T9641] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 265.034831][ T9643] pimreg: entered allmulticast mode [ 265.323861][ T9647] pimreg: left allmulticast mode [ 266.019335][ T6073] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 266.142828][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.987'. [ 266.223692][ T9683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.246137][ T9692] netlink: 'syz.3.990': attribute type 1 has an invalid length. [ 266.383686][ T9692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.392245][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.990'. [ 266.465952][ T9698] ip6tnl0 speed is unknown, defaulting to 1000 [ 267.071616][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.997'. [ 267.151125][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.998'. [ 267.368603][ T9738] netlink: 104 bytes leftover after parsing attributes in process `syz.0.997'. [ 267.384884][ T9728] tipc: New replicast peer: 255.255.255.255 [ 267.439478][ T9728] tipc: Enabled bearer , priority 10 [ 267.482795][ T9729] netlink: 'syz.0.997': attribute type 1 has an invalid length. [ 267.497483][ T9745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1000'. [ 267.611346][ T9737] tipc: Disabling bearer [ 267.771938][ T9740] syzkaller1: entered promiscuous mode [ 267.794503][ T9740] syzkaller1: entered allmulticast mode [ 267.951461][ T9754] syzkaller0: entered promiscuous mode [ 267.958248][ T9754] syzkaller0: entered allmulticast mode [ 268.489621][ T9788] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 268.505461][ T7649] IPVS: starting estimator thread 0... [ 268.587131][ T6076] erspan0: left promiscuous mode [ 268.605949][ T9790] IPVS: using max 24 ests per chain, 57600 per kthread [ 268.644830][ T9795] __nla_validate_parse: 2 callbacks suppressed [ 268.644852][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'. [ 268.664160][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1017'. [ 268.671147][ T9796] siw: device registration error -23 [ 268.681953][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 268.692327][ T9796] wg1: entered promiscuous mode [ 268.697561][ T9795] netlink: 'syz.0.1017': attribute type 3 has an invalid length. [ 268.706018][ T9796] wg1: entered allmulticast mode [ 269.163496][ T9817] ip6tnl0 speed is unknown, defaulting to 1000 [ 269.421454][ T9833] netlink: 'syz.0.1030': attribute type 29 has an invalid length. [ 269.461845][ T9833] netlink: 'syz.0.1030': attribute type 29 has an invalid length. [ 269.508486][ T9833] netlink: 'syz.0.1030': attribute type 29 has an invalid length. [ 269.550145][ T9833] netlink: 'syz.0.1030': attribute type 29 has an invalid length. [ 269.576518][ T9833] netlink: 'syz.0.1030': attribute type 29 has an invalid length. [ 269.606224][ T9833] netlink: 'syz.0.1030': attribute type 29 has an invalid length. [ 269.627657][ T9833] netlink: 'syz.0.1030': attribute type 29 has an invalid length. [ 269.964401][ T9847] ip6tnl0 speed is unknown, defaulting to 1000 [ 270.488448][ T9871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1036'. [ 271.164479][ T9879] syzkaller1: entered promiscuous mode [ 271.186344][ T9879] syzkaller1: entered allmulticast mode [ 271.505271][ T9887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1040'. [ 271.520392][ T9887] netlink: 1360 bytes leftover after parsing attributes in process `syz.3.1040'. [ 271.541724][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 271.735917][ T9886] ip6tnl0 speed is unknown, defaulting to 1000 [ 271.905873][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 271.915240][ T9894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.941179][ T9896] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1043'. [ 271.957784][ T9894] validate_nla: 23 callbacks suppressed [ 271.957804][ T9894] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 271.986584][ T9894] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1042'. [ 272.327637][ T9892] siw: device registration error -23 [ 272.684808][ T9905] ip6tnl0 speed is unknown, defaulting to 1000 [ 272.887926][ T9909] ip6tnl0 speed is unknown, defaulting to 1000 [ 273.028177][ T9913] tipc: Enabled bearer , priority 0 [ 273.042336][ T9913] syzkaller0: entered promiscuous mode [ 273.050154][ T9913] syzkaller0: entered allmulticast mode [ 273.078456][ T9911] tipc: Resetting bearer [ 273.112222][ T9911] tipc: Disabling bearer [ 274.075703][ T9927] __nla_validate_parse: 2 callbacks suppressed [ 274.082004][ T9927] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1052'. [ 274.095425][ T9929] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 274.104930][ T9929] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1053'. [ 274.120897][ T9929] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 274.373416][ T9934] ip6tnl0 speed is unknown, defaulting to 1000 [ 274.885243][ T9947] netlink: 'syz.3.1059': attribute type 1 has an invalid length. [ 274.951387][ T9951] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1059'. [ 275.082020][ T9947] bond4: entered promiscuous mode [ 275.110088][ T9947] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.265028][ T9951] batadv1: entered promiscuous mode [ 275.276636][ T9951] batadv1: entered allmulticast mode [ 275.296854][ T9951] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 275.314196][ T9967] netlink: 'syz.0.1060': attribute type 13 has an invalid length. [ 275.323176][ T9967] netlink: 'syz.0.1060': attribute type 17 has an invalid length. [ 275.358677][ T9951] bond4: (slave batadv1): making interface the new active one [ 275.408201][ T9951] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 275.468785][ T9973] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1059'. [ 275.519775][ T9975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1064'. [ 275.717893][ T9967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.104751][ T9986] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1068'. [ 276.125991][ T9986] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1068'. [ 276.182862][ T9985] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1068'. [ 276.383241][ T9985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.619831][ T9997] veth0: entered promiscuous mode [ 276.643708][ T9996] veth0: left promiscuous mode [ 276.690554][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 276.733349][ T9999] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 276.991526][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 277.385874][T10028] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 277.602073][T10033] netlink: 'syz.1.1082': attribute type 2 has an invalid length. [ 277.630735][T10033] netlink: 'syz.1.1082': attribute type 1 has an invalid length. [ 278.402874][T10060] tipc: Cannot configure node identity twice [ 278.883841][T10077] tipc: New replicast peer: 255.255.255.255 [ 278.917227][T10077] tipc: Enabled bearer , priority 10 [ 278.956389][T10078] tipc: Disabling bearer [ 279.678595][T10080] tipc: Enabled bearer , priority 0 [ 279.706947][T10080] syzkaller0: entered promiscuous mode [ 279.712605][T10080] syzkaller0: entered allmulticast mode [ 279.745644][T10080] __nla_validate_parse: 4 callbacks suppressed [ 279.745664][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 279.783352][T10093] sock: sock_timestamping_bind_phc: sock not bind to device [ 279.791427][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 279.852325][T10080] tipc: Resetting bearer [ 280.659911][T10124] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1103'. [ 280.671963][T10124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.679271][T10124] IPv6: NLM_F_CREATE should be set when creating new route [ 280.742240][ T7649] tipc: Node number set to 301154201 [ 280.916508][T10128] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1105'. [ 280.925657][T10128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1105'. [ 281.220050][T10126] ip6tnl0 speed is unknown, defaulting to 1000 [ 281.243762][T10128] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 282.055149][T10152] netlink: 'syz.2.1111': attribute type 3 has an invalid length. [ 282.765818][T10168] tipc: Enabled bearer , priority 0 [ 282.843364][T10175] syzkaller0: entered promiscuous mode [ 282.876337][T10175] syzkaller0: entered allmulticast mode [ 283.040200][T10182] tipc: Resetting bearer [ 283.063220][T10166] tipc: Resetting bearer [ 283.166529][T10166] tipc: Disabling bearer [ 283.488646][T10187] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1119'. [ 283.602519][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 283.689824][T10209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.296586][T10222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1128'. [ 284.704104][T10243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1131'. [ 284.795243][ T30] audit: type=1800 audit(1754361898.515:3): pid=10224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1128" name="memory.events" dev="tmpfs" ino=1261 res=0 errno=0 [ 284.909604][ T7663] IPVS: starting estimator thread 0... [ 284.938339][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 285.016336][T10253] IPVS: using max 22 ests per chain, 52800 per kthread [ 285.277677][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 285.332031][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 285.387335][T10277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.437107][T10280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1139'. [ 285.468108][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1137'. [ 285.490596][T10281] netlink: 'syz.0.1137': attribute type 13 has an invalid length. [ 285.508282][T10281] netlink: 'syz.0.1137': attribute type 17 has an invalid length. [ 285.535547][T10281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.586617][T10284] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 285.790649][T10300] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 285.807389][T10300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1143'. [ 285.823512][T10300] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 285.856600][T10300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1143'. [ 285.876537][T10300] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 285.904902][T10300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1143'. [ 285.929110][T10300] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 285.948314][T10300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1143'. [ 285.963300][T10300] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 285.972365][T10300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1143'. [ 285.982740][T10300] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 285.992752][T10300] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 286.002293][T10300] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 286.301361][T10326] batadv1: entered allmulticast mode [ 286.311199][T10326] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 288.574193][T10446] veth1: entered promiscuous mode [ 288.599468][T10446] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 289.562081][T10482] sctp: [Deprecated]: syz.0.1197 (pid 10482) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.562081][T10482] Use struct sctp_sack_info instead [ 289.896302][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.035601][T10495] __nla_validate_parse: 90 callbacks suppressed [ 290.035624][T10495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1199'. [ 290.238485][T10509] IPVS: set_ctl: invalid protocol: 2 10.1.1.0:20004 [ 290.292251][T10516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.299707][T10516] IPv6: NLM_F_CREATE should be set when creating new route [ 290.307147][T10516] IPv6: NLM_F_CREATE should be set when creating new route [ 290.441063][T10516] dvmrp1: entered allmulticast mode [ 290.483542][T10519] dvmrp1: left allmulticast mode [ 291.406385][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'. [ 292.191695][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1220'. [ 292.493483][T10603] validate_nla: 78 callbacks suppressed [ 292.493507][T10603] netlink: 'syz.1.1226': attribute type 8 has an invalid length. [ 292.615555][T10613] netlink: 'syz.1.1226': attribute type 8 has an invalid length. [ 292.957247][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1229'. [ 293.020403][T10629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.141943][T10681] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1240'. [ 294.329975][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 294.568455][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1244'. [ 294.626188][T10701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1245'. [ 294.787463][T10704] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 294.830311][T10704] bond4: (slave vcan1): Error -95 calling set_mac_address [ 294.906394][T10719] veth0_to_team: mtu less than device minimum [ 295.326316][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 295.409247][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 295.416185][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 295.457681][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 295.491620][T10742] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1252'. [ 295.545927][T10743] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1252'. [ 295.620778][T10755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1254'. [ 295.759820][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 295.939272][T10770] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 295.959211][T10771] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1258'. [ 296.101363][T10772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1256'. [ 296.137537][T10742] gretap3: entered promiscuous mode [ 296.297391][T10771] ip6tnl0 speed is unknown, defaulting to 1000 [ 297.667679][T10831] tc_dump_action: action bad kind [ 297.696624][T10828] tc_dump_action: action bad kind [ 297.843974][T10832] ip6tnl0 speed is unknown, defaulting to 1000 [ 298.064102][T10850] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.073703][T10850] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.181099][T10855] tipc: Enabled bearer , priority 0 [ 298.214230][T10855] syzkaller0: entered promiscuous mode [ 298.235161][T10855] syzkaller0: entered allmulticast mode [ 298.320189][T10855] tipc: Resetting bearer [ 298.350837][T10854] tipc: Resetting bearer [ 298.411185][T10854] tipc: Disabling bearer [ 298.766828][T10847] ip6tnl0 speed is unknown, defaulting to 1000 [ 299.251480][T10882] syzkaller0: entered promiscuous mode [ 299.260738][T10882] syzkaller0: entered allmulticast mode [ 299.308665][T10861] ip6tnl0 speed is unknown, defaulting to 1000 [ 299.559893][T10884] netlink: 'syz.3.1280': attribute type 2 has an invalid length. [ 299.589504][T10884] : entered promiscuous mode [ 299.734057][T10896] unsupported nlmsg_type 40 [ 300.034445][T10908] netlink: 'syz.1.1286': attribute type 7 has an invalid length. [ 300.825955][T10922] __nla_validate_parse: 11 callbacks suppressed [ 300.825977][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 301.038131][T10932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1293'. [ 301.060402][T10932] nbd: must specify at least one socket [ 301.309183][T10949] openvswitch: netlink: IP tunnel dst address not specified [ 301.391896][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 301.500676][T10960] tipc: Enabled bearer , priority 0 [ 301.529268][T10955] syzkaller0: entered promiscuous mode [ 301.554181][T10955] syzkaller0: entered allmulticast mode [ 301.620519][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 301.627791][T10955] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1301'. [ 301.686804][T10955] tipc: Resetting bearer [ 301.726333][T10953] tipc: Resetting bearer [ 301.768394][T10953] tipc: Disabling bearer [ 301.789523][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.798745][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.993114][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 302.208812][T10997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.331396][T10990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.413522][T11003] syzkaller0: entered promiscuous mode [ 302.424499][T11003] syzkaller0: entered allmulticast mode [ 302.440539][T10986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.522814][T11007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1314'. [ 302.605022][T11005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1314'. [ 303.169278][T11042] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1321'. [ 303.312633][T11049] tipc: Enabled bearer , priority 0 [ 303.353227][T11049] syzkaller0: entered promiscuous mode [ 303.367373][T11049] syzkaller0: entered allmulticast mode [ 303.395170][T11049] tipc: Resetting bearer [ 303.476020][T11049] tipc: Disabling bearer [ 303.514444][T11066] netlink: 'syz.2.1328': attribute type 3 has an invalid length. [ 303.549449][T11062] sch_tbf: burst 0 is lower than device lo mtu (65511) ! [ 304.161122][T11097] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1338'. [ 304.168089][T11099] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 304.197002][T11102] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 304.404281][T11112] netlink: 'syz.3.1342': attribute type 1 has an invalid length. [ 304.598745][T11122] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 304.929123][T11142] erspan0: entered promiscuous mode [ 304.972631][T11146] netlink: 'syz.2.1354': attribute type 16 has an invalid length. [ 305.235485][T11164] IPv6: addrconf: prefix option has invalid lifetime [ 305.432917][T11177] netlink: 'syz.2.1365': attribute type 1 has an invalid length. [ 305.524662][T11177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.538259][T11179] netlink: 'syz.4.1366': attribute type 2 has an invalid length. [ 305.584430][T11183] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.612640][T11183] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 305.636614][T11183] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 305.724196][T11177] bond5: (slave bridge3): Enslaving as an active interface with a down link [ 306.058941][T11209] __nla_validate_parse: 9 callbacks suppressed [ 306.058963][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1374'. [ 306.341798][T11218] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 306.362002][T11218] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 306.419265][T11226] dvmrp1: entered allmulticast mode [ 306.444626][T11230] dvmrp1: left allmulticast mode [ 306.484030][T11234] smc: net device bond0 applied user defined pnetid SYZ2 [ 307.214497][T11273] ip6tnl0 speed is unknown, defaulting to 1000 [ 307.253351][T11284] veth5: entered promiscuous mode [ 307.289614][T11284] bond0: (slave veth5): Enslaving as an active interface with an up link [ 307.364500][T11291] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1397'. [ 307.422826][T11294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1398'. [ 307.445047][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1398'. [ 307.486053][T11294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1398'. [ 307.907290][T11314] openvswitch: netlink: IP tunnel dst address not specified [ 307.993550][T11318] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1405'. [ 308.181475][T11323] netlink: 'syz.3.1407': attribute type 1 has an invalid length. [ 308.229405][T11323] netlink: 'syz.3.1407': attribute type 2 has an invalid length. [ 309.069470][T11361] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1416'. [ 309.549409][T11368] ip6tnl0 speed is unknown, defaulting to 1000 [ 309.843376][T11388] erspan0: left allmulticast mode [ 309.886818][T11388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.236517][T11395] netlink: 'syz.1.1423': attribute type 1 has an invalid length. [ 310.258027][T11395] netlink: 'syz.1.1423': attribute type 1 has an invalid length. [ 310.281262][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1423'. [ 310.317085][T11395] block nbd0: shutting down sockets [ 310.329178][T11399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1423'. [ 310.523404][T11403] raw_sendmsg: syz.1.1423 forgot to set AF_INET. Fix it! [ 310.940685][T11417] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1428'. [ 311.263652][T11426] __nla_validate_parse: 2 callbacks suppressed [ 311.263675][T11426] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1432'. [ 311.292843][T11419] nbd3: detected capacity change from 0 to 63 [ 311.308959][T11430] block nbd3: NBD_DISCONNECT [ 311.317139][T11430] block nbd3: Disconnected due to user request. [ 311.324770][T11430] block nbd3: shutting down sockets [ 311.379728][T11419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1429'. [ 311.403907][T11433] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1433'. [ 311.416409][T11419] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 311.465635][T11433] batadv0: entered promiscuous mode [ 311.472162][T11433] batadv0: entered allmulticast mode [ 312.105071][T11456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1439'. [ 312.145956][T11456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1439'. [ 312.304590][T11461] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1440'. [ 312.672112][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'. [ 312.714008][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'. [ 312.761691][T11481] netlink: 'syz.0.1445': attribute type 15 has an invalid length. [ 312.799848][T11481] netlink: 'syz.0.1445': attribute type 18 has an invalid length. [ 312.816970][T11480] syzkaller0: Caught tx_queue_len zero misconfig [ 313.115548][T11485] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 313.368274][T11496] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1449'. [ 313.377382][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1449'. [ 313.832110][T11522] v: renamed from ip6_vti0 (while UP) [ 313.890376][T11527] ip6tnl0 speed is unknown, defaulting to 1000 [ 314.440863][T11551] netlink: 'syz.0.1459': attribute type 9 has an invalid length. [ 315.069607][T11560] openvswitch: netlink: Key type 4624 is out of range max 32 [ 315.098575][T11540] tipc: Resetting bearer [ 315.116105][T11540] syzkaller0: left promiscuous mode [ 315.121393][T11540] syzkaller0: left allmulticast mode [ 315.138268][T11540] batadv1: left allmulticast mode [ 315.159089][T11540] gretap3: left promiscuous mode [ 315.254670][ T7663] ip6tnl0 speed is unknown, defaulting to 1000 [ 315.274993][ T7663] syz0: Port: 1 Link DOWN [ 315.275024][ T196] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.304867][ T196] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.355948][ T7663] ip6tnl0 speed is unknown, defaulting to 1000 [ 315.357249][T11562] batadv_slave_1: entered promiscuous mode [ 315.377576][T11562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.385403][ T196] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.423369][ T196] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.469899][T11564] netlink: 'syz.0.1466': attribute type 21 has an invalid length. [ 315.481243][T11564] netlink: 'syz.0.1466': attribute type 22 has an invalid length. [ 315.513740][T11564] netlink: 'syz.0.1466': attribute type 23 has an invalid length. [ 315.526390][T11564] netlink: 'syz.0.1466': attribute type 25 has an invalid length. [ 315.542680][ T196] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.564082][T11564] netlink: 'syz.0.1466': attribute type 26 has an invalid length. [ 315.572390][ T196] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.595665][ T6073] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.615168][ T6073] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.711841][T11573] macvtap1: entered allmulticast mode [ 315.719563][T11581] rdma_rxe: rxe_newlink: failed to add lo [ 315.733484][T11573] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 315.754475][T11573] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 315.901828][T11581] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.910249][T11581] bridge0: port 2(bridge_slave_1) entered listening state [ 315.917847][T11581] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.925334][T11581] bridge0: port 1(bridge_slave_0) entered listening state [ 316.005133][T11581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.140773][T11588] netlink: 'syz.2.1471': attribute type 1 has an invalid length. [ 316.316221][T11590] team_slave_0: entered promiscuous mode [ 316.322224][T11590] team_slave_1: entered promiscuous mode [ 316.356693][T11590] team_slave_0: left promiscuous mode [ 316.362217][T11590] team_slave_1: left promiscuous mode [ 316.442626][T11600] __nla_validate_parse: 9 callbacks suppressed [ 316.442648][T11600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1475'. [ 316.664975][T11608] 8021q: VLANs not supported on nlmon0 [ 316.894682][T11622] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 317.404610][T11646] !: renamed from dummy0 (while UP) [ 318.223912][T11691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1500'. [ 318.236183][T11691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1500'. [ 318.590548][T11710] netlink: 'syz.4.1506': attribute type 1 has an invalid length. [ 318.694118][T11712] netlink: 'syz.2.1508': attribute type 1 has an invalid length. [ 318.954516][T11725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1512'. [ 319.052354][T11717] ip6tnl0 speed is unknown, defaulting to 1000 [ 319.390801][T11741] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1516'. [ 319.407475][T11737] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1514'. [ 319.450743][T11742] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1514'. [ 319.554558][T11737] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1514'. [ 319.893916][T11766] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1521'. [ 319.914429][T11766] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1521'. [ 319.943653][T11766] netlink: 'syz.3.1521': attribute type 6 has an invalid length. [ 320.104830][T11770] netlink: 'syz.2.1523': attribute type 64 has an invalid length. [ 320.633189][T11794] ip6tnl0 speed is unknown, defaulting to 1000 [ 321.034361][T11815] bond0: (slave wlan1): Releasing backup interface [ 321.063222][T11815] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 321.193513][T11815] team0: Port device bridge1 removed [ 321.233897][T11815] bond0: (slave veth5): Releasing backup interface [ 321.255964][T11810] ip6tnl0 speed is unknown, defaulting to 1000 [ 322.285176][T11847] netlink: 'syz.4.1547': attribute type 29 has an invalid length. [ 322.294789][T11851] netlink: 'syz.4.1547': attribute type 29 has an invalid length. [ 322.822421][T11860] __nla_validate_parse: 3 callbacks suppressed [ 322.822443][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 322.962111][T11860] macvlan4: entered promiscuous mode [ 322.988213][T11860] bond0: entered promiscuous mode [ 322.995653][T11872] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1553'. [ 322.998771][T11871] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1553'. [ 323.024046][T11860] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 323.203248][T11870] ip6tnl0 speed is unknown, defaulting to 1000 [ 323.361589][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 323.375588][T11886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1554'. [ 323.418580][T11885] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1556'. [ 323.470195][T11885] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1556'. [ 323.479779][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'. [ 323.591557][ T6076] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 323.635653][ T6076] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 323.651068][ T6076] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 323.660595][ T6076] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 323.914081][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1560'. [ 323.943141][T11899] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1560'. [ 324.432550][T11914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.509425][T11914] batadv_slave_1: left promiscuous mode [ 324.706578][T11908] netlink: 'syz.1.1563': attribute type 3 has an invalid length. [ 325.731218][T11961] netlink: 'syz.1.1573': attribute type 30 has an invalid length. [ 325.921692][T11964] ip6tnl0 speed is unknown, defaulting to 1000 [ 326.567033][T11987] sctp: [Deprecated]: syz.1.1581 (pid 11987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.567033][T11987] Use struct sctp_sack_info instead [ 326.966405][T12000] FAULT_INJECTION: forcing a failure. [ 326.966405][T12000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.026176][T12000] CPU: 0 UID: 0 PID: 12000 Comm: syz.3.1583 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 327.026208][T12000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.026221][T12000] Call Trace: [ 327.026229][T12000] [ 327.026237][T12000] dump_stack_lvl+0x189/0x250 [ 327.026264][T12000] ? __pfx____ratelimit+0x10/0x10 [ 327.026293][T12000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.026313][T12000] ? __pfx__printk+0x10/0x10 [ 327.026338][T12000] ? __might_fault+0xb0/0x130 [ 327.026380][T12000] should_fail_ex+0x414/0x560 [ 327.026417][T12000] _copy_from_user+0x2d/0xb0 [ 327.026445][T12000] ___sys_sendmsg+0x158/0x2a0 [ 327.026470][T12000] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.026533][T12000] ? __fget_files+0x2a/0x420 [ 327.026552][T12000] ? __fget_files+0x3a0/0x420 [ 327.026583][T12000] __sys_sendmmsg+0x227/0x430 [ 327.026610][T12000] ? __pfx___sys_sendmmsg+0x10/0x10 [ 327.026628][T12000] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 327.026687][T12000] ? ksys_write+0x22a/0x250 [ 327.026717][T12000] ? __pfx_ksys_write+0x10/0x10 [ 327.026752][T12000] ? rcu_is_watching+0x15/0xb0 [ 327.026790][T12000] __x64_sys_sendmmsg+0xa0/0xc0 [ 327.026814][T12000] do_syscall_64+0xfa/0x3b0 [ 327.026841][T12000] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.026868][T12000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.026888][T12000] ? clear_bhb_loop+0x60/0xb0 [ 327.026913][T12000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.026932][T12000] RIP: 0033:0x7f3ef478eb69 [ 327.026949][T12000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.026967][T12000] RSP: 002b:00007f3ef25f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 327.026989][T12000] RAX: ffffffffffffffda RBX: 00007f3ef49b6160 RCX: 00007f3ef478eb69 [ 327.027003][T12000] RDX: 0000000000000003 RSI: 0000200000001300 RDI: 0000000000000005 [ 327.027016][T12000] RBP: 00007f3ef25f6090 R08: 0000000000000000 R09: 0000000000000000 [ 327.027027][T12000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.027039][T12000] R13: 0000000000000000 R14: 00007f3ef49b6160 R15: 00007ffe9adaebf8 [ 327.027071][T12000] [ 327.587999][T12006] netlink: 'syz.3.1584': attribute type 10 has an invalid length. [ 327.640218][T12009] netlink: 'syz.3.1584': attribute type 10 has an invalid length. [ 327.735400][T12006] team0: Port device dummy0 added [ 327.802611][T12009] team0: Port device dummy0 removed [ 327.909601][T12015] __nla_validate_parse: 2 callbacks suppressed [ 327.909624][T12015] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1588'. [ 327.970084][T12013] netlink: 536 bytes leftover after parsing attributes in process `syz.2.1587'. [ 328.024202][T12013] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1587'. [ 328.231173][T12032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1592'. [ 328.480382][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1594'. [ 328.800789][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 328.821753][T12051] ip6tnl0 speed is unknown, defaulting to 1000 [ 329.222186][T12074] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 329.244056][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 329.282723][T12077] syzkaller0: entered promiscuous mode [ 329.312645][T12077] syzkaller0: entered allmulticast mode [ 329.331549][T12077] tipc: Enabled bearer , priority 0 [ 329.364138][ T59] tipc: Resetting bearer [ 329.375594][T12076] tipc: Resetting bearer [ 329.413151][T12076] tipc: Disabling bearer [ 329.794801][T12091] ip6tnl0 speed is unknown, defaulting to 1000 [ 329.888860][T12101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1612'. [ 330.426301][T12114] tipc: Enabled bearer , priority 0 [ 330.434487][T12092] syzkaller0: entered promiscuous mode [ 330.447072][T12092] syzkaller0: entered allmulticast mode [ 330.485297][T12123] bridge_slave_0: invalid flags given to default FDB implementation [ 330.601667][T12090] tipc: Resetting bearer [ 330.650762][T12090] tipc: Disabling bearer [ 330.691176][T12101] ip6tnl0 speed is unknown, defaulting to 1000 [ 331.111590][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1627'. [ 331.183662][T12143] netlink: 'syz.3.1626': attribute type 2 has an invalid length. [ 331.263561][T12142] netlink: 'syz.4.1627': attribute type 1 has an invalid length. [ 331.286153][T12142] netlink: 3512 bytes leftover after parsing attributes in process `syz.4.1627'. [ 331.320470][T12143] : entered promiscuous mode [ 332.086750][T12171] unknown channel width for channel at 909000KHz? [ 332.100532][T12171] unknown channel width for channel at 909000KHz? [ 332.128357][T12171] unknown channel width for channel at 909000KHz? [ 332.154246][T12174] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 332.168359][T12168] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 332.235028][T12174] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 332.645127][T12192] IPVS: length: 100 != 8 [ 333.039898][T12210] __nla_validate_parse: 7 callbacks suppressed [ 333.039920][T12210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1645'. [ 333.062280][T12210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1645'. [ 333.360270][T12216] netlink: 'syz.0.1648': attribute type 1 has an invalid length. [ 333.684400][T12226] tipc: Enabled bearer , priority 0 [ 333.693876][T12226] syzkaller0: entered promiscuous mode [ 333.699835][T12226] syzkaller0: entered allmulticast mode [ 333.706366][T12226] tipc: Resetting bearer [ 333.756839][T12226] tipc: Resetting bearer [ 333.776748][T12233] netlink: 'syz.0.1651': attribute type 1 has an invalid length. [ 333.796568][T12233] netlink: 'syz.0.1651': attribute type 2 has an invalid length. [ 333.820538][T12233] netlink: 'syz.0.1651': attribute type 1 has an invalid length. [ 333.842999][T12233] netlink: 'syz.0.1651': attribute type 2 has an invalid length. [ 333.923220][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1651'. [ 333.961270][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'. [ 333.977905][T12240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1656'. [ 334.149850][T12252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1659'. [ 334.475414][T12265] netlink: 'syz.2.1664': attribute type 1 has an invalid length. [ 334.491796][T12265] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.1664'. [ 334.510104][T12265] netlink: 'syz.2.1664': attribute type 1 has an invalid length. [ 334.519314][T12265] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.1664'. [ 334.552695][T12272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1666'. [ 334.591012][ T36] tipc: Resetting bearer [ 334.733512][T12280] tipc: Enabled bearer , priority 0 [ 334.752289][T12281] syzkaller0: entered promiscuous mode [ 334.775313][T12281] syzkaller0: entered allmulticast mode [ 334.831094][T12290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1672'. [ 334.853422][T12281] tipc: Resetting bearer [ 334.939842][T12281] tipc: Disabling bearer [ 335.674520][T12338] siw: device registration error -23 [ 336.909411][ T1101] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.078978][ T1101] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.313219][ T1101] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.456523][ T1101] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.602475][ T1101] bridge_slave_1: left allmulticast mode [ 337.614958][ T1101] bridge_slave_1: left promiscuous mode [ 337.631387][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.644314][ T1101] bridge_slave_0: left allmulticast mode [ 337.651957][ T1101] bridge_slave_0: left promiscuous mode [ 337.657946][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.291760][ T1101] bond1 (unregistering): Released all slaves [ 338.396122][ T1101] bond0 (unregistering): Released all slaves [ 338.500365][ T1101] bond2 (unregistering): Released all slaves [ 338.606754][ T1101] bond3 (unregistering): Released all slaves [ 338.622798][ T1101] bond4 (unregistering): Released all slaves [ 338.636463][ T1101] bond5 (unregistering): Released all slaves [ 338.723684][ T1101] tipc: Left network mode [ 339.105577][ T1101] hsr_slave_0: left promiscuous mode [ 339.119976][ T1101] hsr_slave_1: left promiscuous mode [ 339.149952][ T1101] veth0_macvtap: left promiscuous mode [ 339.502889][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 339.546467][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 340.181312][ T1101] IPVS: stop unused estimator thread 0... [ 340.300898][ T1101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.379358][ T1101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.424240][ T1101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.500339][ T1101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.603849][ T1101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 340.681535][ T1101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 340.746928][ T1101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 340.799591][ T1101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 340.949803][ T1101] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI [ 340.961720][ T1101] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] [ 340.971275][ T1101] CPU: 0 UID: 0 PID: 1101 Comm: kworker/u8:6 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 340.983074][ T1101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.993169][ T1101] Workqueue: netns cleanup_net [ 340.998047][ T1101] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 341.003769][ T1101] Code: 89 e9 c4 f7 c6 05 13 97 8f 05 01 48 c7 c7 a0 f7 9b 8c be 97 05 00 00 48 c7 c2 20 f8 9b 8c e8 da d3 a2 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 44 0c 28 f8 4d 8b 2c 24 4d 39 f5 [ 341.023626][ T1101] RSP: 0018:ffffc90003c1f4f8 EFLAGS: 00010206 [ 341.029685][ T1101] RAX: ffffffff89fac6ee RBX: 000000001fffe1ac RCX: ffff888026f08000 [ 341.037734][ T1101] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 341.045690][ T1101] RBP: ffff88806eb30420 R08: ffffffff8f508fa7 R09: 1ffffffff1ea11f4 [ 341.053780][ T1101] R10: dffffc0000000000 R11: fffffbfff1ea11f5 R12: 00000000ffff0d60 [ 341.061746][ T1101] R13: dffffc0000000000 R14: ffff888051658800 R15: 1ffff1100dd66084 [ 341.069797][ T1101] FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 341.078739][ T1101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.085336][ T1101] CR2: 000000110c36693a CR3: 000000000df38000 CR4: 00000000003526f0 [ 341.093579][ T1101] Call Trace: [ 341.096866][ T1101] [ 341.099813][ T1101] inetdev_event+0x2a7/0x15b0 [ 341.104489][ T1101] ? __pfx_inetdev_event+0x10/0x10 [ 341.109589][ T1101] notifier_call_chain+0x1b3/0x3e0 [ 341.114779][ T1101] netif_close_many+0x29c/0x410 [ 341.119628][ T1101] ? __pfx_netif_close_many+0x10/0x10 [ 341.124996][ T1101] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 341.131421][ T1101] ? unregister_netdevice_queue+0x1b3/0x380 [ 341.137332][ T1101] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 341.144147][ T1101] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 341.150402][ T1101] ? net_generic+0x1e/0x240 [ 341.154993][ T1101] ? remove_nexthop+0x114/0x180 [ 341.159846][ T1101] ops_undo_list+0x3dc/0x990 [ 341.164462][ T1101] ? __pfx_ops_undo_list+0x10/0x10 [ 341.169594][ T1101] ? do_raw_spin_unlock+0x122/0x240 [ 341.174804][ T1101] cleanup_net+0x4c5/0x800 [ 341.179244][ T1101] ? __pfx_cleanup_net+0x10/0x10 [ 341.184206][ T1101] ? _raw_spin_unlock_irq+0x23/0x50 [ 341.189417][ T1101] ? process_scheduled_works+0x9ef/0x17b0 [ 341.195133][ T1101] ? process_scheduled_works+0x9ef/0x17b0 [ 341.200945][ T1101] process_scheduled_works+0xae1/0x17b0 [ 341.206601][ T1101] ? __pfx_process_scheduled_works+0x10/0x10 [ 341.212599][ T1101] worker_thread+0x8a0/0xda0 [ 341.217193][ T1101] kthread+0x70e/0x8a0 [ 341.221278][ T1101] ? __pfx_worker_thread+0x10/0x10 [ 341.226470][ T1101] ? __pfx_kthread+0x10/0x10 [ 341.231052][ T1101] ? _raw_spin_unlock_irq+0x23/0x50 [ 341.236399][ T1101] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.241619][ T1101] ? __pfx_kthread+0x10/0x10 [ 341.246224][ T1101] ret_from_fork+0x3fc/0x770 [ 341.250859][ T1101] ? __pfx_ret_from_fork+0x10/0x10 [ 341.255996][ T1101] ? __switch_to_asm+0x39/0x70 [ 341.260752][ T1101] ? __switch_to_asm+0x33/0x70 [ 341.265516][ T1101] ? __pfx_kthread+0x10/0x10 [ 341.270203][ T1101] ret_from_fork_asm+0x1a/0x30 [ 341.274971][ T1101] [ 341.277993][ T1101] Modules linked in: [ 341.282478][ T1101] ---[ end trace 0000000000000000 ]--- [ 341.290063][ T1101] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 341.297511][ T1101] Code: 89 e9 c4 f7 c6 05 13 97 8f 05 01 48 c7 c7 a0 f7 9b 8c be 97 05 00 00 48 c7 c2 20 f8 9b 8c e8 da d3 a2 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 44 0c 28 f8 4d 8b 2c 24 4d 39 f5 [ 341.317368][ T1101] RSP: 0018:ffffc90003c1f4f8 EFLAGS: 00010206 [ 341.323652][ T1101] RAX: ffffffff89fac6ee RBX: 000000001fffe1ac RCX: ffff888026f08000 [ 341.332095][ T1101] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 341.340263][ T1101] RBP: ffff88806eb30420 R08: ffffffff8f508fa7 R09: 1ffffffff1ea11f4 [ 341.348454][ T1101] R10: dffffc0000000000 R11: fffffbfff1ea11f5 R12: 00000000ffff0d60 [ 341.356528][ T1101] R13: dffffc0000000000 R14: ffff888051658800 R15: 1ffff1100dd66084 [ 341.364518][ T1101] FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 341.373928][ T1101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.380809][ T1101] CR2: 000000110c36693a CR3: 000000000df38000 CR4: 00000000003526f0 [ 341.388836][ T1101] Kernel panic - not syncing: Fatal exception [ 341.395205][ T1101] Kernel Offset: disabled [ 341.399533][ T1101] Rebooting in 86400 seconds..