last executing test programs: 6.560191901s ago: executing program 2 (id=3721): socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x4, 0x0) unshare(0x2c020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x6, 0x9, 0xa4, 0xffb, 0x2, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x8, 0x9, 0x3, 0x800, 0x1, 0xfffffffc, 0x0, 0x6, 0x9, 0x4, 0xb, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x102, 0x6, 0x1c00, 0xb, 0x7, 0xbed2, 0x8, 0x8000100, 0x3, 0x0, 0x10ffe, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x2, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xae, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0x2, 0x2, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x753, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x4, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x488b, 0x84, 0x104, 0x10, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xdde, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x7fff, 0x40002, 0x3f, 0x8, 0x8, 0x3, 0x400, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x6, 0x9, 0xa4, 0xffb, 0x2, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x8, 0x9, 0x3, 0x800, 0x1, 0xfffffffc, 0x0, 0x6, 0x9, 0x4, 0xb, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x102, 0x6, 0x1c00, 0xb, 0x7, 0xbed2, 0x8, 0x8000100, 0x3, 0x0, 0x10ffe, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x2, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xae, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0x2, 0x2, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x753, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x4, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x488b, 0x84, 0x104, 0x10, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xdde, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x7fff, 0x40002, 0x3f, 0x8, 0x8, 0x3, 0x400, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@enum={0x6, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x7d01}, {0xf, 0x9}, {0x7, 0x2}, {0x4, 0x6}]}, @const={0x7, 0x0, 0x0, 0xa, 0x5}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x61, 0x5f, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000180)=""/141, 0x64, 0x8d, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@enum={0x6, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x7d01}, {0xf, 0x9}, {0x7, 0x2}, {0x4, 0x6}]}, @const={0x7, 0x0, 0x0, 0xa, 0x5}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x61, 0x5f, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000180)=""/141, 0x64, 0x8d, 0x1}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 6.091871788s ago: executing program 2 (id=3726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x32, 0x3d4c2b4c, 0x47, @private2, @empty, 0x20, 0x7800, 0x4, 0xfffffff8}}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r6}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x40040d0) 4.994889127s ago: executing program 2 (id=3730): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000440)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003100000002cbd7000ffdbdf2502000900080000001c0000000000000005000600000000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000006fc0100000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r6 = socket(0x1d, 0x802, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 3.823503432s ago: executing program 3 (id=3741): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) (async) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @sco={0x1f, @none}, @vsock={0x28, 0x0, 0x2710, @local}, @rc={0x1f, @none, 0x8}, 0x4, 0x0, 0x0, 0x0, 0xfffa, &(0x7f0000000180)='pimreg0\x00', 0xffffffffffffffc0, 0x1, 0x6}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000200)={'vlan1\x00'}) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7fff}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x3ff}, &(0x7f0000000140)=0x8) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000260000000800000002"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000380), 0x0}, 0x20) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) (async) close(0x3) 3.520568792s ago: executing program 3 (id=3742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@dev, @initdev, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@gettfilter={0x74, 0x2e, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x7ff9}, {0x8, 0xc}, {0x4, 0x8}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x9a5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xe5002432}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xb}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xfffffff7}]}, 0x74}, 0x1, 0xf0ffffffffffff, 0x0, 0x48000}, 0x840) 3.345854757s ago: executing program 4 (id=3745): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900"], 0x7c}}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100"/136], 0x190) 3.281007332s ago: executing program 3 (id=3746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000008c0)={'macvlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "6bd5cd02564f02baa6f0bebffdfae62afcb1fd7181456afb25ec29769ccfbab0", "3fd06d696e33edf2548c47a6ff34f2e528f318224e461f3782aae3d6a86be6b4", "168bc75f89267387dfe8f726649ab412c8ca4807008b540eccf6cbc20509a46a", "d010df955837f8ba675efba4d90d6941354f8b57b5e0f933bebd023dfd8556c7", "4c5138db1c62592d6f60fe50e538dc820105b16582d6dee0c3fd5fa47b3a23c0", "e9115c6266848f73be343ab4", 0x3, 0x9, 0x3, 0xfa, 0x5}}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r4, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff000000001b0000000d0900000064703a73797afae612c6ea"], 0x54}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) shutdown(r5, 0x1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd36, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5f}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5a}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r9) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r10, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0xfffffffc, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x6880) 2.909537189s ago: executing program 4 (id=3748): r0 = socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@bridge_delneigh={0x44, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0xfc}}, @NDA_CACHEINFO={0x14, 0x3, {0x4, 0x7, 0x779, 0x3}}]}, 0x44}}, 0x20000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0xd, @mcast1, 0xffffff73}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bb89b783cc008f6c08de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c40aa1c788df600"}, 0xd8) ioctl$int_in(r2, 0x5452, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYRES64=r0], 0x30}}, 0x0) 2.660856656s ago: executing program 1 (id=3751): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000200050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 2.543218665s ago: executing program 1 (id=3753): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1410, 0x1, 0x70bd2d, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0xc0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f800000000040002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000008000069104e000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r2], 0x1c}}, 0x20040881) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRESOCT=r3, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r6 = socket$inet(0x2, 0x2, 0x1) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="62af", 0x2}], 0x1}, 0x800) sendmmsg$inet(r6, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x810, r2, 0x478eb000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 2.275940494s ago: executing program 1 (id=3756): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000780000000000000002000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000640000009500000000000000b0f316217a6e32cdd16dc15b2bf15beed69d27b1234b6d7268dc69c2efd82b31014213d3a50bcdafb3319e7c817ddaa79f564d4e73a48cc42da2e52324866b82472bc449d88d6d5869cfca9972f65494412e8d878aeb8be772728e42e1fc8e200433f6caf5263686e702de4400f218eecd970a13d47aa2822b"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', r0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000c0117e87de2f854e2d76100d14150d2a0db023113281c16984b56a1b27bf8ef8e4909e11b2"], 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20004008) 2.260470911s ago: executing program 3 (id=3757): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="dc010000160001002bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2400000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000022c6367500000000aa000004d533000000ac1414100000000000000000000000000800000000000000b507000000000000000000000080000006000000000000ff010000000000007c18ffffffffffffffffffffff000000000300000000000000020000000000000002000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000020002060100000000000000080000004f070000e4000600ac1414bb000000000000000000000000fc0200000000000000000000000000004e2400054e2281750200804016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d25b000000e000000100000000000000000000000045000000000000000100000000000000090000000000000009000000000000000800000000000000080000000000000000f8ffffffffffff060000000000000009000000000000000c00000000000000060000000000000000000000000000000800000003000000030000002abd700003350000020004069900000000000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff00000008fa000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@delqdisc={0x200, 0x25, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0xffe0, 0xd}, {0xe, 0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x5, 0xa1, 0x58c2, 0x6}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x15c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x6, 0xd, 0x3, 0x1, 0x2f0000, 0x5, 0x6}}, {0x10, 0x2, [0xb, 0x400, 0x5, 0xa7b4, 0x1, 0xb]}}, {{0x1c, 0x1, {0x6, 0x6, 0xffc0, 0x0, 0x2, 0xe73, 0x4, 0x9}}, {0x16, 0x2, [0x8000, 0x100, 0x5, 0xfffb, 0x3, 0xe0, 0x6, 0x8000, 0x3]}}, {{0x1c, 0x1, {0x6, 0x8, 0xa, 0xc50b, 0x2, 0x5, 0x15a1, 0x6}}, {0x10, 0x2, [0x2, 0x40, 0x8000, 0xd0, 0x8, 0xfc00]}}, {{0x1c, 0x1, {0x3, 0x3, 0x7, 0x4, 0x3, 0x1, 0x8000, 0x7}}, {0x12, 0x2, [0x7, 0x7, 0x9, 0x5, 0x9, 0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xe, 0x3ff, 0x10001, 0x2, 0x6, 0xfffffff8, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x7, 0xc, 0x7d, 0x8, 0x1, 0x2, 0x5f3849a5, 0x6}}, {0x10, 0x2, [0x3, 0x2, 0x7, 0x7, 0x6, 0x8]}}, {{0x1c, 0x1, {0x4, 0xd, 0x4b0e, 0x1, 0x2a17de626dec5631, 0xff, 0x4, 0x3}}, {0xa, 0x2, [0x63, 0x3, 0x1]}}, {{0x1c, 0x1, {0x7, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x6, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}]}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4020, 0x9, 0x2}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xffffffffffffff71, 0x1, {0x75, '\x00', 0x2, 0x64, 0x6, 0x7f}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa21}]}, 0x200}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000600)={0x8, {{0xa, 0x4e23, 0x0, @remote, 0x7fffffff}}, {{0xa, 0x4e20, 0x7, @private1, 0x2f}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010027bd700402d4df2500000000", @ANYRES32=r7, @ANYBLOB="904e0600c16a01002c001280110001006272696467655f736e617665000000001400058005001b000000000005001c0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r11], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_freezer_state(r12, &(0x7f0000000140), 0x2, 0x0) sendfile(r13, r13, 0x0, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000feff04000000"], 0x50) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) 2.178528884s ago: executing program 0 (id=3758): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900"], 0x7c}}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100"/136], 0x190) 2.035814903s ago: executing program 1 (id=3759): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001640)=""/4106, 0x9e}], 0x2}, 0x20000003}], 0x4000000000002c5, 0x40010020, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYBLOB="9915600ebd7b34125871f2076526204a048bd78f442857fe53c356b6536664da3a62391725a56e606939e52814ee48afd28ae479aa093e53dbf6afa31a1a9a4e3ba868c8c8c2f654cec46c36cf3096544403ea2b8be66cd9e1b1f7442d42189b78217654d2fd2684e2124f81045a5e39d19e5b985ab006740169bb96bea4c7fb7baefa0c7d5abd8ae56d90c9a91b8620228f9fc8e1e29785b8d5d585343a1a45330805e4f4f35a245732d4bde166342dd4", @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000811) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7}, 0x8) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900068004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001240)=ANY=[@ANYBLOB="480000002e0001140000000000000000040019803485fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec633eb94f80000000004100000000000000"], 0x48}], 0x1, 0x0, 0x0, 0x84}, 0x300) 1.333713386s ago: executing program 0 (id=3760): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000007000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9}, 0x94) 1.33234873s ago: executing program 4 (id=3761): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000100001040005ffff11ffffffff000000", @ANYBLOB="4cbf731b415c05516a8ef5ff4220803e87a3d3d3984a01e62d0aff0aa12798ff48049b8b939166214abbcd231be7216593ea33e21648a9cbd7a7ec3a72c73803f161cb8fde2a883c4e351e59f08f8be74ac864db57bafdc307117e25b475354e8db136585f38fcd52d13fb7059686ecdd8ad861f5fe1d22069b6bb53e278d74e105e04b9586c3e3b508e6aa71c3712ac3c33662cc364629838", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 1.331151752s ago: executing program 0 (id=3762): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket(0x28, 0x5, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$kcm(0x10, 0x2, 0x4) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xfff1, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xd}, {0xfff7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x1400c8d5}, 0x24000040) (async) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 1.297146669s ago: executing program 0 (id=3763): bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@bloom_filter={0x1e, 0xb49, 0x6, 0x10005, 0x18104, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0xb}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0x2a060400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) socket(0x40000000015, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) close(0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000010c0)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000003900)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000038c0)={&(0x7f00000025c0)={0x12dc, 0x41, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@generic="a2e12c27c7884bb3de2b1bad9d8dc30fb205dd6bf3b350919a54eed7d1fc63f6e756e1ecf91d063f2d813ef3ff480760c05d950614b01f1ad6c4146bb5dc2eb9ace00c5c8ef444030547040f75324aa19c0bcc606a79ff8c5e8caeb9fdbddaffee9a133e0d5165a35974a0bb285469e6a6c482453b84a1e755e465c22ae43a4d20bd0e1e696baaf904ba9977511afbfdc62927af1295f94a29422571e7c71106c70db84b3290fe20747244c6a20758f94b2783cd0f7984b321798bd21c627d436264ecae490b", @generic="f680b8ec7c9c74fbeb1c6279cdc75da5a4a47796c783e5c086f7e07cabe9a855a8bada9ad361204a805eb19ae07a7c4a56181a180d217e1d614ea8f23d070b38604de7a26c01d7510ce40aa157669409efad4513f0b0d835eec7aecd07ffb1b051e6c067bbbfd86251a91674d12f117c4e1851264e18b9668c1920278148a7f91d2574a63e3f7a812f9acf39004696fff06a23c4cff4362a85cea0fd8c34b800916928ac1b405640a95feff8b92e10c71ad6a1e3fca2438c3f42569b55eb0010995b299ab2a313c8750e757cccd0ebafc451d2c8498fb59f796056e9dd4bfec4ab5b5723b0", @generic="88bdf81a012ef956ca345b60b6a0fc590d9175a7d6b7d7b5b197b1992cb807515767ef7046d1ee8ca70f0156cd270a3f5eb1623c1f79d6a949134a32f0e2ef72286c5243224bf9557cbf605cd5a1f0ea1af36bab050d05e672ff7543c1e678683c4512659c1ea824cc8cfcfd8e74d4c1ed584a2d198a8ea2e5fbfecbb9", @nested={0x109d, 0x60, 0x0, 0x1, [@generic="3ac0c1c92ed7205627471909359d5eb26c7531c45c70305cd05a5c970eff44408723e89bab05e25cae56625784b424c21b9e08b088dfa63b08f0c2544d1dce0dee693a24101127ac2196580cfef95b91060dd6eaeb5d62a121455607ba6fc1c424051106c86c4ff4d5d29c69c1cfd633b4d3c60413eb2cc06bdacbd0e86aaa8a72645815feb02be791c7cb4a80a4876df6855cb0ca9d46c0db53cdfa48be0cbc1b73c196d37ad8c56075d15b1b3fd6a8261f601b52caee34660dc4f8356aa319cebbfb1243f7a9fc2b739ee34243c06c99426267b4ceed176de703e430b82f7f72441cd8c10548dc55eb8f1d92b9039ea585797999036fc0de4fd218f5773033475d92c54e9f77203627e5695d75bf0e28145a952b4f22a1b4d9e1f983b2e8b5cb878e3ee6db8d92ab794c999f1a37a58e6fc5559d8356ee40b8f8babe19bd146f61b1f86160149503b7bec953ffce20f3afd0f5e3e9737955370a2a3c1075a9aa58342402a4c3efba426dd84f6269dee999ab4f4543ed7e8fa40b9db058cfc79ed89796f94915b18f0cd75705a16a3bf49a10735554f0d54780bf8578906ca144976859520d29860331ef22e649cea518440d7439e7424ed3d5f29d2c07ef9af9f8e7aaab07696794bdf6a144342e4e7426dfac4e907531ba238e9f113b998aa0f5a31908b127fba9e38eda9b086ee01623dd4990c856a044445bd5ef8046aaaea7dc47a1a442cd71408bf191cc207a46928f83a73e12a08c896b07b557cb3bcd89702f371b393c951f85e60789995ab540cb4f255e44cad8bedfe9b8473f04318b6c54c9724443478be612444cbca3106e2c6bb0fb9f5bfdc02b8b33b96e09e0b478ffcd043f9bc06e4040c89bc3e21fdb1d90943300944917d97bd893a2f002d2355755289f9bd5f1fc9051d51aea65a6891f75a0851ea151602575d4ae59a42ebf21847d00126ba08cbe7ed42273af1a8154b6b4ae4bcb5938a992a70df3ab294bd6e089db1721703fb36d023aa46dc0fdfb95d7c8d441608edf0beebfa0b3cc3bdd5c7a7706f9866e0e4499a98f10fda56db64e72024f77ddd798a8c58954d8b9b1c3698eb616159f7614c5286dc90fc22f128fd8a9db3539c05b35e5ef3542a4d37a513b3d142a6cae4a75c3647d2ff025fe2433a7249904b69f37080b9fd1188c546d3b99b567dc71a2bbe6e58aab0505573932229219a3db8975800301a2337b0b271bd583e2298901f2c7971d3a4aa34ef0a6f375a168c4f2b0508e6aad1a036c22c6ac0d96b078960f38315fc827d2daab17e054cdabbaaa0ee98a4b179fea80893588d65f1bb32543f4a1087524a30af8f6564976cac9cef47ecccbe33f84f87aa3698d3932870cfb86f78c56799119ce086abc2c0def0c3ccad97c0456f745ab8858e019b79480762ab33bc43f91314d4fbe86b80be69fb13bee267956f77ae0d575343e9ac320674dddce614cf39806b7628c08b2cc7d035f2266b1b96d377bf76d67d1d77df58a845a1614eef363ef83f661a3ca7de9e4ff64592148f9d7251fdc8ab373a0bf0d171f2f7c1ba955ab0e80de113ccbf1e866948c66f2a6aa9a07a3631d0a35a8aaefc7959125dbba1dc8a85eefeadee0cc2d94208e6981bf882d3b13fa88704e8b0a05ce35fc3f62b0ed9e6aed7f68c0d5146abccc1cf1441fef5e6c3adff00767b2faf878834fe61fe5334901eb4e6c934cd4568174f1a74a94b6c58ab6926491d79da8e874d3b7f90eed8067b40a1baeec88c9c1adceb9b969dd5cb8bd5fc42627307f0524cb97caca29a9413f2c692fcfcfe1fae5c40e325fbb5e127689bbc124ea08a8cd0dac292ba1cf6ce82c6b2d5af90719372c7d741dd9d3cbbc1fceb8a8cce364ad4f44ff5039cef5b0e36cb42b372652f24a6ddbf57c7ccfb10f1693731061ff8eff4849286e53688a0c4884966bf7e92edf12e46224957e8851911a5630a34e9604368243e2d99cde666b8d9a25093a649f2df65adcd3cb9d3554a431abc311b468a6f23051d418b127a75796a9d7e7c251ad9e49a206475e2224a7ba9e16c1d1742a764181770f166965886ab39c2cf48e7701f56915738bec40342b6a0fa125c3e24d3e09582e4fa942b520414bc2ece0f67da51c8431df4b1954e04c51f194887ad199beab0773676eaeb073481ff0a455cd53a089c4f465705dd1d844059df0bc0589a83228dc457e398ef0ce472cc5875092b9da01f4f428f225e74f80aa51fa85dfd905e1bac85c999124d1395bf2facd57315385893159966766fc66e32497bd997c3487b651c051819a89b8f709df1dbf5caded2cab73966164cd43dcc6e5ca46ee2d484a0555f03dbce25dbccd802ef0aab3b01ad3f1efe7b13af72dc88fb0ecbc7f9d48871953098bcc0c0a8b8dc5cfbb0448b87035bf76c626f39018fdbb1e27b44312500b8a3c460509687b0f321aa49f8244be14554f0044c107aeac40a9545800526cb96dc84bf87922e44c0f895204e19e9d354dbbef7747014e90e31c1009039aa0202ebf9c186de3d8a7692f05f98bf87bce20a8a8ebcb6fd6c43a009da2741261f9bd322759b9f7453b51bc4e32e9ba41d755d636d8421be4be963e12208f0b10a3157beea8fd4f630a64633b92c3407eef83c91129f505f3bdc5f6017293b2f36029664861e12bf256f779f88fab117112e43c8a4256c5a4320bbe8ec9951a98d9cd8f687d056f593b03a319bae96819befdbd20208fac01cdd168bea0649486881c270e032c429ba3852c688b31ad5f1a8d646a8a5b0b52d5b63422248f5400f4cb2b6eaf54d2a3fc5fdfb3a53c94a36b61bae0949b0e9ffe5214f3417ee9af4caf7a583aa96135a4061d7d1ff636a610ea198c5cace1c8d77d605d6ab50846f4cbf692d63a99afecda8522576725be47dacdd55ee9e20d4fe8eba7150ff45d0339d444d4df5ae7d8baa316102d615395242842c97e7dda93795a147d8292fdf6f79721f8c422116264b2c24300da25658361cce03d86c934a4220e43052bae2c9ff61230199a5ac0106580c567f923503101aa4effd2e8f7df9fab206bf18faaa1d50ad26f1c4df4c4c4988fbd89438bfeb5dee927576adf1adda9fa74b2c4b24f228e5a7c81a7ce2503bb442a96ed1def832375e650da593d0161f041826db19c27ed228264ea6f9412e110513ac7965630f8b18c1bb86d424e0dfcf042ea94a81d9d3d51688ecdeffdc8a45b52da9f3460b4506872f0e591c29c1a687e50fa1a75e59867386e8ea63865a622263d056b921d866752976a0b013a656ab830498420d2dfc765f140698d8b295ace09b3523a1805dc8e0627820efc1762991ac15e6f21bbec63cae91dcb5ef51b1fc74ab2e60e69fa13b3f47e74bcc6dda0fa532420793ac3152d3364a91b9a3c80facfd548e2dd9ff05e95c1ae08f4d8c9f2e183595a6446450d39b32ed294dbacc8e581d7ad4ced54dbe333d7e4279ace2d5806ed5edc388b61ce4356706c3af3a2487c614b84606f3e6dc526754ff61df6178338e405a1d8a7d1d235900d02b29552ed266a44e82696f62d22dc772be9139526beaefe21e656bc105c08f6640900e851c83e2cea52356035ae9e2d38e2daf7c74363e19204167612f94ecec7c799dd5e840040a3b90d25c3c85df4fa231a0930d94171580a4ff74abfa776fa0e23920464b56eed676444545dcf09130a1ab82dab75c26711330d44ff2ef24d09aa05daebcccd9cb53a474a7b3514fe6214934145bd4803a9008d7aa1cb24eb9ce8d521fa7f631cd165161f0bbf2b8e9a8334a3191dc23787c81838d7be36552c5f1609c522d9e120d88793c8ab5427d9a3c07ca3d0726fffb63f96f51be402c033b0bad3cd9b6202c005f1529a7597e920423f8e91651eba304fd345ecdd481a6e28182e86e3d889d086717e56fbfe915d3727f7f8da61351b5bbac6b299016e75124a04a7d5558bc57199b9567da929bb500ae022bbae92215a63f1f2c9c32600c97aeab84a316d5d537774ea9051357835054ca782a58e29a138a5d9ae2fc2ba7139298acd8c1177924557bb97b8e5a2cbb0a1a207d77b3454421d022b5ceda94f19e2fbdd3457f7c4d0e11a96719d03c57bc08334060b43e080af21583a3c677f255ecb259b9a140b8fb40736dc1ce56cf6f3d947c90d11cea4aa3419fa984dd66ebb1ffa503eae4a2734ee21d070edbe862a810e3cab09f552f2bec774ef2356a68b0dca8623f435b352bbf985fc1457d1330d91b0903624af0decd6f692b8f58a216c31567d50f1fddb39c4a73afbf2817392cd28e6c284b5441332a8c777df0ed544e62e3c194e329fee4d672ec77bffa8e1e061b65a08c80a2591704b7138b15664832becffe681d940e9e6ba3d84025ff05923d83e30890781ec43e787655c6f9090a83c8457c4141c04984357e02fe827acb3e3cd87ee4e4e1fa1b9cdf494eecd8d5a0cdc6a02e04a3a0d36e570927cc38ee24acd09bd1eb0e15d0a7a61497b0127ed133007a9dda41b7b5546985967cf242fea915fca372b014400aee9d1ac62c6ae2d52662c73b4482315507a81e37e860c834bf34955273b2a7a75c8a953f81dc477f254708806bd2a8882649b64d4107486b06fd67f76a7956ed1355250962a6316a655306f387b707ac65b0ea8e3a4b81e9688c8bc118ff1065105b8a44c73ed016d564d61983a0b4c87f482df47b3e6e57baf434d84f00d9bdf814ecd4344e222bc4c5a637fbd7b908db1c643bb833e5b3cd22c6db6890355e255b28943c8e3f45fb0aedf03807ea01eaf5d544af1c5c3973f1d76ae1d730d55a2e5d7bd7c387955674145ccf8495c0ad7d4b7aa7b1f7b673f5cf4a90e610e005f5b4bc7f4fb3f9d457ea8ae0217d63f7faef1fea6b517b568ac838bd4dd36c680c1e4355c35a77cd7b785cfe4e6e7cb5e8a74b33942e28194832e9e1036cd64695c7dc1b2de03471bd464eb98d92e40f0882c87ff290857720492e141fa9108a8c366896fab89924024ddb553c47adbc7292b98603874e54b0065883213bd5034172ea334e26769bebdb7dee1ffdec4d83039b3891ff7f7c0490c290d292fa22e7f8faaced6da1a2e02ff470aec21f3b1b55c5ff4d419476c594639764f348518d2327512008e4d3aae66325dc4ff4764c944566baea67814f4c112ac48f57f2d84a13b792edf12cadf0cc3164c3a89554bc6b81f3393811d7166d73c43bb94bc2d383ad5681f62e8189dde90c89e9202bf4ba5eacd3a70274dff94f2e99f3c9cef3e81a7e23a6e797dc88724183516f668e990e83f022f6b2605a5709db4db604d57010d461e4d8375cd69ac471b3df6e6200ba3fdac0d053a854549a25390896c89537512590f0150a9ad5d96402a6110938bb95a3de85c774fdffa537363ac748bf2468d8ada11beb4adac476338d11895b4afb72e5ab313e4f3095c74a66d2b29567700114b684850c95396ac943e9253a01e548749f1ae79a7dc78be5645024c86c20a7b6e77db91c1aaf0168f94c1b6d72d30971616f7c0f523641505ff0815b8436d1bfdc6768dfc1ef8cfe9020dcc55215ea98f561863fcd0b12bbcd8238f0b9b41f0dfdc80f12452cdd16c5bffe9bb7831a5f28e55ce26e2e5abf4448b021388df2cea1e0750801392084e99f13a30476b7a798cef2be6fb316dd7fbcd2666c862956a70b0f2fdefcca88bb017f8d32189ae5daa781fdbcaba477b9942ae1506e29bf18bade9875d20e2d33e7b6a30098cc7c2bb84dc7d8b935cc0eb4545efc060d7149fe24633c6e11fd2ee2027c5", @nested={0x4, 0xe7}, @generic="4ed94893b3ff492f17ff7ccc379c652f9ab228807f588450fa2a91c3e49e5557a41cc34ca8e6c76ecf64cc6c57538680719aacbe36efc66edc64c4d568404aa7c264eab9949a55d3cdd5a2f40129ed3538bc9ed73b65dc46d29f9a264d9bfe6991b79a2cfc79d892565f6ee9f2a4dc71348283dfb4895d3823ba67748653ea3e8e74fbbc067edfa1f4872ceae12d0fbd89e16ec22f"]}]}, 0x12dc}, 0x1, 0x0, 0x0, 0x8400}, 0x20040001) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.230551081s ago: executing program 4 (id=3764): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0xfd51, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r4, @ANYRES64=r0], 0x38}}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="bae6b31adc2ae7376c949dc79145d4a336934ac597297d16aaec3918756c026fa1dcad5b465519905486aa670cf3e56953ef59964816e760471ba32ef1b28dd90d27db4e2def8bb202a371ee6723a5bbe4cf3a12a22d8d", @ANYRES16=0x0, @ANYRESDEC=r3, @ANYRES8=r3, @ANYRESDEC=r6, @ANYRESHEX=r0, @ANYRES32=0x0], 0x128}, 0x4000841) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500002c0000000000069078ac1414bbac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000003035180"], 0x0) 1.135371046s ago: executing program 3 (id=3765): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000008000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004880)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @uid}]}]}, 0x24}], 0x1}, 0x44010) (async) r4 = socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0x5, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x1, 0x4000001, 0x206, 0x6}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x24040084) (async) close(0x3) (async, rerun: 64) socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) sendto$inet6(r2, 0x0, 0x3f, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000850000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000e8ff0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x1, 0x3, {{0x1e, 0x4, 0x2, 0x20, 0x78, 0x64, 0x0, 0xc6, 0x4, 0x0, @empty, @empty, {[@lsrr={0x83, 0x17, 0x71, [@multicast1, @loopback, @empty, @private=0xa010100, @multicast2]}, @timestamp={0x44, 0x18, 0x71, 0x0, 0xf, [0x9a0, 0x2, 0xe6, 0x2, 0x790]}, @rr={0x7, 0x17, 0x47, [@rand_addr=0x64010101, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x37}, @empty]}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x2, 0x3, "9b"}, {0x2, 0x7, "53301629a3"}]}, @timestamp={0x44, 0xc, 0xd3, 0x0, 0x8, [0x8001, 0x8]}]}}}}}) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x101, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x400}, [@map_idx={0x18, 0x6}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @exit, @ldst={0x1, 0x2, 0x7, 0xa, 0xb, 0x100, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x8001, 0x0, &(0x7f0000000280), 0x40f00, 0x51, '\x00', r8, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xb, 0x74, 0x8}, 0x10, r9, r7, 0x3, &(0x7f0000000580)=[r0, r0, r1, r0, r1], &(0x7f00000005c0)=[{0x4, 0x3, 0xd, 0x2}, {0x2, 0x1, 0x6, 0xb}, {0x1, 0x3, 0x10, 0x2}], 0x10, 0x1b}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.080320916s ago: executing program 1 (id=3766): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000041ee000000f4ffffff000000000000000f255e346a0b5d46c47b7970b43d02d488b4b5a7c0ffe6307e08a6654fae1b3efbbc0d591d53e4c09cbeaef97ca875d58585802b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf9100000000000007080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) 804.457138ms ago: executing program 1 (id=3767): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) unshare(0x22020600) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r2, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) 727.461893ms ago: executing program 3 (id=3768): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001640)=""/4106, 0x9e}], 0x2}, 0x20000003}], 0x4000000000002c5, 0x40010020, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYBLOB="9915600ebd7b34125871f2076526204a048bd78f442857fe53c356b6536664da3a62391725a56e606939e52814ee48afd28ae479aa093e53dbf6afa31a1a9a4e3ba868c8c8c2f654cec46c36cf3096544403ea2b8be66cd9e1b1f7442d42189b78217654d2fd2684e2124f81045a5e39d19e5b985ab006740169bb96bea4c7fb7baefa0c7d5abd8ae56d90c9a91b8620228f9fc8e1e29785b8d5d585343a1a45330805e4f4f35a245732d4bde166342dd4", @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000811) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7}, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000000)='O', 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000003c0)={r0, &(0x7f0000000200)='\x00', 0x2a00, &(0x7f0000000240)={@_ha_fsid={[0x1926, 0xfff]}, {0x8d2e, 0x4, 0x5, 0x7}}, 0x5, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000340)=0x35c}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'veth0_to_team\x00', 0x100}) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900068004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc844) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001240)=ANY=[@ANYBLOB="480000002e0001140000000000000000040019803485fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec633eb94f8000"/72], 0x48}], 0x1, 0x0, 0x0, 0x84}, 0x300) 361.822144ms ago: executing program 2 (id=3769): pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='C', 0x1}], 0x1, 0x6) (async, rerun: 64) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (rerun: 64) splice(r0, 0x0, r1, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x4c, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1b, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000000107000004000000186600000b00000000000000050000", @ANYRES32=0x1, @ANYBLOB="000000000000b5c963a47f00000000008500000086000000d0080000f0ffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180000000700000000000000ffffffff85100000fbffffff9500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x6, 0xbd, &(0x7f0000000500)=""/189, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xf, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x4, 0xf, 0xa}, {0x3, 0x1, 0x2, 0x6}, {0x0, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xa, 0xa}, {0x1, 0x3, 0xe, 0x4}, {0x2, 0x1, 0x4, 0x5}, {0x5, 0x1, 0x10, 0xc}, {0x5, 0x3, 0x5, 0x9}, {0x0, 0x3, 0x9, 0x5}], 0x10, 0x1ff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex, 0x2e, 0x1, 0xba22, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@ifindex, r4, 0x2, 0x8, 0x0, @void, @value, @void, @void, r5}, 0x20) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f0000000300), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r0, r3, 0x29, 0x24, 0x0, @void, @void, @void, @value=r6, r5}, 0x20) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 223.707504ms ago: executing program 0 (id=3770): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2, 0x2}, 0x28) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030500000000000000080000000066a6c3477e5ecd1d9eef448fff09b53bd5fae86840725fc3b8a42258e8c110ca224e088dec6131f1250c48aebc8d7f94e6dda80af741", @ANYRES32=0x0], 0x3c}}, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) (async) close(r1) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="ad", 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r7, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 206.239639ms ago: executing program 4 (id=3771): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900"], 0x7c}}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100"/136], 0x190) 125.403559ms ago: executing program 2 (id=3772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000040000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9}, 0x94) 1.968896ms ago: executing program 0 (id=3773): syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaa61b82de082486dd61f6fb8800282f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00000001ac7c9900000086dd86dd88be"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_extract_tcp_res$synack(&(0x7f0000000300)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x142, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf66e2742f9ea3b2c}, @empty, @void, {@mpls_mc={0x8848, {[{0x7, 0x0, 0x1}], @ipv4=@tcp={{0x6, 0x4, 0x3, 0x26, 0x130, 0x68, 0x0, 0xeb, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x86, 0x3, 'l'}]}}, {{0x4e24, 0x4e20, r3, 0x41424344, 0x1, 0x0, 0xa, 0x40, 0x4, 0x0, 0x1, {[@exp_smc={0xfe, 0x6}, @mptcp=@syn={0x1e, 0xc, 0x4, 0x1, 0x78, 0x7fff}]}}, {"5c1a5200e647cb5cae33d3e86ac5196c51538132ae303cfbe9de421b072ebb99590f54dd7aefd5d994babdf3e64a63f82124cfb83672bbfdf31942b5acf4b555b260ab7c88d0d6128681df6bb76c9f8c0e34c82a9de6c206b9baf881020a31dc81fda3d94827a6272dde52e9d2870d1907aa34becc34a69acd62ac18331ec6cb5dc3dff7a3672ff8b2f7c97c855370a3eb4d3959a1e5a816872f1f20715444981e64b9d5a905429ce24166b0d47e4d031875f597b057b486fe08d7ef80a654cc671583f85202b4e187e8fddd91539b827d191502955a18bb705925e2cffd31dbc33c13d5f19684cd4e0aad71ef9e061c"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x142, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf66e2742f9ea3b2c}, @empty, @void, {@mpls_mc={0x8848, {[{0x7, 0x0, 0x1}], @ipv4=@tcp={{0x6, 0x4, 0x3, 0x26, 0x130, 0x68, 0x0, 0xeb, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x86, 0x3, 'l'}]}}, {{0x4e24, 0x4e20, r3, 0x41424344, 0x1, 0x0, 0xa, 0x40, 0x4, 0x0, 0x1, {[@exp_smc={0xfe, 0x6}, @mptcp=@syn={0x1e, 0xc, 0x4, 0x1, 0x78, 0x7fff}]}}, {"5c1a5200e647cb5cae33d3e86ac5196c51538132ae303cfbe9de421b072ebb99590f54dd7aefd5d994babdf3e64a63f82124cfb83672bbfdf31942b5acf4b555b260ab7c88d0d6128681df6bb76c9f8c0e34c82a9de6c206b9baf881020a31dc81fda3d94827a6272dde52e9d2870d1907aa34becc34a69acd62ac18331ec6cb5dc3dff7a3672ff8b2f7c97c855370a3eb4d3959a1e5a816872f1f20715444981e64b9d5a905429ce24166b0d47e4d031875f597b057b486fe08d7ef80a654cc671583f85202b4e187e8fddd91539b827d191502955a18bb705925e2cffd31dbc33c13d5f19684cd4e0aad71ef9e061c"}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000e2f93e0800a943d92a14d4c9e74872f6ff7b9865e128dcc48ac5f0612a0e34334f9fbc71fc37790da4000000008eadb44f1a8066b61c6a0b2b8de49c64dbcc33dd032520954af48929c7c7ae4a1bb5cce6133c8ecbe88c422ea4fa49331a42aef72495695222f103f21382bbd702ef8d15cb8f9831ee1928c88bab2c73a7dd77084b664392430c5ffc9559585b00"/157], 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) (async) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5fe4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$sock(r1, &(0x7f0000000d40)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000240)="c6c665cf95f60b4534628488a1154eef138da6e7849f61f57eb85dcebacea24e167f20614c79a749c0bb0637ee6eaa3d8a0ba327be73722721597acb24457e975c8427d89819b9a7e82a394ca2cfbc42011ff90028922b9ad7037466a6c0cfb6c21a2e610b73dc76bab4b12547ee2cf5115c10162215096a", 0x78}, {&(0x7f00000002c0)="22a3fc928a16f81dd9e16a5d776862f1fef9f6ed3d072d055ed9eda85b8e40891381c1f6684159f4876e0daf4bfdac86c666", 0x32}, {&(0x7f0000000a40)="e3b7a65b6bbed9f7361055d232c63c1d2db7e8c2669d5089bc415274d1232538217477efe3144a67065842d5ad97f9689b2e87e9ecb2a2c8e0edd358a9c9af871ab1e92d1bc7e2256a41a3414ad2b172e79ce9f5200f0fbfec61952c70d78a68b7b5677f5999a10ab51447359a89bcfe4af172690e7f821caff74a94887a569ca2432b72a028c45e8ade03e4513de0c76b45d5bb92348e3e8463a2ecd059311ae75750369b6a571cafd8676d72b51ebf23f8426d52e8dd9458e9b943e93278cf6626302ffbb1e12c3c5a15721b355eb63283fe197e1faa7e48d6c9", 0xdb}, {&(0x7f0000000b40)="56f1905a4742095f8bc0026ae90bee55e3d1a83b6c0b474520b287c2cc0735415f7a2e5142765ff2b5e1414bf08565473db453c9eba23b0da29ae48ac8cb461635d8f7735546bfe1c571179e560230194635fcd546cf3ee647b52628", 0x5c}, {&(0x7f0000000bc0)="bb8d5addc89355a3bd9834eedce719b6fe7d78fdc161bf6b500ff9cea0d9d9eaf51a8bf375f07c8c5f969393ae7b8435d08f8830aabfdcde755f2a1e619d1f1ee5b675ca0be31df0ab701cf9e84228ccfef9afe763ba063e5d724733b177d133889ad120ebd2b8731cd00f70747badfb7fd2f8e14c26e62da6af8c7e33600982c0a4324dc9dfc70cb3de5c", 0x8b}], 0x5, &(0x7f0000000d00)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xc3}}], 0x30}, 0x4000880) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x330, 0xffffffff, 0xd0, 0xd0, 0x1a8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x2, 0x0, [0x2c, 0x1c, 0x34, 0xc, 0x2, 0x3e, 0x8, 0x2, 0x1, 0x3e, 0x6, 0xe, 0xd, 0x2c, 0xf, 0x8], 0x2, 0x7f, 0x2}}}, {{@ip={@loopback, @local, 0x0, 0xffffff00, '\x00', 'pim6reg1\x00', {}, {0xff}, 0x84, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11, 0x1, 0xb0, 0x7}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b77574e46e9bd9469d5dfd7a28218de214afbb48230fc3b3d2574f03336b"}}, {{@ip={@local, @local, 0xff000000, 0xffffff00, 'veth0\x00', 'team0\x00', {}, {0xff}, 0x2e, 0x0, 0x2}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x7], 0x1}}, @common=@ttl={{0x28}, {0x1, 0x5}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x330, 0xffffffff, 0xd0, 0xd0, 0x1a8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x2, 0x0, [0x2c, 0x1c, 0x34, 0xc, 0x2, 0x3e, 0x8, 0x2, 0x1, 0x3e, 0x6, 0xe, 0xd, 0x2c, 0xf, 0x8], 0x2, 0x7f, 0x2}}}, {{@ip={@loopback, @local, 0x0, 0xffffff00, '\x00', 'pim6reg1\x00', {}, {0xff}, 0x84, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11, 0x1, 0xb0, 0x7}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b77574e46e9bd9469d5dfd7a28218de214afbb48230fc3b3d2574f03336b"}}, {{@ip={@local, @local, 0xff000000, 0xffffff00, 'veth0\x00', 'team0\x00', {}, {0xff}, 0x2e, 0x0, 0x2}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x7], 0x1}}, @common=@ttl={{0x28}, {0x1, 0x5}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0xc, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24001090}, 0x44004) 826.116µs ago: executing program 2 (id=3774): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3f00000092000000240012800b0001006272696467650000140002800500260000000000050030"], 0x44}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0x190, 0xffffffff, 0x190, 0x190, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x72}, @local, @icmp_id=0x65, @gre_key=0xfffe}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @private=0xa010102, @rand_addr=0x64010101, @icmp_id=0x65, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x14, @multicast1, @loopback, @gre_key=0x40, @port=0x4e22}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff, 0xff, 'vxcan1\x00', 'ip6_vti0\x00', {0xff}, {}, 0x21, 0x5, 0x1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @gre_key=0x8, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) recvmmsg(r3, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x21}, 0xe75}], 0x3aa0, 0x60002000, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250aff8000", @ANYRES64=r0, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x40, 0x3}) 0s ago: executing program 4 (id=3775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x85686d2a9e7d42de}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) close(r1) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) read(r4, &(0x7f0000000b40)=""/117, 0xfffffffffffffe22) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709a70000000000000101000000080009003f05000014001f000000000000000000000000000023000106001b004e2400000500070000000000060002000100000008000a0004000000"], 0x50}}, 0x0) clock_gettime(0x0, &(0x7f0000004380)={0x0, 0x0}) recvmmsg$unix(r6, &(0x7f0000004200)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000001840)=[{&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/111, 0x6f}, {&(0x7f0000001600)=""/199, 0xc7}, {&(0x7f0000001700)=""/214, 0xd6}, {&(0x7f0000001800)=""/17, 0x11}], 0x7, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001980)=""/15, 0xf}, {&(0x7f00000019c0)=""/244, 0xf4}, {&(0x7f0000001ac0)=""/159, 0x9f}, {&(0x7f0000001b80)=""/183, 0xb7}, {&(0x7f0000001c40)=""/239, 0xef}, {&(0x7f0000001d40)=""/44, 0x2c}, {&(0x7f0000001d80)=""/45, 0x2d}], 0x7, &(0x7f0000001e40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000001f40), 0x6e, &(0x7f0000003380)=[{&(0x7f0000001fc0)=""/77, 0x4d}, {&(0x7f0000002040)=""/138, 0x8a}, {&(0x7f0000002100)=""/11, 0xb}, {&(0x7f0000002140)=""/237, 0xed}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/189, 0xbd}], 0x6, &(0x7f0000003400)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000003440), 0x6e, &(0x7f0000003600)=[{&(0x7f00000034c0)=""/223, 0xdf}, {&(0x7f00000035c0)=""/63, 0x3f}], 0x2, &(0x7f0000003640)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000003780), 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003800)=""/236, 0xec}, {&(0x7f0000003900)=""/209, 0xd1}, {&(0x7f0000003a00)=""/249, 0xf9}, {&(0x7f0000003b00)=""/194, 0xc2}, {&(0x7f0000003c00)=""/82, 0x52}, {&(0x7f0000003c80)=""/95, 0x5f}], 0x6, &(0x7f0000003d80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000003e00)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000003e80)=""/71, 0x47}, {&(0x7f0000003f00)=""/21, 0x15}, {&(0x7f0000003f40)=""/116, 0x74}, {&(0x7f0000003fc0)=""/222, 0xde}, {&(0x7f00000040c0)=""/95, 0x5f}, {&(0x7f0000004140)=""/42, 0x2a}], 0x6}}], 0x6, 0x3000, &(0x7f00000043c0)={r8, r9+60000000}) kernel console output (not intermixed with test programs): idge0: port 2(bridge_slave_1) entered blocking state [ 474.836897][ T9127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.846518][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.883505][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.932553][T19291] tap0: tun_chr_ioctl cmd 1074025677 [ 474.950863][T19291] tap0: linktype set to 823 [ 475.336042][T19321] netlink: 'syz.0.2996': attribute type 2 has an invalid length. [ 475.469366][T19328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2998'. [ 475.837219][T19340] macsec2: entered promiscuous mode [ 476.064626][T19343] netlink: 'syz.2.3001': attribute type 10 has an invalid length. [ 476.101629][T19343] geneve1: entered promiscuous mode [ 476.141165][T19343] team0: Port device geneve1 removed [ 476.707775][T19369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.811858][T18806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.970337][T19369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.077710][T19381] syzkaller1: entered promiscuous mode [ 477.090438][T19381] syzkaller1: entered allmulticast mode [ 477.472943][T19394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3008'. [ 477.472943][T19393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3008'. [ 477.749784][T19403] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3014'. [ 477.792239][T19403] netlink: 'syz.1.3014': attribute type 1 has an invalid length. [ 477.825644][T18806] veth0_vlan: entered promiscuous mode [ 477.856801][T19403] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3014'. [ 477.892983][T18806] veth1_vlan: entered promiscuous mode [ 478.035737][T18806] veth0_macvtap: entered promiscuous mode [ 478.044759][T19422] netlink: 'syz.0.3016': attribute type 1 has an invalid length. [ 478.066473][T18806] veth1_macvtap: entered promiscuous mode [ 478.126287][T19429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3016'. [ 478.142018][T18806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.183690][T19431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'. [ 478.210125][T19431] netlink: 'syz.0.3016': attribute type 2 has an invalid length. [ 478.252279][T18806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.325592][ T9125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.359462][ T9125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.376236][ T9125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.390753][ T9125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.415031][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 478.530233][T19443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3020'. [ 478.581694][T19443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3020'. [ 478.653869][T19443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3020'. [ 478.686348][T19443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3020'. [ 478.882724][T19440] macsec2: entered promiscuous mode [ 478.984676][ T9119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.022938][ T9119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.200732][ T9125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.242115][ T9125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.474251][ T9125] net_ratelimit: 135 callbacks suppressed [ 479.474271][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.520688][ T9125] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 479.596163][T19477] netlink: 'syz.4.2898': attribute type 1 has an invalid length. [ 479.666433][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.705957][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.743455][ T9127] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.773491][ T9127] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.809160][ T9127] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.821471][T19475] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 479.864033][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.893765][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 480.828097][ T4945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 480.850514][ T4945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 480.863563][ T4945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 480.875611][ T4945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 480.889010][ T4945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 481.599337][ T9127] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.651925][T19549] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3040'. [ 481.668596][T19547] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 481.676525][ T9127] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.699325][T19549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3040'. [ 481.705439][T19554] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3043'. [ 481.848276][T19562] netlink: 'syz.0.3044': attribute type 1 has an invalid length. [ 481.986031][T19576] netlink: 'syz.0.3044': attribute type 10 has an invalid length. [ 482.057898][ T9127] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.070957][ T9127] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.107233][T19575] tipc: Enabled bearer , priority 0 [ 482.120591][T19576] dummy0: entered promiscuous mode [ 482.167391][T19579] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 482.237155][T19575] tipc: Disabling bearer [ 482.328375][ T9127] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.365814][ T9127] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.528150][ T9127] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.568883][ T9127] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.706360][T19609] vti0: entered promiscuous mode [ 482.974306][ T4945] Bluetooth: hci1: command tx timeout [ 482.992005][T19619] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 483.308986][T19623] __nla_validate_parse: 4 callbacks suppressed [ 483.309007][T19623] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3055'. [ 483.462469][ T9127] pim6reg: left allmulticast mode [ 483.473800][ T9127] lo: left allmulticast mode [ 483.813143][ T9127] bond5 (unregistering): (slave gretap1): Releasing active interface [ 483.821623][ T9127] bond5 (unregistering): (slave gretap1): the permanent HWaddr of slave - 46:37:3a:3d:d0:2a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 483.894449][ T9127] bond8 (unregistering): (slave geneve3): Releasing active interface [ 483.909655][ T9127] bond6 (unregistering): (slave geneve2): Releasing active interface [ 483.917894][ T9127] geneve2 (unregistering): left allmulticast mode [ 483.959582][ T9127] team0: Port device bridge0 removed [ 483.986454][ T9127] bond5 (unregistering): (slave bridge2): Releasing active interface [ 484.033128][ T9127] bond9 (unregistering): (slave bridge5): Releasing active interface [ 484.057472][ T9127] bond0 (unregistering): Released all slaves [ 484.090692][ T9127] bond1 (unregistering): Released all slaves [ 484.111718][ T9127] bond2 (unregistering): (slave veth3): Releasing active interface [ 484.122127][ T9127] bond2 (unregistering): Released all slaves [ 484.136829][ T9127] bond3 (unregistering): Released all slaves [ 484.150805][ T9127] bond4 (unregistering): Released all slaves [ 484.166809][ T9127] bond5 (unregistering): Released all slaves [ 484.187078][ T9127] bond6 (unregistering): Released all slaves [ 484.203554][ T9127] bond7 (unregistering): Released all slaves [ 484.222820][ T9127] bond8 (unregistering): Released all slaves [ 484.237677][ T9127] bond10 (unregistering): Released all slaves [ 484.250797][ T9127] bond9 (unregistering): Released all slaves [ 484.413498][ T9127] tipc: Left network mode [ 484.459025][T19652] xt_policy: neither incoming nor outgoing policy selected [ 484.549765][ T9125] net_ratelimit: 154 callbacks suppressed [ 484.549785][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.626535][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.672505][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.718697][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.740522][T19654] syzkaller0: entered promiscuous mode [ 484.746591][T19654] syzkaller0: entered allmulticast mode [ 484.788191][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.816107][ T9127] IPVS: stopping backup sync thread 7312 ... [ 484.838426][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.883476][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.923639][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.966588][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.995504][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 485.062189][ T4945] Bluetooth: hci1: command tx timeout [ 485.407927][T19690] netlink: 'syz.1.3067': attribute type 11 has an invalid length. [ 486.274655][T19707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3071'. [ 486.362814][T19709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3072'. [ 487.140372][ T4945] Bluetooth: hci1: command tx timeout [ 487.973422][T19722] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.011994][T19722] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.456783][T19734] tipc: Enabled bearer , priority 0 [ 488.488541][T19737] syzkaller0: entered promiscuous mode [ 488.506285][T19737] syzkaller0: entered allmulticast mode [ 488.514151][T19734] syzkaller0: entered promiscuous mode [ 488.522784][T19734] syzkaller0: entered allmulticast mode [ 488.560062][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'. [ 488.571529][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'. [ 488.600661][T19734] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 488.767348][T19745] tipc: Resetting bearer [ 488.953436][T19733] tipc: Resetting bearer [ 489.026631][T19733] tipc: Disabling bearer [ 489.214221][ T4945] Bluetooth: hci1: command tx timeout [ 489.378967][T19514] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.384732][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'. [ 489.411665][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3089'. [ 489.417783][T19514] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.441019][T19514] bridge_slave_0: entered allmulticast mode [ 489.456622][T19514] bridge_slave_0: entered promiscuous mode [ 489.509603][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3089'. [ 489.525081][T19514] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.547673][T19514] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.559838][T19514] bridge_slave_1: entered allmulticast mode [ 489.561804][T19789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3089'. [ 489.569039][T19514] bridge_slave_1: entered promiscuous mode [ 489.633643][ T9149] net_ratelimit: 206 callbacks suppressed [ 489.633661][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.663573][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.674337][ T9117] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 489.679905][T19794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 489.794571][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.796192][T19514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.833808][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.878934][T19514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.888312][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.936106][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.975525][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 490.023341][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 490.073330][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 490.600699][T19848] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 490.625439][T19848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3100'. [ 491.537443][T19825] tipc: Started in network mode [ 491.549863][T19825] tipc: Node identity e6fbbb8fe8f, cluster identity 4711 [ 491.561312][T19825] tipc: Enabled bearer , priority 0 [ 491.590805][ T9127] hsr_slave_0: left promiscuous mode [ 491.598099][ T9127] hsr_slave_1: left promiscuous mode [ 491.631695][T19862] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3102'. [ 491.886992][T19829] syzkaller0: entered promiscuous mode [ 491.892494][T19829] syzkaller0: entered allmulticast mode [ 491.901873][T19843] tipc: Resetting bearer [ 491.933916][T19848] 8021q: adding VLAN 0 to HW filter on device bond11 [ 491.962656][T19850] 8021q: adding VLAN 0 to HW filter on device bond11 [ 491.973917][T19850] bond11: (slave vti0): The slave device specified does not support setting the MAC address [ 491.986081][T19850] bond11: (slave vti0): Error -95 calling set_mac_address [ 492.011127][T19853] bond11: (slave dummy0): Error -99 calling set_mac_address [ 492.026154][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 492.038935][T19514] team0: Port device team_slave_0 added [ 492.053574][T19843] tipc: Resetting bearer [ 492.138212][T19843] tipc: Disabling bearer [ 492.215372][T19514] team0: Port device team_slave_1 added [ 492.357695][T19514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.387280][T19514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.429643][T19514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.444362][T19514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.451491][T19514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.501237][T19514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.538420][T19885] erspan0: entered promiscuous mode [ 492.729987][ T9127] IPVS: stop unused estimator thread 0... [ 492.752178][T19514] hsr_slave_0: entered promiscuous mode [ 492.774802][T19514] hsr_slave_1: entered promiscuous mode [ 492.802173][T19514] debugfs: 'hsr0' already exists in 'hsr' [ 492.818763][T19514] Cannot create hsr debugfs directory [ 492.990156][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3108'. [ 493.133931][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 493.211501][T19905] ip6t_REJECT: ECHOREPLY is not supported [ 494.320602][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3113'. [ 494.357309][T19954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3113'. [ 494.376453][T19954] vxlan0: entered promiscuous mode [ 494.549182][T19857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 494.605594][T19514] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 494.656729][ T9125] net_ratelimit: 178 callbacks suppressed [ 494.656749][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.676917][T19514] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 494.702548][T19514] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 494.750932][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.768278][T19514] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.788758][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.825688][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.855775][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.865576][T19514] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 494.878213][T19982] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3115'. [ 494.890081][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.921991][T19514] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.931409][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.958888][T19514] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 494.975241][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.998534][T19514] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 495.007396][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 495.048552][T19987] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3118'. [ 495.064534][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 495.225572][T19997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3120'. [ 495.369309][T20011] netlink: 'syz.1.3123': attribute type 62 has an invalid length. [ 495.538789][T19514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.617754][T20019] FAULT_INJECTION: forcing a failure. [ 495.617754][T20019] name failslab, interval 1, probability 0, space 0, times 0 [ 495.645952][T19514] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.669766][T20019] CPU: 1 UID: 0 PID: 20019 Comm: syz.1.3125 Not tainted syzkaller #0 PREEMPT(full) [ 495.669790][T20019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 495.669800][T20019] Call Trace: [ 495.669808][T20019] [ 495.669816][T20019] dump_stack_lvl+0xe8/0x150 [ 495.669843][T20019] should_fail_ex+0x40c/0x560 [ 495.669877][T20019] should_failslab+0xa8/0x100 [ 495.669898][T20019] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 495.669925][T20019] ? __alloc_skb+0x1d7/0x7a0 [ 495.670026][T20019] ? __local_bh_enable_ip+0xd0/0x130 [ 495.670057][T20019] __alloc_skb+0x1d7/0x7a0 [ 495.670086][T20019] netlink_dump+0x1e7/0xee0 [ 495.670150][T20019] ? __netlink_lookup+0xc6/0x8b0 [ 495.670204][T20019] ? __pfx_netlink_dump+0x10/0x10 [ 495.670234][T20019] ? netlink_lookup+0x30/0x200 [ 495.670249][T20019] ? netlink_lookup+0x30/0x200 [ 495.670274][T20019] __netlink_dump_start+0x589/0x7b0 [ 495.670298][T20019] rtnetlink_rcv_msg+0xa48/0xc00 [ 495.670351][T20019] ? __pfx_neightbl_dump_info+0x10/0x10 [ 495.670371][T20019] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 495.670394][T20019] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 495.670416][T20019] ? ref_tracker_free+0x689/0x830 [ 495.670477][T20019] ? __pfx_neightbl_dump_info+0x10/0x10 [ 495.670510][T20019] netlink_rcv_skb+0x226/0x4a0 [ 495.670530][T20019] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 495.670558][T20019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.670588][T20019] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.670605][T20019] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.670628][T20019] netlink_unicast+0x7bb/0x940 [ 495.670664][T20019] netlink_sendmsg+0x813/0xb40 [ 495.670692][T20019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.670715][T20019] ? aa_sock_msg_perm+0xf1/0x1b0 [ 495.670796][T20019] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.670829][T20019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.670847][T20019] ____sys_sendmsg+0x9b9/0xa20 [ 495.670865][T20019] ? __might_fault+0xaf/0x130 [ 495.670897][T20019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.670925][T20019] ? import_iovec+0x73/0xa0 [ 495.670948][T20019] ___sys_sendmsg+0x2a5/0x360 [ 495.670964][T20019] ? __lock_acquire+0x683/0x2cd0 [ 495.670988][T20019] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.671045][T20019] ? __fget_files+0x2a/0x420 [ 495.671065][T20019] ? __fget_files+0x3a2/0x420 [ 495.671094][T20019] __x64_sys_sendmsg+0x1bd/0x2a0 [ 495.671115][T20019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.671143][T20019] ? __pfx_ksys_write+0x10/0x10 [ 495.671176][T20019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.671195][T20019] do_syscall_64+0x174/0x580 [ 495.671215][T20019] ? trace_irq_disable+0x3b/0x140 [ 495.671237][T20019] ? clear_bhb_loop+0x40/0x90 [ 495.671259][T20019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.671276][T20019] RIP: 0033:0x7ff6f299ce59 [ 495.671293][T20019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.671307][T20019] RSP: 002b:00007ff6f0bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.671325][T20019] RAX: ffffffffffffffda RBX: 00007ff6f2c15fa0 RCX: 00007ff6f299ce59 [ 495.671337][T20019] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 495.671347][T20019] RBP: 00007ff6f0bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 495.671358][T20019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.671368][T20019] R13: 00007ff6f2c16038 R14: 00007ff6f2c15fa0 R15: 00007ffe817af138 [ 495.671398][T20019] [ 496.048628][T19514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 496.059052][T19514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 496.131348][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.138562][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.196900][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.204149][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.955205][T20068] netlink: 'syz.4.3133': attribute type 3 has an invalid length. [ 496.972000][T20068] netlink: 'syz.4.3133': attribute type 1 has an invalid length. [ 497.013816][T20068] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3133'. [ 497.057316][T20068] NCSI netlink: No device for ifindex 2147483648 [ 497.109967][T20077] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3135'. [ 497.124992][T19514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.299572][T19514] veth0_vlan: entered promiscuous mode [ 497.373617][T19514] veth1_vlan: entered promiscuous mode [ 497.387314][T20088] netlink: 'syz.1.3138': attribute type 3 has an invalid length. [ 497.412275][T20088] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3138'. [ 497.486442][T20095] veth0: entered promiscuous mode [ 497.501968][T14734] bond_slave_0: entered promiscuous mode [ 497.509402][T14734] bond_slave_1: entered promiscuous mode [ 497.517084][T20095] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3140'. [ 497.532034][T19514] veth0_macvtap: entered promiscuous mode [ 497.558178][T19514] veth1_macvtap: entered promiscuous mode [ 497.568601][T20093] veth0: left promiscuous mode [ 497.575777][T14734] bond_slave_0: left promiscuous mode [ 497.581205][T14734] bond_slave_1: left promiscuous mode [ 497.655482][T19514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.697315][T19514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.750414][ T9120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.768285][ T9120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.807868][ T9120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.861616][ T9120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.957194][T20121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3145'. [ 498.407669][ T9117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.437660][ T9117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.518608][T20137] netlink: 'syz.4.3149': attribute type 9 has an invalid length. [ 498.543432][ T9119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.569173][ T9119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.739587][T20149] netlink: 'syz.4.3151': attribute type 1 has an invalid length. [ 498.769425][T20149] netlink: 'syz.4.3151': attribute type 3 has an invalid length. [ 499.291802][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 499.313439][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 499.325250][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 499.339424][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 499.350024][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 499.714426][ T9119] net_ratelimit: 123 callbacks suppressed [ 499.714472][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.801142][ T9119] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.934714][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.978140][ T9119] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 500.123310][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 500.153338][ T9117] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 500.160056][T20194] IPVS: set_ctl: invalid protocol: 58 172.20.20.66:20002 [ 500.304672][ T9127] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 500.356477][ T9127] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 500.394630][ T9127] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 500.443389][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 501.373302][ T4945] Bluetooth: hci0: command tx timeout [ 501.664760][T20247] __nla_validate_parse: 2 callbacks suppressed [ 501.664778][T20247] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.3168'. [ 501.769428][T20250] syzkaller1: entered promiscuous mode [ 501.786694][T20250] syzkaller1: entered allmulticast mode [ 501.865070][T20252] geneve5: entered promiscuous mode [ 501.880814][T20252] geneve5: entered allmulticast mode [ 502.390840][T20283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3176'. [ 502.475285][T20287] netlink: 'syz.0.3176': attribute type 24 has an invalid length. [ 502.782938][T20166] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.790361][T20166] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.798416][T20166] bridge_slave_0: entered allmulticast mode [ 502.806721][T20166] bridge_slave_0: entered promiscuous mode [ 502.817216][T20166] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.824767][T20166] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.830115][T20297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3177'. [ 502.832155][T20166] bridge_slave_1: entered allmulticast mode [ 502.889399][T20166] bridge_slave_1: entered promiscuous mode [ 502.919466][T20311] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 503.398353][T20338] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3184'. [ 503.453748][ T4945] Bluetooth: hci0: command tx timeout [ 504.733294][ T71] net_ratelimit: 165 callbacks suppressed [ 504.733313][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.773317][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.793267][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.823262][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.854668][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.904025][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.933277][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.963447][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.993358][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 505.023261][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 505.439074][T20166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.460580][T20166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.487305][ T5879] uyz0: Port: 1 Link DOWN [ 505.491743][ T9120] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.516110][ T9120] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.537237][ T4945] Bluetooth: hci0: command tx timeout [ 505.550574][ T9120] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.559742][ T9120] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.581099][T20385] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3185'. [ 505.591761][ T9120] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.602034][ T9120] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.613511][T20166] team0: Port device team_slave_0 added [ 505.622097][T20166] team0: Port device team_slave_1 added [ 505.629420][ T9120] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.641935][ T9120] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.654455][T20387] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3185'. [ 505.737317][T20166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.754041][T20166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.825167][T20166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.855320][T20166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.885956][T20166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.927043][T20166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.955787][T20398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 505.963249][T20398] IPv6: NLM_F_CREATE should be set when creating new route [ 505.970515][T20398] IPv6: NLM_F_CREATE should be set when creating new route [ 506.017902][T20166] hsr_slave_0: entered promiscuous mode [ 506.031148][T20166] hsr_slave_1: entered promiscuous mode [ 506.038362][T20166] debugfs: 'hsr0' already exists in 'hsr' [ 506.057836][T20398] netlink: 'syz.3.3187': attribute type 23 has an invalid length. [ 506.073259][T20166] Cannot create hsr debugfs directory [ 506.132390][T20406] netlink: 'syz.4.3189': attribute type 3 has an invalid length. [ 506.550217][T20424] IPVS: length: 120 != 24 [ 506.740369][T20435] netlink: 'syz.0.3199': attribute type 10 has an invalid length. [ 506.762954][T20166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.789442][T20166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.981464][T20448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3203'. [ 507.216225][ T5879] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 507.273470][ T5879] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 507.305896][T20166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.312740][T20456] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 507.316720][T20166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.421966][T20166] bridge0: port 3(netdevsim1) entered disabled state [ 507.569587][T20166] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 507.604581][T20166] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 507.624696][ T4945] Bluetooth: hci0: command tx timeout [ 507.626930][T20166] bridge0: port 3(netdevsim1) entered disabled state [ 507.666324][T20166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.712589][T20166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.817133][T20485] xt_l2tp: v2 doesn't support IP mode [ 507.912533][T20166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.943667][T20166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.069022][T20485] kthread_run failed with err -4 [ 508.205130][T20498] Bluetooth: MGMT ver 1.23 [ 508.357336][T20508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3216'. [ 508.855045][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3219'. [ 508.980922][T20166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 509.045556][T20166] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.073916][T20166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 509.104700][T20166] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.136947][T20166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 509.170322][T20166] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.185679][T20166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 509.230988][T20166] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 509.503698][T20542] vlan2: left promiscuous mode [ 509.529157][T20542] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 509.557422][T14735] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 509.719377][T20166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.754327][T20563] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 509.768622][ T71] net_ratelimit: 185 callbacks suppressed [ 509.768641][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.820395][ T71] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 509.870264][T20166] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.910877][ T9117] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.918092][ T9117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.945923][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.978230][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.985467][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.996218][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 510.042925][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3228'. [ 510.051925][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 510.078401][ T9119] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 510.191518][T20575] team0: Port device team_slave_0 removed [ 510.207691][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 510.242472][T20542] bridge0: port 2(vlan3) entered blocking state [ 510.248983][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 510.259323][T20542] bridge0: port 2(vlan3) entered disabled state [ 510.273436][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 510.291692][T20542] vlan3: entered allmulticast mode [ 510.305979][T20542] geneve0: entered allmulticast mode [ 510.316915][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 510.335626][T20542] vlan3: entered promiscuous mode [ 510.344976][T20542] geneve0: entered promiscuous mode [ 510.361826][T20542] vlan2: entered promiscuous mode [ 510.432296][T20589] syzkaller1: entered promiscuous mode [ 510.456380][T20589] syzkaller1: entered allmulticast mode [ 510.699570][T20603] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3233'. [ 510.809449][T20611] netlink: 'syz.3.3235': attribute type 3 has an invalid length. [ 510.847327][T20611] netlink: 'syz.3.3235': attribute type 16 has an invalid length. [ 510.881907][T20611] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3235'. [ 511.146632][T20628] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3237'. [ 511.695959][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 511.909890][T20671] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3245'. [ 512.147461][T20166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.304853][T20166] veth0_vlan: entered promiscuous mode [ 512.350174][T20166] veth1_vlan: entered promiscuous mode [ 512.465267][T20166] veth0_macvtap: entered promiscuous mode [ 512.503619][T20166] veth1_macvtap: entered promiscuous mode [ 512.587571][T20166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.637462][T20166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.721175][ T9125] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.755959][ T9125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.810988][T20688] netlink: 'syz.2.3246': attribute type 1 has an invalid length. [ 512.834721][ T9125] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.858720][ T9125] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.217630][ T9125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.237489][ T9125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.521617][ T9127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.553241][ T9127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.726399][T20744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3257'. [ 514.781401][T20749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3259'. [ 514.812987][T20754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 514.829680][T20754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 514.839351][T20754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 514.850061][T20754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 514.860109][T20754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 514.865194][ T9125] net_ratelimit: 153 callbacks suppressed [ 514.865214][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.929529][T20757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3259'. [ 514.995822][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 515.010069][T20752] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 515.033518][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 515.083425][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 515.118192][ T9125] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 515.278046][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 515.313291][ T9119] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 515.334810][T20774] netlink: 'syz.3.3264': attribute type 1 has an invalid length. [ 515.455706][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 515.497612][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 515.561857][T20781] 8021q: adding VLAN 0 to HW filter on device bond10 [ 515.595480][T20781] bond9: (slave bond10): making interface the new active one [ 515.615407][T20781] bond9: (slave bond10): Enslaving as an active interface with an up link [ 515.720387][T20774] bond9: (slave gretap2): Enslaving as a backup interface with an up link [ 515.787279][T20797] FAULT_INJECTION: forcing a failure. [ 515.787279][T20797] name failslab, interval 1, probability 0, space 0, times 0 [ 515.834894][T20797] CPU: 0 UID: 0 PID: 20797 Comm: syz.4.3269 Not tainted syzkaller #0 PREEMPT(full) [ 515.834919][T20797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 515.834929][T20797] Call Trace: [ 515.834936][T20797] [ 515.834943][T20797] dump_stack_lvl+0xe8/0x150 [ 515.834969][T20797] should_fail_ex+0x40c/0x560 [ 515.835001][T20797] should_failslab+0xa8/0x100 [ 515.835020][T20797] __kmalloc_cache_noprof+0x88/0x660 [ 515.835042][T20797] ? nft_pernet+0x23/0x240 [ 515.835190][T20797] ? nf_tables_newtable+0x43e/0x1940 [ 515.835246][T20797] nf_tables_newtable+0x43e/0x1940 [ 515.835287][T20797] nfnetlink_rcv+0x1288/0x28c0 [ 515.835391][T20797] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 515.835431][T20797] ? ref_tracker_free+0x689/0x830 [ 515.835473][T20797] ? skb_clone+0x246/0x3a0 [ 515.835495][T20797] ? __netlink_deliver_tap+0x811/0x860 [ 515.835522][T20797] ? netlink_deliver_tap+0x2e/0x1b0 [ 515.835538][T20797] ? netlink_deliver_tap+0x2e/0x1b0 [ 515.835559][T20797] netlink_unicast+0x7bb/0x940 [ 515.835596][T20797] netlink_sendmsg+0x813/0xb40 [ 515.835625][T20797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.835646][T20797] ? aa_sock_msg_perm+0xf1/0x1b0 [ 515.835670][T20797] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 515.835692][T20797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.835712][T20797] ____sys_sendmsg+0x9b9/0xa20 [ 515.835732][T20797] ? __might_fault+0xaf/0x130 [ 515.835760][T20797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.835787][T20797] ? import_iovec+0x73/0xa0 [ 515.835811][T20797] ___sys_sendmsg+0x2a5/0x360 [ 515.835826][T20797] ? __lock_acquire+0x683/0x2cd0 [ 515.835848][T20797] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.835900][T20797] ? __fget_files+0x2a/0x420 [ 515.835920][T20797] ? __fget_files+0x3a2/0x420 [ 515.835947][T20797] __x64_sys_sendmsg+0x1bd/0x2a0 [ 515.835967][T20797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.835993][T20797] ? __pfx_ksys_write+0x10/0x10 [ 515.836026][T20797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.836046][T20797] do_syscall_64+0x174/0x580 [ 515.836066][T20797] ? trace_irq_disable+0x3b/0x140 [ 515.836090][T20797] ? clear_bhb_loop+0x40/0x90 [ 515.836111][T20797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.836127][T20797] RIP: 0033:0x7fcbd039ce59 [ 515.836144][T20797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.836157][T20797] RSP: 002b:00007fcbd130f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.836184][T20797] RAX: ffffffffffffffda RBX: 00007fcbd0615fa0 RCX: 00007fcbd039ce59 [ 515.836196][T20797] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 515.836205][T20797] RBP: 00007fcbd130f090 R08: 0000000000000000 R09: 0000000000000000 [ 515.836214][T20797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.836222][T20797] R13: 00007fcbd0616038 R14: 00007fcbd0615fa0 R15: 00007ffd19588498 [ 515.836252][T20797] [ 516.471195][T20820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3275'. [ 516.971753][T20843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3282'. [ 516.988171][ T4945] Bluetooth: hci4: command tx timeout [ 517.022097][T20843] netlink: 'syz.3.3282': attribute type 1 has an invalid length. [ 517.040888][T20848] FAULT_INJECTION: forcing a failure. [ 517.040888][T20848] name failslab, interval 1, probability 0, space 0, times 0 [ 517.091558][T20848] CPU: 1 UID: 0 PID: 20848 Comm: syz.1.3283 Not tainted syzkaller #0 PREEMPT(full) [ 517.091583][T20848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 517.091593][T20848] Call Trace: [ 517.091601][T20848] [ 517.091608][T20848] dump_stack_lvl+0xe8/0x150 [ 517.091634][T20848] should_fail_ex+0x40c/0x560 [ 517.091667][T20848] should_failslab+0xa8/0x100 [ 517.091687][T20848] __kvmalloc_node_noprof+0x16e/0x890 [ 517.091714][T20848] ? rhashtable_init_noprof+0x535/0xae0 [ 517.091734][T20848] ? rhashtable_init_noprof+0x126/0xae0 [ 517.091758][T20848] rhashtable_init_noprof+0x535/0xae0 [ 517.091779][T20848] rhltable_init_noprof+0x1e/0x60 [ 517.091798][T20848] nf_tables_newtable+0x6a0/0x1940 [ 517.091844][T20848] nfnetlink_rcv+0x1288/0x28c0 [ 517.091906][T20848] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 517.091950][T20848] ? ref_tracker_free+0x689/0x830 [ 517.091994][T20848] ? skb_clone+0x246/0x3a0 [ 517.092018][T20848] ? __netlink_deliver_tap+0x811/0x860 [ 517.092047][T20848] ? netlink_deliver_tap+0x2e/0x1b0 [ 517.092065][T20848] ? netlink_deliver_tap+0x2e/0x1b0 [ 517.092090][T20848] netlink_unicast+0x7bb/0x940 [ 517.092127][T20848] netlink_sendmsg+0x813/0xb40 [ 517.092157][T20848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.092181][T20848] ? aa_sock_msg_perm+0xf1/0x1b0 [ 517.092207][T20848] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.092227][T20848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.092248][T20848] ____sys_sendmsg+0x9b9/0xa20 [ 517.092266][T20848] ? __might_fault+0xaf/0x130 [ 517.092302][T20848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 517.092329][T20848] ? import_iovec+0x73/0xa0 [ 517.092353][T20848] ___sys_sendmsg+0x2a5/0x360 [ 517.092370][T20848] ? __lock_acquire+0x683/0x2cd0 [ 517.092394][T20848] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.092450][T20848] ? __fget_files+0x2a/0x420 [ 517.092470][T20848] ? __fget_files+0x3a2/0x420 [ 517.092501][T20848] __x64_sys_sendmsg+0x1bd/0x2a0 [ 517.092520][T20848] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 517.092549][T20848] ? __pfx_ksys_write+0x10/0x10 [ 517.092584][T20848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.092605][T20848] do_syscall_64+0x174/0x580 [ 517.092624][T20848] ? trace_irq_disable+0x3b/0x140 [ 517.092649][T20848] ? clear_bhb_loop+0x40/0x90 [ 517.092670][T20848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.092687][T20848] RIP: 0033:0x7f21cd19ce59 [ 517.092704][T20848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.092718][T20848] RSP: 002b:00007f21ce0e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.092737][T20848] RAX: ffffffffffffffda RBX: 00007f21cd415fa0 RCX: 00007f21cd19ce59 [ 517.092750][T20848] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 517.092761][T20848] RBP: 00007f21ce0e3090 R08: 0000000000000000 R09: 0000000000000000 [ 517.092771][T20848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.092781][T20848] R13: 00007f21cd416038 R14: 00007f21cd415fa0 R15: 00007ffd515e0338 [ 517.092812][T20848] [ 517.409201][T20843] bond11: entered promiscuous mode [ 517.429903][T20843] 8021q: adding VLAN 0 to HW filter on device bond11 [ 517.474260][T20854] netlink: 'syz.4.3284': attribute type 1 has an invalid length. [ 517.537132][T20854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.550515][T20852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3282'. [ 517.588897][T20852] bond11: left promiscuous mode [ 517.658186][T20859] tipc: Started in network mode [ 517.676080][T20854] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3284'. [ 517.689788][T20859] tipc: Node identity , cluster identity 4711 [ 517.701275][T20859] tipc: Failed to set node id, please configure manually [ 517.710364][T20859] tipc: Enabling of bearer rejected, failed to enable media [ 517.828010][T20854] bond1: (slave veth3): Enslaving as an active interface with a down link [ 517.952557][T20870] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 517.972306][T20882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3288'. [ 517.996268][T20870] bond1: (slave batadv1): making interface the new active one [ 518.033447][T20870] batadv1: entered promiscuous mode [ 518.055083][T20870] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 518.067966][T20888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3288'. [ 518.091808][T20874] bond1 (unregistering): (slave veth3): Releasing active interface [ 518.118430][T20874] bond1 (unregistering): (slave batadv1): Releasing active interface [ 518.136522][T20874] bond1 (unregistering): Released all slaves [ 518.360801][T20882] veth11: entered allmulticast mode [ 518.508158][T20875] syzkaller0: entered promiscuous mode [ 518.514133][T20875] syzkaller0: entered allmulticast mode [ 518.526297][T20888] ipvlan2: entered allmulticast mode [ 518.531654][T20888] gretap0: entered allmulticast mode [ 518.564528][T20904] lo speed is unknown, defaulting to 1000 [ 518.629085][T20909] netlink: 'syz.1.3291': attribute type 1 has an invalid length. [ 518.637294][T20909] netlink: 'syz.1.3291': attribute type 2 has an invalid length. [ 518.645774][T20909] netlink: 'syz.1.3291': attribute type 1 has an invalid length. [ 518.654129][T20909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3291'. [ 518.807032][ T9127] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 519.064472][ T4945] Bluetooth: hci4: command tx timeout [ 519.881526][ T9125] net_ratelimit: 136 callbacks suppressed [ 519.881563][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.915590][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.943450][ T9127] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.973366][ T9127] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 520.000459][ T9115] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 520.026417][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 520.064389][ T9115] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 520.087908][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 520.120404][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 520.153390][ T9115] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 521.113975][T20904] lo speed is unknown, defaulting to 1000 [ 521.129754][T20904] lo speed is unknown, defaulting to 1000 [ 521.135613][ T4945] Bluetooth: hci4: command tx timeout [ 521.423970][T20753] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.443496][T20753] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.450804][T20753] bridge_slave_0: entered allmulticast mode [ 521.462767][T20753] bridge_slave_0: entered promiscuous mode [ 521.477934][T20753] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.514421][T20753] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.522559][T20753] bridge_slave_1: entered allmulticast mode [ 521.562699][T20753] bridge_slave_1: entered promiscuous mode [ 521.578095][T20953] FAULT_INJECTION: forcing a failure. [ 521.578095][T20953] name failslab, interval 1, probability 0, space 0, times 0 [ 521.601843][T20953] CPU: 0 UID: 0 PID: 20953 Comm: syz.3.3294 Not tainted syzkaller #0 PREEMPT(full) [ 521.601869][T20953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 521.601879][T20953] Call Trace: [ 521.601885][T20953] [ 521.601893][T20953] dump_stack_lvl+0xe8/0x150 [ 521.601919][T20953] should_fail_ex+0x40c/0x560 [ 521.601951][T20953] should_failslab+0xa8/0x100 [ 521.601970][T20953] __kvmalloc_node_noprof+0x16e/0x890 [ 521.601996][T20953] ? rhashtable_init_noprof+0x535/0xae0 [ 521.602015][T20953] ? rhashtable_init_noprof+0x126/0xae0 [ 521.602038][T20953] rhashtable_init_noprof+0x535/0xae0 [ 521.602060][T20953] rhltable_init_noprof+0x1e/0x60 [ 521.602079][T20953] nf_tables_newtable+0x6a0/0x1940 [ 521.602124][T20953] nfnetlink_rcv+0x1288/0x28c0 [ 521.602185][T20953] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 521.602227][T20953] ? ref_tracker_free+0x689/0x830 [ 521.602270][T20953] ? skb_clone+0x246/0x3a0 [ 521.602293][T20953] ? __netlink_deliver_tap+0x811/0x860 [ 521.602321][T20953] ? netlink_deliver_tap+0x2e/0x1b0 [ 521.602339][T20953] ? netlink_deliver_tap+0x2e/0x1b0 [ 521.602363][T20953] netlink_unicast+0x7bb/0x940 [ 521.602401][T20953] netlink_sendmsg+0x813/0xb40 [ 521.602433][T20953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.602454][T20953] ? aa_sock_msg_perm+0xf1/0x1b0 [ 521.602476][T20953] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 521.602493][T20953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.602508][T20953] ____sys_sendmsg+0x9b9/0xa20 [ 521.602522][T20953] ? __might_fault+0xaf/0x130 [ 521.602549][T20953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.602576][T20953] ? import_iovec+0x73/0xa0 [ 521.602600][T20953] ___sys_sendmsg+0x2a5/0x360 [ 521.602617][T20953] ? __lock_acquire+0x683/0x2cd0 [ 521.602652][T20953] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.602709][T20953] ? __fget_files+0x2a/0x420 [ 521.602729][T20953] ? __fget_files+0x3a2/0x420 [ 521.602759][T20953] __x64_sys_sendmsg+0x1bd/0x2a0 [ 521.602779][T20953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 521.602818][T20953] ? __pfx_ksys_write+0x10/0x10 [ 521.602879][T20953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.602904][T20953] do_syscall_64+0x174/0x580 [ 521.602922][T20953] ? trace_irq_disable+0x3b/0x140 [ 521.602943][T20953] ? clear_bhb_loop+0x40/0x90 [ 521.602962][T20953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.602977][T20953] RIP: 0033:0x7fe51b19ce59 [ 521.602994][T20953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.603008][T20953] RSP: 002b:00007fe51c124028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.603027][T20953] RAX: ffffffffffffffda RBX: 00007fe51b415fa0 RCX: 00007fe51b19ce59 [ 521.603045][T20953] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 521.603056][T20953] RBP: 00007fe51c124090 R08: 0000000000000000 R09: 0000000000000000 [ 521.603065][T20953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.603074][T20953] R13: 00007fe51b416038 R14: 00007fe51b415fa0 R15: 00007ffdbefcbf38 [ 521.603103][T20953] [ 521.603100][T20909] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.734996][T20904] infiniband syz0: set active [ 521.762122][T20753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.931749][T20904] infiniband syz0: added lo [ 521.948323][T20904] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 521.952013][T20904] infiniband syz0: Couldn't open port 1 [ 521.967875][T20904] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 521.983451][T20904] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 522.013373][T20904] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 522.093572][T20904] RDS/IB: syz0: added [ 522.097641][T20904] smc: adding ib device syz0 with port count 1 [ 522.115034][T20904] smc: ib device syz0 port 1 has no pnetid [ 522.149179][ T808] lo speed is unknown, defaulting to 1000 [ 522.152589][T20753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.212144][T20904] lo speed is unknown, defaulting to 1000 [ 522.219676][ T24] lo speed is unknown, defaulting to 1000 [ 522.361116][T20753] team0: Port device team_slave_0 added [ 522.393747][T20753] team0: Port device team_slave_1 added [ 522.555568][T20753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.582582][T20753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.676022][T20753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.723865][T20753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.751317][T20753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.849189][T20753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.930727][T20990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3301'. [ 522.972424][T20994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3301'. [ 523.033677][ T5739] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 523.133076][T20904] lo speed is unknown, defaulting to 1000 [ 523.168063][T20753] hsr_slave_0: entered promiscuous mode [ 523.186425][T20753] hsr_slave_1: entered promiscuous mode [ 523.207934][T20753] debugfs: 'hsr0' already exists in 'hsr' [ 523.215103][ T4945] Bluetooth: hci4: command tx timeout [ 523.228223][T20753] Cannot create hsr debugfs directory [ 523.472693][T21008] FAULT_INJECTION: forcing a failure. [ 523.472693][T21008] name failslab, interval 1, probability 0, space 0, times 0 [ 523.485605][T21008] CPU: 1 UID: 0 PID: 21008 Comm: syz.1.3304 Not tainted syzkaller #0 PREEMPT(full) [ 523.485630][T21008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 523.485640][T21008] Call Trace: [ 523.485647][T21008] [ 523.485654][T21008] dump_stack_lvl+0xe8/0x150 [ 523.485682][T21008] should_fail_ex+0x40c/0x560 [ 523.485715][T21008] should_failslab+0xa8/0x100 [ 523.485736][T21008] __kmalloc_cache_noprof+0x88/0x660 [ 523.485761][T21008] ? nfnetlink_rcv+0x1021/0x28c0 [ 523.485794][T21008] nfnetlink_rcv+0x1021/0x28c0 [ 523.485865][T21008] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 523.485910][T21008] ? ref_tracker_free+0x689/0x830 [ 523.485956][T21008] ? skb_clone+0x246/0x3a0 [ 523.485979][T21008] ? __netlink_deliver_tap+0x811/0x860 [ 523.486009][T21008] ? netlink_deliver_tap+0x2e/0x1b0 [ 523.486027][T21008] ? netlink_deliver_tap+0x2e/0x1b0 [ 523.486053][T21008] netlink_unicast+0x7bb/0x940 [ 523.486090][T21008] netlink_sendmsg+0x813/0xb40 [ 523.486121][T21008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.486144][T21008] ? aa_sock_msg_perm+0xf1/0x1b0 [ 523.486172][T21008] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 523.486193][T21008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.486215][T21008] ____sys_sendmsg+0x9b9/0xa20 [ 523.486233][T21008] ? __might_fault+0xaf/0x130 [ 523.486263][T21008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.486292][T21008] ? import_iovec+0x73/0xa0 [ 523.486316][T21008] ___sys_sendmsg+0x2a5/0x360 [ 523.486334][T21008] ? __lock_acquire+0x683/0x2cd0 [ 523.486357][T21008] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.486415][T21008] ? __fget_files+0x2a/0x420 [ 523.486436][T21008] ? __fget_files+0x3a2/0x420 [ 523.486469][T21008] __x64_sys_sendmsg+0x1bd/0x2a0 [ 523.486491][T21008] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 523.486519][T21008] ? __pfx_ksys_write+0x10/0x10 [ 523.486553][T21008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.486573][T21008] do_syscall_64+0x174/0x580 [ 523.486593][T21008] ? trace_irq_disable+0x3b/0x140 [ 523.486617][T21008] ? clear_bhb_loop+0x40/0x90 [ 523.486640][T21008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.486658][T21008] RIP: 0033:0x7f21cd19ce59 [ 523.486675][T21008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.486690][T21008] RSP: 002b:00007f21ce0e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.486710][T21008] RAX: ffffffffffffffda RBX: 00007f21cd415fa0 RCX: 00007f21cd19ce59 [ 523.486723][T21008] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 523.486735][T21008] RBP: 00007f21ce0e3090 R08: 0000000000000000 R09: 0000000000000000 [ 523.486746][T21008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 523.486756][T21008] R13: 00007f21cd416038 R14: 00007f21cd415fa0 R15: 00007ffd515e0338 [ 523.486792][T21008] [ 523.965806][T21015] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3305'. [ 524.018435][ T5739] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 524.115672][T20904] lo speed is unknown, defaulting to 1000 [ 524.896033][ T9119] net_ratelimit: 197 callbacks suppressed [ 524.896052][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.953332][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.984806][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 525.011915][T20904] lo speed is unknown, defaulting to 1000 [ 525.019415][ T9119] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 525.061650][T21062] FAULT_INJECTION: forcing a failure. [ 525.061650][T21062] name failslab, interval 1, probability 0, space 0, times 0 [ 525.081544][T21062] CPU: 1 UID: 0 PID: 21062 Comm: syz.1.3314 Not tainted syzkaller #0 PREEMPT(full) [ 525.081569][T21062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 525.081579][T21062] Call Trace: [ 525.081587][T21062] [ 525.081594][T21062] dump_stack_lvl+0xe8/0x150 [ 525.081622][T21062] should_fail_ex+0x40c/0x560 [ 525.081656][T21062] should_failslab+0xa8/0x100 [ 525.081676][T21062] __kmalloc_cache_noprof+0x88/0x660 [ 525.081702][T21062] ? nfnetlink_rcv+0x1021/0x28c0 [ 525.081734][T21062] nfnetlink_rcv+0x1021/0x28c0 [ 525.081795][T21062] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 525.081839][T21062] ? ref_tracker_free+0x689/0x830 [ 525.081884][T21062] ? skb_clone+0x246/0x3a0 [ 525.081907][T21062] ? __netlink_deliver_tap+0x811/0x860 [ 525.081936][T21062] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.081952][T21062] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.081973][T21062] netlink_unicast+0x7bb/0x940 [ 525.082009][T21062] netlink_sendmsg+0x813/0xb40 [ 525.082038][T21062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.082070][T21062] ? aa_sock_msg_perm+0xf1/0x1b0 [ 525.082097][T21062] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.082117][T21062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.082139][T21062] ____sys_sendmsg+0x9b9/0xa20 [ 525.082157][T21062] ? __might_fault+0xaf/0x130 [ 525.082184][T21062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.082212][T21062] ? import_iovec+0x73/0xa0 [ 525.082235][T21062] ___sys_sendmsg+0x2a5/0x360 [ 525.082252][T21062] ? __lock_acquire+0x683/0x2cd0 [ 525.082273][T21062] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.082329][T21062] ? __fget_files+0x2a/0x420 [ 525.082349][T21062] ? __fget_files+0x3a2/0x420 [ 525.082381][T21062] __x64_sys_sendmsg+0x1bd/0x2a0 [ 525.082403][T21062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.082432][T21062] ? __pfx_ksys_write+0x10/0x10 [ 525.082466][T21062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.082486][T21062] do_syscall_64+0x174/0x580 [ 525.082506][T21062] ? trace_irq_disable+0x3b/0x140 [ 525.082530][T21062] ? clear_bhb_loop+0x40/0x90 [ 525.082550][T21062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.082567][T21062] RIP: 0033:0x7f21cd19ce59 [ 525.082583][T21062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.082596][T21062] RSP: 002b:00007f21ce0e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.082613][T21062] RAX: ffffffffffffffda RBX: 00007f21cd415fa0 RCX: 00007f21cd19ce59 [ 525.082625][T21062] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 525.082634][T21062] RBP: 00007f21ce0e3090 R08: 0000000000000000 R09: 0000000000000000 [ 525.082643][T21062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 525.082653][T21062] R13: 00007f21cd416038 R14: 00007f21cd415fa0 R15: 00007ffd515e0338 [ 525.082683][T21062] [ 525.372395][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 525.426759][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 525.453376][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 525.485727][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 525.532688][ T9149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 525.684058][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 525.866946][T21072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3319'. [ 525.973494][T21083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3320'. [ 525.973500][T21072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.007033][T21072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.065049][T21072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.080360][T21072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.165988][T20904] lo speed is unknown, defaulting to 1000 [ 526.363457][T21101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3322'. [ 526.719683][T20753] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 526.731315][ T5790] IPVS: starting estimator thread 0... [ 526.750220][T20753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.757889][T21114] FAULT_INJECTION: forcing a failure. [ 526.757889][T21114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.776606][T20753] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 526.812528][T20753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 526.817781][T21114] CPU: 1 UID: 0 PID: 21114 Comm: syz.3.3325 Not tainted syzkaller #0 PREEMPT(full) [ 526.817806][T21114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 526.817816][T21114] Call Trace: [ 526.817823][T21114] [ 526.817831][T21114] dump_stack_lvl+0xe8/0x150 [ 526.817855][T21114] should_fail_ex+0x40c/0x560 [ 526.817886][T21114] _copy_to_user+0x31/0xb0 [ 526.817908][T21114] simple_read_from_buffer+0xe1/0x170 [ 526.817936][T21114] proc_fail_nth_read+0x1bb/0x230 [ 526.817970][T21114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 526.817995][T21114] ? rw_verify_area+0x24a/0x4c0 [ 526.818020][T21114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 526.818041][T21114] vfs_read+0x213/0xa80 [ 526.818069][T21114] ? __pfx___mutex_lock+0x10/0x10 [ 526.818163][T21114] ? __pfx_vfs_read+0x10/0x10 [ 526.818187][T21114] ? __fget_files+0x2a/0x420 [ 526.818213][T21114] ? __fget_files+0x3a2/0x420 [ 526.818231][T21114] ? __fget_files+0x2a/0x420 [ 526.818260][T21114] ksys_read+0x150/0x270 [ 526.818286][T21114] ? __pfx_ksys_read+0x10/0x10 [ 526.818318][T21114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.818337][T21114] do_syscall_64+0x174/0x580 [ 526.818356][T21114] ? trace_irq_disable+0x3b/0x140 [ 526.818380][T21114] ? clear_bhb_loop+0x40/0x90 [ 526.818402][T21114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.818418][T21114] RIP: 0033:0x7fe51b15d68e [ 526.818434][T21114] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 526.818448][T21114] RSP: 002b:00007fe51c123fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 526.818467][T21114] RAX: ffffffffffffffda RBX: 00007fe51c1246c0 RCX: 00007fe51b15d68e [ 526.818479][T21114] RDX: 000000000000000f RSI: 00007fe51c1240a0 RDI: 0000000000000004 [ 526.818490][T21114] RBP: 00007fe51c124090 R08: 0000000000000000 R09: 0000000000000000 [ 526.818500][T21114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 526.818510][T21114] R13: 00007fe51b416038 R14: 00007fe51b415fa0 R15: 00007ffdbefcbf38 [ 526.818541][T21114] [ 527.033013][T21115] IPVS: using max 29 ests per chain, 69600 per kthread [ 527.065247][T20753] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 527.092792][T20753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 527.114481][T20904] lo speed is unknown, defaulting to 1000 [ 527.126321][T20753] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 527.161496][T20753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 527.335415][T21142] block nbd2: not configured, cannot reconfigure [ 527.386035][T21141] bridge1: entered promiscuous mode [ 527.403805][T21141] bridge1: entered allmulticast mode [ 527.431000][T21141] team0: Port device bridge1 added [ 527.487647][ T5790] IPVS: starting estimator thread 0... [ 527.600886][T21138] bridge2: entered promiscuous mode [ 527.606379][T21150] IPVS: using max 35 ests per chain, 84000 per kthread [ 527.638605][T21138] bridge2: entered allmulticast mode [ 527.677588][T21138] team0: Port device bridge2 added [ 527.855965][T20753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.908042][T20904] lo speed is unknown, defaulting to 1000 [ 527.952024][T20753] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.000939][ T9119] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.008243][ T9119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.083269][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.090506][ T9125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.728824][T20904] lo speed is unknown, defaulting to 1000 [ 529.195910][T21203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3339'. [ 529.224542][T21203] xt_TCPMSS: Only works on TCP SYN packets [ 529.432449][T21203] bridge_slave_1: left allmulticast mode [ 529.452315][T21203] bridge_slave_1: left promiscuous mode [ 529.469141][T21203] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.511883][T21203] bridge_slave_0: left allmulticast mode [ 529.534014][T21203] bridge_slave_0: left promiscuous mode [ 529.544718][T21203] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.710691][T20753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.979914][T20753] veth0_vlan: entered promiscuous mode [ 529.996798][ T9115] net_ratelimit: 125 callbacks suppressed [ 529.996817][ T9115] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 530.050393][ T9115] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 530.146636][T20753] veth1_vlan: entered promiscuous mode [ 530.193426][ T9115] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 530.202018][T21241] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 530.211418][ T9115] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 530.306838][T20753] veth0_macvtap: entered promiscuous mode [ 530.334679][ T9127] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 530.364699][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 530.377969][T20753] veth1_macvtap: entered promiscuous mode [ 530.404341][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 530.435154][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 530.438850][T20753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.483470][ T9119] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 530.499010][T20753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.534305][ T9115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.567152][ T9115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.600557][ T9115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.642541][ T9115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.965263][T21273] veth1: entered promiscuous mode [ 530.994556][T21273] macsec1: entered promiscuous mode [ 531.012924][T21273] macsec1: entered allmulticast mode [ 531.035705][T21273] veth1: entered allmulticast mode [ 531.089279][T21273] veth1: left allmulticast mode [ 531.103111][T21273] veth1: left promiscuous mode [ 531.185846][T21274] veth1: entered promiscuous mode [ 531.207316][T21274] macsec1: entered promiscuous mode [ 531.227690][T21286] netlink: 'syz.3.3354': attribute type 1 has an invalid length. [ 531.237091][T21274] macsec1: entered allmulticast mode [ 531.255859][T21274] veth1: entered allmulticast mode [ 531.288855][T21286] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3354'. [ 531.299543][T21274] veth1: left allmulticast mode [ 531.310345][T21274] veth1: left promiscuous mode [ 531.380856][T21286] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3354'. [ 531.408176][T21286] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3354'. [ 531.471312][T21283] macsec1: entered promiscuous mode [ 531.638073][ T9127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.655331][ T9127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.785977][ T9127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.819459][ T9127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.455771][T21322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3361'. [ 532.608507][T21322] netlink: 'syz.2.3361': attribute type 3 has an invalid length. [ 532.771558][T20754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 532.789561][T20754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 532.800708][T20754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 532.810597][T20754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 532.823081][T20754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 533.275780][T21348] netlink: 'syz.2.3365': attribute type 1 has an invalid length. [ 533.290268][T21349] netlink: 'syz.2.3365': attribute type 1 has an invalid length. [ 533.460145][T21348] bond1: entered promiscuous mode [ 533.465939][T21348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 533.698509][T21371] geneve2: entered promiscuous mode [ 534.795504][T14735] IPVS: starting estimator thread 0... [ 534.815677][T21429] xt_hashlimit: size too large, truncated to 1048576 [ 534.868683][T21437] netlink: 'syz.0.3384': attribute type 1 has an invalid length. [ 534.892713][T21437] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3384'. [ 534.902014][T21431] IPVS: using max 31 ests per chain, 74400 per kthread [ 534.909630][T20754] Bluetooth: hci3: command tx timeout [ 534.920987][T21330] lo speed is unknown, defaulting to 1000 [ 534.940311][T21433] tipc: Started in network mode [ 534.977355][T21433] tipc: Node identity 020be8e02e85, cluster identity 4711 [ 535.014024][ T9125] net_ratelimit: 127 callbacks suppressed [ 535.014078][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.014423][T21433] tipc: Enabled bearer , priority 0 [ 535.063598][ T9125] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.092428][T21441] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 535.121128][T21433] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 535.131815][T21442] syzkaller0: entered promiscuous mode [ 535.136032][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.143957][T21442] syzkaller0: entered allmulticast mode [ 535.179945][T21433] tipc: Resetting bearer [ 535.193787][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.207080][T21433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'. [ 535.225615][ T9120] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 535.258127][T21432] tipc: Resetting bearer [ 535.347143][T21432] tipc: Disabling bearer [ 535.366705][ T9127] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.403330][ T9127] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.443377][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.476835][T21454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.513464][T21454] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3389'. [ 536.148737][T21492] netlink: 'syz.2.3394': attribute type 1 has an invalid length. [ 536.190042][T21491] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3394'. [ 536.241655][T21500] netlink: 'syz.0.3395': attribute type 13 has an invalid length. [ 536.251560][T21500] netlink: 'syz.0.3395': attribute type 17 has an invalid length. [ 536.555000][T21518] xt_TCPMSS: Only works on TCP SYN packets [ 536.915593][T21508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.971486][ T5790] lo speed is unknown, defaulting to 1000 [ 536.977604][T20754] Bluetooth: hci3: command tx timeout [ 537.197395][T21508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.245859][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3403'. [ 537.299502][T21547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3404'. [ 537.408578][T21508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.485026][T21330] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.502527][T21330] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.522403][T21330] bridge_slave_0: entered allmulticast mode [ 537.558948][T21330] bridge_slave_0: entered promiscuous mode [ 537.579261][T21330] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.595679][T21330] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.603106][T21330] bridge_slave_1: entered allmulticast mode [ 537.619126][T21330] bridge_slave_1: entered promiscuous mode [ 537.733812][T21508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.838581][T21330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.871706][T21330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.950776][T21330] team0: Port device team_slave_0 added [ 537.980794][T21330] team0: Port device team_slave_1 added [ 538.070943][T21330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.084327][T21330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.110807][T21330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.140452][T21586] xt_addrtype: ipv6 does not support BROADCAST matching [ 538.175005][T21330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.182478][T21330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.210348][T21330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.224270][ T7728] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.265028][T21586] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 538.354501][ T9120] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.376138][T21594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3412'. [ 538.461518][ T71] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.606062][ T7728] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.647061][T21330] hsr_slave_0: entered promiscuous mode [ 538.677399][T21330] hsr_slave_1: entered promiscuous mode [ 538.709710][T21330] debugfs: 'hsr0' already exists in 'hsr' [ 538.723689][T21330] Cannot create hsr debugfs directory [ 538.920084][T21618] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3416'. [ 539.054952][T20754] Bluetooth: hci3: command tx timeout [ 539.109452][T21625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3415'. [ 539.179809][T21608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3415'. [ 539.445724][T21330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.480786][T21330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.785115][T21330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.813780][T21330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.053452][ T9151] net_ratelimit: 186 callbacks suppressed [ 540.053471][ T9151] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.102056][T21330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.130107][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.137766][T21330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.166408][T21669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3424'. [ 540.173717][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.223350][ T9115] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.264318][ T7728] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.302306][T21330] bridge0: port 1(vlan2) entered disabled state [ 540.313387][ T7728] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.343752][ T9115] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.374875][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.404751][ T9115] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.443315][ T9115] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.461022][T21330] vlan2 (unregistering): left allmulticast mode [ 540.480769][T21330] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 540.497545][T21330] vlan2 (unregistering): left promiscuous mode [ 540.505323][T21330] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 540.516969][T21330] bridge0: port 1(vlan2) entered disabled state [ 540.528574][T21330] vlan3: left promiscuous mode [ 540.533986][T21330] geneve0: left promiscuous mode [ 540.566306][T21330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.594711][T21330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.619456][T21680] netlink: 'syz.2.3423': attribute type 1 has an invalid length. [ 541.136077][T20754] Bluetooth: hci3: command tx timeout [ 541.140122][T21723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.155388][T21706] macsec1: entered promiscuous mode [ 541.265340][T21717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.368305][T21717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.465665][T21732] netlink: 'syz.4.3438': attribute type 13 has an invalid length. [ 541.547309][T21734] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 541.563287][ T5739] IPVS: starting estimator thread 0... [ 541.589402][T21733] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 541.637934][T21733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3438'. [ 541.655981][T21733] netlink: 'syz.4.3438': attribute type 21 has an invalid length. [ 541.663355][T21736] IPVS: using max 31 ests per chain, 74400 per kthread [ 541.902249][T21330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 541.945697][T21330] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.957594][T21330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 541.979632][T21330] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.998614][T21330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 542.027909][T21330] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 542.055582][T21330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 542.096131][T21330] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.129655][T21753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3442'. [ 542.170915][T21753] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 542.327843][T21768] bridge_slave_0: left allmulticast mode [ 542.342627][T21768] bridge_slave_0: left promiscuous mode [ 542.352860][T21768] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.370508][T21768] bridge_slave_1: left allmulticast mode [ 542.377506][T21768] bridge_slave_1: left promiscuous mode [ 542.385159][T21768] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.407940][T21768] bond0: (slave bond_slave_0): Releasing backup interface [ 542.457225][T21768] bond0: (slave bond_slave_1): Releasing backup interface [ 542.488410][T21768] team0: Port device team_slave_0 removed [ 542.529085][T21768] team0: Port device team_slave_1 removed [ 542.559305][T21768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.581935][T21768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.591972][T21768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.599838][T21768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.704917][T21330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.766465][T21330] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.802074][ T9120] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.809297][ T9120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.811379][T21786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3449'. [ 542.935944][ T9120] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.943266][ T9120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.147865][T21791] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3450'. [ 543.258676][T21806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3452'. [ 543.786620][T21794] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.914584][T21330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.146931][T21833] macsec1: entered promiscuous mode [ 544.471646][T21330] veth0_vlan: entered promiscuous mode [ 544.630104][T21854] syzkaller0: entered promiscuous mode [ 544.641528][T21854] syzkaller0: entered allmulticast mode [ 544.755213][T21874] netlink: 'syz.2.3463': attribute type 8 has an invalid length. [ 544.777125][T21330] veth1_vlan: entered promiscuous mode [ 544.882930][T21876] sctp: [Deprecated]: syz.0.3464 (pid 21876) Use of int in maxseg socket option. [ 544.882930][T21876] Use struct sctp_assoc_value instead [ 545.063551][ T3282] net_ratelimit: 158 callbacks suppressed [ 545.063572][ T3282] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.105085][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.145549][ T7728] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.179317][ T7728] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.212091][ T9151] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.244922][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.266912][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.294387][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.314378][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.333414][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.343132][T21883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'. [ 545.378803][T21882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3465'. [ 545.411658][T21882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3465'. [ 547.458810][T21881] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3465'. [ 547.510644][T21882] geneve2: entered promiscuous mode [ 547.622300][T21330] veth0_macvtap: entered promiscuous mode [ 547.663099][T21330] veth1_macvtap: entered promiscuous mode [ 547.674725][T21894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3470'. [ 547.718627][T21894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 547.731329][T21896] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3467'. [ 547.752477][T21894] bond1: entered promiscuous mode [ 547.759760][T21894] bond1: entered allmulticast mode [ 547.780930][T21894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 547.797166][T21894] team0: Port device bond1 added [ 547.889603][T21897] team0: Port device bond1 removed [ 547.902295][T21897] bond1 (unregistering): Released all slaves [ 547.990867][T21330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.028827][T21330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.058477][ T9117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.069797][ T9117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.096971][ T9117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.119249][ T9117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.185482][T21910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.314590][ T9149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.344491][ T9149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.437951][ T9149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.472152][T21911] macsec1: entered promiscuous mode [ 548.472608][ T9149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.136082][T21926] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 549.342211][T21939] lo: entered allmulticast mode [ 549.353668][T21939] lo: left allmulticast mode [ 549.451009][T21942] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 549.476808][T21942] bond1 (unregistering): Released all slaves [ 549.575803][ T9117] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.626256][ T9117] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.665891][ T9117] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.691704][ T9117] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.011082][T21963] Cannot find set identified by id 0 to match [ 550.053811][T21963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3490'. [ 550.087818][T21967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3492'. [ 550.113612][ T9117] net_ratelimit: 175 callbacks suppressed [ 550.113633][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.197933][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.243767][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.294765][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.333800][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.375665][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.403472][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.434196][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.463443][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.493466][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 551.481035][ T9117] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.518757][ T9117] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.568545][ T9117] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.603889][ T9117] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.667049][T21996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3499'. [ 552.061726][T22022] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3507'. [ 552.408443][T22046] netlink: 'syz.3.3512': attribute type 4 has an invalid length. [ 552.421586][T22052] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3513'. [ 552.457955][T22052] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3513'. [ 552.463562][T22051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3511'. [ 552.606530][T22059] netlink: 'syz.4.3517': attribute type 1 has an invalid length. [ 552.666438][T22051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 552.740700][T22064] erspan1: entered allmulticast mode [ 552.806556][T22069] syz.4.3517 (22069) used obsolete PPPIOCDETACH ioctl [ 553.327243][T22098] xfrm1: entered allmulticast mode [ 553.565853][T22116] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3527'. [ 553.579295][T22115] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 553.890486][T22138] netlink: 'syz.4.3533': attribute type 3 has an invalid length. [ 554.193450][T22152] ip6tnl0: Caught tx_queue_len zero misconfig [ 554.273034][T22156] gre1: entered allmulticast mode [ 554.285364][T22155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3538'. [ 554.859105][T22194] macsec1: entered promiscuous mode [ 555.133544][ T7728] net_ratelimit: 146 callbacks suppressed [ 555.133564][ T7728] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.192392][ T7728] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 555.228076][T22205] netlink: 'syz.3.3547': attribute type 13 has an invalid length. [ 555.275155][T22204] netlink: 'syz.3.3547': attribute type 13 has an invalid length. [ 555.291213][T14735] IPVS: starting estimator thread 0... [ 555.333594][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.375060][ T7728] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.385519][T22209] IPVS: using max 30 ests per chain, 72000 per kthread [ 555.424169][ T7728] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.475668][ T9151] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.534042][ T9151] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.583682][ T9151] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.618681][ T9115] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.663364][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.938890][T22229] syzkaller0: entered promiscuous mode [ 555.953934][T22229] syzkaller0: entered allmulticast mode [ 556.447164][T22248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3557'. [ 556.666972][T22263] syzkaller1: entered promiscuous mode [ 556.696781][T22263] syzkaller1: entered allmulticast mode [ 556.731099][T22263] netlink: 81 bytes leftover after parsing attributes in process `syz.3.3561'. [ 556.789549][T22263] bond0: Caught tx_queue_len zero misconfig [ 557.692090][T22297] macsec1: entered promiscuous mode [ 558.867555][T22370] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.881336][T22370] bridge_slave_0 (unregistering): left allmulticast mode [ 558.889284][T22370] bridge_slave_0 (unregistering): left promiscuous mode [ 558.897862][T22370] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.851321][T22283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.872868][T22379] netlink: 'syz.4.3581': attribute type 1 has an invalid length. [ 559.902273][T22379] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3581'. [ 560.153966][ T9120] net_ratelimit: 104 callbacks suppressed [ 560.153987][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.196429][T22423] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 560.233471][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.263370][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.300199][T22443] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3587'. [ 560.320420][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.367086][T22446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3585'. [ 560.377254][T22448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3589'. [ 560.386553][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.405015][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.435521][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.444647][T22449] xt_CT: No such helper "syz1" [ 560.474221][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.489375][ T9120] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 560.792805][T22467] netlink: 'syz.4.3590': attribute type 13 has an invalid length. [ 561.001101][T22485] netlink: 'syz.2.3595': attribute type 2 has an invalid length. [ 561.009528][T22485] netlink: 'syz.2.3595': attribute type 8 has an invalid length. [ 561.019297][T22485] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3595'. [ 561.248850][T22494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3596'. [ 561.317983][T22478] macsec1: entered promiscuous mode [ 561.424165][T22503] netlink: 'syz.2.3598': attribute type 4 has an invalid length. [ 561.443665][T22504] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3599'. [ 561.452270][T22503] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3598'. [ 562.399087][T22549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3609'. [ 562.566925][T22543] bond0: (slave bond_slave_1): Releasing backup interface [ 562.785669][T22562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3610'. [ 562.849448][T22568] netlink: 'syz.1.3611': attribute type 3 has an invalid length. [ 562.863290][T22562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3610'. [ 562.952815][T22568] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 563.284202][T22584] ip6tnl1: entered allmulticast mode [ 563.297408][ T9149] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 563.319539][ T9149] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 563.328160][ T5739] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 563.583428][T14734] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 563.834637][T14734] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 564.182531][T22612] macsec1: entered promiscuous mode [ 564.376884][ T7728] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc7 [ 564.628118][T22648] mac80211_hwsim hwsim91 syzkaller0: entered promiscuous mode [ 564.640053][T22648] mac80211_hwsim hwsim91 syzkaller0: entered allmulticast mode [ 565.045345][T22629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 565.196239][T22673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3632'. [ 565.233053][ T9149] net_ratelimit: 133 callbacks suppressed [ 565.233082][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 565.258975][T22649] lo: Caught tx_queue_len zero misconfig [ 565.283452][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 565.331027][ T9120] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 565.373466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.473588][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 565.497984][ T9120] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 565.591091][T22695] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3636'. [ 565.625831][T22695] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3636'. [ 565.654073][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 565.665621][ T9120] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 565.794988][ T9151] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 565.808130][ T9151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 566.195104][T22729] lo speed is unknown, defaulting to 1000 [ 566.211389][T22729] lo speed is unknown, defaulting to 1000 [ 566.224322][T22729] lo speed is unknown, defaulting to 1000 [ 566.242178][T22729] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 566.295768][T22729] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 566.319966][T22729] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 566.365203][T22729] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 566.492829][T22729] lo speed is unknown, defaulting to 1000 [ 566.511972][T22729] lo speed is unknown, defaulting to 1000 [ 566.521399][T22729] lo speed is unknown, defaulting to 1000 [ 566.534525][T22729] lo speed is unknown, defaulting to 1000 [ 566.558469][T22729] lo speed is unknown, defaulting to 1000 [ 566.578828][T22729] lo speed is unknown, defaulting to 1000 [ 566.616986][T22729] lo speed is unknown, defaulting to 1000 [ 566.656978][T22729] lo speed is unknown, defaulting to 1000 [ 566.688432][T22729] lo speed is unknown, defaulting to 1000 [ 566.719838][T22729] lo speed is unknown, defaulting to 1000 [ 566.870035][T22764] : renamed from bond_slave_0 [ 567.094359][T22743] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3650'. [ 567.127810][T22743] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3650'. [ 567.137218][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 567.237851][T22782] bridge_slave_0: left allmulticast mode [ 567.265708][T22782] bridge_slave_0: left promiscuous mode [ 567.284618][T22782] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.348996][T22782] bridge_slave_1: left allmulticast mode [ 567.383076][T22782] bridge_slave_1: left promiscuous mode [ 567.408991][T22782] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.479380][T22782] bond0: (slave bond_slave_0): Releasing backup interface [ 567.530133][T22782] bond0: (slave bond_slave_1): Releasing backup interface [ 567.584798][T22782] team0: Port device team_slave_0 removed [ 567.623635][T22782] team0: Port device team_slave_1 removed [ 567.647133][T22782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.670752][T22782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.708872][T22782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.726724][T22782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.750049][ T5790] lo speed is unknown, defaulting to 1000 [ 567.766683][T22746] lo speed is unknown, defaulting to 1000 [ 567.860193][T22790] macsec1: entered promiscuous mode [ 567.990202][T22812] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3660'. [ 568.520468][T22836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3666'. [ 568.729471][T22843] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3667'. [ 568.767129][T22836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3666'. [ 568.885068][T22847] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 570.237913][ T9115] net_ratelimit: 132 callbacks suppressed [ 570.237932][ T9115] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.272610][ T9115] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 570.369852][T22909] bridge0: port 1(syz_tun) entered blocking state [ 570.397906][T22909] bridge0: port 1(syz_tun) entered disabled state [ 570.415391][ T9120] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.443290][ T9115] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.451550][T22909] syz_tun: entered allmulticast mode [ 570.468848][T22909] syz_tun: entered promiscuous mode [ 570.478126][T22909] bridge0: port 1(syz_tun) entered blocking state [ 570.484703][T22909] bridge0: port 1(syz_tun) entered forwarding state [ 570.495379][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.543927][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.575066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.590924][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.628059][T22918] xt_hashlimit: size too large, truncated to 1048576 [ 570.633301][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.683484][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.894550][T22876] lo speed is unknown, defaulting to 1000 [ 571.438545][T22935] macsec1: entered promiscuous mode [ 571.506903][T22955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3689'. [ 571.563908][T22955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'. [ 571.977742][T22960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3689'. [ 572.000527][T22876] lo speed is unknown, defaulting to 1000 [ 573.133657][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 573.404731][T23026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3703'. [ 574.018419][T23039] netlink: 'syz.3.3706': attribute type 1 has an invalid length. [ 574.628511][T23072] netlink: 'syz.0.3713': attribute type 10 has an invalid length. [ 575.018449][T23072] syz_tun: entered promiscuous mode [ 575.053687][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 575.243689][ T9151] net_ratelimit: 311 callbacks suppressed [ 575.243709][ T9151] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 575.247822][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.249686][T23088] macsec1: entered promiscuous mode [ 575.286696][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.309184][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 575.343507][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 575.358730][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.393859][ T9118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 575.395749][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.432563][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.448699][T23101] netlink: 'syz.3.3722': attribute type 3 has an invalid length. [ 575.453595][ T9118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 575.472095][T23090] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.479783][T23090] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.533849][T23090] bridge0: entered allmulticast mode [ 575.560735][T23093] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3719'. [ 575.649969][T23096] bridge_slave_1: left allmulticast mode [ 575.664937][T23096] bridge_slave_1: left promiscuous mode [ 575.692562][T23096] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.809571][T23096] bridge_slave_0: left allmulticast mode [ 575.846109][T23096] bridge_slave_0: left promiscuous mode [ 575.882712][T23096] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.976014][T23122] netlink: 'syz.3.3725': attribute type 26 has an invalid length. [ 576.092376][T23121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3726'. [ 576.105757][T23121] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3726'. [ 576.143552][T23121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3726'. [ 576.168716][T23121] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3726'. [ 576.196296][T23123] ip6tnl0: Caught tx_queue_len zero misconfig [ 576.269913][T23131] FAULT_INJECTION: forcing a failure. [ 576.269913][T23131] name failslab, interval 1, probability 0, space 0, times 0 [ 576.286172][T23131] CPU: 0 UID: 0 PID: 23131 Comm: syz.1.3727 Not tainted syzkaller #0 PREEMPT(full) [ 576.286198][T23131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 576.286208][T23131] Call Trace: [ 576.286225][T23131] [ 576.286233][T23131] dump_stack_lvl+0xe8/0x150 [ 576.286263][T23131] should_fail_ex+0x40c/0x560 [ 576.286299][T23131] should_failslab+0xa8/0x100 [ 576.286318][T23131] ? __nf_conntrack_alloc+0x81/0x3e0 [ 576.286347][T23131] kmem_cache_alloc_noprof+0x87/0x650 [ 576.286370][T23131] ? nf_ct_pernet+0x45/0x270 [ 576.286402][T23131] __nf_conntrack_alloc+0x81/0x3e0 [ 576.286433][T23131] init_conntrack+0x170/0x1080 [ 576.286543][T23131] ? __pfx_init_conntrack+0x10/0x10 [ 576.286569][T23131] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 576.286591][T23131] ? sock_alloc_send_pskb+0x896/0x990 [ 576.286612][T23131] ? is_bpf_text_address+0x292/0x2b0 [ 576.286631][T23131] ? __siphash_unaligned+0x25c/0x3e0 [ 576.286662][T23131] nf_conntrack_in+0xbc3/0x15a0 [ 576.286710][T23131] ? __pfx_nf_conntrack_in+0x10/0x10 [ 576.286744][T23131] ? ipt_do_table+0x2b9/0x15d0 [ 576.286806][T23131] ? nf_hook+0xa1/0x3a0 [ 576.286831][T23131] ? nf_hook+0xa1/0x3a0 [ 576.286852][T23131] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 576.286901][T23131] ? ipv4_conntrack_local+0x126/0x210 [ 576.286923][T23131] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 576.286949][T23131] nf_hook_slow+0xc5/0x220 [ 576.286974][T23131] ? __pfx_dst_output+0x10/0x10 [ 576.286998][T23131] nf_hook+0x22a/0x3a0 [ 576.287024][T23131] ? nf_hook+0xa1/0x3a0 [ 576.287046][T23131] ? __pfx_nf_hook+0x10/0x10 [ 576.287071][T23131] ? __pfx_dst_output+0x10/0x10 [ 576.287099][T23131] ? __ip_local_out+0x152/0x6a0 [ 576.287125][T23131] __ip_local_out+0x558/0x6a0 [ 576.287146][T23131] ? __pfx_dst_output+0x10/0x10 [ 576.287172][T23131] ip_local_out+0x2a/0x190 [ 576.287198][T23131] ip_send_skb+0x45/0xc0 [ 576.287231][T23131] udp_send_skb+0x7f7/0xfb0 [ 576.287271][T23131] udp_sendmsg+0x1971/0x2140 [ 576.287315][T23131] ? __pfx_udp_sendmsg+0x10/0x10 [ 576.287349][T23131] ? format_decode+0x5a1/0xe20 [ 576.287373][T23131] ? look_up_lock_class+0x57/0x110 [ 576.287400][T23131] ? __lock_acquire+0x683/0x2cd0 [ 576.287437][T23131] ? get_random_u32+0x4ce/0x8b0 [ 576.287475][T23131] udpv6_sendmsg+0x915/0x2610 [ 576.287515][T23131] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 576.287535][T23131] ? udp_lib_get_port+0x177b/0x1c60 [ 576.287592][T23131] ? inet_send_prepare+0x1b4/0x260 [ 576.287618][T23131] ? inet_send_prepare+0x1b4/0x260 [ 576.287645][T23131] ? inet_send_prepare+0x1b4/0x260 [ 576.287665][T23131] ? __local_bh_enable_ip+0xd0/0x130 [ 576.287682][T23131] ? inet_send_prepare+0x1b4/0x260 [ 576.287708][T23131] ? inet6_sendmsg+0xe4/0x120 [ 576.287725][T23131] ? __pfx_inet6_sendmsg+0x10/0x10 [ 576.287747][T23131] ____sys_sendmsg+0x61f/0xa20 [ 576.287776][T23131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 576.287806][T23131] ? import_iovec+0x73/0xa0 [ 576.287831][T23131] ___sys_sendmsg+0x2a5/0x360 [ 576.287850][T23131] ? __lock_acquire+0x683/0x2cd0 [ 576.287873][T23131] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.287930][T23131] ? __fget_files+0x2a/0x420 [ 576.287952][T23131] ? __fget_files+0x3a2/0x420 [ 576.288007][T23131] __x64_sys_sendmsg+0x1bd/0x2a0 [ 576.288030][T23131] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 576.288060][T23131] ? __pfx_ksys_write+0x10/0x10 [ 576.288095][T23131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.288115][T23131] do_syscall_64+0x174/0x580 [ 576.288151][T23131] ? clear_bhb_loop+0x40/0x90 [ 576.288175][T23131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.288192][T23131] RIP: 0033:0x7f21cd19ce59 [ 576.288209][T23131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.288232][T23131] RSP: 002b:00007f21ce0e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.288249][T23131] RAX: ffffffffffffffda RBX: 00007f21cd415fa0 RCX: 00007f21cd19ce59 [ 576.288262][T23131] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 576.288273][T23131] RBP: 00007f21ce0e3090 R08: 0000000000000000 R09: 0000000000000000 [ 576.288284][T23131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.288294][T23131] R13: 00007f21cd416038 R14: 00007f21cd415fa0 R15: 00007ffd515e0338 [ 576.288326][T23131] [ 577.056914][T23144] FAULT_INJECTION: forcing a failure. [ 577.056914][T23144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.147317][T23144] CPU: 1 UID: 0 PID: 23144 Comm: syz.3.3731 Not tainted syzkaller #0 PREEMPT(full) [ 577.147343][T23144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 577.147354][T23144] Call Trace: [ 577.147362][T23144] [ 577.147370][T23144] dump_stack_lvl+0xe8/0x150 [ 577.147397][T23144] should_fail_ex+0x40c/0x560 [ 577.147430][T23144] _copy_from_user+0x2d/0xb0 [ 577.147452][T23144] __sys_connect+0x155/0x460 [ 577.147482][T23144] ? __pfx___sys_connect+0x10/0x10 [ 577.147521][T23144] ? __pfx_ksys_write+0x10/0x10 [ 577.147552][T23144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.147571][T23144] __x64_sys_connect+0x7a/0x90 [ 577.147603][T23144] do_syscall_64+0x174/0x580 [ 577.147622][T23144] ? trace_irq_disable+0x3b/0x140 [ 577.147645][T23144] ? clear_bhb_loop+0x40/0x90 [ 577.147664][T23144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.147682][T23144] RIP: 0033:0x7f8d6d19ce59 [ 577.147700][T23144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.147713][T23144] RSP: 002b:00007f8d6e04a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 577.147730][T23144] RAX: ffffffffffffffda RBX: 00007f8d6d415fa0 RCX: 00007f8d6d19ce59 [ 577.147741][T23144] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 577.147751][T23144] RBP: 00007f8d6e04a090 R08: 0000000000000000 R09: 0000000000000000 [ 577.147760][T23144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.147769][T23144] R13: 00007f8d6d416038 R14: 00007f8d6d415fa0 R15: 00007ffe1f8b2568 [ 577.147793][T23144] [ 577.495656][T23160] : renamed from team_slave_1 [ 577.689097][T23168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3737'. [ 577.739355][T23168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3737'. [ 578.011590][T23186] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3739'. [ 578.616403][T23214] FAULT_INJECTION: forcing a failure. [ 578.616403][T23214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.734940][T23214] CPU: 0 UID: 0 PID: 23214 Comm: syz.0.3744 Not tainted syzkaller #0 PREEMPT(full) [ 578.734966][T23214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 578.734977][T23214] Call Trace: [ 578.734984][T23214] [ 578.734993][T23214] dump_stack_lvl+0xe8/0x150 [ 578.735021][T23214] should_fail_ex+0x40c/0x560 [ 578.735054][T23214] _copy_to_user+0x31/0xb0 [ 578.735077][T23214] simple_read_from_buffer+0xe1/0x170 [ 578.735105][T23214] proc_fail_nth_read+0x1bb/0x230 [ 578.735132][T23214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.735158][T23214] ? rw_verify_area+0x24a/0x4c0 [ 578.735184][T23214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.735206][T23214] vfs_read+0x213/0xa80 [ 578.735235][T23214] ? __pfx___mutex_lock+0x10/0x10 [ 578.735258][T23214] ? __pfx_vfs_read+0x10/0x10 [ 578.735284][T23214] ? __fget_files+0x2a/0x420 [ 578.735310][T23214] ? __fget_files+0x3a2/0x420 [ 578.735329][T23214] ? __fget_files+0x2a/0x420 [ 578.735360][T23214] ksys_read+0x150/0x270 [ 578.735387][T23214] ? __pfx_ksys_read+0x10/0x10 [ 578.735420][T23214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.735440][T23214] do_syscall_64+0x174/0x580 [ 578.735460][T23214] ? trace_irq_disable+0x3b/0x140 [ 578.735492][T23214] ? clear_bhb_loop+0x40/0x90 [ 578.735514][T23214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.735532][T23214] RIP: 0033:0x7fd99b15d68e [ 578.735549][T23214] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 578.735564][T23214] RSP: 002b:00007fd99bfa8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 578.735583][T23214] RAX: ffffffffffffffda RBX: 00007fd99bfa96c0 RCX: 00007fd99b15d68e [ 578.735596][T23214] RDX: 000000000000000f RSI: 00007fd99bfa90a0 RDI: 0000000000000004 [ 578.735607][T23214] RBP: 00007fd99bfa9090 R08: 0000000000000000 R09: 0000000000000000 [ 578.735619][T23214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.735630][T23214] R13: 00007fd99b416038 R14: 00007fd99b415fa0 R15: 00007ffdba899078 [ 578.735662][T23214] [ 579.094897][T23238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3748'. [ 579.439943][T23252] netlink: 'syz.1.3753': attribute type 2 has an invalid length. [ 579.471794][T23252] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3753'. [ 579.668779][T23259] netlink: 'syz.0.3755': attribute type 1 has an invalid length. [ 579.705973][T23261] tap0: tun_chr_ioctl cmd 1074025677 [ 579.717179][T23261] tap0: linktype set to 823 [ 579.949899][T23265] bridge0: port 1(syz_tun) entered disabled state [ 580.026067][T23280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3761'. [ 580.028598][T23281] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3759'. [ 580.256878][ T9118] net_ratelimit: 596 callbacks suppressed [ 580.256899][ T9118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 580.313363][ T9118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 580.347009][ T9118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 580.375356][ T9118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 580.413322][ T3282] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 580.455279][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 580.485001][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 580.513288][ T3282] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 580.536557][T14738] lo speed is unknown, defaulting to 1000 [ 580.544262][ T3282] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 580.553027][T14738] syz2: Port: 1 Link DOWN [ 580.593425][ T3282] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 580.615124][ T9118] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.640237][ T9118] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.701067][ T9118] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.724164][ T9118] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.822267][T23301] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3764'. [ 580.846575][T23302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3766'. [ 580.865204][T23302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.872650][T23302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.882773][T23302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.893060][T23302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.346671][T23324] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3768'. [ 581.629229][T23329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3769'. [ 581.751869][T23335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3770'. [ 581.983847][T23351] syz_tun: entered allmulticast mode [ 582.024008][T23348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3773'. [ 582.043794][T23355] netlink: 'syz.2.3774': attribute type 49 has an invalid length. [ 582.126523][T23345] syz_tun: left allmulticast mode [ 582.257515][T23358] bond3: entered promiscuous mode [ 582.307943][T23358] 8021q: adding VLAN 0 to HW filter on device bond3 [ 585.353452][ T3282] net_ratelimit: 109 callbacks suppressed [ 585.353470][ T3282] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 585.367429][ T3282] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 585.484618][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 585.492557][ T9117] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 585.604475][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 585.612319][ T9117] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 585.723622][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 585.731436][ T9117] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 585.843406][ T9115] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 585.851237][ T9115] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 590.453779][ T9151] net_ratelimit: 87 callbacks suppressed [ 590.453799][ T9151] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 590.467992][ T9151] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 590.585121][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 590.587095][T20754] Bluetooth: hci5: command 0x0406 tx timeout [ 590.620220][ T9117] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 590.733360][ T9115] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 590.741253][ T9115] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 590.858997][ T9115] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 590.867009][ T9115] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 590.983656][ T9118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 590.992110][ T9118] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 595.533768][ C1] net_ratelimit: 87 callbacks suppressed [ 595.533788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.573623][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 595.590040][ T9117] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 595.703524][ T9118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 595.711419][ T9118] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 595.823451][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 595.831300][ T9117] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 595.943836][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 595.951706][ T9117] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 596.073467][ T9118] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 600.553712][ T71] net_ratelimit: 86 callbacks suppressed [ 600.553735][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 600.567356][ T71] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 600.683595][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 600.691345][ T9117] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 600.733356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.803449][ T9149] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 600.811242][ T9149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 600.923440][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 600.931213][ T9117] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 601.044212][ T9117] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 603.879009][ T9117] pim6reg: left allmulticast mode [ 603.884909][ T9117] lo: left allmulticast mode [ 604.427551][ T9117] bond0 (unregistering): Released all slaves [ 604.439208][ T9117] bond1 (unregistering): Released all slaves [ 604.452677][ T9117] bond2 (unregistering): Released all slaves [ 604.466989][ T9117] bond3 (unregistering): Released all slaves [ 604.488601][ T9117] bond4 (unregistering): Released all slaves [ 604.503044][ T9117] bond5 (unregistering): Released all slaves [ 604.518886][ T9117] bond6 (unregistering): Released all slaves [ 604.541962][ T9117] bond7 (unregistering): Released all slaves [ 604.560907][ T9117] bond8 (unregistering): Released all slaves [ 604.574609][ T9117] bond9 (unregistering): Released all slaves [ 604.756609][ T9117] tipc: Left network mode [ 604.850187][ T9117] ================================================================== [ 604.858401][ T9117] BUG: KASAN: slab-use-after-free in fib_rules_lookup+0x15e/0xeb0 [ 604.866334][ T9117] Read of size 8 at addr ffff88802585d680 by task kworker/u8:16/9117 [ 604.874490][ T9117] [ 604.876831][ T9117] CPU: 1 UID: 0 PID: 9117 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 604.876860][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 604.876874][ T9117] Workqueue: netns cleanup_net [ 604.876964][ T9117] Call Trace: [ 604.876973][ T9117] [ 604.876981][ T9117] dump_stack_lvl+0xe8/0x150 [ 604.876998][ T9117] print_address_description+0x55/0x1e0 [ 604.877020][ T9117] ? fib_rules_lookup+0x15e/0xeb0 [ 604.877035][ T9117] print_report+0x58/0x70 [ 604.877047][ T9117] kasan_report+0x117/0x150 [ 604.877069][ T9117] ? fib_rules_lookup+0x15e/0xeb0 [ 604.877085][ T9117] ? fib_rules_lookup+0x99/0xeb0 [ 604.877099][ T9117] fib_rules_lookup+0x15e/0xeb0 [ 604.877114][ T9117] ? fib_rules_lookup+0x99/0xeb0 [ 604.877130][ T9117] ? __pfx_fib_rules_lookup+0x10/0x10 [ 604.877145][ T9117] ? l3mdev_update_flow+0x26/0x610 [ 604.877194][ T9117] ? l3mdev_update_flow+0x4ad/0x610 [ 604.877211][ T9117] __fib_lookup+0x106/0x210 [ 604.877276][ T9117] ? lockdep_hardirqs_on+0x7a/0x110 [ 604.877293][ T9117] ? __pfx___fib_lookup+0x10/0x10 [ 604.877308][ T9117] ? __schedule+0x1856/0x57a0 [ 604.877321][ T9117] ? arch_stack_walk+0x11b/0x150 [ 604.877350][ T9117] ? fib_lookup+0x49/0x440 [ 604.877367][ T9117] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 604.877387][ T9117] ip_route_output_key_hash_rcu+0x294/0x2720 [ 604.877410][ T9117] ? ip_route_output_key_hash+0xd8/0x2a0 [ 604.877428][ T9117] ? ip_route_output_key_hash+0xd8/0x2a0 [ 604.877447][ T9117] ip_route_output_key_hash+0x18d/0x2a0 [ 604.877467][ T9117] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 604.877487][ T9117] ? lock_acquire+0x106/0x350 [ 604.877505][ T9117] ip_route_output_flow+0x2a/0x150 [ 604.877524][ T9117] ip4_datagram_release_cb+0x89d/0xbe0 [ 604.877542][ T9117] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 604.877560][ T9117] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 604.877576][ T9117] ? do_raw_spin_lock+0x12b/0x2f0 [ 604.877598][ T9117] ? release_sock+0x2f/0x260 [ 604.877617][ T9117] release_sock+0x206/0x260 [ 604.877636][ T9117] inet_shutdown+0x2b1/0x390 [ 604.877657][ T9117] udp_tunnel_sock_release+0x6d/0x80 [ 604.877677][ T9117] fou_exit_net+0x17d/0x1f0 [ 604.877694][ T9117] ops_undo_list+0x43d/0x8d0 [ 604.877716][ T9117] ? __pfx_ops_undo_list+0x10/0x10 [ 604.877736][ T9117] ? idr_destroy+0x218/0x290 [ 604.877748][ T9117] ? do_raw_spin_unlock+0xf5/0x210 [ 604.877770][ T9117] cleanup_net+0x572/0x810 [ 604.877790][ T9117] ? __pfx_cleanup_net+0x10/0x10 [ 604.877812][ T9117] ? rcu_is_watching+0x15/0xb0 [ 604.877834][ T9117] ? process_scheduled_works+0xa20/0x14e0 [ 604.877851][ T9117] process_scheduled_works+0xa8e/0x14e0 [ 604.877875][ T9117] ? __pfx_process_scheduled_works+0x10/0x10 [ 604.877891][ T9117] ? assign_work+0x3cf/0x5d0 [ 604.877905][ T9117] worker_thread+0xa47/0xfb0 [ 604.877929][ T9117] kthread+0x389/0x470 [ 604.877945][ T9117] ? __pfx_worker_thread+0x10/0x10 [ 604.877958][ T9117] ? __pfx_kthread+0x10/0x10 [ 604.877974][ T9117] ret_from_fork+0x514/0xb70 [ 604.877989][ T9117] ? __pfx_ret_from_fork+0x10/0x10 [ 604.878002][ T9117] ? __switch_to+0xc89/0x1420 [ 604.878022][ T9117] ? __pfx_kthread+0x10/0x10 [ 604.878038][ T9117] ret_from_fork_asm+0x1a/0x30 [ 604.878060][ T9117] [ 604.878066][ T9117] [ 605.188523][ T9117] Allocated by task 5628: [ 605.192913][ T9117] kasan_save_track+0x3e/0x80 [ 605.197585][ T9117] __kasan_kmalloc+0x93/0xb0 [ 605.202172][ T9117] __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 605.208573][ T9117] kmemdup_noprof+0x2b/0x70 [ 605.213085][ T9117] fib_rules_register+0x2f/0x400 [ 605.218009][ T9117] fib4_rules_init+0x21/0x160 [ 605.222674][ T9117] fib_net_init+0x17a/0x3e0 [ 605.227233][ T9117] ops_init+0x35d/0x5d0 [ 605.231381][ T9117] setup_net+0x118/0x350 [ 605.235613][ T9117] copy_net_ns+0x4f9/0x720 [ 605.240020][ T9117] create_new_namespaces+0x3f0/0x6b0 [ 605.245290][ T9117] unshare_nsproxy_namespaces+0x149/0x190 [ 605.250994][ T9117] ksys_unshare+0x57d/0xa00 [ 605.255481][ T9117] __x64_sys_unshare+0x38/0x50 [ 605.260247][ T9117] do_syscall_64+0x174/0x580 [ 605.264830][ T9117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.270707][ T9117] [ 605.273018][ T9117] Freed by task 0: [ 605.276719][ T9117] kasan_save_track+0x3e/0x80 [ 605.281389][ T9117] kasan_save_free_info+0x40/0x50 [ 605.286403][ T9117] __kasan_slab_free+0x5c/0x80 [ 605.291161][ T9117] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 605.296697][ T9117] rcu_free_sheaf+0x31/0x200 [ 605.301277][ T9117] rcu_core+0x78b/0x10a0 [ 605.305504][ T9117] handle_softirqs+0x225/0x840 [ 605.310252][ T9117] __irq_exit_rcu+0xca/0x220 [ 605.314828][ T9117] irq_exit_rcu+0x9/0x30 [ 605.319062][ T9117] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 605.324682][ T9117] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 605.330651][ T9117] [ 605.332957][ T9117] The buggy address belongs to the object at ffff88802585d600 [ 605.332957][ T9117] which belongs to the cache kmalloc-192 of size 192 [ 605.347048][ T9117] The buggy address is located 128 bytes inside of [ 605.347048][ T9117] freed 192-byte region [ffff88802585d600, ffff88802585d6c0) [ 605.360833][ T9117] [ 605.363146][ T9117] The buggy address belongs to the physical page: [ 605.369561][ T9117] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2585d [ 605.378313][ T9117] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 605.385414][ T9117] page_type: f5(slab) [ 605.389379][ T9117] raw: 00fff00000000000 ffff88813fe163c0 dead000000000100 dead000000000122 [ 605.397949][ T9117] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 605.406514][ T9117] page dumped because: kasan: bad access detected [ 605.412982][ T9117] page_owner tracks the page as allocated [ 605.418688][ T9117] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5107827050, free_ts 5066641129 [ 605.438497][ T9117] post_alloc_hook+0x22d/0x280 [ 605.443271][ T9117] get_page_from_freelist+0x24ae/0x2530 [ 605.448818][ T9117] __alloc_frozen_pages_noprof+0x18d/0x380 [ 605.454623][ T9117] allocate_slab+0x77/0x660 [ 605.459109][ T9117] refill_objects+0x336/0x3d0 [ 605.463771][ T9117] __pcs_replace_empty_main+0x320/0x720 [ 605.469303][ T9117] __kmalloc_cache_noprof+0x388/0x660 [ 605.474670][ T9117] call_usermodehelper_setup+0x8e/0x270 [ 605.480229][ T9117] kobject_uevent_env+0x662/0x9e0 [ 605.485313][ T9117] really_probe+0x774/0xae0 [ 605.489862][ T9117] __driver_probe_device+0x1f5/0x380 [ 605.495129][ T9117] driver_probe_device+0x4f/0x240 [ 605.500139][ T9117] __driver_attach+0x342/0x620 [ 605.504884][ T9117] bus_for_each_dev+0x23b/0x2c0 [ 605.509784][ T9117] bus_add_driver+0x345/0x670 [ 605.514447][ T9117] driver_register+0x23a/0x320 [ 605.519210][ T9117] page last free pid 10 tgid 10 stack trace: [ 605.525175][ T9117] __free_frozen_pages+0xc0d/0xd20 [ 605.530276][ T9117] vfree+0x1fd/0x330 [ 605.534158][ T9117] delayed_vfree_work+0x55/0x80 [ 605.539003][ T9117] process_scheduled_works+0xa8e/0x14e0 [ 605.544534][ T9117] worker_thread+0xa47/0xfb0 [ 605.549116][ T9117] kthread+0x389/0x470 [ 605.553172][ T9117] ret_from_fork+0x514/0xb70 [ 605.557771][ T9117] ret_from_fork_asm+0x1a/0x30 [ 605.562520][ T9117] [ 605.564830][ T9117] Memory state around the buggy address: [ 605.570444][ T9117] ffff88802585d580: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc [ 605.578487][ T9117] ffff88802585d600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.586596][ T9117] >ffff88802585d680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 605.594646][ T9117] ^ [ 605.598785][ T9117] ffff88802585d700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 605.606831][ T9117] ffff88802585d780: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 605.614870][ T9117] ================================================================== [ 605.623012][ T9117] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 605.630221][ T9117] CPU: 1 UID: 0 PID: 9117 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 605.639775][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 605.649837][ T9117] Workqueue: netns cleanup_net [ 605.654613][ T9117] Call Trace: [ 605.657878][ T9117] [ 605.660800][ T9117] vpanic+0x56c/0xa60 [ 605.664778][ T9117] ? rcu_is_watching+0x15/0xb0 [ 605.669531][ T9117] ? __pfx_vpanic+0x10/0x10 [ 605.674028][ T9117] panic+0xc5/0xd0 [ 605.677745][ T9117] ? __pfx_panic+0x10/0x10 [ 605.682148][ T9117] ? fib_rules_lookup+0x15e/0xeb0 [ 605.687166][ T9117] ? fib_rules_lookup+0x15e/0xeb0 [ 605.692175][ T9117] check_panic_on_warn+0x89/0xb0 [ 605.697104][ T9117] ? fib_rules_lookup+0x15e/0xeb0 [ 605.702115][ T9117] end_report+0x73/0x170 [ 605.706349][ T9117] ? fib_rules_lookup+0x15e/0xeb0 [ 605.711355][ T9117] kasan_report+0x128/0x150 [ 605.715868][ T9117] ? fib_rules_lookup+0x15e/0xeb0 [ 605.720879][ T9117] ? fib_rules_lookup+0x99/0xeb0 [ 605.725813][ T9117] fib_rules_lookup+0x15e/0xeb0 [ 605.730656][ T9117] ? fib_rules_lookup+0x99/0xeb0 [ 605.735587][ T9117] ? __pfx_fib_rules_lookup+0x10/0x10 [ 605.740952][ T9117] ? l3mdev_update_flow+0x26/0x610 [ 605.746052][ T9117] ? l3mdev_update_flow+0x4ad/0x610 [ 605.751241][ T9117] __fib_lookup+0x106/0x210 [ 605.755733][ T9117] ? lockdep_hardirqs_on+0x7a/0x110 [ 605.760931][ T9117] ? __pfx___fib_lookup+0x10/0x10 [ 605.765941][ T9117] ? __schedule+0x1856/0x57a0 [ 605.770603][ T9117] ? arch_stack_walk+0x11b/0x150 [ 605.775530][ T9117] ? fib_lookup+0x49/0x440 [ 605.779939][ T9117] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 605.786085][ T9117] ip_route_output_key_hash_rcu+0x294/0x2720 [ 605.792073][ T9117] ? ip_route_output_key_hash+0xd8/0x2a0 [ 605.797738][ T9117] ? ip_route_output_key_hash+0xd8/0x2a0 [ 605.803368][ T9117] ip_route_output_key_hash+0x18d/0x2a0 [ 605.808933][ T9117] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 605.815035][ T9117] ? lock_acquire+0x106/0x350 [ 605.819713][ T9117] ip_route_output_flow+0x2a/0x150 [ 605.824824][ T9117] ip4_datagram_release_cb+0x89d/0xbe0 [ 605.830275][ T9117] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 605.835814][ T9117] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 605.841876][ T9117] ? do_raw_spin_lock+0x12b/0x2f0 [ 605.846898][ T9117] ? release_sock+0x2f/0x260 [ 605.851480][ T9117] release_sock+0x206/0x260 [ 605.855973][ T9117] inet_shutdown+0x2b1/0x390 [ 605.860553][ T9117] udp_tunnel_sock_release+0x6d/0x80 [ 605.865831][ T9117] fou_exit_net+0x17d/0x1f0 [ 605.870323][ T9117] ops_undo_list+0x43d/0x8d0 [ 605.874908][ T9117] ? __pfx_ops_undo_list+0x10/0x10 [ 605.880015][ T9117] ? idr_destroy+0x218/0x290 [ 605.884851][ T9117] ? do_raw_spin_unlock+0xf5/0x210 [ 605.889962][ T9117] cleanup_net+0x572/0x810 [ 605.894378][ T9117] ? __pfx_cleanup_net+0x10/0x10 [ 605.899312][ T9117] ? rcu_is_watching+0x15/0xb0 [ 605.904066][ T9117] ? process_scheduled_works+0xa20/0x14e0 [ 605.909774][ T9117] process_scheduled_works+0xa8e/0x14e0 [ 605.915315][ T9117] ? __pfx_process_scheduled_works+0x10/0x10 [ 605.921282][ T9117] ? assign_work+0x3cf/0x5d0 [ 605.925858][ T9117] worker_thread+0xa47/0xfb0 [ 605.930534][ T9117] kthread+0x389/0x470 [ 605.934594][ T9117] ? __pfx_worker_thread+0x10/0x10 [ 605.939728][ T9117] ? __pfx_kthread+0x10/0x10 [ 605.944311][ T9117] ret_from_fork+0x514/0xb70 [ 605.948891][ T9117] ? __pfx_ret_from_fork+0x10/0x10 [ 605.954077][ T9117] ? __switch_to+0xc89/0x1420 [ 605.958746][ T9117] ? __pfx_kthread+0x10/0x10 [ 605.963327][ T9117] ret_from_fork_asm+0x1a/0x30 [ 605.968093][ T9117] [ 605.971375][ T9117] Kernel Offset: disabled [ 605.975712][ T9117] Rebooting in 86400 seconds..