last executing test programs: 2m19.121175981s ago: executing program 0 (id=606): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000914010000000000001e0000040001"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x7}]}, 0x28}}, 0x0) (async) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "296524f13eb7394549979c0db12f7a74"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x2, 0xa428, 0x1, 0x2d7, 0x6, 0x72, 0xec, 0x6}}) 2m18.381441463s ago: executing program 0 (id=620): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = epoll_create1(0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000540)={0x2}) (async) epoll_pwait(r2, &(0x7f0000000580)=[{}], 0x1, 0x80800000, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) (async) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x14000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40004) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x1c, 0x27, 0x1, 0x0, 0x0, "", [@nested={0xb, 0x35, 0x0, 0x1, [@generic="1c656e78d5e39b"]}]}, 0x1c}], 0x1}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) 2m18.097392906s ago: executing program 0 (id=627): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40488c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x12, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m18.038260582s ago: executing program 0 (id=629): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000180)={0x2, 'veth1_macvtap\x00', {0x8}, 0x2}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x2c, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xffeb, 0x1d0c5d7c03b59b98}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 2m17.857526761s ago: executing program 0 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000100980)={0x0, 0x0, &(0x7f00001009c0)={&(0x7f0000100a00)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0xffff0000, 0x40801}, 0x4000000) 2m17.782467825s ago: executing program 0 (id=634): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000480)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000005200010000000000000400010000000000000000"], 0x18}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x65dfdb01, {0x0, 0x0, 0x0, r6, {0x5, 0xc}, {0x0, 0xfff1}, {0xe, 0x2}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c000000}, 0x4041080) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX=r8, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRESOCT=r9], 0x28}, 0x1, 0x0, 0x0, 0x20048801}, 0x0) 2m2.741162343s ago: executing program 32 (id=634): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000480)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000005200010000000000000400010000000000000000"], 0x18}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x65dfdb01, {0x0, 0x0, 0x0, r6, {0x5, 0xc}, {0x0, 0xfff1}, {0xe, 0x2}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c000000}, 0x4041080) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX=r8, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRESOCT=r9], 0x28}, 0x1, 0x0, 0x0, 0x20048801}, 0x0) 1m34.753034311s ago: executing program 1 (id=1264): getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000240)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x9, 0x0, 0xf000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf250100000004"], 0x18}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000100)="060000000300010006", 0x9) 1m34.531817545s ago: executing program 1 (id=1268): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x38}}, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x5, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d40)={0x0, 0x1}, 0xc) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xdb5a, '\x00', r2, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x19, &(0x7f0000000800)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000900)='syzkaller\x00', 0x6, 0xc8, &(0x7f0000000940)=""/200, 0x41100, 0x14, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r8, r9, 0xffffffffffffffff, r10], &(0x7f0000000ec0)=[{0x1, 0x4, 0x1, 0x5}, {0x3, 0x5, 0x4, 0x1}], 0x10, 0x4}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2e, 0x25dfdbfb, {0x11, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = socket(0x1, 0x803, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff0100"/49, @ANYRES32=r14], 0x54}}, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1m32.790525826s ago: executing program 1 (id=1275): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r0, 0x0, 0x21, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0xc0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000400)=""/207, &(0x7f0000000500)=0xcf) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020d00001500000000000000000000000800120002000200000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000010006"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 1m32.536398942s ago: executing program 1 (id=1284): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:sendmail_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) socketpair(0x2c, 0x80000, 0x42400, &(0x7f0000000080)={0xffffffffffffffff}) bind$l2tp6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x4, @remote, 0xf1c, 0x3}, 0x20) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000080}, 0x1080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="c814000041000701feffffff00000000017c000004001e002000018010000400cab1893a20b8d2a93521800a0c001c8008005e00e0000001040002"], 0x14c8}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) 1m32.415948297s ago: executing program 1 (id=1287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000011c00000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000540000000020800065490076500740000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080040002800800034000000002"], 0x108}}, 0x4000840) 1m32.271527713s ago: executing program 1 (id=1289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000100e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 1m17.561604815s ago: executing program 3 (id=1501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x19}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@RTM_DELMDB={0x158, 0x55, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0xc08b52e71af825a9, 0x3, 0x0, {@ip4=@remote, 0x400}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x1, {@ip4=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x4, {@ip4=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x1, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x4, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x3, {@in6_addr=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x0, {@ip4=@dev={0xac, 0x14, 0x14, 0x37}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x3, {@ip4=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x1, {@ip4=@local, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x3, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}}}}]}, 0x158}}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000540)={0x0, "79b01c0e74ab0bcb69f50e7572f7cf8c"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000001540)={r7, 0x10, 0xb}) socket$netlink(0x10, 0x3, 0x15) 1m17.442843769s ago: executing program 3 (id=1503): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x42030000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) 1m17.288720865s ago: executing program 3 (id=1504): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008ec0)={0x34, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x10, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c010) sendmsg(r1, &(0x7f0000001340)={&(0x7f0000000200)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)="105b0d2897a82c", 0x7}], 0x1, &(0x7f0000000300)=[{0x1010, 0x119, 0x4, "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"}], 0x1010}, 0x800) 1m17.237607524s ago: executing program 33 (id=1289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000100e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 1m17.126374266s ago: executing program 3 (id=1507): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000015c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000001600)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001640), 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0x4040) 1m17.041618071s ago: executing program 3 (id=1509): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x2100, 0x0, 0x50e35, 0x463}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) 1m16.620618873s ago: executing program 3 (id=1513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x138, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x108, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xf8, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'addrtype\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_INFO={0xcd, 0x3, "640163d47783946d26d98a98d1b14cdcaa7e22e50fa4069562db1559fc3bf1709da7f08ca644c395ef9387aaf3420ebd14ec6d801a5580bb3fdcb71a196631cc71b42c25647255e47844bfbe5ac7fbb5f973f2c12ed1bac9aea7e8c48b41a2bd7900b073b562f127558dde7e0797703a0128c310a51d869e69eac1f544cfc1c7ab8558b693e19d9d29dee2102fc3b1af8b797eee5cc9313f25257d6e5bceaa612d4453f0b662aa87795a7bcea74b8456eb4589538b0980b0f4b95d089e3e0cc057017881422d3e4bc0"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x160}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) write(r1, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010004000300080002000200000004000300", 0x2c) 1m1.565923095s ago: executing program 34 (id=1513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x138, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x108, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xf8, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'addrtype\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_INFO={0xcd, 0x3, "640163d47783946d26d98a98d1b14cdcaa7e22e50fa4069562db1559fc3bf1709da7f08ca644c395ef9387aaf3420ebd14ec6d801a5580bb3fdcb71a196631cc71b42c25647255e47844bfbe5ac7fbb5f973f2c12ed1bac9aea7e8c48b41a2bd7900b073b562f127558dde7e0797703a0128c310a51d869e69eac1f544cfc1c7ab8558b693e19d9d29dee2102fc3b1af8b797eee5cc9313f25257d6e5bceaa612d4453f0b662aa87795a7bcea74b8456eb4589538b0980b0f4b95d089e3e0cc057017881422d3e4bc0"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x160}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) write(r1, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010004000300080002000200000004000300", 0x2c) 9.697594303s ago: executing program 2 (id=2391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000100)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000140)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) close(0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) mmap(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x1, 0x4000010, r2, 0x1dc92000) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf255f"], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) 9.535806436s ago: executing program 2 (id=2393): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x2000}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) 9.426748566s ago: executing program 2 (id=2396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48001}, 0x4808) 9.369528655s ago: executing program 2 (id=2399): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x20, 0x1405, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x1000021}}]}, 0x20}}, 0x2) (fail_nth: 2) 9.141286966s ago: executing program 2 (id=2400): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) (rerun: 32) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newlink={0x54, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3886}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}}]}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_PHYS_SWITCH_ID={0x4}]}, 0x54}}, 0x0) (rerun: 64) 8.689536456s ago: executing program 2 (id=2405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xfffffffffffffd09, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES16=r1, @ANYBLOB="000425bd700003000000100000001400038008000100020000000500080004000000080004000c00000008000600010000000c00038008000500e000000208000400050000002800038014000200766574683100000000000000000000000800030003000000060004008b0a000008000600ffffffff080005000000000008000600f8ffffff"], 0x8c}}, 0x814) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket(0xa, 0x5, 0x0) getsockopt$inet6_int(r3, 0x29, 0x38, 0x0, &(0x7f0000000340)) ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, &(0x7f0000000300)={&(0x7f0000000100)=[{0x10000, 0x8, 0x1}, {0x8000000000000001, 0x1, 0x2}, {0x80000000, 0x40, 0x1}, {0x30000000000, 0x8, 0x1}, {0xd, 0x10000, 0x1}, {0x1518, 0x8, 0xe75843bfa61508a3}, {0x3, 0x6}], 0x7, 0x10, 0x8, 0xffffffffffff8e83}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf460c0000001c00018017000200636c69214bcc51b172af5be4b75bd271"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2.176507876s ago: executing program 5 (id=2485): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f00000005c0)) (fail_nth: 1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0x10) 1.942463345s ago: executing program 5 (id=2487): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9000000010000305000000000000000007000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c4}, 0x0) 1.662527438s ago: executing program 4 (id=2492): socket(0xa, 0x5, 0x0) (async) r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x0, 0x398, 0x2c8, 0x0, 0x398, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [0xffffff00], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000140), 0x10) bind$l2tp(r1, &(0x7f0000000940)={0x2, 0x0, @remote}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000980)=0x80000000, 0x4) bind$bt_hci(r2, &(0x7f00000009c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) bind$bt_hci(r2, &(0x7f00000009c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_emit_ethernet(0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbb7bdf998ca8fe92a581885d24372947bbffffffffffff08004500002600000000002f90020000000000000000000088"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000091108c000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008180a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) 1.509149322s ago: executing program 5 (id=2494): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffff0180c20000010800450400b00000dffd00119078000000000000000000004e20009c90780100000002000000ae22f91714441f268db4b5bab9d0a29adfcd259e35e47cde13bdcd796e65eed9b0d480d693ac02f49f2b4d081b309949f12a6a3e465737ca47f80ecea4153b3d5fe4121ec1bc352e849873b0cc8804c849f33c2fd2a443ab78193f2589f8537adfb12b20d056202de9f7ad28705da63f97119031e10bb88dc06346ef21a25dd599d8243bde34000000000000"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c300000008004500001c0000e0000311908d00000000000800000000000000089078"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) sendmmsg(r2, &(0x7f0000001780)=[{{0x0, 0xa9cc7003, &(0x7f00000017c0)=[{&(0x7f0000001800)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001880), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000048c}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x50, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x2}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000082}, 0x11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.4968327s ago: executing program 6 (id=2495): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffff80}, 0x0) 1.446147353s ago: executing program 4 (id=2496): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f00000000c0)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17) 1.337820411s ago: executing program 6 (id=2497): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x42030000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x3000000, r1, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) 1.337310192s ago: executing program 7 (id=2498): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00'}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0x0, 0xff000000]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9ab1, 0x3}, &(0x7f0000000200)=0x1, 0x0, 0x4, 0xd75, 0x0, 0x8, 0x37, 0x3}}], 0x58}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010004b04000000a1360f1a5f0f5c00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500160002000000"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000240)={0x6, 'geneve1\x00', {0x5}, 0xf945}) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000600)={0xfffffff7}, 0x4) gettid() 1.323066097s ago: executing program 4 (id=2499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) (async, rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8080) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) (async, rerun: 32) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) (rerun: 32) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x18) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.252010733s ago: executing program 6 (id=2500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, 0x0, 0x4000) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) close(r1) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, &(0x7f00000004c0)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x81) 1.250635028s ago: executing program 7 (id=2501): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'lblc\x00', 0x1, 0xa8a, 0x30}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000240)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x200055}, {@remote, 0x4e24, 0x10000, 0x7, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (fail_nth: 2) 1.020409305s ago: executing program 7 (id=2502): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000f80)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000f80)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000400)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}], &(0x7f0000000440)='syzkaller\x00', 0x1, 0xc7, &(0x7f0000000480)=""/199, 0x41000, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x3, 0x6, 0xe43}, 0x10, 0xa474, r1, 0x1, 0x0, &(0x7f0000000600)=[{0x4, 0x2, 0x10, 0xc}], 0x10, 0x8}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x5283e21d, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x5283e21d, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r1}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000b40)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r11, 0xf9a3d000) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r11, 0xf9a3d000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0x1, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0xca7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000e40)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r15, 0x8, &(0x7f0000000e80)={0x0, 0x1}, 0x1}, 0x94) (async) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000e40)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r15, 0x8, &(0x7f0000000e80)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_ext={0x1a, 0xf, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000cfefc917724ad23957703c5a00c598e1ad93853a095abd58ca3c84fb1850ed7be8194d5e2389e733618ebfe3", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r15, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r16, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x76}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xf}], &(0x7f00000002c0)='GPL\x00', 0x1ff, 0x92, &(0x7f0000000300)=""/146, 0x40f00, 0x40, '\x00', r4, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5703, r5, 0xa, &(0x7f0000001040)=[r6, r8, r9, 0xffffffffffffffff, r10, r11, r12, r13, r14], &(0x7f0000001080)=[{0x2, 0x1, 0xb, 0x3}, {0x5, 0x1, 0x10, 0x7}, {0x3, 0x5, 0x7, 0xb}, {0x2, 0x2, 0x3, 0xb}, {0x0, 0x2, 0x0, 0x4}, {0x0, 0x5, 0x800, 0x1}, {0x5, 0x4, 0x9, 0x3}, {0x5, 0x3, 0xa, 0x6}, {0x4, 0x3, 0x7, 0x8}, {0x0, 0x5, 0xc, 0x8}], 0x10, 0xffffffff}, 0x94) 705.335174ms ago: executing program 6 (id=2503): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_FILTER={0x4}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x9300}, @val={0xbf10e6d6f413159e, 0x80, 0x200, 0x86, 0x6, 0x2}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @remote, @broadcast, @random="5afcc6006bd3", @rand_addr=0x64010102}}, 0x2a) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000002ac0)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000002b00)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002bc0), 0x8}, 0x94) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000002c00)={r8, r6}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd905a", 0xc6}], 0x1}}], 0x1, 0x2090) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 610.094301ms ago: executing program 4 (id=2504): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000002f0009002abd700000000000040000002600118031f9e05e2f", @ANYRESOCT=r6, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4a804}, 0x84) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r8, @ANYBLOB="4000b825000010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$rds(r0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000084}, 0x0) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 609.534894ms ago: executing program 7 (id=2505): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x0, 0x8}, 0xc) (fail_nth: 2) 538.420083ms ago: executing program 5 (id=2506): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, 0x45, 0x1, 0x270bd25, 0x25dfdc00, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x4008094) 471.856294ms ago: executing program 5 (id=2507): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000940)=""/158, 0x9e}, {&(0x7f0000000a00)=""/204, 0xcc}, {&(0x7f0000001340)=""/4139, 0x102b}, {&(0x7f0000002380)=""/4104, 0x1008}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/98, 0x62}, {&(0x7f0000004440)=""/43, 0x2b}, {&(0x7f00000044c0)=""/238, 0xee}, {&(0x7f00000045c0)=""/161, 0xa1}, {&(0x7f0000004680)=""/166, 0xa6}], 0xa}, 0x1000}], 0x1, 0x40000100, 0x0) 466.680509ms ago: executing program 7 (id=2508): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x400) getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x463}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r3}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r4) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='l', 0x1}], 0x1}, 0x400c941) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000280), &(0x7f00000002c0)=0x10) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000e004800010000000000000000967aaede00000000007c5fa03f2d5b7b97d20e62550fe89b3416ffa727785e93649905cc994334cc52"], 0x18}}, 0x0) listen(r5, 0xbdc7) ioctl$FIONCLEX(r5, 0x5450) close(0x4) 261.987588ms ago: executing program 6 (id=2509): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtaction={0x11c, 0x30, 0x1, 0x0, 0x40000000, {}, [{0x108, 0x1, [@m_mpls={0x104, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x80}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0xc8, 0x4, "edde69fc8d551f1b953d9eeb993b4e4cf4a36cfe5ef339ed316fd67a086502a0cd682975cdb0348d809b5ee3a7df5c626435ff0f392c35309a8d65ffda55379cb17ac43a68c962f8b1b0df2ea6a04660e34458f2fa865384d577e40dcf01b07e56fd14bc8f84b4f6f85bef91c34d1002f2de64c5d74e48a7dd57f66673760935876b66c12212e5fd95978eca1128a24669f6673edf20e29e797782b1bf36995daf399592e47520ebd01b89e1dea884108947292ea1d6bfe1e7c97fa90e9ca9dc45bd8315"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc8c5) 137.122254ms ago: executing program 4 (id=2510): sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4048800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c3}, 0x42) 98.553319ms ago: executing program 7 (id=2511): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x463}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}, @IFLA_BOND_MODE={0x5, 0x42, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) 68.932128ms ago: executing program 5 (id=2512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYRES8=r2], 0x48}, 0x1, 0x0, 0x0, 0x44095}, 0x800) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x78bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x2f, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) (async) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x78bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x2f, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) 13.667703ms ago: executing program 6 (id=2513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, 0x0, 0x4000) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) close(r1) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, &(0x7f00000004c0)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x81) 0s ago: executing program 4 (id=2514): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000020605000000000000100000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000200007800c00018004000140000000000800084000000000080006400000000005000500020000000500010006"], 0x68}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x34, r6, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xb, 0x1, [0xffffffff, 0xfffffffd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc01}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}}, 0x20}}, 0x400880f4) kernel console output (not intermixed with test programs): [ 178.560160][T10521] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 178.583009][T10521] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.591716][T10521] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 178.611745][T10521] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.613451][T10521] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 178.635223][T10521] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.672190][T10521] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.672308][T10521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.672577][T10521] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.672791][T10521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.721970][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.722634][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.805610][T10521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.835971][T10521] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.843966][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.844064][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.872093][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.872191][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.016831][T10661] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 179.126856][T10663] geneve2: entered allmulticast mode [ 179.252126][T10672] netlink: 'syz.2.1548': attribute type 5 has an invalid length. [ 179.362662][T10679] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 179.410831][T10682] xt_hashlimit: size too large, truncated to 1048576 [ 179.455253][T10673] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 179.816231][T10521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.045984][ T5630] Bluetooth: hci6: command tx timeout [ 180.202376][T10719] __nla_validate_parse: 10 callbacks suppressed [ 180.202394][T10719] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1555'. [ 180.202411][T10719] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1555'. [ 180.457261][T10521] veth0_vlan: entered promiscuous mode [ 180.502285][T10521] veth1_vlan: entered promiscuous mode [ 180.681517][T10521] veth0_macvtap: entered promiscuous mode [ 180.725043][T10521] veth1_macvtap: entered promiscuous mode [ 180.740441][T10521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.754658][T10521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.779284][ T1156] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.781206][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.781243][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.781274][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.827107][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 180.992453][T10750] syzkaller0: entered promiscuous mode [ 180.992472][T10750] syzkaller0: entered allmulticast mode [ 181.022800][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1563'. [ 181.022821][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1563'. [ 181.040831][T10754] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.101937][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.101955][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.140625][T10758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1567'. [ 181.157958][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.157975][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.516638][T10773] syzkaller0: entered promiscuous mode [ 181.516658][T10773] syzkaller0: entered allmulticast mode [ 181.518533][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1572'. [ 181.518554][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1572'. [ 181.619717][T10782] netlink: 5260 bytes leftover after parsing attributes in process `syz.2.1576'. [ 181.833267][T10794] syzkaller0: entered promiscuous mode [ 181.833288][T10794] syzkaller0: entered allmulticast mode [ 181.857498][ T12] net_ratelimit: 189 callbacks suppressed [ 181.857514][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 181.857544][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 181.857560][ T12] bond6: (slave macvlan2): failed to get link speed/duplex [ 181.857584][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 181.857609][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 181.857633][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 181.870651][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1580'. [ 181.932565][T10796] netlink: 'syz.2.1582': attribute type 2 has an invalid length. [ 181.932582][T10796] netlink: 'syz.2.1582': attribute type 2 has an invalid length. [ 181.987973][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 181.988007][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 181.988024][ T13] bond6: (slave macvlan2): failed to get link speed/duplex [ 181.988048][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 182.125375][ T5630] Bluetooth: hci6: command tx timeout [ 182.361566][T10815] syzkaller0: entered promiscuous mode [ 182.361596][T10815] syzkaller0: entered allmulticast mode [ 182.650141][T10832] netlink: 'syz.4.1597': attribute type 15 has an invalid length. [ 184.010185][T10832] netlink: 'syz.4.1597': attribute type 15 has an invalid length. [ 184.064302][ T156] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 184.064392][ T156] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 184.064423][ T156] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 184.064451][ T156] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 184.117740][T10836] syzkaller0: entered promiscuous mode [ 184.117758][T10836] syzkaller0: entered allmulticast mode [ 184.177138][T10838] FAULT_INJECTION: forcing a failure. [ 184.177138][T10838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.177166][T10838] CPU: 0 UID: 0 PID: 10838 Comm: syz.2.1599 Not tainted syzkaller #0 PREEMPT(full) [ 184.177186][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 184.177196][T10838] Call Trace: [ 184.177203][T10838] [ 184.177211][T10838] dump_stack_lvl+0xe8/0x150 [ 184.177241][T10838] should_fail_ex+0x410/0x560 [ 184.177271][T10838] _copy_from_user+0x2d/0xb0 [ 184.177299][T10838] ___sys_sendmsg+0x1c6/0x360 [ 184.177319][T10838] ? __lock_acquire+0x747/0x2de0 [ 184.177343][T10838] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.177398][T10838] ? __fget_files+0x2a/0x420 [ 184.177415][T10838] ? __fget_files+0x3a2/0x420 [ 184.177444][T10838] __x64_sys_sendmsg+0x1b1/0x290 [ 184.177467][T10838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.177508][T10838] do_syscall_64+0x166/0x520 [ 184.177529][T10838] ? trace_irq_disable+0x3b/0x140 [ 184.177548][T10838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.177567][T10838] ? clear_bhb_loop+0x70/0xc0 [ 184.177589][T10838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.177608][T10838] RIP: 0033:0x7f931a99e559 [ 184.177625][T10838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.177640][T10838] RSP: 002b:00007f931b891028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.177660][T10838] RAX: ffffffffffffffda RBX: 00007f931ac25fa0 RCX: 00007f931a99e559 [ 184.177673][T10838] RDX: 0000000000004040 RSI: 0000200000000200 RDI: 0000000000000004 [ 184.177685][T10838] RBP: 00007f931b891090 R08: 0000000000000000 R09: 0000000000000000 [ 184.177696][T10838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.177707][T10838] R13: 00007f931ac26038 R14: 00007f931ac25fa0 R15: 00007fffccc59c48 [ 184.177736][T10838] [ 184.205674][ T5630] Bluetooth: hci6: command tx timeout [ 184.460124][T10846] bond6: entered promiscuous mode [ 184.469278][T10846] bond6: entered allmulticast mode [ 184.469654][T10846] 8021q: adding VLAN 0 to HW filter on device bond6 [ 184.770262][T10879] netlink: 'syz.4.1609': attribute type 49 has an invalid length. [ 184.867624][T10879] ip6gretap0: entered promiscuous mode [ 184.867647][T10879] ip6gretap0: entered allmulticast mode [ 185.070149][T10895] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.239086][T10904] __nla_validate_parse: 9 callbacks suppressed [ 185.239104][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1616'. [ 185.449790][T10916] netlink: 'syz.5.1621': attribute type 2 has an invalid length. [ 185.495177][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1621'. [ 185.495195][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1621'. [ 185.608997][T10923] syz_tun: entered allmulticast mode [ 185.632666][ T49] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.632725][ T49] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.632756][ T49] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.661047][ T59] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.892052][T10985] debugfs: 'netdev:bond_slave_1' already exists in 'phy8' [ 186.944020][ T156] net_ratelimit: 153 callbacks suppressed [ 186.944037][ T156] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 186.944079][ T156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 186.944105][ T156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 186.944129][ T156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 186.944153][ T156] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 186.944169][ T156] bond6: (slave macvlan2): failed to get link speed/duplex [ 187.054181][ T156] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 187.054204][ T156] bond6: (slave macvlan2): failed to get link speed/duplex [ 187.054233][ T156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 187.054265][ T156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 187.232902][T10999] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1644'. [ 187.365998][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1646'. [ 187.615118][T11011] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1649'. [ 187.713051][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 187.769932][T11021] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1653'. [ 187.774543][T11023] netlink: 'syz.2.1650': attribute type 2 has an invalid length. [ 187.801467][T11018] macvtap1: entered promiscuous mode [ 187.801486][T11018] vlan0: entered promiscuous mode [ 187.801990][T11018] macvtap1: entered allmulticast mode [ 187.802005][T11018] vlan0: entered allmulticast mode [ 187.802017][T11018] veth0_vlan: entered allmulticast mode [ 187.907577][T11027] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.030946][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1658'. [ 188.101638][T11038] syzkaller0: entered promiscuous mode [ 188.101658][T11038] syzkaller0: entered allmulticast mode [ 188.200370][T11043] syzkaller0: entered promiscuous mode [ 188.200389][T11043] syzkaller0: entered allmulticast mode [ 188.203315][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1661'. [ 188.706106][T11070] syzkaller0: entered promiscuous mode [ 188.706134][T11070] syzkaller0: entered allmulticast mode [ 188.832457][T11078] syzkaller0: entered promiscuous mode [ 188.832479][T11078] syzkaller0: entered allmulticast mode [ 189.026669][T11087] netlink: 'syz.4.1682': attribute type 2 has an invalid length. [ 189.973701][T11125] syz.2.1694 (11125) used greatest stack depth: 16480 bytes left [ 190.235304][T11164] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.459468][T11177] netlink: 'syz.6.1712': attribute type 2 has an invalid length. [ 190.459488][T11177] netlink: 'syz.6.1712': attribute type 1 has an invalid length. [ 190.612207][T11181] __nla_validate_parse: 12 callbacks suppressed [ 190.612225][T11181] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1711'. [ 190.768987][T11198] xt_l2tp: missing protocol rule (udp|l2tpip) [ 191.089101][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 191.089120][ T5615] Bluetooth: hci4: command 0x0405 tx timeout [ 191.089149][ T5615] Bluetooth: hci0: command 0x0c3a tx timeout [ 191.089167][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 191.090995][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 191.397239][T11231] bond0: (slave bond_slave_0): Device is not bonding slave [ 191.397262][T11231] bond0: option active_slave: invalid value (bond_slave_0) [ 191.398928][T11231] bond0 (unregistering): Released all slaves [ 191.588658][ T5623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 191.592810][ T5623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 191.616498][ T5623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 191.621675][ T5623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 191.632838][ T5623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 191.726552][T11252] FAULT_INJECTION: forcing a failure. [ 191.726552][T11252] name failslab, interval 1, probability 0, space 0, times 0 [ 191.726580][T11252] CPU: 0 UID: 0 PID: 11252 Comm: syz.5.1724 Not tainted syzkaller #0 PREEMPT(full) [ 191.726599][T11252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 191.726609][T11252] Call Trace: [ 191.726616][T11252] [ 191.726623][T11252] dump_stack_lvl+0xe8/0x150 [ 191.726654][T11252] should_fail_ex+0x410/0x560 [ 191.726684][T11252] should_failslab+0xa8/0x100 [ 191.726711][T11252] __kmalloc_cache_noprof+0xa3/0x600 [ 191.726732][T11252] ? __netlink_dump_start+0xf4/0x7b0 [ 191.726755][T11252] ? __inet_diag_dump_start+0x90/0xbb0 [ 191.726779][T11252] ? __inet_diag_dump_start+0x90/0xbb0 [ 191.726811][T11252] __inet_diag_dump_start+0x90/0xbb0 [ 191.726839][T11252] ? netlink_lookup+0x30/0x200 [ 191.726860][T11252] ? netlink_lookup+0x30/0x200 [ 191.726887][T11252] __netlink_dump_start+0x442/0x7b0 [ 191.726915][T11252] inet_diag_rcv_msg_compat+0x214/0x420 [ 191.726943][T11252] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 191.726975][T11252] ? lock_acquire+0x115/0x350 [ 191.726994][T11252] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 191.727017][T11252] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 191.727043][T11252] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 191.727074][T11252] ? sock_diag_rcv_msg+0x184/0x5f0 [ 191.727106][T11252] sock_diag_rcv_msg+0x4b0/0x5f0 [ 191.727137][T11252] netlink_rcv_skb+0x226/0x4a0 [ 191.727161][T11252] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 191.727190][T11252] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.727225][T11252] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.727246][T11252] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.727274][T11252] netlink_unicast+0x8ef/0xa80 [ 191.727312][T11252] netlink_sendmsg+0x813/0xb40 [ 191.727344][T11252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.727375][T11252] ? apparmor_socket_sendmsg+0x98/0x360 [ 191.727403][T11252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.727433][T11252] sock_sendmsg_nosec+0x13a/0x180 [ 191.727461][T11252] ____sys_sendmsg+0x54e/0x850 [ 191.727487][T11252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.727518][T11252] ? import_iovec+0x73/0xa0 [ 191.727550][T11252] ___sys_sendmsg+0x2a5/0x360 [ 191.727569][T11252] ? __lock_acquire+0x747/0x2de0 [ 191.727594][T11252] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.727655][T11252] ? __fget_files+0x2a/0x420 [ 191.727671][T11252] ? __fget_files+0x3a2/0x420 [ 191.727697][T11252] __x64_sys_sendmsg+0x1b1/0x290 [ 191.727719][T11252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.727760][T11252] do_syscall_64+0x166/0x520 [ 191.727781][T11252] ? trace_irq_disable+0x3b/0x140 [ 191.727801][T11252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.727820][T11252] ? clear_bhb_loop+0x70/0xc0 [ 191.727843][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.727862][T11252] RIP: 0033:0x7efd0e79e559 [ 191.727880][T11252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.727895][T11252] RSP: 002b:00007efd0f6ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.727914][T11252] RAX: ffffffffffffffda RBX: 00007efd0ea25fa0 RCX: 00007efd0e79e559 [ 191.727927][T11252] RDX: 0000000000004040 RSI: 0000200000000200 RDI: 0000000000000004 [ 191.727939][T11252] RBP: 00007efd0f6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 191.727955][T11252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.727966][T11252] R13: 00007efd0ea26038 R14: 00007efd0ea25fa0 R15: 00007ffdd82564e8 [ 191.727999][T11252] [ 192.035367][ T13] net_ratelimit: 237 callbacks suppressed [ 192.035385][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 192.035419][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 192.035434][ T13] bond6: (slave macvlan2): failed to get link speed/duplex [ 192.035457][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 192.035481][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 192.035503][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 192.145053][ T8142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 192.145085][ T8142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 192.145111][ T8142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 192.145134][ T8142] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 192.265460][T11259] sctp: [Deprecated]: syz.6.1726 (pid 11259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.265460][T11259] Use struct sctp_sack_info instead [ 192.467192][T11268] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1729'. [ 192.491778][T11268] netlink: 45349 bytes leftover after parsing attributes in process `syz.6.1729'. [ 192.491957][T11268] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 192.520910][T11268] 0ªX¹¦Dö»: entered allmulticast mode [ 192.713235][T11287] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1733'. [ 192.770739][T11293] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1735'. [ 192.784381][T11294] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1736'. [ 192.920145][T11245] rxe_eth0 speed is unknown, defaulting to 1000 [ 193.200839][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 193.200868][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 193.217861][T11308] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1742'. [ 193.297080][T11306] syzkaller0: entered promiscuous mode [ 193.297099][T11306] syzkaller0: entered allmulticast mode [ 193.311853][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1741'. [ 193.439882][T11319] netlink: 'syz.4.1746': attribute type 1 has an invalid length. [ 193.556741][T11327] bond0: (slave geneve2): making interface the new active one [ 193.558741][T11327] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 193.694878][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 193.695734][ T8142] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 193.695773][ T8142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 193.695816][ T8142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 193.724592][ T5623] Bluetooth: hci7: command tx timeout [ 193.769547][T11337] netlink: 'syz.2.1749': attribute type 10 has an invalid length. [ 194.128380][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.128437][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.186068][T11245] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.187705][T11245] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.187835][T11245] bridge_slave_0: entered allmulticast mode [ 194.191254][T11245] bridge_slave_0: entered promiscuous mode [ 194.196465][T11245] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.198258][T11245] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.198397][T11245] bridge_slave_1: entered allmulticast mode [ 194.201575][T11245] bridge_slave_1: entered promiscuous mode [ 194.246575][T11245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.256913][T11245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.380990][T11245] team0: Port device team_slave_0 added [ 194.407398][T11245] team0: Port device team_slave_1 added [ 194.561002][T11245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.562195][T11245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.562220][T11245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.571554][T11245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.571567][T11245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.571589][T11245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.683466][T11245] hsr_slave_0: entered promiscuous mode [ 194.691548][T11245] hsr_slave_1: entered promiscuous mode [ 194.692230][T11245] debugfs: 'hsr0' already exists in 'hsr' [ 194.692247][T11245] Cannot create hsr debugfs directory [ 194.887065][T11372] netlink: 'syz.5.1757': attribute type 1 has an invalid length. [ 194.930143][T11377] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 195.012263][T11372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.029386][T11372] FAULT_INJECTION: forcing a failure. [ 195.029386][T11372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.029413][T11372] CPU: 1 UID: 0 PID: 11372 Comm: syz.5.1757 Not tainted syzkaller #0 PREEMPT(full) [ 195.029432][T11372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 195.029443][T11372] Call Trace: [ 195.029450][T11372] [ 195.029459][T11372] dump_stack_lvl+0xe8/0x150 [ 195.029489][T11372] should_fail_ex+0x410/0x560 [ 195.029518][T11372] _copy_from_user+0x2d/0xb0 [ 195.029546][T11372] ___sys_sendmsg+0x1c6/0x360 [ 195.029567][T11372] ? __lock_acquire+0x747/0x2de0 [ 195.029591][T11372] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.029645][T11372] ? __fget_files+0x2a/0x420 [ 195.029662][T11372] ? __fget_files+0x3a2/0x420 [ 195.029698][T11372] __x64_sys_sendmsg+0x1b1/0x290 [ 195.029720][T11372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.029760][T11372] do_syscall_64+0x166/0x520 [ 195.029782][T11372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.029800][T11372] ? clear_bhb_loop+0x70/0xc0 [ 195.029823][T11372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.029841][T11372] RIP: 0033:0x7efd0e79e559 [ 195.029857][T11372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.029873][T11372] RSP: 002b:00007efd0f6ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.029892][T11372] RAX: ffffffffffffffda RBX: 00007efd0ea25fa0 RCX: 00007efd0e79e559 [ 195.029903][T11372] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 195.029915][T11372] RBP: 00007efd0f6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 195.029926][T11372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.029937][T11372] R13: 00007efd0ea26038 R14: 00007efd0ea25fa0 R15: 00007ffdd82564e8 [ 195.029967][T11372] [ 195.143255][T11379] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 195.539230][T11403] siw: device registration error -23 [ 195.571669][T11399] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 195.571700][T11399] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 195.571734][T11399] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 195.629344][T11399] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 195.647770][T11399] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 195.807178][ T5623] Bluetooth: hci7: command tx timeout [ 195.890469][T11245] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 195.905341][T11245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.906455][T11245] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 195.930322][T11245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.932701][T11245] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 195.953374][T11416] FAULT_INJECTION: forcing a failure. [ 195.953374][T11416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.953401][T11416] CPU: 1 UID: 0 PID: 11416 Comm: syz.4.1771 Not tainted syzkaller #0 PREEMPT(full) [ 195.953422][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 195.953433][T11416] Call Trace: [ 195.953440][T11416] [ 195.953449][T11416] dump_stack_lvl+0xe8/0x150 [ 195.953481][T11416] should_fail_ex+0x410/0x560 [ 195.953513][T11416] _copy_to_user+0x31/0xb0 [ 195.953534][T11416] simple_read_from_buffer+0xe1/0x170 [ 195.953567][T11416] proc_fail_nth_read+0x1bb/0x230 [ 195.953588][T11416] ? common_file_perm+0x20e/0x2b0 [ 195.953624][T11416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.953650][T11416] ? rw_verify_area+0x24a/0x4c0 [ 195.953671][T11416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.953693][T11416] vfs_read+0x213/0xa80 [ 195.953718][T11416] ? __pfx___mutex_lock+0x10/0x10 [ 195.953742][T11416] ? __pfx_vfs_read+0x10/0x10 [ 195.953763][T11416] ? __fget_files+0x2a/0x420 [ 195.953785][T11416] ? __fget_files+0x3a2/0x420 [ 195.953801][T11416] ? __fget_files+0x2a/0x420 [ 195.953827][T11416] ksys_read+0x150/0x270 [ 195.953849][T11416] ? __pfx_ksys_read+0x10/0x10 [ 195.953881][T11416] do_syscall_64+0x166/0x520 [ 195.953902][T11416] ? trace_irq_disable+0x3b/0x140 [ 195.953922][T11416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.953942][T11416] ? clear_bhb_loop+0x70/0xc0 [ 195.953965][T11416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.953983][T11416] RIP: 0033:0x7f39e415ed8e [ 195.954000][T11416] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.954016][T11416] RSP: 002b:00007f39e50f9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.954035][T11416] RAX: ffffffffffffffda RBX: 00007f39e50fa6c0 RCX: 00007f39e415ed8e [ 195.954049][T11416] RDX: 000000000000000f RSI: 00007f39e50fa0a0 RDI: 0000000000000005 [ 195.954061][T11416] RBP: 00007f39e50fa090 R08: 0000000000000000 R09: 0000000000000000 [ 195.954072][T11416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.954082][T11416] R13: 00007f39e4426038 R14: 00007f39e4425fa0 R15: 00007fff5e5eda98 [ 195.954115][T11416] [ 195.967282][T11245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 195.979219][T11245] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.032672][T11245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.279205][T11430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.470238][T11438] sctp: [Deprecated]: syz.5.1777 (pid 11438) Use of int in maxseg socket option. [ 196.470238][T11438] Use struct sctp_assoc_value instead [ 196.470814][T11245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.502574][T11438] netlink: 'syz.5.1777': attribute type 6 has an invalid length. [ 196.527314][T11438] 8021q: VLANs not supported on sit0 [ 196.540099][T11245] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.552896][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.552999][ T8139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.577682][ T8141] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.577782][ T8141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.880423][T11451] syzkaller0: entered promiscuous mode [ 196.880445][T11451] syzkaller0: entered allmulticast mode [ 196.904852][T11451] __nla_validate_parse: 6 callbacks suppressed [ 196.904868][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1782'. [ 196.904884][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1782'. [ 196.969556][T11455] netlink: 'syz.6.1783': attribute type 1 has an invalid length. [ 197.055804][T11455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.149965][T11462] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 197.172733][T11461] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.196119][ T8139] net_ratelimit: 147 callbacks suppressed [ 197.196135][ T8139] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.196164][ T8139] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 197.196182][ T8139] bond6: (slave macvlan2): failed to get link speed/duplex [ 197.196206][ T8139] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 197.217698][ T1156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.217732][ T1156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.306064][ T172] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 197.306111][ T172] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 197.306129][ T172] bond6: (slave macvlan2): failed to get link speed/duplex [ 197.306152][ T172] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.480030][T11478] vlan0: entered promiscuous mode [ 197.875304][T11245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.879917][T11501] syzkaller0: entered promiscuous mode [ 197.879937][T11501] syzkaller0: entered allmulticast mode [ 197.885078][ T5623] Bluetooth: hci7: command tx timeout [ 198.066870][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'. [ 198.342047][T11525] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1799'. [ 198.589047][T11536] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1803'. [ 198.705672][T11533] bond3: (slave bond_slave_0): Device is not bonding slave [ 198.705692][T11533] bond3: option active_slave: invalid value (bond_slave_0) [ 198.710536][T11533] bond3 (unregistering): Released all slaves [ 198.872686][T11245] veth0_vlan: entered promiscuous mode [ 198.902455][T11549] syzkaller0: entered promiscuous mode [ 198.902473][T11549] syzkaller0: entered allmulticast mode [ 198.924551][T11245] veth1_vlan: entered promiscuous mode [ 199.016960][T11245] veth0_macvtap: entered promiscuous mode [ 199.030059][T11245] veth1_macvtap: entered promiscuous mode [ 199.080043][T11245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.102478][T11245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.346030][ T8139] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.346156][ T8139] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.346189][ T8139] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.346221][ T8139] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.591728][T11578] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1814'. [ 199.591759][T11578] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1814'. [ 199.673526][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1816'. [ 199.690677][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.690694][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.761474][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.761491][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.964169][ T5623] Bluetooth: hci7: command tx timeout [ 200.022062][T11590] bond2: (slave bond_slave_0): Device is not our slave [ 200.022084][T11590] bond2: option active_slave: invalid value (bond_slave_0) [ 200.025640][T11590] bond2 (unregistering): Released all slaves [ 200.395975][T11594] syzkaller0: entered promiscuous mode [ 200.395999][T11594] syzkaller0: entered allmulticast mode [ 200.399788][T11622] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1825'. [ 200.399809][T11622] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1825'. [ 200.428285][T11621] FAULT_INJECTION: forcing a failure. [ 200.428285][T11621] name failslab, interval 1, probability 0, space 0, times 0 [ 200.428313][T11621] CPU: 1 UID: 0 PID: 11621 Comm: syz.5.1824 Not tainted syzkaller #0 PREEMPT(full) [ 200.428333][T11621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 200.428344][T11621] Call Trace: [ 200.428351][T11621] [ 200.428359][T11621] dump_stack_lvl+0xe8/0x150 [ 200.428389][T11621] should_fail_ex+0x410/0x560 [ 200.428420][T11621] should_failslab+0xa8/0x100 [ 200.428447][T11621] __kmalloc_cache_noprof+0xa3/0x600 [ 200.428468][T11621] ? __kmalloc_cache_noprof+0x14d/0x600 [ 200.428487][T11621] ? sctp_add_bind_addr+0x8c/0x370 [ 200.428509][T11621] ? sctp_add_bind_addr+0x8c/0x370 [ 200.428539][T11621] sctp_add_bind_addr+0x8c/0x370 [ 200.428567][T11621] sctp_copy_local_addr_list+0x31a/0x4e0 [ 200.428594][T11621] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 200.428619][T11621] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 200.428648][T11621] ? sctp_v6_is_any+0x64/0x80 [ 200.428675][T11621] ? sctp_copy_one_addr+0x93/0x360 [ 200.428702][T11621] sctp_bind_addr_copy+0xb3/0x3c0 [ 200.428727][T11621] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 200.428752][T11621] sctp_connect_new_asoc+0x2ff/0x6b0 [ 200.428774][T11621] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 200.428799][T11621] ? __local_bh_enable_ip+0xd6/0x140 [ 200.428828][T11621] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 200.428844][T11621] ? security_sctp_bind_connect+0x7e/0x2c0 [ 200.428871][T11621] sctp_sendmsg+0x159b/0x2d00 [ 200.428903][T11621] ? __pfx_sctp_sendmsg+0x10/0x10 [ 200.428926][T11621] ? __lock_acquire+0x747/0x2de0 [ 200.428960][T11621] ? aa_sock_msg_perm+0xf5/0x210 [ 200.428985][T11621] ? sock_rps_record_flow+0x19/0x350 [ 200.429012][T11621] ? inet_sendmsg+0x298/0x320 [ 200.429039][T11621] ? __pfx_inet_sendmsg+0x10/0x10 [ 200.429062][T11621] sock_sendmsg_nosec+0x10e/0x180 [ 200.429089][T11621] ____sys_sendmsg+0x54e/0x850 [ 200.429113][T11621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.429142][T11621] ? import_iovec+0x73/0xa0 [ 200.429173][T11621] ___sys_sendmsg+0x2a5/0x360 [ 200.429189][T11621] ? __lock_acquire+0x747/0x2de0 [ 200.429213][T11621] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.429237][T11621] ? kstrtouint+0x6e/0xe0 [ 200.429285][T11621] ? __fget_files+0x2a/0x420 [ 200.429300][T11621] ? __fget_files+0x3a2/0x420 [ 200.429327][T11621] __sys_sendmmsg+0x273/0x4d0 [ 200.429352][T11621] ? __pfx___sys_sendmmsg+0x10/0x10 [ 200.429381][T11621] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 200.429417][T11621] ? ksys_write+0x242/0x270 [ 200.429439][T11621] ? __pfx_ksys_write+0x10/0x10 [ 200.429463][T11621] __x64_sys_sendmmsg+0xa0/0xc0 [ 200.429485][T11621] do_syscall_64+0x166/0x520 [ 200.429504][T11621] ? trace_irq_disable+0x3b/0x140 [ 200.429523][T11621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.429541][T11621] ? clear_bhb_loop+0x70/0xc0 [ 200.429562][T11621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.429580][T11621] RIP: 0033:0x7efd0e79e559 [ 200.429596][T11621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.429611][T11621] RSP: 002b:00007efd0f6ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 200.429629][T11621] RAX: ffffffffffffffda RBX: 00007efd0ea25fa0 RCX: 00007efd0e79e559 [ 200.429642][T11621] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 200.429653][T11621] RBP: 00007efd0f6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 200.429664][T11621] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000002 [ 200.429675][T11621] R13: 00007efd0ea26038 R14: 00007efd0ea25fa0 R15: 00007ffdd82564e8 [ 200.429705][T11621] [ 201.603851][T11628] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 201.804130][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.909660][T11641] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 202.425137][T11623] syzkaller0: entered promiscuous mode [ 202.425160][T11623] syzkaller0: entered allmulticast mode [ 202.427315][T11627] __nla_validate_parse: 2 callbacks suppressed [ 202.427331][T11627] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1826'. [ 202.427608][T11627] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1826'. [ 202.432978][T11631] erspan0: entered promiscuous mode [ 202.435084][T11631] gretap0: entered promiscuous mode [ 202.435739][T11631] debugfs: 'hsr1' already exists in 'hsr' [ 202.435756][T11631] Cannot create hsr debugfs directory [ 202.439833][ T8142] net_ratelimit: 89 callbacks suppressed [ 202.439848][ T8142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.439881][ T8142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.439907][ T8142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.439932][ T8142] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 202.439958][ T8142] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 202.439975][ T8142] bond6: (slave macvlan2): failed to get link speed/duplex [ 202.615456][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 202.615481][ T12] bond6: (slave macvlan2): failed to get link speed/duplex [ 202.615511][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.615539][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.691336][T11643] netlink: 'syz.7.1830': attribute type 3 has an invalid length. [ 202.852725][ T5623] Bluetooth: hci0: command 0x0c3a tx timeout [ 203.029684][T11667] FAULT_INJECTION: forcing a failure. [ 203.029684][T11667] name failslab, interval 1, probability 0, space 0, times 0 [ 203.029712][T11667] CPU: 0 UID: 0 PID: 11667 Comm: syz.2.1836 Not tainted syzkaller #0 PREEMPT(full) [ 203.029735][T11667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 203.029745][T11667] Call Trace: [ 203.029753][T11667] [ 203.029761][T11667] dump_stack_lvl+0xe8/0x150 [ 203.029792][T11667] should_fail_ex+0x410/0x560 [ 203.029821][T11667] should_failslab+0xa8/0x100 [ 203.029848][T11667] __kmalloc_cache_noprof+0xa3/0x600 [ 203.029870][T11667] ? __kmalloc_cache_noprof+0x14d/0x600 [ 203.029888][T11667] ? sctp_add_bind_addr+0x8c/0x370 [ 203.029912][T11667] ? sctp_add_bind_addr+0x8c/0x370 [ 203.029943][T11667] sctp_add_bind_addr+0x8c/0x370 [ 203.029972][T11667] sctp_copy_local_addr_list+0x31a/0x4e0 [ 203.029999][T11667] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 203.030026][T11667] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 203.030053][T11667] ? sctp_v6_is_any+0x64/0x80 [ 203.030081][T11667] ? sctp_copy_one_addr+0x93/0x360 [ 203.030107][T11667] sctp_bind_addr_copy+0xb3/0x3c0 [ 203.030139][T11667] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 203.030165][T11667] sctp_connect_new_asoc+0x2ff/0x6b0 [ 203.030187][T11667] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 203.030212][T11667] ? __local_bh_enable_ip+0xd6/0x140 [ 203.030235][T11667] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 203.030252][T11667] ? security_sctp_bind_connect+0x7e/0x2c0 [ 203.030279][T11667] sctp_sendmsg+0x159b/0x2d00 [ 203.030313][T11667] ? __pfx_sctp_sendmsg+0x10/0x10 [ 203.030337][T11667] ? __lock_acquire+0x747/0x2de0 [ 203.030370][T11667] ? aa_sock_msg_perm+0xf5/0x210 [ 203.030394][T11667] ? sock_rps_record_flow+0x19/0x350 [ 203.030422][T11667] ? inet_sendmsg+0x298/0x320 [ 203.030447][T11667] ? __pfx_inet_sendmsg+0x10/0x10 [ 203.030471][T11667] sock_sendmsg_nosec+0x10e/0x180 [ 203.030498][T11667] ____sys_sendmsg+0x54e/0x850 [ 203.030523][T11667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.030552][T11667] ? import_iovec+0x73/0xa0 [ 203.030582][T11667] ___sys_sendmsg+0x2a5/0x360 [ 203.030601][T11667] ? __lock_acquire+0x747/0x2de0 [ 203.030624][T11667] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.030649][T11667] ? kstrtouint+0x6e/0xe0 [ 203.030699][T11667] ? __fget_files+0x2a/0x420 [ 203.030716][T11667] ? __fget_files+0x3a2/0x420 [ 203.030744][T11667] __sys_sendmmsg+0x273/0x4d0 [ 203.030769][T11667] ? __pfx___sys_sendmmsg+0x10/0x10 [ 203.030800][T11667] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 203.030837][T11667] ? ksys_write+0x242/0x270 [ 203.030859][T11667] ? __pfx_ksys_write+0x10/0x10 [ 203.030886][T11667] __x64_sys_sendmmsg+0xa0/0xc0 [ 203.030908][T11667] do_syscall_64+0x166/0x520 [ 203.030929][T11667] ? trace_irq_disable+0x3b/0x140 [ 203.030949][T11667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.030968][T11667] ? clear_bhb_loop+0x70/0xc0 [ 203.030990][T11667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.031008][T11667] RIP: 0033:0x7f931a99e559 [ 203.031027][T11667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.031040][T11667] RSP: 002b:00007f931b891028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 203.031060][T11667] RAX: ffffffffffffffda RBX: 00007f931ac25fa0 RCX: 00007f931a99e559 [ 203.031073][T11667] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 203.031084][T11667] RBP: 00007f931b891090 R08: 0000000000000000 R09: 0000000000000000 [ 203.031096][T11667] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000002 [ 203.031106][T11667] R13: 00007f931ac26038 R14: 00007f931ac25fa0 R15: 00007fffccc59c48 [ 203.031143][T11667] [ 203.433051][T11672] xt_NFQUEUE: number of total queues is 0 [ 203.448202][T11688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1840'. [ 203.448235][T11688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1840'. [ 203.519271][T11688] gretap0: entered promiscuous mode [ 203.519923][T11688] debugfs: 'hsr1' already exists in 'hsr' [ 203.519940][T11688] Cannot create hsr debugfs directory [ 203.519992][T11688] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 203.574412][T11691] syzkaller0: entered promiscuous mode [ 203.574429][T11691] syzkaller0: entered allmulticast mode [ 203.776488][T11701] team0: Port device macvlan0 added [ 203.813591][T11705] syzkaller0: entered promiscuous mode [ 203.813609][T11705] syzkaller0: entered allmulticast mode [ 204.056457][T11716] netlink: 5260 bytes leftover after parsing attributes in process `syz.6.1850'. [ 204.249852][T11724] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1852'. [ 204.331873][T11730] FAULT_INJECTION: forcing a failure. [ 204.331873][T11730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.331901][T11730] CPU: 1 UID: 0 PID: 11730 Comm: syz.5.1855 Not tainted syzkaller #0 PREEMPT(full) [ 204.331921][T11730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 204.331932][T11730] Call Trace: [ 204.331939][T11730] [ 204.331947][T11730] dump_stack_lvl+0xe8/0x150 [ 204.331979][T11730] should_fail_ex+0x410/0x560 [ 204.332010][T11730] _copy_from_user+0x2d/0xb0 [ 204.332038][T11730] ___sys_sendmsg+0x1c6/0x360 [ 204.332058][T11730] ? __lock_acquire+0x747/0x2de0 [ 204.332083][T11730] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.332139][T11730] ? __fget_files+0x2a/0x420 [ 204.332156][T11730] ? __fget_files+0x3a2/0x420 [ 204.332183][T11730] __x64_sys_sendmsg+0x1b1/0x290 [ 204.332206][T11730] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.332248][T11730] do_syscall_64+0x166/0x520 [ 204.332269][T11730] ? trace_irq_disable+0x3b/0x140 [ 204.332289][T11730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.332308][T11730] ? clear_bhb_loop+0x70/0xc0 [ 204.332331][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.332348][T11730] RIP: 0033:0x7efd0e79e559 [ 204.332365][T11730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.332380][T11730] RSP: 002b:00007efd0f6ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.332399][T11730] RAX: ffffffffffffffda RBX: 00007efd0ea25fa0 RCX: 00007efd0e79e559 [ 204.332413][T11730] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 204.332424][T11730] RBP: 00007efd0f6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 204.332436][T11730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.332446][T11730] R13: 00007efd0ea26038 R14: 00007efd0ea25fa0 R15: 00007ffdd82564e8 [ 204.332478][T11730] [ 204.630743][T11742] netlink: 'syz.4.1860': attribute type 2 has an invalid length. [ 204.697564][T11739] bond3: (slave bond_slave_0): Device is not bonding slave [ 204.697585][T11739] bond3: option active_slave: invalid value (bond_slave_0) [ 204.720232][T11739] bond3 (unregistering): Released all slaves [ 204.920022][T11752] netlink: 5260 bytes leftover after parsing attributes in process `syz.7.1863'. [ 205.012242][T11758] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1867'. [ 205.012264][T11758] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1867'. [ 205.048455][T11758] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1867'. [ 205.179145][T11761] syzkaller0: entered promiscuous mode [ 205.179165][T11761] syzkaller0: entered allmulticast mode [ 205.259546][T11770] netlink: 'syz.2.1871': attribute type 49 has an invalid length. [ 205.331887][T11766] syzkaller0: entered promiscuous mode [ 205.331906][T11766] syzkaller0: entered allmulticast mode [ 205.912586][T11806] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 206.026097][T11803] syzkaller0: entered promiscuous mode [ 206.026118][T11803] syzkaller0: entered allmulticast mode [ 206.167411][T11820] netlink: 'syz.2.1890': attribute type 1 has an invalid length. [ 206.233774][T11820] 8021q: adding VLAN 0 to HW filter on device bond8 [ 206.240705][T11822] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 207.026951][T11867] syzkaller0: entered promiscuous mode [ 207.026972][T11867] syzkaller0: entered allmulticast mode [ 207.239857][T11874] veth1_to_bond: entered allmulticast mode [ 207.248573][T11877] veth1_to_bond: left allmulticast mode [ 207.445025][ T12] net_ratelimit: 203 callbacks suppressed [ 207.445046][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.445075][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 207.454002][ T172] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.454036][ T172] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 207.454053][ T172] bond6: (slave macvlan2): failed to get link speed/duplex [ 207.546976][ T79] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.578887][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 207.578911][ T79] bond6: (slave macvlan2): failed to get link speed/duplex [ 207.578940][ T79] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.578967][ T79] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.629981][T11894] __nla_validate_parse: 10 callbacks suppressed [ 207.630010][T11894] netlink: 5296 bytes leftover after parsing attributes in process `syz.5.1914'. [ 207.838603][T11878] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 207.971947][T11903] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1919'. [ 207.971980][T11903] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1919'. [ 209.717030][T11903] erspan0: entered promiscuous mode [ 209.717747][T11903] 0ªX¹¦Dö»: entered promiscuous mode [ 209.718205][T11903] debugfs: 'hsr1' already exists in 'hsr' [ 209.718227][T11903] Cannot create hsr debugfs directory [ 210.053600][T11930] syzkaller0: entered promiscuous mode [ 210.053621][T11930] syzkaller0: entered allmulticast mode [ 210.075985][T11932] netlink: 5260 bytes leftover after parsing attributes in process `syz.5.1926'. [ 210.353213][T11942] syzkaller0: entered promiscuous mode [ 210.353234][T11942] syzkaller0: entered allmulticast mode [ 210.371547][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1931'. [ 210.371568][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1931'. [ 210.608610][T11958] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1935'. [ 210.688987][T11955] syzkaller0: entered promiscuous mode [ 210.689009][T11955] syzkaller0: entered allmulticast mode [ 211.321603][T11973] netlink: 5260 bytes leftover after parsing attributes in process `syz.4.1941'. [ 212.894555][ T8139] net_ratelimit: 52 callbacks suppressed [ 212.894794][ T8139] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 212.894881][ T8139] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 212.894908][ T8139] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 212.894924][ T8139] bond6: (slave macvlan2): failed to get link speed/duplex [ 212.894958][ T8139] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 212.896158][ T1156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 213.042004][T11983] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1944'. [ 213.042023][T11983] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1944'. [ 213.084688][ T8142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 213.084721][ T8142] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 213.084737][ T8142] bond6: (slave macvlan2): failed to get link speed/duplex [ 213.084761][ T8142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 213.228485][T11992] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 213.467026][T11958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.530622][T11994] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1949'. [ 213.530646][T11994] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1949'. [ 214.281499][T12035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1961'. [ 214.281529][T12035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1961'. [ 214.593851][T12050] netlink: 'syz.2.1967': attribute type 24 has an invalid length. [ 214.639661][T12050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1967'. [ 214.735825][T12058] netlink: 'syz.2.1969': attribute type 1 has an invalid length. [ 214.796847][T12058] 8021q: adding VLAN 0 to HW filter on device bond9 [ 214.842941][T12058] bond8: (slave veth0_to_bond): Releasing backup interface [ 214.868983][T12058] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 214.953697][T12067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.979410][T12069] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1973'. [ 214.979437][T12069] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1973'. [ 215.016018][T12069] FAULT_INJECTION: forcing a failure. [ 215.016018][T12069] name failslab, interval 1, probability 0, space 0, times 0 [ 215.016046][T12069] CPU: 0 UID: 0 PID: 12069 Comm: syz.5.1973 Not tainted syzkaller #0 PREEMPT(full) [ 215.016066][T12069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 215.016077][T12069] Call Trace: [ 215.016084][T12069] [ 215.016091][T12069] dump_stack_lvl+0xe8/0x150 [ 215.016122][T12069] should_fail_ex+0x410/0x560 [ 215.016154][T12069] should_failslab+0xa8/0x100 [ 215.016182][T12069] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 215.016204][T12069] ? __d_lookup+0x66/0x790 [ 215.016224][T12069] ? __d_alloc+0x37/0x6f0 [ 215.016240][T12069] ? __d_alloc+0x37/0x6f0 [ 215.016266][T12069] __d_alloc+0x37/0x6f0 [ 215.016297][T12069] d_alloc+0x4b/0x190 [ 215.016313][T12069] ? lookup_one_qstr_excl+0xc4/0x360 [ 215.016336][T12069] lookup_one_qstr_excl+0xd8/0x360 [ 215.016355][T12069] ? lookup_noperm_common+0x245/0x430 [ 215.016376][T12069] start_dirop+0x5c/0x90 [ 215.016403][T12069] simple_start_creating+0xcc/0x110 [ 215.016424][T12069] ? __pfx_simple_start_creating+0x10/0x10 [ 215.016444][T12069] ? do_raw_spin_unlock+0xf5/0x200 [ 215.016470][T12069] ? mntput+0x65/0xc0 [ 215.016499][T12069] debugfs_start_creating+0xca/0x1b0 [ 215.016525][T12069] __debugfs_create_file+0x6f/0x400 [ 215.016552][T12069] debugfs_create_file_full+0x3f/0x60 [ 215.016578][T12069] ref_tracker_dir_debugfs+0x197/0x360 [ 215.016607][T12069] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 215.016662][T12069] ? __kvmalloc_node_noprof+0x52f/0x820 [ 215.016688][T12069] ? __kvmalloc_node_noprof+0x345/0x820 [ 215.016716][T12069] ? __raw_spin_lock_init+0x45/0x100 [ 215.016745][T12069] alloc_netdev_mqs+0x275/0x12a0 [ 215.016766][T12069] ? __pfx_snprintf+0x10/0x10 [ 215.016791][T12069] ? __pfx_hsr_dev_setup+0x10/0x10 [ 215.016821][T12069] rtnl_create_link+0x321/0xd70 [ 215.016851][T12069] rtnl_newlink_create+0x258/0x7b0 [ 215.016878][T12069] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 215.016903][T12069] ? __pfx___mutex_lock+0x10/0x10 [ 215.016935][T12069] ? ns_capable+0x89/0xe0 [ 215.016964][T12069] rtnl_newlink+0x166d/0x1c30 [ 215.016998][T12069] ? __pfx_rtnl_newlink+0x10/0x10 [ 215.017014][T12069] ? do_syscall_64+0x166/0x520 [ 215.017033][T12069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.017090][T12069] ? kasan_quarantine_put+0xbb/0x1f0 [ 215.017113][T12069] ? lockdep_hardirqs_on+0x7b/0x110 [ 215.017138][T12069] ? nlmon_xmit+0xb0/0x100 [ 215.017162][T12069] ? kmem_cache_free+0x182/0x650 [ 215.017197][T12069] ? __lock_acquire+0x747/0x2de0 [ 215.017228][T12069] ? __local_bh_enable_ip+0xd6/0x140 [ 215.017252][T12069] ? lockdep_hardirqs_on+0x7b/0x110 [ 215.017271][T12069] ? __dev_queue_xmit+0x29b/0x3920 [ 215.017298][T12069] ? __local_bh_enable_ip+0xd6/0x140 [ 215.017332][T12069] ? lock_acquire+0x115/0x350 [ 215.017368][T12069] ? __pfx_rtnl_newlink+0x10/0x10 [ 215.017388][T12069] rtnetlink_rcv_msg+0x802/0xc00 [ 215.017410][T12069] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 215.017428][T12069] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 215.017452][T12069] ? ref_tracker_free+0x689/0x830 [ 215.017480][T12069] ? __pfx_ref_tracker_free+0x10/0x10 [ 215.017516][T12069] netlink_rcv_skb+0x226/0x4a0 [ 215.017541][T12069] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 215.017571][T12069] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.017609][T12069] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.017631][T12069] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.017659][T12069] netlink_unicast+0x8ef/0xa80 [ 215.017698][T12069] netlink_sendmsg+0x813/0xb40 [ 215.017732][T12069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.017764][T12069] ? apparmor_socket_sendmsg+0x98/0x360 [ 215.017792][T12069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.017814][T12069] sock_sendmsg_nosec+0x13a/0x180 [ 215.017842][T12069] ____sys_sendmsg+0x54e/0x850 [ 215.017869][T12069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.017900][T12069] ? import_iovec+0x73/0xa0 [ 215.017932][T12069] ___sys_sendmsg+0x2a5/0x360 [ 215.017951][T12069] ? __lock_acquire+0x747/0x2de0 [ 215.017976][T12069] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.018036][T12069] ? __fget_files+0x2a/0x420 [ 215.018053][T12069] ? __fget_files+0x3a2/0x420 [ 215.018082][T12069] __x64_sys_sendmsg+0x1b1/0x290 [ 215.018106][T12069] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.018151][T12069] do_syscall_64+0x166/0x520 [ 215.018171][T12069] ? trace_irq_disable+0x3b/0x140 [ 215.018192][T12069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.018210][T12069] ? clear_bhb_loop+0x70/0xc0 [ 215.018234][T12069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.018252][T12069] RIP: 0033:0x7efd0e79e559 [ 215.018270][T12069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.018291][T12069] RSP: 002b:00007efd0f6ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.018311][T12069] RAX: ffffffffffffffda RBX: 00007efd0ea25fa0 RCX: 00007efd0e79e559 [ 215.018325][T12069] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 215.018338][T12069] RBP: 00007efd0f6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 215.018349][T12069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.018360][T12069] R13: 00007efd0ea26038 R14: 00007efd0ea25fa0 R15: 00007ffdd82564e8 [ 215.018394][T12069] [ 215.113753][T12069] erspan0: entered promiscuous mode [ 215.120717][T12069] gretap0: entered promiscuous mode [ 215.121333][T12069] debugfs: 'hsr1' already exists in 'hsr' [ 215.121350][T12069] Cannot create hsr debugfs directory [ 215.699949][T12094] syzkaller0: entered promiscuous mode [ 215.699970][T12094] syzkaller0: entered allmulticast mode [ 215.867936][T12101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1980'. [ 216.412876][T12123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.947006][T12157] netlink: 'syz.5.1999': attribute type 1 has an invalid length. [ 216.971114][T12157] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.988617][T12157] bond0: (slave veth0_to_bond): Releasing backup interface [ 216.999292][T12157] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 217.025958][ T5707] syz1: Port: 1 Link DOWN [ 217.955520][ T12] net_ratelimit: 235 callbacks suppressed [ 217.955539][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 217.955572][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 217.955599][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 217.955625][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 217.956461][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 217.956480][ T12] bond6: (slave macvlan2): failed to get link speed/duplex [ 218.069238][ T12] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 218.069262][ T12] bond6: (slave macvlan2): failed to get link speed/duplex [ 218.070078][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 218.070111][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 218.237882][T12222] __nla_validate_parse: 4 callbacks suppressed [ 218.237899][T12222] netlink: 5260 bytes leftover after parsing attributes in process `syz.6.2022'. [ 218.289995][T12213] bond10: (slave bond_slave_0): Device is not bonding slave [ 218.290013][T12213] bond10: option active_slave: invalid value (bond_slave_0) [ 218.310998][T12213] bond10 (unregistering): Released all slaves [ 218.434453][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2024'. [ 218.867265][T12253] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2032'. [ 218.867289][T12253] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2032'. [ 218.868006][T12252] netlink: 4384 bytes leftover after parsing attributes in process `syz.4.2031'. [ 218.889951][T12257] netlink: 'syz.2.2033': attribute type 1 has an invalid length. [ 218.982338][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2036'. [ 219.017663][T12257] 8021q: adding VLAN 0 to HW filter on device bond10 [ 219.019930][T12263] netlink: 5260 bytes leftover after parsing attributes in process `syz.7.2034'. [ 219.048585][T12262] bond9: (slave veth0_to_bond): Releasing backup interface [ 219.073250][T12262] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 219.106988][T12268] FAULT_INJECTION: forcing a failure. [ 219.106988][T12268] name failslab, interval 1, probability 0, space 0, times 0 [ 219.107025][T12268] CPU: 0 UID: 0 PID: 12268 Comm: syz.5.2037 Not tainted syzkaller #0 PREEMPT(full) [ 219.107045][T12268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 219.107056][T12268] Call Trace: [ 219.107063][T12268] [ 219.107071][T12268] dump_stack_lvl+0xe8/0x150 [ 219.107106][T12268] should_fail_ex+0x410/0x560 [ 219.107137][T12268] should_failslab+0xa8/0x100 [ 219.107163][T12268] ? dst_alloc+0x105/0x170 [ 219.107186][T12268] kmem_cache_alloc_noprof+0xa1/0x600 [ 219.107207][T12268] ? __pfx_find_exception+0x10/0x10 [ 219.107230][T12268] ? dst_alloc+0x105/0x170 [ 219.107253][T12268] ? fib_lookup+0x76/0x440 [ 219.107278][T12268] dst_alloc+0x105/0x170 [ 219.107306][T12268] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 219.107341][T12268] ? ip_route_output_key_hash+0xd8/0x2a0 [ 219.107370][T12268] ip_route_output_key_hash+0x18d/0x2a0 [ 219.107398][T12268] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 219.107422][T12268] ? crng_fast_key_erasure+0x190/0x260 [ 219.107446][T12268] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 219.107478][T12268] ip_route_output_flow+0x2a/0x150 [ 219.107506][T12268] sctp_v4_get_dst+0x3c1/0x1240 [ 219.107537][T12268] ? __asan_memset+0x22/0x50 [ 219.107560][T12268] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 219.107606][T12268] ? timer_init_key+0x161/0x2c0 [ 219.107624][T12268] ? dst_release+0x72/0x1b0 [ 219.107649][T12268] sctp_transport_route+0x119/0x2f0 [ 219.107678][T12268] sctp_assoc_add_peer+0x6c6/0x1430 [ 219.107712][T12268] sctp_connect_new_asoc+0x329/0x6b0 [ 219.107736][T12268] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 219.107762][T12268] ? __local_bh_enable_ip+0xd6/0x140 [ 219.107785][T12268] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 219.107802][T12268] ? security_sctp_bind_connect+0x7e/0x2c0 [ 219.107829][T12268] sctp_sendmsg+0x159b/0x2d00 [ 219.107864][T12268] ? __pfx_sctp_sendmsg+0x10/0x10 [ 219.107888][T12268] ? __lock_acquire+0x747/0x2de0 [ 219.107924][T12268] ? aa_sock_msg_perm+0xf5/0x210 [ 219.107950][T12268] ? sock_rps_record_flow+0x19/0x350 [ 219.107979][T12268] ? inet_sendmsg+0x298/0x320 [ 219.108013][T12268] ? __pfx_inet_sendmsg+0x10/0x10 [ 219.108038][T12268] sock_sendmsg_nosec+0x10e/0x180 [ 219.108065][T12268] ____sys_sendmsg+0x54e/0x850 [ 219.108092][T12268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.108122][T12268] ? import_iovec+0x73/0xa0 [ 219.108154][T12268] ___sys_sendmsg+0x2a5/0x360 [ 219.108172][T12268] ? __lock_acquire+0x747/0x2de0 [ 219.108197][T12268] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.108223][T12268] ? kstrtouint+0x6e/0xe0 [ 219.108273][T12268] ? __fget_files+0x2a/0x420 [ 219.108290][T12268] ? __fget_files+0x3a2/0x420 [ 219.108318][T12268] __sys_sendmmsg+0x273/0x4d0 [ 219.108346][T12268] ? __pfx___sys_sendmmsg+0x10/0x10 [ 219.108377][T12268] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 219.108414][T12268] ? ksys_write+0x242/0x270 [ 219.108437][T12268] ? __pfx_ksys_write+0x10/0x10 [ 219.108464][T12268] __x64_sys_sendmmsg+0xa0/0xc0 [ 219.108487][T12268] do_syscall_64+0x166/0x520 [ 219.108507][T12268] ? trace_irq_disable+0x3b/0x140 [ 219.108527][T12268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.108545][T12268] ? clear_bhb_loop+0x70/0xc0 [ 219.108567][T12268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.108584][T12268] RIP: 0033:0x7efd0e79e559 [ 219.108602][T12268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.108617][T12268] RSP: 002b:00007efd0f6ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 219.108637][T12268] RAX: ffffffffffffffda RBX: 00007efd0ea25fa0 RCX: 00007efd0e79e559 [ 219.108650][T12268] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 219.108662][T12268] RBP: 00007efd0f6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 219.108673][T12268] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000002 [ 219.108685][T12268] R13: 00007efd0ea26038 R14: 00007efd0ea25fa0 R15: 00007ffdd82564e8 [ 219.108717][T12268] [ 219.521227][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2043'. [ 220.005726][T12305] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2047'. [ 220.005751][T12305] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2047'. [ 220.266316][T12340] syz_tun: left allmulticast mode [ 222.548245][T12448] netlink: 'syz.5.2084': attribute type 10 has an invalid length. [ 222.562345][T12451] xt_TPROXY: Can be used only with -p tcp or -p udp [ 222.576134][T12448] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 222.598943][T12448] team0: Port device wlan0 added [ 222.768970][ T5623] Bluetooth: hci7: unexpected cc 0x2035 length: 2 > 1 [ 222.771543][ T5623] Bluetooth: hci7: unexpected cc 0x2035 length: 2 > 1 [ 222.919033][T12463] bond2: option mode: unable to set because the bond device is up [ 222.955152][T12463] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 222.956746][T12463] macvlan2: entered allmulticast mode [ 222.956763][T12463] bond0: entered allmulticast mode [ 222.957411][T12463] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 223.061590][T12463] ip6gretap1: entered allmulticast mode [ 223.062153][T12463] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 223.064365][T12319] net_ratelimit: 201 callbacks suppressed [ 223.064381][T12319] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 223.064414][T12319] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 223.064441][T12319] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 223.064467][T12319] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 223.064493][T12319] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 223.064508][T12319] bond6: (slave macvlan2): failed to get link speed/duplex [ 223.083658][T12467] syzkaller0: entered promiscuous mode [ 223.083675][T12467] syzkaller0: entered allmulticast mode [ 223.171145][T12334] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 223.277285][T12327] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 223.401772][T12488] __nla_validate_parse: 9 callbacks suppressed [ 223.401791][T12488] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2096'. [ 223.714823][T12329] bond1: (slave ip6gretap1): link status up again after 0 ms [ 223.734838][T12329] bond1: (slave ip6gretap1): link status up again after 0 ms [ 223.958958][T12513] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2106'. [ 224.250595][T12537] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2110'. [ 224.682643][T12553] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2117'. [ 224.682675][T12553] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2117'. [ 224.720325][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2117'. [ 224.822470][T12558] tc_dump_action: action bad kind [ 225.065191][T12567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2123'. [ 225.270591][T12569] syzkaller0: entered promiscuous mode [ 225.270610][T12569] syzkaller0: entered allmulticast mode [ 225.383185][T12592] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2126'. [ 225.417734][T12334] IPVS: starting estimator thread 0... [ 225.504681][T12598] IPVS: using max 31 ests per chain, 74400 per kthread [ 227.079067][T12606] tc_dump_action: action bad kind [ 227.211490][T12610] netlink: 5264 bytes leftover after parsing attributes in process `syz.2.2133'. [ 227.549949][T12635] netlink: 'syz.5.2144': attribute type 1 has an invalid length. [ 227.680498][T12635] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.693162][T12637] bond3: (slave veth0_to_bond): Releasing backup interface [ 227.710905][T12637] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 227.711046][T12639] netlink: 'syz.7.2146': attribute type 4 has an invalid length. [ 227.789812][T12653] veth0: entered promiscuous mode [ 227.821710][T12652] veth0: left promiscuous mode [ 227.914612][T12661] netlink: 288 bytes leftover after parsing attributes in process `syz.5.2152'. [ 228.077158][T12330] net_ratelimit: 95 callbacks suppressed [ 228.077176][T12330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 228.077204][T12330] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 228.077228][T12330] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 228.077252][T12330] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 228.077268][T12330] bond6: (slave macvlan2): failed to get link speed/duplex [ 228.085502][T12334] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 228.116717][T12679] netlink: 'syz.2.2157': attribute type 33 has an invalid length. [ 228.184963][T12331] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 228.184985][T12331] bond6: (slave macvlan2): failed to get link speed/duplex [ 228.185011][T12331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 228.186176][T12331] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 228.288873][T12687] netlink: 'syz.2.2160': attribute type 4 has an invalid length. [ 230.660645][T12642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.778261][T12700] netlink: 'syz.5.2164': attribute type 1 has an invalid length. [ 230.869955][T12700] 8021q: adding VLAN 0 to HW filter on device bond5 [ 230.886352][T12705] bond4: (slave veth0_to_bond): Releasing backup interface [ 230.905873][T12705] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 231.042033][T12720] netlink: 5260 bytes leftover after parsing attributes in process `syz.5.2170'. [ 231.058709][T12717] syzkaller0: entered promiscuous mode [ 231.058728][T12717] syzkaller0: entered allmulticast mode [ 231.074525][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2169'. [ 231.074546][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2169'. [ 231.118612][T12331] IPVS: starting estimator thread 0... [ 231.214053][T12722] IPVS: using max 29 ests per chain, 69600 per kthread [ 231.560928][T12749] pim6reg: entered allmulticast mode [ 231.562668][T12748] pim6reg: left allmulticast mode [ 231.576703][T12743] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2177'. [ 231.779822][T12759] netlink: 'syz.4.2181': attribute type 1 has an invalid length. [ 231.876581][T12759] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.917365][T12767] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 232.030711][T12774] netlink: 5260 bytes leftover after parsing attributes in process `syz.6.2184'. [ 232.277692][T12787] netlink: 'syz.5.2189': attribute type 1 has an invalid length. [ 232.338814][T12787] 8021q: adding VLAN 0 to HW filter on device bond6 [ 232.358352][T12791] bond5: (slave veth0_to_bond): Releasing backup interface [ 232.367292][T12791] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 232.372477][T12781] syzkaller0: entered promiscuous mode [ 232.372495][T12781] syzkaller0: entered allmulticast mode [ 232.407844][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2187'. [ 232.407863][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2187'. [ 232.456696][T12793] netlink: 'syz.4.2191': attribute type 4 has an invalid length. [ 232.475020][T12797] bridge0: entered allmulticast mode [ 232.600484][T12801] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2193'. [ 232.600505][T12801] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2193'. [ 232.725770][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2197'. [ 232.746372][T12810] xfrm1: entered promiscuous mode [ 232.746390][T12810] xfrm1: entered allmulticast mode [ 232.751770][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803424c800: rx timeout, send abort [ 232.753643][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803424c800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 232.845841][T12818] netlink: 'syz.2.2203': attribute type 4 has an invalid length. [ 233.096064][T12319] net_ratelimit: 247 callbacks suppressed [ 233.096084][T12319] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 233.096113][T12319] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 233.096139][T12319] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 233.096155][T12319] bond6: (slave macvlan2): failed to get link speed/duplex [ 233.096178][T12319] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 233.154918][T12328] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 233.225657][T12331] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 233.225691][T12331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 233.225718][T12331] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 233.225734][T12331] bond6: (slave macvlan2): failed to get link speed/duplex [ 233.378337][T12849] netlink: 'syz.5.2214': attribute type 4 has an invalid length. [ 233.449284][T12854] syzkaller0: entered promiscuous mode [ 233.449303][T12854] syzkaller0: entered allmulticast mode [ 233.541113][T12857] syzkaller0: entered promiscuous mode [ 233.541131][T12857] syzkaller0: entered allmulticast mode [ 234.026458][ C0] vcan0: j1939_tp_rxtimer: 0xffff888074762400: rx timeout, send abort [ 234.026806][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888074762400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 234.281574][T12899] syzkaller0: entered promiscuous mode [ 234.281595][T12899] syzkaller0: entered allmulticast mode [ 234.437416][T12906] netlink: 'syz.5.2232': attribute type 1 has an invalid length. [ 234.612374][T12906] bond7: entered promiscuous mode [ 234.619518][T12906] 8021q: adding VLAN 0 to HW filter on device bond7 [ 234.731737][T12906] bond7: (slave bridge1): making interface the new active one [ 234.731756][T12906] bridge1: entered promiscuous mode [ 234.733130][T12906] bond7: (slave bridge1): Enslaving as an active interface with an up link [ 235.181861][T12954] netlink: 'syz.6.2249': attribute type 1 has an invalid length. [ 235.189599][T12954] netlink: 'syz.6.2249': attribute type 2 has an invalid length. [ 235.195308][T12954] netlink: 'syz.6.2249': attribute type 1 has an invalid length. [ 235.263113][T12954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.263923][T12956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.299253][T12965] bond1: (slave veth0_to_bond): Releasing backup interface [ 235.329579][T12965] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 235.406675][ T52] Bluetooth: hci7: command 0x0405 tx timeout [ 235.866336][T12989] GUP no longer grows the stack in syz.6.2257 (12989): 200000003000-20000000a000 (200000001000) [ 235.866367][T12989] CPU: 0 UID: 0 PID: 12989 Comm: syz.6.2257 Not tainted syzkaller #0 PREEMPT(full) [ 235.866387][T12989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 235.866398][T12989] Call Trace: [ 235.866405][T12989] [ 235.866413][T12989] dump_stack_lvl+0xe8/0x150 [ 235.866445][T12989] __get_user_pages+0x23b6/0x2750 [ 235.866478][T12989] ? lock_acquire+0x115/0x350 [ 235.866517][T12989] ? __gup_longterm_locked+0xc3b/0x15c0 [ 235.866552][T12989] __gup_longterm_locked+0xd52/0x15c0 [ 235.866583][T12989] ? lock_acquire+0x115/0x350 [ 235.866622][T12989] gup_fast_fallback+0x1d92/0x20e0 [ 235.866684][T12989] ? __pfx_gup_fast_fallback+0x10/0x10 [ 235.866715][T12989] ? lock_acquire+0x115/0x350 [ 235.866734][T12989] ? is_valid_gup_args+0x11f/0x200 [ 235.866764][T12989] ? get_user_pages_fast+0x4d/0xb0 [ 235.866795][T12989] __iov_iter_get_pages_alloc+0x378/0xa40 [ 235.866829][T12989] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 235.866856][T12989] iov_iter_get_pages2+0x5e/0xa0 [ 235.866889][T12989] __se_sys_vmsplice+0x7b5/0x1660 [ 235.866930][T12989] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 235.866951][T12989] ? __pfx_futex_wait+0x10/0x10 [ 235.867045][T12989] do_syscall_64+0x166/0x520 [ 235.867067][T12989] ? trace_irq_disable+0x3b/0x140 [ 235.867088][T12989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.867108][T12989] ? clear_bhb_loop+0x70/0xc0 [ 235.867133][T12989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.867152][T12989] RIP: 0033:0x7ffba599e559 [ 235.867170][T12989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.867186][T12989] RSP: 002b:00007ffba67bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 235.867207][T12989] RAX: ffffffffffffffda RBX: 00007ffba5c25fa0 RCX: 00007ffba599e559 [ 235.867222][T12989] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 235.867234][T12989] RBP: 00007ffba5a35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 235.867246][T12989] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 235.867258][T12989] R13: 00007ffba5c26038 R14: 00007ffba5c25fa0 R15: 00007ffe5e5cb8e8 [ 235.867291][T12989] [ 236.590267][T13030] __nla_validate_parse: 12 callbacks suppressed [ 236.590295][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2271'. [ 236.598719][T13020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2268'. [ 236.916653][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2279'. [ 237.231209][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2284'. [ 237.371844][T13074] batman_adv: batadv0: Adding interface: veth0 [ 237.371859][T13074] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.372892][T13074] batman_adv: batadv0: Interface activated: veth0 [ 237.431555][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.431574][T13073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.502426][T13073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.502445][T13073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.545552][T13079] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2288'. [ 237.607951][T13080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2286'. [ 237.607979][T13080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2286'. [ 237.674580][T13085] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2289'. [ 237.746346][T13098] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2291'. [ 237.746366][T13098] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2291'. [ 237.747575][T13073] batman_adv: batadv0: Interface deactivated: veth0 [ 237.747592][T13073] batman_adv: batadv0: Removing interface: veth0 [ 237.821559][T13102] netlink: 'syz.2.2290': attribute type 10 has an invalid length. [ 237.859900][T13077] ¾x9ÿ: renamed from bridge_slave_0 [ 238.155001][ T1156] net_ratelimit: 208 callbacks suppressed [ 238.155020][ T1156] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 238.155038][ T1156] bond6: (slave macvlan2): failed to get link speed/duplex [ 238.155064][ T1156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 238.155089][ T1156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 238.155112][ T1156] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 238.155134][ T1156] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 238.158977][T13123] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 238.264283][T12330] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 238.264319][T12330] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 238.264345][T12330] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 238.420926][T13134] tipc: Started in network mode [ 238.420951][T13134] tipc: Node identity ac14142f, cluster identity 4711 [ 238.426445][T13134] tipc: Enabled bearer , priority 10 [ 238.495322][T13139] syz_tun: left allmulticast mode [ 238.495418][T13139] bridge0: left allmulticast mode [ 238.857789][T13159] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 239.058159][T13167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.251387][T13179] netlink: 'syz.7.2323': attribute type 1 has an invalid length. [ 239.422664][T13191] IPVS: Unknown mcast interface: vcan0ý [ 239.434370][ T191] tipc: Node number set to 2886997039 [ 239.861133][T13214] tipc: Failed to obtain node identity [ 239.861165][T13214] tipc: Enabling of bearer rejected, failed to enable media [ 240.264915][T13241] geneve2: entered promiscuous mode [ 240.264934][T13241] geneve2: entered allmulticast mode [ 240.854630][T13253] pim6reg: entered allmulticast mode [ 241.141409][T13262] FAULT_INJECTION: forcing a failure. [ 241.141409][T13262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.141439][T13262] CPU: 1 UID: 0 PID: 13262 Comm: syz.4.2354 Not tainted syzkaller #0 PREEMPT(full) [ 241.141468][T13262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 241.141495][T13262] Call Trace: [ 241.141503][T13262] [ 241.141511][T13262] dump_stack_lvl+0xe8/0x150 [ 241.141542][T13262] should_fail_ex+0x410/0x560 [ 241.141573][T13262] _copy_from_user+0x2d/0xb0 [ 241.141602][T13262] ___sys_sendmsg+0x1c6/0x360 [ 241.141621][T13262] ? __lock_acquire+0x747/0x2de0 [ 241.141645][T13262] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.141700][T13262] ? __fget_files+0x2a/0x420 [ 241.141717][T13262] ? __fget_files+0x3a2/0x420 [ 241.141744][T13262] __x64_sys_sendmsg+0x1b1/0x290 [ 241.141768][T13262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.141810][T13262] do_syscall_64+0x166/0x520 [ 241.141831][T13262] ? trace_irq_disable+0x3b/0x140 [ 241.141851][T13262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.141870][T13262] ? clear_bhb_loop+0x70/0xc0 [ 241.141893][T13262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.141911][T13262] RIP: 0033:0x7f39e419e559 [ 241.141928][T13262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.141943][T13262] RSP: 002b:00007f39e50fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.141962][T13262] RAX: ffffffffffffffda RBX: 00007f39e4425fa0 RCX: 00007f39e419e559 [ 241.141975][T13262] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000005 [ 241.141987][T13262] RBP: 00007f39e50fa090 R08: 0000000000000000 R09: 0000000000000000 [ 241.141998][T13262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.142009][T13262] R13: 00007f39e4426038 R14: 00007f39e4425fa0 R15: 00007fff5e5eda98 [ 241.142041][T13262] [ 241.347371][T13275] syzkaller0: entered promiscuous mode [ 241.347391][T13275] syzkaller0: entered allmulticast mode [ 241.429904][T13283] bond0: invalid NS target :: specified for addition [ 241.429929][T13283] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 241.632784][T13289] 8021q: adding VLAN 0 to HW filter on device bond11 [ 241.711053][T13301] __nla_validate_parse: 17 callbacks suppressed [ 241.711070][T13301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2364'. [ 241.942451][T13312] xt_hashlimit: size too large, truncated to 1048576 [ 242.000343][T13315] netlink: 45349 bytes leftover after parsing attributes in process `syz.6.2370'. [ 242.000447][T13315] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 242.070865][T13315] netlink: 'syz.6.2370': attribute type 1 has an invalid length. [ 242.140195][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2372'. [ 242.140240][T13319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2372'. [ 242.266672][T13330] syzkaller0: entered promiscuous mode [ 242.266691][T13330] syzkaller0: entered allmulticast mode [ 242.422715][T13333] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2376'. [ 242.431063][T13333] syzkaller0: entered promiscuous mode [ 242.431081][T13333] syzkaller0: entered allmulticast mode [ 242.720683][T13347] 8021q: adding VLAN 0 to HW filter on device bond7 [ 242.830448][T13356] IPv6: NLM_F_CREATE should be specified when creating new route [ 242.915869][T13365] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2385'. [ 242.919384][T13365] FAULT_INJECTION: forcing a failure. [ 242.919384][T13365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.919410][T13365] CPU: 1 UID: 0 PID: 13365 Comm: syz.5.2385 Not tainted syzkaller #0 PREEMPT(full) [ 242.919431][T13365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 242.919441][T13365] Call Trace: [ 242.919448][T13365] [ 242.919456][T13365] dump_stack_lvl+0xe8/0x150 [ 242.919487][T13365] should_fail_ex+0x410/0x560 [ 242.919519][T13365] _copy_from_user+0x2d/0xb0 [ 242.919547][T13365] ___sys_recvmsg+0x173/0x5a0 [ 242.919576][T13365] ? __pfx____sys_recvmsg+0x10/0x10 [ 242.919602][T13365] ? lock_acquire+0x115/0x350 [ 242.919639][T13365] ? __fget_files+0x3a2/0x420 [ 242.919667][T13365] __x64_sys_recvmsg+0x1ae/0x290 [ 242.919690][T13365] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 242.919733][T13365] do_syscall_64+0x166/0x520 [ 242.919755][T13365] ? trace_irq_disable+0x3b/0x140 [ 242.919774][T13365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.919793][T13365] ? clear_bhb_loop+0x70/0xc0 [ 242.919817][T13365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.919835][T13365] RIP: 0033:0x7efd0e79e559 [ 242.919853][T13365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.919868][T13365] RSP: 002b:00007efd0f6ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 242.919888][T13365] RAX: ffffffffffffffda RBX: 00007efd0ea25fa0 RCX: 00007efd0e79e559 [ 242.919902][T13365] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 242.919914][T13365] RBP: 00007efd0f6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 242.919927][T13365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.919938][T13365] R13: 00007efd0ea26038 R14: 00007efd0ea25fa0 R15: 00007ffdd82564e8 [ 242.919969][T13365] [ 243.027939][T13370] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 243.166801][T12334] net_ratelimit: 229 callbacks suppressed [ 243.166817][T12334] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 243.167610][T12334] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 243.167640][T12334] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 243.167656][T12334] bond6: (slave macvlan2): failed to get link speed/duplex [ 243.167680][T12334] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 243.167704][T12334] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 243.172187][T13381] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2390'. [ 243.172207][T13381] openvswitch: netlink: Message has 4 unknown bytes. [ 243.177349][T13381] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2390'. [ 243.177367][T13381] openvswitch: netlink: Message has 4 unknown bytes. [ 243.180354][T13381] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2390'. [ 243.180371][T13381] openvswitch: netlink: Message has 4 unknown bytes. [ 243.180844][T13381] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2390'. [ 243.180860][T13381] openvswitch: netlink: Message has 4 unknown bytes. [ 243.528529][T13402] FAULT_INJECTION: forcing a failure. [ 243.528529][T13402] name failslab, interval 1, probability 0, space 0, times 0 [ 243.528560][T13402] CPU: 0 UID: 0 PID: 13402 Comm: syz.2.2399 Not tainted syzkaller #0 PREEMPT(full) [ 243.528580][T13402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 243.528590][T13402] Call Trace: [ 243.528598][T13402] [ 243.528605][T13402] dump_stack_lvl+0xe8/0x150 [ 243.528637][T13402] should_fail_ex+0x410/0x560 [ 243.528665][T13402] ? __alloc_skb+0x1db/0x7a0 [ 243.528691][T13402] should_failslab+0xa8/0x100 [ 243.528717][T13402] ? __alloc_skb+0x1db/0x7a0 [ 243.528741][T13402] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 243.528762][T13402] ? __alloc_skb+0x18d/0x7a0 [ 243.528797][T13402] ? __alloc_skb+0x1db/0x7a0 [ 243.528830][T13402] __alloc_skb+0x1db/0x7a0 [ 243.528861][T13402] netlink_sendmsg+0x5d4/0xb40 [ 243.528892][T13402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.528923][T13402] ? apparmor_socket_sendmsg+0x98/0x360 [ 243.528950][T13402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.528971][T13402] sock_sendmsg_nosec+0x13a/0x180 [ 243.528997][T13402] ____sys_sendmsg+0x54e/0x850 [ 243.529021][T13402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.529050][T13402] ? import_iovec+0x73/0xa0 [ 243.529079][T13402] ___sys_sendmsg+0x2a5/0x360 [ 243.529097][T13402] ? __lock_acquire+0x747/0x2de0 [ 243.529120][T13402] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.529175][T13402] ? __fget_files+0x2a/0x420 [ 243.529192][T13402] ? __fget_files+0x3a2/0x420 [ 243.529218][T13402] __x64_sys_sendmsg+0x1b1/0x290 [ 243.529242][T13402] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.529286][T13402] do_syscall_64+0x166/0x520 [ 243.529307][T13402] ? trace_irq_disable+0x3b/0x140 [ 243.529326][T13402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.529345][T13402] ? clear_bhb_loop+0x70/0xc0 [ 243.529367][T13402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.529385][T13402] RIP: 0033:0x7f931a99e559 [ 243.529403][T13402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.529418][T13402] RSP: 002b:00007f931b891028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.529437][T13402] RAX: ffffffffffffffda RBX: 00007f931ac25fa0 RCX: 00007f931a99e559 [ 243.529451][T13402] RDX: 0000000000000002 RSI: 0000200000000b80 RDI: 0000000000000003 [ 243.529462][T13402] RBP: 00007f931b891090 R08: 0000000000000000 R09: 0000000000000000 [ 243.529472][T13402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.529483][T13402] R13: 00007f931ac26038 R14: 00007f931ac25fa0 R15: 00007fffccc59c48 [ 243.529512][T13402] [ 244.176687][T13426] syz_tun: entered allmulticast mode [ 244.451352][T13444] FAULT_INJECTION: forcing a failure. [ 244.451352][T13444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.451384][T13444] CPU: 1 UID: 0 PID: 13444 Comm: syz.4.2410 Not tainted syzkaller #0 PREEMPT(full) [ 244.451405][T13444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 244.451415][T13444] Call Trace: [ 244.451422][T13444] [ 244.451430][T13444] dump_stack_lvl+0xe8/0x150 [ 244.451460][T13444] should_fail_ex+0x410/0x560 [ 244.451490][T13444] _copy_from_iter+0x1d3/0x1660 [ 244.451516][T13444] ? __alloc_skb+0x27a/0x7a0 [ 244.451545][T13444] ? __alloc_skb+0x27a/0x7a0 [ 244.451572][T13444] ? __alloc_skb+0x27a/0x7a0 [ 244.451598][T13444] ? __pfx__copy_from_iter+0x10/0x10 [ 244.451622][T13444] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 244.451642][T13444] ? __alloc_skb+0x27a/0x7a0 [ 244.451665][T13444] ? __alloc_skb+0x27a/0x7a0 [ 244.451694][T13444] ? netlink_sendmsg+0x650/0xb40 [ 244.451733][T13444] ? skb_put+0x112/0x210 [ 244.451752][T13444] netlink_sendmsg+0x6c0/0xb40 [ 244.451781][T13444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.451812][T13444] ? apparmor_socket_sendmsg+0x98/0x360 [ 244.451839][T13444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.451861][T13444] sock_sendmsg_nosec+0x13a/0x180 [ 244.451887][T13444] ____sys_sendmsg+0x54e/0x850 [ 244.451911][T13444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.451939][T13444] ? import_iovec+0x73/0xa0 [ 244.451968][T13444] ___sys_sendmsg+0x2a5/0x360 [ 244.451987][T13444] ? __lock_acquire+0x747/0x2de0 [ 244.452012][T13444] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.452071][T13444] ? __fget_files+0x2a/0x420 [ 244.452088][T13444] ? __fget_files+0x3a2/0x420 [ 244.452116][T13444] __x64_sys_sendmsg+0x1b1/0x290 [ 244.452138][T13444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.452180][T13444] do_syscall_64+0x166/0x520 [ 244.452200][T13444] ? trace_irq_disable+0x3b/0x140 [ 244.452218][T13444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.452237][T13444] ? clear_bhb_loop+0x70/0xc0 [ 244.452259][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.452276][T13444] RIP: 0033:0x7f39e419e559 [ 244.452293][T13444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.452308][T13444] RSP: 002b:00007f39e50fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.452327][T13444] RAX: ffffffffffffffda RBX: 00007f39e4425fa0 RCX: 00007f39e419e559 [ 244.452341][T13444] RDX: 0000000000000002 RSI: 0000200000000b80 RDI: 0000000000000003 [ 244.452352][T13444] RBP: 00007f39e50fa090 R08: 0000000000000000 R09: 0000000000000000 [ 244.452362][T13444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.452373][T13444] R13: 00007f39e4426038 R14: 00007f39e4425fa0 R15: 00007fff5e5eda98 [ 244.452403][T13444] [ 245.620247][T13480] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 245.638220][T13480] bond4 (unregistering): Released all slaves [ 245.736836][T13487] ovs-dp0: entered promiscuous mode [ 245.867533][T13499] FAULT_INJECTION: forcing a failure. [ 245.867533][T13499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.867564][T13499] CPU: 0 UID: 0 PID: 13499 Comm: syz.4.2425 Not tainted syzkaller #0 PREEMPT(full) [ 245.867583][T13499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 245.867593][T13499] Call Trace: [ 245.867600][T13499] [ 245.867607][T13499] dump_stack_lvl+0xe8/0x150 [ 245.867637][T13499] should_fail_ex+0x410/0x560 [ 245.867668][T13499] _copy_from_user+0x2d/0xb0 [ 245.867694][T13499] kstrtouint_from_user+0xd6/0x180 [ 245.867724][T13499] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 245.867756][T13499] ? lock_acquire+0x115/0x350 [ 245.867782][T13499] proc_fail_nth_write+0x8e/0x210 [ 245.867803][T13499] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 245.867832][T13499] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 245.867853][T13499] vfs_write+0x296/0xba0 [ 245.867881][T13499] ? __pfx_vfs_write+0x10/0x10 [ 245.867903][T13499] ? __fget_files+0x2a/0x420 [ 245.867924][T13499] ? __fget_files+0x3a2/0x420 [ 245.867939][T13499] ? __fget_files+0x2a/0x420 [ 245.867963][T13499] ksys_write+0x150/0x270 [ 245.867985][T13499] ? __pfx_ksys_write+0x10/0x10 [ 245.868018][T13499] do_syscall_64+0x166/0x520 [ 245.868038][T13499] ? trace_irq_disable+0x3b/0x140 [ 245.868057][T13499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.868076][T13499] ? clear_bhb_loop+0x70/0xc0 [ 245.868099][T13499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.868118][T13499] RIP: 0033:0x7f39e415ed8e [ 245.868143][T13499] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 245.868158][T13499] RSP: 002b:00007f39e5096fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.868178][T13499] RAX: ffffffffffffffda RBX: 00007f39e50976c0 RCX: 00007f39e415ed8e [ 245.868192][T13499] RDX: 0000000000000001 RSI: 00007f39e50970a0 RDI: 0000000000000007 [ 245.868203][T13499] RBP: 00007f39e5097090 R08: 0000000000000000 R09: 0000000000000000 [ 245.868215][T13499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.868226][T13499] R13: 00007f39e4426308 R14: 00007f39e4426270 R15: 00007fff5e5eda98 [ 245.868257][T13499] [ 246.218712][T13505] vlan2: entered promiscuous mode [ 246.218732][T13505] bridge0: entered promiscuous mode [ 246.218893][T13505] vlan2: entered allmulticast mode [ 246.218905][T13505] bridge0: entered allmulticast mode [ 246.363830][T13521] FAULT_INJECTION: forcing a failure. [ 246.363830][T13521] name failslab, interval 1, probability 0, space 0, times 0 [ 246.368799][T13521] CPU: 0 UID: 0 PID: 13521 Comm: syz.6.2435 Not tainted syzkaller #0 PREEMPT(full) [ 246.368825][T13521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 246.368836][T13521] Call Trace: [ 246.368843][T13521] [ 246.368851][T13521] dump_stack_lvl+0xe8/0x150 [ 246.368884][T13521] should_fail_ex+0x410/0x560 [ 246.368915][T13521] should_failslab+0xa8/0x100 [ 246.368944][T13521] __kmalloc_noprof+0xfe/0x720 [ 246.368966][T13521] ? bpf_test_init+0x9f/0x150 [ 246.368986][T13521] ? bpf_test_init+0x9f/0x150 [ 246.369014][T13521] bpf_test_init+0x9f/0x150 [ 246.369040][T13521] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 246.369080][T13521] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 246.369108][T13521] ? __fget_files+0x2a/0x420 [ 246.369130][T13521] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 246.369154][T13521] bpf_prog_test_run+0x2c5/0x340 [ 246.369183][T13521] __sys_bpf+0xa22/0xd90 [ 246.369214][T13521] ? __pfx___sys_bpf+0x10/0x10 [ 246.369247][T13521] ? __fget_files+0x2a/0x420 [ 246.369281][T13521] ? ksys_write+0x242/0x270 [ 246.369303][T13521] ? __pfx_ksys_write+0x10/0x10 [ 246.369326][T13521] __x64_sys_bpf+0xba/0xd0 [ 246.369348][T13521] do_syscall_64+0x166/0x520 [ 246.369367][T13521] ? trace_irq_disable+0x3b/0x140 [ 246.369386][T13521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.369405][T13521] ? clear_bhb_loop+0x70/0xc0 [ 246.369424][T13521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.369441][T13521] RIP: 0033:0x7ffba599e559 [ 246.369457][T13521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.369471][T13521] RSP: 002b:00007ffba67bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.369489][T13521] RAX: ffffffffffffffda RBX: 00007ffba5c25fa0 RCX: 00007ffba599e559 [ 246.369501][T13521] RDX: 0000000000000035 RSI: 00002000000003c0 RDI: 000000000000000a [ 246.369513][T13521] RBP: 00007ffba67bc090 R08: 0000000000000000 R09: 0000000000000000 [ 246.369523][T13521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.369533][T13521] R13: 00007ffba5c26038 R14: 00007ffba5c25fa0 R15: 00007ffe5e5cb8e8 [ 246.369564][T13521] [ 246.989853][T13550] __nla_validate_parse: 39 callbacks suppressed [ 246.989873][T13550] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2442'. [ 246.993002][T13553] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 247.122083][T13559] FAULT_INJECTION: forcing a failure. [ 247.122083][T13559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.122114][T13559] CPU: 1 UID: 0 PID: 13559 Comm: syz.6.2446 Not tainted syzkaller #0 PREEMPT(full) [ 247.122134][T13559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 247.122144][T13559] Call Trace: [ 247.122151][T13559] [ 247.122158][T13559] dump_stack_lvl+0xe8/0x150 [ 247.122189][T13559] should_fail_ex+0x410/0x560 [ 247.122219][T13559] _copy_from_user+0x2d/0xb0 [ 247.122249][T13559] kstrtouint_from_user+0xd6/0x180 [ 247.122276][T13559] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 247.122309][T13559] ? lock_acquire+0x115/0x350 [ 247.122334][T13559] proc_fail_nth_write+0x8e/0x210 [ 247.122357][T13559] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 247.122386][T13559] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 247.122407][T13559] vfs_write+0x296/0xba0 [ 247.122436][T13559] ? __pfx_vfs_write+0x10/0x10 [ 247.122457][T13559] ? __fget_files+0x2a/0x420 [ 247.122479][T13559] ? __fget_files+0x3a2/0x420 [ 247.122494][T13559] ? __fget_files+0x2a/0x420 [ 247.122519][T13559] ksys_write+0x150/0x270 [ 247.122540][T13559] ? __pfx_ksys_write+0x10/0x10 [ 247.122581][T13559] do_syscall_64+0x166/0x520 [ 247.122602][T13559] ? trace_irq_disable+0x3b/0x140 [ 247.122620][T13559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.122639][T13559] ? clear_bhb_loop+0x70/0xc0 [ 247.122660][T13559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.122677][T13559] RIP: 0033:0x7ffba595ed8e [ 247.122694][T13559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 247.122708][T13559] RSP: 002b:00007ffba67bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.122725][T13559] RAX: ffffffffffffffda RBX: 00007ffba67bc6c0 RCX: 00007ffba595ed8e [ 247.122732][T13556] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2445'. [ 247.122737][T13559] RDX: 0000000000000001 RSI: 00007ffba67bc0a0 RDI: 0000000000000004 [ 247.122748][T13559] RBP: 00007ffba67bc090 R08: 0000000000000000 R09: 0000000000000000 [ 247.122759][T13559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.122770][T13559] R13: 00007ffba5c26038 R14: 00007ffba5c25fa0 R15: 00007ffe5e5cb8e8 [ 247.122801][T13559] [ 247.360244][T13565] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2449'. [ 247.503555][T13572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2454'. [ 247.503588][T13572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2454'. [ 247.524288][T13574] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2454'. [ 247.923095][T13601] netlink: 'syz.4.2462': attribute type 1 has an invalid length. [ 248.020970][T13601] 8021q: adding VLAN 0 to HW filter on device bond8 [ 248.038672][T13604] bond6: (slave veth0_to_bond): Releasing backup interface [ 248.058630][T13604] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 248.149018][T13610] syz_tun: entered allmulticast mode [ 248.216918][T13614] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2467'. [ 248.238773][T13614] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 248.319323][T13617] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2468'. [ 248.319356][T13617] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2468'. [ 248.329492][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2469'. [ 248.514234][T12322] net_ratelimit: 288 callbacks suppressed [ 248.514254][T12322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.514285][T12322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.514311][T12322] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 248.514327][T12322] bond6: (slave macvlan2): failed to get link speed/duplex [ 248.514351][T12322] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 248.514373][T12322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.589249][T13637] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 248.625066][ T8138] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.625099][ T8138] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 248.625119][T12317] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 250.649947][T13673] netlink: 'syz.4.2484': attribute type 22 has an invalid length. [ 250.758666][T13673] netlink: 'syz.4.2484': attribute type 22 has an invalid length. [ 250.777286][T13677] FAULT_INJECTION: forcing a failure. [ 250.777286][T13677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.777314][T13677] CPU: 0 UID: 0 PID: 13677 Comm: syz.5.2485 Not tainted syzkaller #0 PREEMPT(full) [ 250.777334][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 250.777344][T13677] Call Trace: [ 250.777350][T13677] [ 250.777357][T13677] dump_stack_lvl+0xe8/0x150 [ 250.777388][T13677] should_fail_ex+0x410/0x560 [ 250.777415][T13677] _copy_from_user+0x2d/0xb0 [ 250.777442][T13677] do_sock_getsockopt+0x200/0x7e0 [ 250.777468][T13677] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 250.777502][T13677] ? __fget_files+0x3a2/0x420 [ 250.777517][T13677] ? __fget_files+0x2a/0x420 [ 250.777538][T13677] __x64_sys_getsockopt+0x1a4/0x240 [ 250.777565][T13677] do_syscall_64+0x166/0x520 [ 250.777584][T13677] ? trace_irq_disable+0x3b/0x140 [ 250.777602][T13677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.777619][T13677] ? clear_bhb_loop+0x70/0xc0 [ 250.777641][T13677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.777658][T13677] RIP: 0033:0x7efd0e79e559 [ 250.777674][T13677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.777687][T13677] RSP: 002b:00007efd0f6ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 250.777704][T13677] RAX: ffffffffffffffda RBX: 00007efd0ea25fa0 RCX: 00007efd0e79e559 [ 250.777717][T13677] RDX: 0000000000002717 RSI: 0000200000000114 RDI: 0000000000000003 [ 250.777728][T13677] RBP: 00007efd0f6ce090 R08: 00002000000005c0 R09: 0000000000000000 [ 250.777739][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.777750][T13677] R13: 00007efd0ea26038 R14: 00007efd0ea25fa0 R15: 00007ffdd82564e8 [ 250.777776][T13677] [ 251.044721][T13681] FAULT_INJECTION: forcing a failure. [ 251.044721][T13681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.044750][T13681] CPU: 0 UID: 0 PID: 13681 Comm: syz.7.2488 Not tainted syzkaller #0 PREEMPT(full) [ 251.044780][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 251.044791][T13681] Call Trace: [ 251.044798][T13681] [ 251.044806][T13681] dump_stack_lvl+0xe8/0x150 [ 251.044837][T13681] should_fail_ex+0x410/0x560 [ 251.044866][T13681] _copy_from_user+0x2d/0xb0 [ 251.044895][T13681] ___sys_sendmsg+0x1c6/0x360 [ 251.044914][T13681] ? __lock_acquire+0x747/0x2de0 [ 251.044940][T13681] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.044993][T13681] ? __fget_files+0x2a/0x420 [ 251.045010][T13681] ? __fget_files+0x3a2/0x420 [ 251.045035][T13681] __x64_sys_sendmsg+0x1b1/0x290 [ 251.045058][T13681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.045096][T13681] do_syscall_64+0x166/0x520 [ 251.045114][T13681] ? trace_irq_disable+0x3b/0x140 [ 251.045133][T13681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.045151][T13681] ? clear_bhb_loop+0x70/0xc0 [ 251.045173][T13681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.045191][T13681] RIP: 0033:0x7f9b8b39e559 [ 251.045208][T13681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.045222][T13681] RSP: 002b:00007f9b8c285028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.045241][T13681] RAX: ffffffffffffffda RBX: 00007f9b8b625fa0 RCX: 00007f9b8b39e559 [ 251.045255][T13681] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 251.045265][T13681] RBP: 00007f9b8c285090 R08: 0000000000000000 R09: 0000000000000000 [ 251.045276][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.045287][T13681] R13: 00007f9b8b626038 R14: 00007f9b8b625fa0 R15: 00007ffe8da209b8 [ 251.045318][T13681] [ 251.316761][T13692] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 251.316962][T13692] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 251.547125][T13705] atomic_op ffff8880510e89e0 conn xmit_atomic 0000000000000000 [ 251.711127][T13715] FAULT_INJECTION: forcing a failure. [ 251.711127][T13715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.711158][T13715] CPU: 0 UID: 0 PID: 13715 Comm: syz.7.2501 Not tainted syzkaller #0 PREEMPT(full) [ 251.711178][T13715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 251.711189][T13715] Call Trace: [ 251.711196][T13715] [ 251.711204][T13715] dump_stack_lvl+0xe8/0x150 [ 251.711244][T13715] should_fail_ex+0x410/0x560 [ 251.711275][T13715] _copy_from_user+0x2d/0xb0 [ 251.711303][T13715] __copy_msghdr+0x390/0x590 [ 251.711329][T13715] ___sys_sendmsg+0x213/0x360 [ 251.711348][T13715] ? __lock_acquire+0x747/0x2de0 [ 251.711373][T13715] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.711430][T13715] ? __fget_files+0x2a/0x420 [ 251.711447][T13715] ? __fget_files+0x3a2/0x420 [ 251.711473][T13715] __x64_sys_sendmsg+0x1b1/0x290 [ 251.711498][T13715] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.711538][T13715] do_syscall_64+0x166/0x520 [ 251.711560][T13715] ? trace_irq_disable+0x3b/0x140 [ 251.711580][T13715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.711599][T13715] ? clear_bhb_loop+0x70/0xc0 [ 251.711621][T13715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.711640][T13715] RIP: 0033:0x7f9b8b39e559 [ 251.711657][T13715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.711672][T13715] RSP: 002b:00007f9b8c285028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.711693][T13715] RAX: ffffffffffffffda RBX: 00007f9b8b625fa0 RCX: 00007f9b8b39e559 [ 251.711705][T13715] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 251.711719][T13715] RBP: 00007f9b8c285090 R08: 0000000000000000 R09: 0000000000000000 [ 251.711729][T13715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.711739][T13715] R13: 00007f9b8b626038 R14: 00007f9b8b625fa0 R15: 00007ffe8da209b8 [ 251.711769][T13715] [ 252.326911][T13733] FAULT_INJECTION: forcing a failure. [ 252.326911][T13733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.326942][T13733] CPU: 1 UID: 0 PID: 13733 Comm: syz.7.2505 Not tainted syzkaller #0 PREEMPT(full) [ 252.326962][T13733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 252.326973][T13733] Call Trace: [ 252.326980][T13733] [ 252.326989][T13733] dump_stack_lvl+0xe8/0x150 [ 252.327020][T13733] should_fail_ex+0x410/0x560 [ 252.327050][T13733] _copy_from_user+0x2d/0xb0 [ 252.327078][T13733] copy_from_sockptr+0x48/0x70 [ 252.327107][T13733] ip6_mroute_setsockopt+0x950/0xf80 [ 252.327144][T13733] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 252.327200][T13733] do_ipv6_setsockopt+0x361/0x3180 [ 252.327230][T13733] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 252.327248][T13733] ? begin_current_label_crit_section+0x2a3/0x830 [ 252.327279][T13733] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 252.327307][T13733] ? get_pid_task+0x20/0x1f0 [ 252.327333][T13733] ? aa_inet_opt_perm+0xae4/0xcf0 [ 252.327358][T13733] ? get_pid_task+0x20/0x1f0 [ 252.327374][T13733] ? get_pid_task+0x20/0x1f0 [ 252.327396][T13733] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 252.327438][T13733] ? ksys_write+0x1e6/0x270 [ 252.327468][T13733] ipv6_setsockopt+0x59/0x170 [ 252.327493][T13733] rawv6_setsockopt+0x276/0x5e0 [ 252.327516][T13733] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 252.327539][T13733] ? sock_common_setsockopt+0x36/0xc0 [ 252.327564][T13733] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 252.327590][T13733] do_sock_setsockopt+0x17c/0x1b0 [ 252.327613][T13733] __x64_sys_setsockopt+0x13d/0x1b0 [ 252.327637][T13733] do_syscall_64+0x166/0x520 [ 252.327658][T13733] ? trace_irq_disable+0x3b/0x140 [ 252.327678][T13733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.327696][T13733] ? clear_bhb_loop+0x70/0xc0 [ 252.327729][T13733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.327747][T13733] RIP: 0033:0x7f9b8b39e559 [ 252.327763][T13733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.327777][T13733] RSP: 002b:00007f9b8c285028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 252.327796][T13733] RAX: ffffffffffffffda RBX: 00007f9b8b625fa0 RCX: 00007f9b8b39e559 [ 252.327810][T13733] RDX: 00000000000000ca RSI: 0000000000000029 RDI: 0000000000000003 [ 252.327821][T13733] RBP: 00007f9b8c285090 R08: 000000000000000c R09: 0000000000000000 [ 252.327832][T13733] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 252.327843][T13733] R13: 00007f9b8b626038 R14: 00007f9b8b625fa0 R15: 00007ffe8da209b8 [ 252.327872][T13733] [ 252.426035][T13732] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!00000000000000000000010ÿÿÿ [ 252.490256][T13735] __nla_validate_parse: 10 callbacks suppressed [ 252.490271][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2504'. [ 252.692864][T13739] bond1: (slave bond_slave_0): Device is not our slave [ 252.692886][T13739] bond1: option active_slave: invalid value (bond_slave_0) [ 252.699244][T13739] bond1 (unregistering): Released all slaves [ 252.869907][T13751] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 252.880206][T13751] bond1 (unregistering): Released all slaves [ 252.903597][T13760] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2512'. [ 252.919046][T13757] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2512'. [ 252.928555][T13761] netlink: 'syz.4.2514': attribute type 1 has an invalid length. [ 252.933254][T13761] netlink: 'syz.4.2514': attribute type 1 has an invalid length. [ 252.998687][T13761] 8021q: adding VLAN 0 to HW filter on device bond9 [ 253.123395][T13768] bond2: option mode: unable to set because the bond device has slaves [ 253.140131][T13768] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 253.217407][T13770] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2516'. [ 253.217564][T13775] vlan2: entered promiscuous mode [ 253.217578][T13775] bridge0: entered promiscuous mode [ 253.414512][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2522'. [ 253.624155][T12326] net_ratelimit: 135 callbacks suppressed [ 253.624173][T12326] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 253.624241][T12326] bond6: (slave macvlan2): failed to get link speed/duplex [ 253.647906][T12317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.647939][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 253.655200][T12317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.673953][T12317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.744038][T12326] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 253.744061][T12326] bond6: (slave macvlan2): failed to get link speed/duplex [ 253.754231][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 253.754262][T12315] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 255.568163][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.568212][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.644255][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 258.664965][T12337] net_ratelimit: 260 callbacks suppressed [ 258.664986][T12337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.665017][T12337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.665061][T12326] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 258.665080][T12326] bond6: (slave macvlan2): failed to get link speed/duplex [ 258.689710][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 258.689750][T12317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.774234][T12315] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 258.774258][T12315] bond6: (slave macvlan2): failed to get link speed/duplex [ 258.774549][T12337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.774587][T12337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.674198][ T8138] net_ratelimit: 263 callbacks suppressed [ 263.674220][ T8138] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.705210][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 263.705638][ T8138] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.764224][T12337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.784266][ T8138] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 263.784290][ T8138] bond6: (slave macvlan2): failed to get link speed/duplex [ 263.784335][ T8138] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.814027][ T8138] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 263.814069][ T8138] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 263.874212][T12337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 265.804812][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.714346][T12337] net_ratelimit: 262 callbacks suppressed [ 268.714368][T12337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.754316][T12326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.784011][ T8138] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 268.795292][T12337] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 268.795314][T12337] bond6: (slave macvlan2): failed to get link speed/duplex [ 268.795370][T12337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.824559][ T8138] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.864315][T12317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.894110][T12326] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 268.905222][T12337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.744064][ T8141] net_ratelimit: 261 callbacks suppressed [ 273.744086][ T8141] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.755903][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 273.774815][T12315] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 273.774838][T12315] bond6: (slave macvlan2): failed to get link speed/duplex [ 273.784131][T12315] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.784221][T12315] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.854439][T12315] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.865134][T12326] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 273.884072][ T8141] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 273.884094][ T8141] bond6: (slave macvlan2): failed to get link speed/duplex [ 278.764682][T12315] net_ratelimit: 263 callbacks suppressed [ 278.764704][T12315] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 278.764725][T12315] bond6: (slave macvlan2): failed to get link speed/duplex [ 278.776983][ T8141] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.814053][T12315] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.845442][T12337] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 278.845485][T12337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.874204][T12322] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 278.874229][T12322] bond6: (slave macvlan2): failed to get link speed/duplex [ 278.887236][T12322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.924212][T12322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.774001][T12315] net_ratelimit: 263 callbacks suppressed [ 283.774045][T12315] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.824094][T12337] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 283.844538][T12315] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 283.844563][T12315] bond6: (slave macvlan2): failed to get link speed/duplex [ 283.844602][T12315] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.876035][T12326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.886008][T12337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.934292][T12326] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 283.954572][T12322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.954617][T12322] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 288.814121][T12315] net_ratelimit: 261 callbacks suppressed [ 288.814153][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 288.837277][T12337] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 288.837300][T12337] bond6: (slave macvlan2): failed to get link speed/duplex [ 288.837356][T12337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 288.837478][T12337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 288.874038][T12315] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 288.926521][T12337] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 288.944580][T12317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 288.944689][T12317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 288.944736][T12317] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 293.835129][ T8141] net_ratelimit: 264 callbacks suppressed [ 293.835157][ T8141] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 293.854004][T12317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 293.894167][ T8141] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 293.914103][T12315] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 293.914127][T12315] bond6: (slave macvlan2): failed to get link speed/duplex [ 293.914320][T12315] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 293.946207][T12315] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 293.965357][ T8141] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 294.004928][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 294.024292][T12317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.606790][ T5623] Bluetooth: hci6: command 0x0406 tx timeout [ 298.845502][T12315] net_ratelimit: 258 callbacks suppressed [ 298.845524][T12315] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.855628][T12326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.857110][T12322] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 298.857129][T12322] bond6: (slave macvlan2): failed to get link speed/duplex [ 298.890735][T12322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.894326][T12337] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 298.953997][T12326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.964918][T12326] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 298.964947][T12326] bond6: (slave macvlan2): failed to get link speed/duplex [ 298.964976][T12326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.864426][T12322] net_ratelimit: 263 callbacks suppressed [ 303.864447][T12322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.885707][T12322] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 303.885751][T12322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.944099][T12326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.944169][T12317] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 303.944188][T12317] bond6: (slave macvlan2): failed to get link speed/duplex [ 303.974752][T12326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.994901][T12317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.994942][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 304.054043][T12317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.884247][T12317] net_ratelimit: 262 callbacks suppressed [ 308.884271][T12317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.894016][T12317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.934358][T12337] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 308.934384][T12337] bond6: (slave macvlan2): failed to get link speed/duplex [ 308.934411][T12337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.974143][ T8141] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 309.007751][T12322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 309.008289][T12337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 309.044767][ T8141] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 309.044801][ T8141] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 309.324196][ T31] INFO: task syz.1.1289:9889 blocked for more than 143 seconds. [ 309.324220][ T31] Not tainted syzkaller #0 [ 309.324229][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 309.324238][ T31] task:syz.1.1289 state:D stack:24584 pid:9889 tgid:9888 ppid:5612 task_flags:0x400140 flags:0x00080002 [ 309.324285][ T31] Call Trace: [ 309.324291][ T31] [ 309.324303][ T31] __schedule+0x17db/0x58f0 [ 309.324356][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 309.324385][ T31] ? schedule+0x90/0x2b0 [ 309.324407][ T31] schedule+0x164/0x2b0 [ 309.324429][ T31] schedule_preempt_disabled+0x13/0x30 [ 309.324448][ T31] __mutex_lock+0x7c1/0x1550 [ 309.324474][ T31] ? __mutex_lock+0x5d4/0x1550 [ 309.324495][ T31] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 309.324522][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 309.324550][ T31] ? net_generic+0x1e/0x240 [ 309.324573][ T31] ? net_generic+0x1e/0x240 [ 309.324604][ T31] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 309.324638][ T31] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 309.324671][ T31] ? rcu_is_watching+0x16/0xb0 [ 309.324705][ T31] ? trace_kmalloc+0x2a/0xf0 [ 309.324730][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 309.324754][ T31] ? __nla_parse+0x40/0x60 [ 309.324776][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 309.324805][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 309.324840][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 309.324874][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 309.324914][ T31] ? bpf_lsm_capable+0x9/0x20 [ 309.324934][ T31] ? security_capable+0x7e/0x2c0 [ 309.324967][ T31] genl_rcv_msg+0x614/0x7a0 [ 309.325001][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 309.325027][ T31] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 309.325068][ T31] netlink_rcv_skb+0x226/0x4a0 [ 309.325088][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 309.325116][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.325155][ T31] ? down_read+0x2be/0x330 [ 309.325183][ T31] genl_rcv+0x28/0x40 [ 309.325207][ T31] netlink_unicast+0x8ef/0xa80 [ 309.325247][ T31] netlink_sendmsg+0x813/0xb40 [ 309.325280][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.325312][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 309.325340][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.325362][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 309.325390][ T31] ____sys_sendmsg+0x54e/0x850 [ 309.325512][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.325543][ T31] ? import_iovec+0x73/0xa0 [ 309.325575][ T31] ___sys_sendmsg+0x2a5/0x360 [ 309.325594][ T31] ? __lock_acquire+0x747/0x2de0 [ 309.325620][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.325644][ T31] ? futex_wait+0x2a2/0x390 [ 309.325703][ T31] ? __fget_files+0x2a/0x420 [ 309.325720][ T31] ? __fget_files+0x3a2/0x420 [ 309.325747][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 309.325768][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 309.325793][ T31] do_syscall_64+0x166/0x520 [ 309.325805][ T31] ? trace_irq_disable+0x3b/0x140 [ 309.325816][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.325827][ T31] ? clear_bhb_loop+0x70/0xc0 [ 309.325839][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.325850][ T31] RIP: 0033:0x7f283df9e559 [ 309.325861][ T31] RSP: 002b:00007f283ef35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.325873][ T31] RAX: ffffffffffffffda RBX: 00007f283e225fa0 RCX: 00007f283df9e559 [ 309.325880][ T31] RDX: 0000000004008090 RSI: 0000200000000400 RDI: 0000000000000004 [ 309.325887][ T31] RBP: 00007f283e035ad8 R08: 0000000000000000 R09: 0000000000000000 [ 309.325894][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.325900][ T31] R13: 00007f283e226038 R14: 00007f283e225fa0 R15: 00007fffcb843838 [ 309.325917][ T31] [ 309.325950][ T31] [ 309.325950][ T31] Showing all locks held in the system: [ 309.325957][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 309.325965][ T31] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 309.326012][ T31] locks held by getty/5370: 2, on CPU#0: [ 309.326019][ T31] #0: ffff888036f110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 309.326045][ T31] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 309.326081][ T31] locks held by syz.0.634/7749: 2, on CPU#0: [ 309.326088][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 309.326114][ T31] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 309.326146][ T31] locks held by syz.1.1289/9889: 2, on CPU#1: [ 309.326153][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 309.326179][ T31] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 309.326209][ T31] locks held by syz.3.1513/10547: 2, on CPU#1: [ 309.326215][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 309.326241][ T31] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 309.326270][ T31] locks held by syz.2.2405/13428: 2, on CPU#1: [ 309.326276][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 309.326302][ T31] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 309.326329][ T31] [ 309.326332][ T31] ============================================= [ 309.326332][ T31] [ 309.326341][ T31] NMI backtrace for cpu 0 [ 309.326349][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 309.326360][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 309.326366][ T31] Call Trace: [ 309.326370][ T31] [ 309.326374][ T31] dump_stack_lvl+0xe8/0x150 [ 309.326389][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 309.326404][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 309.326421][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 309.326437][ T31] sys_info+0x135/0x170 [ 309.326450][ T31] watchdog+0xfd7/0x1030 [ 309.326465][ T31] ? watchdog+0x1c7/0x1030 [ 309.326478][ T31] kthread+0x38b/0x480 [ 309.326489][ T31] ? __pfx_watchdog+0x10/0x10 [ 309.326498][ T31] ? __pfx_kthread+0x10/0x10 [ 309.326508][ T31] ret_from_fork+0x514/0xb70 [ 309.326520][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 309.326530][ T31] ? __switch_to+0xc89/0x1420 [ 309.326544][ T31] ? __pfx_kthread+0x10/0x10 [ 309.326555][ T31] ret_from_fork_asm+0x1a/0x30 [ 309.326571][ T31] [ 309.326575][ T31] Sending NMI from CPU 0 to CPUs 1: [ 309.326610][ C1] NMI backtrace for cpu 1 [ 309.326623][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 309.326644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 309.326655][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 309.326680][ C1] Code: fb 8a 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 b5 20 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 309.326696][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000246 [ 309.326712][ C1] RAX: 00000000000ec68b RBX: ffffffff819bed20 RCX: 8000000000000001 [ 309.326727][ C1] RDX: 0000000000000001 RSI: ffffffff8e469cbf RDI: ffffffff8c6ddb80 [ 309.326740][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8533a1b R09: 1ffff110170a6743 [ 309.326756][ C1] R10: dffffc0000000000 R11: ffffed10170a6744 R12: 0000000000000000 [ 309.326770][ C1] R13: 1ffff11003ed1bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 309.326785][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 309.326801][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.326815][ C1] CR2: 00007f63a4c4c794 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 309.326832][ C1] Call Trace: [ 309.326839][ C1] [ 309.326846][ C1] default_idle+0x9/0x20 [ 309.326870][ C1] default_idle_call+0x72/0xb0 [ 309.326894][ C1] do_idle+0x2e0/0x540 [ 309.326915][ C1] ? __pfx_do_idle+0x10/0x10 [ 309.326938][ C1] cpu_startup_entry+0x43/0x60 [ 309.326958][ C1] start_secondary+0x101/0x110 [ 309.326987][ C1] common_startup_64+0x13e/0x157 [ 309.327021][ C1] [ 309.327600][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 310.119441][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 310.128535][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 310.138576][ T31] Call Trace: [ 310.141840][ T31] [ 310.144757][ T31] vpanic+0x56d/0xa60 [ 310.148737][ T31] ? __pfx___schedule+0x10/0x10 [ 310.153573][ T31] ? __pfx_vpanic+0x10/0x10 [ 310.158075][ T31] panic+0xc5/0xd0 [ 310.161786][ T31] ? __pfx_panic+0x10/0x10 [ 310.166193][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 310.171636][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 310.176996][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 310.183143][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 310.189293][ T31] watchdog+0x1030/0x1030 [ 310.193621][ T31] ? watchdog+0x1c7/0x1030 [ 310.198039][ T31] kthread+0x38b/0x480 [ 310.202096][ T31] ? __pfx_watchdog+0x10/0x10 [ 310.206757][ T31] ? __pfx_kthread+0x10/0x10 [ 310.211333][ T31] ret_from_fork+0x514/0xb70 [ 310.215909][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 310.221007][ T31] ? __switch_to+0xc89/0x1420 [ 310.225675][ T31] ? __pfx_kthread+0x10/0x10 [ 310.230255][ T31] ret_from_fork_asm+0x1a/0x30 [ 310.235015][ T31] [ 310.238283][ T31] Kernel Offset: disabled [ 310.242597][ T31] Rebooting in 86400 seconds..