last executing test programs: 6.937928737s ago: executing program 4 (id=7935): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) unshare(0x24020400) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x14, 0x16, 0xa01, 0x0, 0x1, {0x2}}, 0x14}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000004240012800b0001006272696467650000140002800800050001200000080001"], 0x104}}, 0x0) 4.37177291s ago: executing program 4 (id=7960): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000a000000dd0100000000000063010400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@deltaction={0x42, 0x31, 0x101, 0x0, 0x20000000, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18, 0x20000001}, 0x20008000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r6 = socket(0x1e, 0x4, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) connect$tipc(r6, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x4}}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r8 = accept$alg(r7, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="024068a4e7679ffdbe27d632768df5", 0xf}, {&(0x7f0000000300)="86fe", 0x2}], 0x2, 0x0, 0x0, 0x34044005}, 0x20044151) recvmmsg(r8, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1}, 0x7fb}], 0x1, 0x40000160, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000240)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r9, 0x10, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3.170140925s ago: executing program 4 (id=7975): bpf$PROG_LOAD(0x5, 0x0, 0xc0aee85ef48427bf) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt(r0, 0x0, 0x6, 0x0, 0x0) unshare(0x24020400) socket$tipc(0x1e, 0x2, 0x0) 3.049300362s ago: executing program 4 (id=7977): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, @dev={0xfe, 0x80, '\x00', 0x13}, @mcast1={0xff, 0x5}, 0x200004, 0x5, 0x6, 0x500, 0xfc8, 0x20c200a3, r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffa}, 0x1c) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500005c00660000002f9078ac1e0001e0000001000086dd0048907803000000029a9598e5be2a2129eca8e913620485f399a5b101e20c84f5335e76ca45330a2f58"], 0x6e) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'pim6reg0\x00', {}, {}, 0x6, 0x1, 0x9}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'ipvlan0\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x6, 0x4, 0x3, 0x2], 0x2, 0x1}, {0xffffffffffffffff, [0x5, 0x6, 0x6, 0x6, 0x4, 0x1], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000040)={'veth1_vlan\x00', @local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0xde, 0x0, 0x4, [0x0, 0x5, 0x4, 0x7, 0x0, 0x0, 0x1, 0xbec2]}}) r7 = socket(0x2, 0x2a548209099e17a1, 0x3) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000140)={0x6, [0x100, 0x9, 0x3baa, 0x8, 0x364, 0x9]}, 0x10) 2.584416394s ago: executing program 4 (id=7980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000002500090126bd7008fcffffff020000000c003d80080027004a010100080003004700000010003e80f7"], 0x38}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6362, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffff36, 0x0, 0x10, 0x209, 0x7, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000180)="bad330fbc9b554000400004fcdf6", 0xe, 0x2000c005, &(0x7f00000001c0)={0x11, 0x1, r4, 0x1, 0xd8, 0x6, @local}, 0x14) 2.14245355s ago: executing program 4 (id=7987): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@generic={0x5, 0x0, 0xe, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @jmp={0x5, 0x0, 0x8, 0xf, 0x3, 0xfffffffffffffff4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x16, &(0x7f00000000c0)=""/22, 0x41100, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xc, 0xb8, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x2, 0x5, 0x10, 0x8}, {0x0, 0x2, 0xb, 0x1}, {0x1, 0x2, 0xe, 0xa}, {0x5, 0x2, 0xd, 0x6}, {0x4, 0x3, 0x2, 0xb}, {0x0, 0x2, 0x1, 0xa}], 0x10, 0x9}, 0x94) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map, 0x11, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = socket$l2tp(0x2, 0x2, 0x73) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@fallback=r7, r4, 0x32, 0x12, r5, @void, @value=r8, @void, @void, r6}, 0x20) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a8008"], 0x44}}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r11, 0x110, 0x4, &(0x7f0000000640)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@random="71f2db7bcfd3", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, '\x00', 0x8, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x4, 0x1}}}}}}, 0x0) 2.114226872s ago: executing program 2 (id=7988): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001a40)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}], 0x6, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x4e) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x804, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x811) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002840)={'syztnl2\x00', &(0x7f00000027c0)={'ip6gre0\x00', 0x0, 0x29, 0x80, 0x8, 0x100000, 0x50, @private2={0xfc, 0x2, '\x00', 0x47}, @remote, 0x7, 0x8000, 0x5, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002880)) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000440)="330312001200140000007ef52f555f2a0c09000000fd810000f786dd3baa4b1f0f852b4632f4", 0x26, 0x3674842c2925b8c7, &(0x7f00000000c0)={0x11, 0x0, r10, 0x1, 0x62, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000028c0)={'batadv_slave_0\x00'}) getsockopt$inet_mreqn(r1, 0x0, 0x4, &(0x7f0000002900)={@private, @multicast2}, &(0x7f0000002940)=0xc) getsockname$packet(r1, &(0x7f0000001480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001600)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000002b80)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002b40)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0xe8dd, @dev, 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}, 0x4) getpeername$inet(0xffffffffffffffff, &(0x7f0000001400)={0x2, 0x0, @remote}, &(0x7f0000001440)=0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) 1.970559103s ago: executing program 1 (id=7990): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/207, 0xcf}, {&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000001cc0)=""/211, 0xd3}], 0x3}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001dc0)=""/194, 0xc2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000b40)=""/57, 0x39}, {0x0}, {&(0x7f0000005940)=""/4083, 0xff3}], 0x3}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f00000032c0)=""/36, 0x24}, {&(0x7f0000003340)=""/206, 0xce}, {&(0x7f00000034c0)=""/110, 0x6e}], 0x3}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a80)=""/234, 0xea}], 0x1}}], 0x5, 0x400123a0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x5) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async, rerun: 32) ioctl$int_in(r6, 0x5452, 0x0) (rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) syz_emit_ethernet(0x3b6, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmmsg(r4, 0x0, 0x0, 0x9200000000000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) close(0x3) 1.86355444s ago: executing program 3 (id=7992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c010000100063d10000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) (async, rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000340)) (async) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}, 0x1, 0x0, 0x0, 0x24040040}, 0x4000080) (async) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4801) 1.755166764s ago: executing program 1 (id=7993): r0 = socket$netlink(0x10, 0x3, 0x0) shutdown(r0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000020000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000002e000000000000000000000000ffe000008"], 0x38}}, 0x2000000) 1.602651006s ago: executing program 0 (id=7994): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x42fe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0x9c}}, 0x0) 1.572236418s ago: executing program 1 (id=7995): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x42fe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0x9c}}, 0x0) 1.55707658s ago: executing program 3 (id=7996): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10980002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4820}, 0x20008840) 1.461114532s ago: executing program 2 (id=7997): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}, {&(0x7f0000000100)="0f8387efd92d042c43d001c909932d9da7a596e186639a4f247efae949fcbd84abf1f3d01f99aa2d05ef657f35fa45375bf74a7c3e4c9b9bb26920a810437d974cc5b0b877f1323ed51bb2d1c8d9e0f1df269bbbe603be6b964865231910b4fa1ee87319c3b3f69586bdc8cc263f7ea7dea1f0741ac79b0b9a7162bc6a1a4dea25700cf3024a12bb9faf49c72c2798f4b1d1f436b91e969dd0a6507757d294390528e8e6641762284ae9447f71f1c9", 0xaf}, {&(0x7f00000001c0)="73475caef6ad96bdd47671db14844cb61707a93ea1475eb165e999f23e68f10d1998149419d3ecb60c079a265a413ac72780fbd158b38f51b2fdfa9bbd44c0cfd99ed3efdd8e5b106a9e7a339e3dbccb33c7032d63b9bfd39fe7a6fa6c4901f6616066dfde6b26e311f16bcfb0fd8ffb2cef61604c7a60e6a160816ec1785a70fcbaaa96b830916e56117bb5b40c3aa6d030d592efd342e3bb0ac220542c3adf6a5848aa7313260cf0151e2435288b38ec7096af3597e5aa71e3a3f0d2bba119519e1208c17fc0ea7e3eed2c2021c4034c08146b61b054688eefb3", 0xdb}, {&(0x7f0000000780)="ef69fe165554cfee0158df479673f46149088d248001f6b8c5c0d325ca96822557cf6ea24c56df73c0c9e6b280f632ed0744112a5c00507f264e0ba8311304e180697339813c98ff7bfb2b65da85b46dd183fe64b66ccb4fde072fc2c8817f45ad1aef2df52ae6c64a58e7bed5d70d8cf7476b73202053977f8d6073d2630572569129ea7c510d2163d3135222974c810d1f75761a022eb6fc42dbdb14a91fbc7556e573667809032327db2e2ab06a86630bb0af082ef541c8b92a5393e65913cdaad26a14f9d74c13a627359a9bcf64afc2ce44864cd6b6e427d5faa94bc2dcce221972d331ff5915e093bbe061747ead94e97137bc36c76f2569b33932647c180e808b55b006131975109e3331257050a02176088793a509b42aa7217664d387e4c373273e6d8c002ae3ed357e91a00ecbe8315542eb653089960cf1ff9e108ef7b82cf2f80ceaf1890b76c27ffe29528c5d768394f837aec5c2588d7279653ec5bab8824c099bf62e7e87955cbb856d95015345585330af8ed859af9ead18686b8ec82217cde9555404d24fe6e752296e98d2281d996cd3c8bdac4461003e8f27b78a0a34d51b6c084a75016eea59839dd7e145bf2c9955d525d5c9e8f42a563da9849fe5bd51523258a486322316de0072d69778b39620b28ecd2f06e5d15a1122352364b8fd9af51840c95a4951d8fa127bd220ac5f40b7401529a2dacfefa94e9307f0ecc735c537e568ed3f9e22e93f561e458348f7d57fd3bf875e5f4fbbf869217c9bb9b2faca48cc579ef00b73555a235cd65236720d87de083a32b96069fb3a17c2ac4faec7843912216314db00cd9753a860537f79bf04e50aed9251a3b3ca5382fa908e0d58cc81d3c26ecbea3aba7804cf5bca53481e17821254dc384ea924cb14fa95415950e28cb55c7a95ebc87296f43861fd35e653c867bc9da71a0fc11c1467fe2e9732f9ced2c28d8b6ef6d684b4229ccb12f780b3987473cacc0c2b8576f13c94fbacd675ec72c1b1caa5f37d3ddfb2a62a078ba47aa708ebef27a59a166a3305b1657c88f3f0cf883d37521bb43f75d02ceae916bea8be6e78f4db24cf871be56ac594283ddb9f5957c2fd31b5815f18cbcbc2000c49f553544ff59197ef1f0a196f8eeb0d221eff7eb6f8337fe187f473948e336c1325e6298c22b6eb32ca2eeee95286e8c7a3d1a1b770de31d2b86200b79d8f3a729467567e9e67c2d6641eacf029555b8db3c8ab3a5df98caebb362ece30545ba7323f1279270405f93eb789c7afb890dd3d0e8d919589fc9d91a23358eef21bac15a687e3d45d877e43d7bfb5e57d1bf319132bae07f9cbda2957bb09ab5f0c977c450eba00717ae2a023616eb205212e75c70f245f5c3505c996439a5aefdd57008ad3e173ddd292e385f511eedecee840da130cc0116ddf27e04a1265bb181aa85993710d6d87bd8aebd29ad4439a5b7fa0b338207579a5acf0af53babf7f7a8524f83c804e83e7d9039efdefd8df0dbcccebcc038cb2497eed3a205560461f445322e36ef5cd75fac8becddddf0c6725a1b8493881f6a373df5890c32275921536d991a43813f7099dcaeef63cb223b1ea859c02e65e985538dd344e89a516861dea27d617ab86790302856d2160cffc8d626f4f793b7807c5959101e271f0473848a45342d9ab6515db46795106f7ade33eda8c35b007f702dca4bfd2106d96cddd7e30028a59e782233cdd6ecdd882b6ff86bfcfcc4436e94178f1c55afd66c47133f07456cb4622e625260f4c57eceb5245786715338f196c48d9569a6b8f5ae9d529d5786c0ebf1243e1377da5a5165069f5c29024899ce2524e6cb70e264cacdebd9766b639a89d86c8a631412b4fc9ecb9be2e368e030b2aa2697fe7f8abf4906619f6e54e2f52b7a9485116a8828b75fe2335434526b2a7e49c88cbd59e95946d08081189dea5ecb900fe15eb6cf9d7c259b9730fd4698cef0285a776053a7b2e99d67da36fa76c205cabc31504d3e35b56f8327bec9890b9da3586b5251984253bac05a7f5aee818eaa914c2e8efb9838414920d66cc78d5b4c39b5e0461dc414f0b1426a4f305fa1a60c33642083b78bcb0458f1650549139160018942f278bc5c90bfcbfb0f13081a3970bf35506bded11e86d7a7bd41841bc61fe74ce27a300e5590b4fce51c6f54ab47eba08f1cef5b0a2c3c9c9bea3edcff9ebb4d151da6fa43048ea0b9558709a2dd536710c3af29c304c7d42f776a6fe31cbff313cc98c5011bb8314f9087052c0c20cb8b4a2d4f91ec59842b872c162f9703bf399e386e1c02e17c187ea7ff8076b88d6b509e7adb50238315fac387b833ae4a9792646419277aed15865ce0f427462d23d07e0e2546ade90fdcd667cf01738e741d829cbf2fb39ba7570c6415a276d6f52061cde1fe4ff85720b8e7cbe4b9c7a94f2967b1d30d754c3b587d77586e4a064c3a0e7614c04d8428f9f31e6e1206ade5223432949919cbe76f208138d7b047fa1c63ed0d19151b2d3a272ead05498a849969877fd49c0f5261f386a453d4f5b5d5307dd5ce7f48d23d663e1815c3939f3584e9824e706a72d71c652b0eb3a9120a7b4db1a8a63fd5ab26d01f14669618091bee35333a26906c2feeb1d1e45a9a4debfe02a27ccee50a3dbe21aabe1e28a1a4007ded7dc23f0f0670810c0a4e85b73aa6a5d116a10f4a28d1e531867944d709ee65d9fbffa05dd79a7d304d06338547ccf9682d973c2e5b607ed68f23957fec53184bd9539451e7c2472a3aee6650e6c1119aee09f12f89116f9bd02dd5a0e2e67fe8aec3e7209a4672b45733dedab0a8bf1996443c53b2f4e7bc160cefd9a1d8bd1f470f89e3a6346ebb403c5354a56be16e1225698ab78bd38a7ff2aba4dcce5c68079699c7cb735d3c00e1b2d5d29a5ddcac296a9eabb976ea71a90aa69682e814fedeea8849999238997b1f6a49edeae753b98e04371dfe7e012c656e9b2b09bca7b937ffe4a79f4464d274e92792b5dcf07bbaac324fd5feb45e8a98a37ca2ff87892e49a575a9d239db0d73abd04d0a7967f11c0ea53bce1117f5800a4f35569a6c2808fcf6355c424a286e9a0eb63a09735a0040f44a6044199ef88653853aa7ce2e315a57813a61c940d501c8acac77608fba818ec60653c916c46cf9b29db36cb1e0afffc9fd0730cc407c431a02fe99877ee8ddf4cd5bf9a832e3e813ac2f2c912d47da3b04dff68aee0ef886961f13e5e1b2b7b7fd3f6dcee013d52f7d157921cd906a02ba8f90646986db0e44bf285f8193b02d14d5400b2a87a597c328d771d815f417c0f0bde3192cbb43259917c8eda6b7bb98e68ead539cee7704b33b18be856ff5aeb5fb38d95ba8442ec7d4f36f1e91bce8def96bee60977741ec42edae32d693aae47a33cb16793b223869c68477cd8b7d75c910926d3e2ebd74ec3f0d8139a3ef77332260ddbbe7db8660175ee91c0a9be26a53345ccf41e06099ef89eef2c62ecade578ae69905f2099cc85bff8bf24f588a7af4e58fa62a7ea67f862b128ad044e980417b02cac93eb2b6dac2953140764c07c63ee21d1602aef76f09560e31c38f7ee00fed4031436b4aec8dc6a0ba387576674127346ff9b375cdb409d1e2db95beb5b125600d870698aadf0ff5d2e85531475006b3bd18a658e9c806748458b42abbc346cf2e17553b24dcfda03dcde09784f1e9ca9a35230b7f221562fbd549d352bf7e5c992a1cc5d04a68fa65a151901597a8004bc561acced26bddbdca81cf3e78be64137b56e18957a9b11553ff10ca4dfe8e3a0122f2102e09f624e895335a704815727702e0762b7fa7a51beca1cd9bd7689f94ce5ffc0688507f6e67537ad702ac326c1b3611d9b4e18a8d45670af799988d8b27d67dd1a95e3c1a55fe26c5228a2f826fc27e2b56e0abf84a798a90a069553566cbb3d0f7e1839a9eba91d4e52c26896caf386353c6524b527805438517f7ff61aca5441f010283895a783ffdc3abc0796e074c8a0035bbe25a1baf73c3137a48f748aa990cfd13a4a5bd8a6a09b256902531c7bcc3c07df0e70ea3d6e2fe5ab88282ff0802803448ce967d787fe9be1b14be26da029259a429e727defb62025bda663a4d1389f605cb16f0a5eccf7414e3307f0f80b30dc5ac56e400819cfaed3ef78d7f7ab1c337084d7581242741da1098c7d9a2eca395e8c048f75cd8bd9fb175d6111e5d9054b5fd65e0063074982d7e9db3613f68ca45c4124e54988549c978e87d6fd5f4b1008d7432cbd0f751bc4e3b5d16d4053ae85b54f3e00f0bc17d53a7df4667df2aab4746788befb54cc5a4cfeb93d3fdedd3076116c58cb068e69e2b29828120a2ed6e9e49871184c7cdac21366e598d0e7e3ff7e6183252300f8919c75a551f3c33c52e6a3d01d62123c9eddbe973391b6ad49fa7701c514e0f3e87c5fe975fecd0f6ebf408365995a51049afc23b05aab01fcdb1e8799d23d8c8c808bcee281859eb1c97ec7278aaf6b96620200bdf275d1b2db452f575cd0ebb46f383d96728817f9da33ea8e226020bf52dbd38925abbfa27402b594a5d5932be2ad5782686e8983e958086f5736ffbded076bfbf307a4d95762bcb921156ffea6b712bb13808ce828661cfef66d32122a982b3c5158b4e7c026cccf3f961ea5831820f69389568a37a665701fc37a8c35f74624470e8472eaf1810ae1548dc3d205af24b4168ba1a1d5931a7f67ac0531cb41fc697bdd50826d712496b359f458f6288bf8b2543628215aaa224be3ae00a73429f98c6c47587cf626891d4f4c1df5f7411e3ad3fb9bbcdf979008662825e2839f9c7e2147c03ec0798064ae92f5aa255b45022f00d815da8e30b3b2542c83e78d08224095edfbb56bb7ff39152732d33a084e4e7752776a9959afec6680ac3f1ca5e37254680a1895174a8f113f7bde18160f12972a729d9745f1b801cb0cd3f2c506e00772a0792d2dfd99a48f25a6cb57a577ae38235afd07541d5ff6b1e8ee16d8efccf14135cbd1e5e50a09d5b45eadd62f0dfa029bea7149229c3fb2e259541f8de6ff05323e6b3721db9d1ad14c6fa6e5e2724df8ca8cb83d68f9e5fc3cc91157af86eb5de7b616f533dc2e2a8d0d7152217c3f7de6405a970fc6c5377b3a7e68a375291217c2f78560a2662426d4ad00d4cf16774bf3e46a4d055b34d61f4eb1e568f488e626faeb18c14df48ecd736806e032570cf65a26c1f8da43f5432902ae625c3bfd8e29454fc9d2d5da5044752739bd18187df39e17d3bf6664f1b59748ef533c7f7a4c9869c56a213eeab4523295eb6fb2ef684f290e622b38c4170bedb5b10c70d5d27d388d99ef557863b7aa853ac804dc9894fca68fe39940285752f3687ab6cef2098c9734485a772dd1c900dbd0572bf2a438e5dd5eda0a6d78a30faf9741bf0574054a97344ac7dea3773e07748a756af40fe30915c55314803c452f071ae0fcb6e4200ca10fbd55f97f15a3e95354e8281fcb086b7ce5c2591348490fbc7c5e001b27e7bbca049108a04ada9931da3c83bb58e98a6c35581febc65121589f80a73c53b57fe9ecaaef53bafb0e074dd2001de3024a5e09abc3ea735156edc0504f7eb820663ca8975f2bcfbc075e4972d745f6fefcce66bd8ccda330e4a135cd40bb0ccb01849fc4b13305cfebcd87e075bd4b4909bebc0cfc12705665ef169dfb44d433be713bf317e40390403c238726aabc7427f777b8f9a5a53aa67f0316adbb2e7acaebe78ea0aaca5e01d466ba598a39", 0x1000}], 0x4}, 0x0) 1.446251613s ago: executing program 3 (id=7998): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) (async) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x1b, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0xdf6, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r4, 0x0, 0x0, 0x0, 0x10, 0x3c8}, 0x94) 1.423294652s ago: executing program 0 (id=7999): openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 1.421737023s ago: executing program 2 (id=8000): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000002500"/20], 0x14}}, 0x40040) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = epoll_create(0x400) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000500)={0x40000000}) r5 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) ppoll(&(0x7f00000000c0)=[{r5, 0x8004}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02008dffffff"}) r7 = socket$inet6(0xa, 0x802, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400d3d0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) recvmmsg(r7, &(0x7f0000001d40)=[{{&(0x7f00000002c0)=@sco={0x1f, @none}, 0x0, &(0x7f0000000540)}, 0xa7}, {{&(0x7f0000000740)=@l2tp6, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/25}], 0x0, &(0x7f0000000800)=""/130}, 0x400}, {{&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/229}, {&(0x7f0000000a40)=""/16}, {&(0x7f00000001c0)=""/9}, {&(0x7f0000000ac0)=""/45}, {&(0x7f0000001b80)=""/118}, {&(0x7f0000001c00)=""/143}], 0x0, &(0x7f0000000b00)=""/29}, 0x4}], 0x1, 0x2006, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000001840), 0x3b, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x4, 0xfffffe7d) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.388979288s ago: executing program 1 (id=8001): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'bridge0\x00', 0x8000}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="c23abb4da4", 0x5}], 0x1, 0x3) close(r2) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) accept$phonet_pipe(r2, 0x0, &(0x7f0000000080)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) write$tun(r0, &(0x7f0000000040)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @empty, @multicast2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c) 1.324022425s ago: executing program 3 (id=8002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1e, 0x0, 0x5, 0xef, 0x4}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0x3, 0x5, 0x2}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1}, 0x28) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x6}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffff8, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x4, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe5}}, [@TCA_RATE={0x6, 0x5, {0xe0, 0xf0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044060}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000180)=0x7, &(0x7f0000000280)=0x1) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.321666248s ago: executing program 0 (id=8003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000020c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 1.234509285s ago: executing program 1 (id=8004): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10) recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1}, 0x100}], 0x1, 0x40010000, &(0x7f0000002b80)={0x0, 0x3938700}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r4, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0xfffffffc, @empty, 0xa}, 0x1c) (async) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0xfffffffc, @empty, 0xa}, 0x1c) openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x14, 0x30, 0x20, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x140e, 0x400, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000081}, 0x1000) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x140e, 0x400, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000081}, 0x1000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000101f0108f90000000240000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000101f0108f90000000240000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 1.215754661s ago: executing program 0 (id=8005): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x6, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x51a2b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x4, 0x108, 0xc, 0x0, 0x1}, 0x50) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x8c, r6, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xa}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x7}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xf3}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xf}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x800}, @NL80211_TXQ_ATTR_AIFS={0x5}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x4}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x1}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x1}]}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000c80}, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, r4}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000280)={r2}) syz_emit_ethernet(0x3c8, &(0x7f0000000880)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x392, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000007000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0x2, "6eec22507c120a6fb50ecc30272b073d"}]}}}}}}, 0x0) close(0x3) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)}, 0x62) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_START_POLL(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x123, 0x231}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x250, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x21c, 0x3, 0x0, 0x1, [{0x218, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x214, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xf0, 0x1, "477aa945ebb3e2e353f7c70665b3e3acc9474de1fb3f5d6281e9307fb889f4102b7bc99f0be50be824715e2803b03e503c9961d92a4f6bf7736cf4079a31209a38e93429e6d415290c39fea958e0447f520571369ac895eeb07b26f2e9d243dc62f20ed824e65794d256e26187462648efb9e21b8d8b7dc3e929eb5246209f9dc66b157bed7f10ce042ac7d3fba11b946e2c253c373e227c8c3b2d3e23106de876b6925bb3b34509e521da8ee227d0e5b696a2f99aae175358868f1fd67706ff7f3708d889c7a48e04e6e4d09063639940bd1389a593e3efe8f4a0d35f2f97f248c313de070a33a0dc5991a1"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "87a1ff83adf968b5c141b0e40fd1194ec749d64c67826df7a67c44b877f3d8c08f65645bbad334af8b24f07fac04efd205142bdfaba4e8ab08322d354e90ec925af75e3f573fc11e66793760a2e2a812f8902765dc774b93807819d69227b603ab0fbc995ce4a0cdd752b2e53872a31e3213b7ce284fd7b1ae57b53bc83acd99649019b12b110388594fb14523ff529210a2f7ef8b0cc321eca040c4395658ba4c14a5ad2d076cbccf4f4243aedad6bb40b34a0437f54b5e0332620adabd9cc68ecaabfd9be61a595ae106a09cfe416d3a0c77d161a37ddf94778e64da4395e7da3b36faf50600"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x2b8}}, 0x4000000) 1.212964467s ago: executing program 1 (id=8006): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000001c0)=0x9, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000001c0)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r3}, 0xc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000003d80)=ANY=[@ANYBLOB="5d1746e0dec37132b3ecb1e453be51c8208f69f6d75fef94d7ac3e588265a11e444f600f9fd233121e6aef55faf890565f8a1ec863da2fcda49c3cbbbfecefdaec89110c78a941cd291946503f08c30ab3102a4b96c2279dab5aa6b395164989cee693ee5567f34e9cbfe69a208773c150510933ce89eddea19e556f03059051ae6775c7911322e2209208b3cf525543a04b99380368bd915587ecebade9d82ea428617cc811457bd7823b95d3e87d9607eea395807156c9674ef2a2da12e39d519ddb2642c8985f6eb1d5788c113211aca34745e1907d3bdadf9494f34b908866e444762059954f1024103ca34e5a64f70b141d9c77c93513fd1a0a7d387dbd5727484c567ee034382fd747bd0b82b52edf4c288f9e5b5a18ea6b3cae1f3e8701af93c6a9645ebeea92b69e0ac83c4b802bb7a120dfced98769805f12621f21a9e3cade2f59b1d38deff4ac0d7741d06198f83a6f6f83de5d7a6deb04d0714d557ee826314a3fe7d4b7872e61dfa2303de3e1173563fdeb8b9fad42e4260d7169a69d9a974e54c406db8d8c9e88b9bfbf5d80a4335447af3fe42972f1ac3d08f9b155a4a00a7401933a589582ddb01f93132e15d9a837e005ec38fa9fbdeff3b5282d107363263074f46b40349d76eb6e9ca34912628836a1a10081aa7f34ed900e3a37b5ab463e21b882bd4146245e8652cccd9a83539507f3a9ce16d9dd0c5554856c51394ff30490a773e2f9aa01fbdcf494c97b32dc55a8cecf9a2fb4b94616eb4a3f738bd7e78c86a63fb3a19ba1b731cb3045581f25f3803c5866d8a5594d8c017aa89109db139847333b68194d7bba8d5dd75a61a9c1b7ff780b559ee8a878d6fde0a137ca0e5fc0a9569991ddbe75c08521df1794120f0a9302fee67f9df280ea68751c567af5a83a757d6cfc876f0175c71bf86042974d788e62a549d169f94d742270c88635697bb4b7f11824fcec67c8a81f5c3aededaccb677e052702847dcdf6d4a0ec865881137e4044bf5cfc9a6042c7cfca636e45c4ef2453e463345d3545a8c9aa55cfd4ffc2d43929473e9f723c9bc60da32fa61974c986e8cf95dedffe2a1843887cb69370e4faf9e906dea802b742f7338185c597fb9fd703365d62dba08e2a215be0cd41615c8e5bcddabdae66b67c217af1cf3b0780e52d5125c6956844362f248bb2cbcfb06e6a287843dda406f61e167fb0f8bf4096c7110b3e0c93918109740afbc1847e34d00775593ab922364a0de0e7dd9b4170851e25e4dfc9a94ab11ad3d04e7e12363e1360b842fd86d6da080a59972650c6659e5a269ba9e854efa4c5ba5fc43e410bd868d1527fea3671393aec020c70014a2d37a7af7dd6e3694fcc4efba462e63e38e87bb881734d2f6b7f8e84e8e6e15af44aef2548a35c5602f7ff84ae81d4889789a4e5848df31c467c1107bb868fcee7481473d0d51ea3250d563907ddb5fda93d15c00417503d283aa686250c280a5c6a04d877abad37671ffcb1069842201698e5987c428eacccda14bbd16f96c5107820fbcf1e383962c0162dc1594cb2c7d4785b9d5ced0445fd68bf212335dabc61c837e135ad6a001029b2f39c342b908d3e1a613c6050a4a4bfb4079a6a7f107b00302245a9dc89c081837e52723cb5647e0404bc2a870a81ab75a8cb9e38b9bbf1c11e101f1e0d437272e5a10b53c376b488446ba05368b01a58476cb61809b909091d8d4af71a90d37ee0cbe5c1d04f16be448fe6eefd52ca357b42556728a05d980efc69f569e1fcfb816f56e3cfbb66e8858b3baacf905aa5cd7febcdd60bac14ad0bc25c97fb330320e0827b36aff134d00ac30b4ff174d53e2edf397b7633e961f19ea9bf3bb9e6cae56924a4bdaccca7410f1c7d2b0e2104eafc777d4bdd8e6127975e80cb9ce9f4fbb6d56583b5bcc1ddc168e07c34dfb4aa29e190a7d3a274e1e56abad96d4dba1a0d3bb964647f79d8682ff0c6a72551caa06b88f368dea98c5dbb3171e5201096f53759cd2966e79e6623cd59fc8903647fc4617cfae7483aec4e12bd4c7b251735c6b0fd9896c8152e359dbe3c32b37b691c5f0182481ac575155e63719ed77c3cbe8d62f4c32b53d857d8016e6ec0505004e6b42ee0688f4100c1cda14847b28168c8e0e25b1ee5d67200c378224c48d5f43df55610d0da7be06f89f01ee30e8bc436a75e2bffe47cfc9684fd4073212ab0b3dd5f6e0bb47313d89eec1937256c1721f62eb45daf200a284ec0a1cdac3f5d6f93e2f570049812147dafbda3d87393012231621c5543deda92d3587083c99e1d7af78592e081e77636b53bbd6aa8d21fa667d8bac41e0da4615f935ae2246aa6bd3cdc2b2710cf4fec77adbd93ebb6036e8ce52138382996462cb790a75c06b07ac9f9851fd8c9e3e487bee34f164798d9d89743363f324c7b7c6d9e5af2f228793479cc767f2f45c7702fcee8a6faa99e1be3847a1619b91d18793941fb4c398e921609d43062185984ecc1338d066965b8339d92174b816c424a14e6ea3a23b9a2016b3e03e4b672365dc4579c986af27e9b7c702ee3908ae2388a9a27947d3fb07cb949db978c6a03dd0b59e2faffc99ba4fef1a27166a2d3685b8c8c94b87f8e3db0c7a48aeb2549411023900e19d57b6880abae68a26e227c3d8ea6499fad37de6ddeb1dbd90e96f339f2ffff4e0faec79056ebd1d8ea0cf36a9da42348528fc9ca586ede485e472a78c307c927528ae41d3a448efb5d0d7b98b90a6902e1fdee0cb996b9f5333021b2477cc28a66378bd74688b84617c43b680c31a7ee6c7c4c7928a0fa0bbac83788ac96ab568cf8ae5234a56ff5edecc1fa6e532fed127dc470e236478b9f3d280f2f79551963f579b570f7fdbb14e2875141f7ee82634c016e89e02908cee867614aac9b37bb506b169a73a1a2f2a5e9d92e73fb99ed3a9861f1858c460129b9b4c758b5f67103dccf91a1b398fad9c32e5b5ec9af2da904333ff2643e07eb1b1adcf454759bdbad238739a54d63479589e618cd046fe64c42fb8b1ef1938d058bc852dcf0fdd837c3eadb4760d74e091563a2b2ddad7db97b0469c36fc4044418d6b5c61a7707ed78eb63972c08ff15d7b720765d0a48fae9b64c580baa1ab0540b4d0c8b334419435098714cc98ca0a57be59a3c81ecca6b582dffeffb5381a511de504d564537119736455b6b4d221aad163c69936923d66203f45c6c9baa55e525579e79f79efda90bcc8db856cdd06c352ad0e35c7a998e39dbe242d2c5d7678890c85afb8f37adbb2da5853c86c2533cd5146c341ce195c9b968132273d280281d99b5d1bf12770b3ea95e7a62fbb013924389880cb0fff3ba0d1de79af6bb62c72e686046964a8a74d18052ff010417180e189c46eb266bef1883c10ced257e83c0820b62bc71df1ba8d4cb18a0b25cd01ba17991809f8167b263b55963f75ea27c79527cab1e75d066432d5fd1a56b6d45a8b5b8b41d754ebc754a103867c6394cd973c8a5981eefc72d27583ffa55ecb9c312b1f8f42c727fe2bdc592a57b34a9ea497c20572906eafcefbd1e4a3427a3dd1f0f907f767ea3a396c6e521763e8ff377875e1af0fe5269e73364604f27389b67035793620100beda08154c2ebf90086e33c022477ff3a67e3bd2080e76fd45a774b8d7a7c7e76dbcc43359fe92620d1b86518705bea755d41ce226b01630177a41a149be96dde6878a9175062df538033e7ca8fdafcff0a538dbeeaae52b7b69ced077749343b9e8b349aea04fd35f83b2e05fc70ee2bd6d9b3a60211870fa1a6c5342fd251dd18e7fdff86752421e7d492322531a628b27e3b5c1c10dcf257d85bb9e82b3d8515e473cc6fae1092155d83feec2c3b2040bd3f65135cba93225b6c430b610825433b32091d646ea92fad59cd33c8c49ceebd229355858e227a4c4808a1a99cbee400894d3104e9faaca97faf316a287a3b86e7e0698d349d7ed603daa72fca96d1a3c3fb16cdb5b7db4aa54ef05aecb8c5e7f84fae76a417dd2da8bee21377b4727244cb1595ccd427cb80cef1d03323590d67149956725cb30f1e9547b622a42ff2a02077d4e9027b577eaad164c4e34b458f7c7a0d61151b29dccb684dff2a2b67ca0637e7340260aa07c8ca419187f3faa068583b4bc087c6548a9182f2104303f1b637ebbcd42b92de35e80a68498348930f38babdcca2b2e4916dc603749251e9f1789f076306c13d0461253342a515f4c54de08f9a56741feabddda477410f8f975d4f54db494e227a34c5fe44d6cd3667c62f2e764247a751d3beeeffe274fca87d7d4d134a350e2f55a81dcf84d12ad004156f755627fb57041d318d1b4f1d64540e4acbca092f85c9a3929d1c55936949d259e6e2eac9f806185908851f125ff2f91558af9f231b5f40b336a05466e81d9fc39ec510c38826ec0a7c9fc76f8e888255a9d528f0bda53cecc1275638a522fb6e9f72b0d0b4dae160a293cc9a4258631df7f8473bf1336778571dd8885aeda7bb8e79bc37823538c87d54473030518e5c1d78fcdec4e68bf85f6211365cb79afd248835b77a2f55e8d0c22c5ff362180e3df09a7d747c6ac51dc82010c4afdb46bdfff3d8a45d9560c1cdd9a0deca3b1677d5848a0c6babf97b40f4b591a8d45f06821e82424c9693072cd4ccccecfa41065ad479dc8379d7917e2dd118b95a7fa4eba5fee64a932d23a3f8ad8a7e14a774d2da26d7733f3d723a5ab420b10e916d27365c3af6c1d8e5d85e5eb0cdb87b89843ca80db0cab537c5b7a267d5711b8fa4f7a7c4c4ebff974739a1a7ed078a604844bff4e24f56460377a7c90bcd1fc47fe8f3a7ed6fd3ce64eb514f62d8b339ea27ffc10fb7aa269a8c0c48c8fc8aeb1591062e14ab1bfad952a3ade0ba8be349fa8b3952786c218abb6bd996d3eb0f2c9782168b093018421241be31a09d687bf6e088def44934164198ca00d32d1967cd55e5b27b84e075922658bbd3ddb76807bc92f5ff2d54cc7e42091a060b9e4e2a0f2b8f6dcc4c8f42baed8d65b87aa950547a4ca4d0164fcfd405779ab6f3c94f75e7a286fe79f3582f59a7b0bd867618aa501b8dd5c249a8bdeb7b0dbf0de8e2c4e4b517a68e71c9e2017015d9eabb49a080f0e506bfb30eb614dfec2ebdc13b9e8bbcafcaa7acb2501fe5229455c4a3270d6cd2ab84786219a5bd4c7cd09843abc40223dc718510dc0bc74688e9ddaf6ebd4b800cf0140854ab21ccbf9624a42ff5e958c02f45acebff31de552a7a38bc656ed7d1cc4f304ab13da45950f41d72a2156ce4fbe8ea39e45bec8db0281d55375367ca677e7ab764a9903010294cbbbb7a4fa6dcf0b093f13d1ecb256093ce895d3ac292c90ded140077524773af99f1cbbe6c719bfcbe93976623848b1ceef5a787bd3e6db5af72887a8a30b050ca73c03575a242afc3461d75c8a78e46b3e2426794b6aa041ccf24fe6ebd7a4eccf7f57c4fa39bfa8778268185848272ef3090be92f773376b9ad5cf2c5bf93d8bfd2783ec33847fdb931f20f289923b081205944138d58ddb097a54d7700bc39971909a065f7d25fc87ba64b15fbacf1b1ef34f9616cc49419d0a68b3b02029da658f1465e54e72b912539d4633d2dca1e0b0ae8095d6e804b1705d6dfa22220d71416e7f2905e0d827c8b81491a5b40264f16bb2e87390b345a17bb10d992bb542a737263f52dfca2a3d5cda1a38191dbb73147631690cf95cfdb809d0c676b1e3346935abf56cabcdde8c5aac41fed8fc6a37dff73cf7c65", @ANYRESHEX=r4, @ANYRESHEX=r0, @ANYBLOB="25b076f61586e808b463d583707f9e404a332ad492f7a43fce2f79b1f8695743598acd541781498dded48094f9c8a8c3a658ead07e900c2a4274a37a77aebe6ece2fece681f07144343bbde450c3b3b42e2741972dc20bb163574ec302dd97227dd4eb9c4a0ee695f33c8e176ec1241e522ad7d714486d1c94f2e7a08041d7143360c52e35c53e90ee66a4c77dca6d2e4600fc4436d79b1206a011835e45d3fe53a29765f28ad6153946cf8d0718", @ANYBLOB="aa99844584196f1e65188edc037d52da8376a647afe532a613c72bd143564a1bb38826ac36530134dbe554c83d5d3da05ceaf0b55b2766ef5084dd2195", @ANYRES16], 0x144}, 0x1, 0x0, 0x0, 0x4044805}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000003d80)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRESHEX=r0, @ANYBLOB="25b076f61586e808b463d583707f9e404a332ad492f7a43fce2f79b1f8695743598acd541781498dded48094f9c8a8c3a658ead07e900c2a4274a37a77aebe6ece2fece681f07144343bbde450c3b3b42e2741972dc20bb163574ec302dd97227dd4eb9c4a0ee695f33c8e176ec1241e522ad7d714486d1c94f2e7a08041d7143360c52e35c53e90ee66a4c77dca6d2e4600fc4436d79b1206a011835e45d3fe53a29765f28ad6153946cf8d0718", @ANYBLOB="aa99844584196f1e65188edc037d52da8376a647afe532a613c72bd143564a1bb38826ac36530134dbe554c83d5d3da05ceaf0b55b2766ef5084dd2195", @ANYRES16], 0x144}, 0x1, 0x0, 0x0, 0x4044805}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x0, 0x6, 0x6}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000140)={'syzkaller1\x00', {0x2, 0x4e21, @multicast1}}) socket(0x1e, 0x4, 0x0) (async) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000280)=@req3={0xe, 0x56, 0x4, 0x80, 0x3, 0xd7b, 0x76a}, 0x1c) r7 = socket(0x22, 0xa, 0x2) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000780)=""/199, 0xc7}, {&(0x7f0000000880)=""/142, 0x8e}], 0x3}, 0x20) close(0x4) 1.142522149s ago: executing program 3 (id=8007): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x102}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x7000000}, 0x94) 1.087940183s ago: executing program 0 (id=8008): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket(0x1, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) accept4(r5, 0x0, 0x0, 0x800) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 1.016275996s ago: executing program 3 (id=8009): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)={0x2e0, 0x23, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x4f, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}, @nested={0x1cc, 0xfd, 0x0, 0x1, [@nested={0x1c, 0x12c, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @u32=0x7cd2}, @nested={0x4, 0xa4}, @typed={0x8, 0x6d, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x14d}]}, @nested={0xce, 0x8a, 0x0, 0x1, [@typed={0x8, 0xba, 0x0, 0x0, @pid=r1}, @generic="93230cd40df3ceb51206cbe0516a928eb1754b46064adad520cc7b65c386ab740ddf7f0707ece13d0218256cbbccf851d49417703f10f3085cc929e32183e2794226066d55304eedfff037dfbfd4ce2c4522c13ddb982a3194990ff57e839415917ba6c74e6c42ba6c804f1d24e0affc183c99c94a00db105c70e99fb1210b0fdc23c23d9a2ebf66ed85ae1d1055f6141a864919468066e76470cc812e2d6a0b43784b90dd6052b2449994f6a2df4fcde61679da26699bd2b4bdaf1085aa7e8aa332"]}, @typed={0x81, 0x60, 0x0, 0x0, @binary="b778368d6ba4a6596c198f20de456ebc915b18f35489d57954cf8cf9ed618e038f250b007dbc18537237727bb8eb49d431a594d21928b14deb8af2895fe14b05598396e64b1152b7918b9215d573b74ae7da4ad4b525cf3afb4d92c3768f178b3d4eb46759adebc49ae5168c4072d4c612a2a7c182907c1704664faad8"}, @generic="1de80fece9dd089f4f8f6cd6ee7f81245e1237598911977485a8ec536ce54ecd362c842ce0277c770e16e1f7e417b9d9cf06ac4465d8f322a2c02756fbc3109f7405054062c95fa01ed2c19c92b0acadfd5c279e40c7b74b"]}]}, 0x2e0}, {&(0x7f0000000340)={0x17c, 0x3e, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@generic="7f0e099366e0544c995e6adec8f0217871f6fa29540591daa787daa5e4d8b9a813741a0519f91a50d32c6b1f3c07105ef3e0af77f2d1734316f6e1a297b98e1ba05f588d1719b055df3b50fa7ef1e665dfec99f7d4e851383cba85bcde74e4c20b8dc7c3d30467bdc1936de2f964fce2c531d788a4d9b701c35142c8a5330af8b29824a38b3cb9989277130e57c060d0e7c65295eaef2f698457d292899b932c5daac60ffa826a03dc311a6c37cd9819ac959480ed88a4a92e2201224a79e3c3bae5b39e47d8f2586fa2ec5c5c7ea7d51a0bcbf9c0d6", @generic="d88fd8cff21b8c8a22537e190e782c9c1c73a2eb632ba258cc4294f0a9a493098be5c9f7672262714b6c7a4e618f7b702fe1f2be58163fbea16854381230f192974e31372e032f5f1c50ed57179ced096f178fec9943866fa4284fc224271f65ec165b503dfbe7bf0369723e8c35d9", @typed={0x14, 0x5d, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x5e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}, @generic="9daddbcb4bb6c9b3b712"]}, 0x17c}], 0x2}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 802.526316ms ago: executing program 0 (id=8010): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) r6 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000006114a8000000000024000000f0ffffff95000000000000001283ba51804584c73693ef739978232f"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c010180284880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=r6, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES32=0x0, @ANYBLOB='\f\x00C'], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) 497.554314ms ago: executing program 2 (id=8011): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x42fe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0x9c}}, 0x0) 428.227756ms ago: executing program 2 (id=8012): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x6, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x1010, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f00000041c0)=""/4100, &(0x7f0000000100)=0x1004) r3 = socket(0x10, 0x803, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) accept$alg(r4, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000080000000000000000018230000", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x54, r8, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_INDEX={0xfffffffffffffcbb, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}}, 0x20004000) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000003c0002802c00010000000000000114000400ff0200000000000000000000000000010c000280050001000000000044980001800c00028005000100000000000000000000000000000114000400200100000000000000000000000000010600034000020000080007400000000100"/141], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 2 (id=8013): unshare(0x28000600) r0 = socket$tipc(0x1e, 0x5, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x701}], 0x1, &(0x7f00000003c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5068b, 0x24}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3e}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x40}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x4, @mcast2, 0x6, 0x4}, 0x20) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)={0x58, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x8800) kernel console output (not intermixed with test programs): it in 0 ms [ 1085.527330][T28911] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1085.639192][T28911] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1085.669550][T28911] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1085.687749][T28911] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1085.741110][T30948] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6892'. [ 1085.809672][T27402] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1085.817676][T27402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1085.959318][T27394] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1086.368139][T30958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.376059][T30958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.827600][T30958] batadv_slave_0: left promiscuous mode [ 1086.851995][T30958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.028561][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 1087.036661][ C0] lec:lec_tx_timeout: lec0 [ 1087.041959][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1087.399208][T30958] geneve2: left promiscuous mode [ 1087.427098][T30958] bond2: left allmulticast mode [ 1087.433760][T30958] bond2: left promiscuous mode [ 1087.439844][T30958] macvlan2: left promiscuous mode [ 1087.445020][T30958] macvlan2: left allmulticast mode [ 1087.453040][T30958] batadv1: left promiscuous mode [ 1087.633594][T30976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6894'. [ 1087.665562][T12103] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.692353][T12103] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1087.712029][T12103] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.732915][T12103] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1087.771350][T30988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6899'. [ 1087.793350][T30989] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6899'. [ 1088.027213][T12103] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.050593][T12103] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1088.060933][T12103] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.070484][T12103] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1088.122590][T31005] lo speed is unknown, defaulting to 1000 [ 1088.499230][T31025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6907'. [ 1088.520364][T31025] batadv2: entered promiscuous mode [ 1088.526919][T31025] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1088.535226][T31005] lo speed is unknown, defaulting to 1000 [ 1088.634153][T31036] netlink: 'syz.4.6910': attribute type 29 has an invalid length. [ 1088.761192][T31042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6911'. [ 1088.772245][T30980] IPVS: starting estimator thread 0... [ 1088.775252][T31044] FAULT_INJECTION: forcing a failure. [ 1088.775252][T31044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.812610][T31044] CPU: 1 UID: 0 PID: 31044 Comm: syz.2.6912 Not tainted syzkaller #0 PREEMPT(full) [ 1088.812639][T31044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1088.812653][T31044] Call Trace: [ 1088.812663][T31044] [ 1088.812673][T31044] dump_stack_lvl+0xe8/0x150 [ 1088.812707][T31044] should_fail_ex+0x412/0x560 [ 1088.812738][T31044] _copy_from_user+0x2d/0xb0 [ 1088.812771][T31044] ___sys_recvmsg+0x175/0x590 [ 1088.812808][T31044] ? __pfx____sys_recvmsg+0x10/0x10 [ 1088.812843][T31044] ? __fget_files+0x2a/0x420 [ 1088.812899][T31044] do_recvmmsg+0x334/0x800 [ 1088.812940][T31044] ? __pfx_do_recvmmsg+0x10/0x10 [ 1088.812991][T31044] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1088.813041][T31044] __x64_sys_recvmmsg+0x198/0x250 [ 1088.813077][T31044] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1088.813129][T31044] do_syscall_64+0xe2/0xf80 [ 1088.813158][T31044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.813179][T31044] ? trace_irq_disable+0x37/0x100 [ 1088.813200][T31044] ? clear_bhb_loop+0x60/0xb0 [ 1088.813226][T31044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.813247][T31044] RIP: 0033:0x7f3145b9af79 [ 1088.813267][T31044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.813285][T31044] RSP: 002b:00007f3146a01028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1088.813308][T31044] RAX: ffffffffffffffda RBX: 00007f3145e15fa0 RCX: 00007f3145b9af79 [ 1088.813324][T31044] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 1088.813339][T31044] RBP: 00007f3146a01090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.813353][T31044] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1088.813366][T31044] R13: 00007f3145e16038 R14: 00007f3145e15fa0 R15: 00007fff321a3f38 [ 1088.813401][T31044] [ 1089.068820][T31045] IPVS: using max 28 ests per chain, 67200 per kthread [ 1089.691718][T31077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6918'. [ 1089.800443][T31081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6920'. [ 1089.823374][T31077] bond0: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1089.856916][T31077] bond0: (slave xfrm1): Error -95 calling set_mac_address [ 1089.964393][T31081] batadv3: entered promiscuous mode [ 1090.000526][T31081] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1090.307175][T31103] netlink: 'syz.2.6923': attribute type 12 has an invalid length. [ 1090.490019][T28911] net_ratelimit: 143 callbacks suppressed [ 1090.490042][T28911] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.507883][T28911] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1090.572739][T31106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6926'. [ 1090.631565][T28912] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.644378][T28912] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1090.780182][T27402] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.792147][T27402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1090.919133][T27402] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.931318][T27402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1091.057976][T27402] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1091.124514][T27402] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1091.215369][T31120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6930'. [ 1091.239733][T31124] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6933'. [ 1091.258407][T31120] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6930'. [ 1091.283272][T31126] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6934'. [ 1091.300732][T31124] tipc: Enabling of bearer rejected, already enabled [ 1091.359903][T31124] netlink: 'syz.4.6933': attribute type 13 has an invalid length. [ 1091.489653][T31140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6939'. [ 1091.520231][T28911] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.521266][T31135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6937'. [ 1091.559154][T28911] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.592649][T28911] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.610714][ T30] audit: type=1800 audit(1770687290.854:12): pid=31138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6938" name="memory.events" dev="tmpfs" ino=866 res=0 errno=0 [ 1091.623767][T28911] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.730254][T31148] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6942'. [ 1091.905649][T31164] netlink: 'syz.1.6940': attribute type 12 has an invalid length. [ 1092.059075][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1092.067395][ C0] lec:lec_tx_timeout: lec0 [ 1092.072750][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1092.431167][T31186] lo speed is unknown, defaulting to 1000 [ 1093.382050][T31224] xt_HMARK: spi-set and port-set can't be combined [ 1093.395026][T31186] lo speed is unknown, defaulting to 1000 [ 1093.596549][T31231] FAULT_INJECTION: forcing a failure. [ 1093.596549][T31231] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.619167][T31231] CPU: 0 UID: 0 PID: 31231 Comm: syz.2.6962 Not tainted syzkaller #0 PREEMPT(full) [ 1093.619199][T31231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1093.619213][T31231] Call Trace: [ 1093.619222][T31231] [ 1093.619231][T31231] dump_stack_lvl+0xe8/0x150 [ 1093.619265][T31231] should_fail_ex+0x412/0x560 [ 1093.619297][T31231] should_failslab+0xa8/0x100 [ 1093.619324][T31231] __kmalloc_noprof+0xde/0x7e0 [ 1093.619346][T31231] ? ip_options_get+0x51/0x4c0 [ 1093.619379][T31231] ip_options_get+0x51/0x4c0 [ 1093.619406][T31231] ? put_dec_trunc8+0x1fd/0x340 [ 1093.619434][T31231] ip_cmsg_send+0x591/0xa70 [ 1093.619476][T31231] udp_sendmsg+0xc8b/0x22f0 [ 1093.619525][T31231] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1093.619557][T31231] ? __pfx_udp_sendmsg+0x10/0x10 [ 1093.619585][T31231] ? tomoyo_write_log2+0x250/0x910 [ 1093.619619][T31231] ? tomoyo_supervisor+0x4cb/0x1570 [ 1093.619679][T31231] ? get_random_u32+0x497/0x8b0 [ 1093.619705][T31231] ? lockdep_hardirqs_on+0x7a/0x110 [ 1093.619732][T31231] ? get_random_u32+0x13a/0x8b0 [ 1093.619757][T31231] ? get_random_u32+0x4ce/0x8b0 [ 1093.619795][T31231] udpv6_sendmsg+0xd1c/0x2560 [ 1093.619834][T31231] ? __lock_acquire+0x6b5/0x2cf0 [ 1093.619869][T31231] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1093.619904][T31231] ? ip6_datagram_release_cb+0x7c/0x550 [ 1093.619953][T31231] ? inet_send_prepare+0x1b9/0x270 [ 1093.619988][T31231] ? inet_send_prepare+0x1b9/0x270 [ 1093.620016][T31231] ? __local_bh_enable_ip+0xd0/0x130 [ 1093.620035][T31231] ? inet_send_prepare+0x1b9/0x270 [ 1093.620066][T31231] ? inet6_sendmsg+0xe4/0x120 [ 1093.620088][T31231] ____sys_sendmsg+0x62c/0xad0 [ 1093.620126][T31231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1093.620162][T31231] ? import_iovec+0x73/0xa0 [ 1093.620195][T31231] ___sys_sendmsg+0x2a5/0x360 [ 1093.620221][T31231] ? __lock_acquire+0x6b5/0x2cf0 [ 1093.620253][T31231] ? __pfx____sys_sendmsg+0x10/0x10 [ 1093.620289][T31231] ? kstrtouint+0x6e/0xe0 [ 1093.620342][T31231] ? __fget_files+0x2a/0x420 [ 1093.620365][T31231] ? __fget_files+0x3a0/0x420 [ 1093.620400][T31231] __sys_sendmmsg+0x27c/0x4e0 [ 1093.620436][T31231] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1093.620464][T31231] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1093.620523][T31231] ? ksys_write+0x242/0x270 [ 1093.620557][T31231] ? __pfx_ksys_write+0x10/0x10 [ 1093.620596][T31231] __x64_sys_sendmmsg+0xa0/0xc0 [ 1093.620628][T31231] do_syscall_64+0xe2/0xf80 [ 1093.620666][T31231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.620687][T31231] ? trace_irq_disable+0x37/0x100 [ 1093.620708][T31231] ? clear_bhb_loop+0x60/0xb0 [ 1093.620733][T31231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.620754][T31231] RIP: 0033:0x7f3145b9af79 [ 1093.620773][T31231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.620793][T31231] RSP: 002b:00007f3146a01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1093.620816][T31231] RAX: ffffffffffffffda RBX: 00007f3145e15fa0 RCX: 00007f3145b9af79 [ 1093.620832][T31231] RDX: 0000000000000001 RSI: 0000200000001280 RDI: 0000000000000003 [ 1093.620846][T31231] RBP: 00007f3146a01090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.620860][T31231] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1093.620873][T31231] R13: 00007f3145e16038 R14: 00007f3145e15fa0 R15: 00007fff321a3f38 [ 1093.620905][T31231] [ 1094.549932][ T5823] Bluetooth: hci3: command tx timeout [ 1094.559040][T31224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.566632][T31224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.599627][T31224] bond0: left promiscuous mode [ 1094.604498][T31224] bond_slave_0: left promiscuous mode [ 1094.632069][T31224] bond_slave_1: left promiscuous mode [ 1094.637834][T31224] dummy0: left promiscuous mode [ 1094.998441][T31224] batadv_slave_0: left promiscuous mode [ 1095.021392][T31224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.499305][T28914] net_ratelimit: 139 callbacks suppressed [ 1095.499330][T28914] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.529376][T27394] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.549200][T27394] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.551393][T31224] veth3: left allmulticast mode [ 1095.569196][T27394] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.577110][T31224] vlan2: left promiscuous mode [ 1095.582584][T31224] geneve1: left promiscuous mode [ 1095.587842][T31224] vlan2: left allmulticast mode [ 1095.593849][T27394] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.593995][T31224] geneve1: left allmulticast mode [ 1095.625998][T31224] bond2: left promiscuous mode [ 1095.629026][T27394] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.653661][T31224] batadv1: left promiscuous mode [ 1095.659307][T12103] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.698422][T31224] bond5: left promiscuous mode [ 1095.707404][T31224] geneve3: left promiscuous mode [ 1095.742997][ T5833] lo speed is unknown, defaulting to 1000 [ 1095.760309][ T5833] syz2: Port: 1 Link DOWN [ 1095.856115][T31257] __nla_validate_parse: 7 callbacks suppressed [ 1095.856135][T31257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6967'. [ 1095.879843][T27394] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.908658][T27394] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.930060][T28914] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.965007][T28914] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.975609][T28914] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.985783][T28914] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.028565][T28914] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.048861][T28914] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.208446][T31268] gretap1: entered promiscuous mode [ 1096.214898][T31268] batman_adv: batadv0: Adding interface: gretap1 [ 1096.221611][T31268] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1096.253093][T31268] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1096.686938][T31285] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.6973'. [ 1096.712396][T31285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6973'. [ 1096.728954][T31285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6973'. [ 1096.739544][T31285] netlink: 'syz.3.6973': attribute type 3 has an invalid length. [ 1096.818409][T31287] netlink: 'syz.3.6974': attribute type 1 has an invalid length. [ 1096.973504][T31287] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1097.014392][T31291] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1097.089066][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1097.097350][ C0] lec:lec_tx_timeout: lec0 [ 1097.102858][T31292] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1097.103383][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1097.190066][T27394] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1097.309144][T27402] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1097.354843][T27402] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1097.382182][T31311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6978'. [ 1097.406340][T31311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6978'. [ 1097.416474][T27402] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.427450][T27402] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.588246][T27402] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.602665][T27402] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.925949][T31328] lo speed is unknown, defaulting to 1000 [ 1098.323525][T31328] lo speed is unknown, defaulting to 1000 [ 1099.362063][T31371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6998'. [ 1099.397651][T31370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6997'. [ 1099.628080][T31376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7000'. [ 1099.889176][T31392] netlink: 'syz.2.7004': attribute type 1 has an invalid length. [ 1099.938703][T31392] bond4: entered promiscuous mode [ 1099.944448][T31392] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1099.991125][T31392] sctp: [Deprecated]: syz.2.7004 (pid 31392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1099.991125][T31392] Use struct sctp_sack_info instead [ 1100.540709][T27394] net_ratelimit: 63 callbacks suppressed [ 1100.540732][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1100.557712][T27394] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1100.679216][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1100.697767][T27394] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1100.732518][T31402] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1100.780179][T31404] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7009'. [ 1100.839219][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1100.874518][T31404] bond7: option packets_per_slave: invalid value (1048582) [ 1100.886407][T31404] bond7: option packets_per_slave: allowed values 0 - 65535 [ 1100.890453][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1100.942528][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1100.990140][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1101.003587][T31404] bond7 (unregistering): Released all slaves [ 1101.019241][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1101.054309][T31413] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7011'. [ 1101.139364][T31412] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7010'. [ 1101.318250][T31418] lo speed is unknown, defaulting to 1000 [ 1101.696179][T31446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7020'. [ 1101.860748][T31422] lo speed is unknown, defaulting to 1000 [ 1101.867985][T31418] lo speed is unknown, defaulting to 1000 [ 1101.922244][T31455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7023'. [ 1102.119076][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1102.127220][ C0] lec:lec_tx_timeout: lec0 [ 1102.132640][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1102.177725][T31467] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 786440, id = 0 [ 1102.182447][T31466] IPVS: stopping backup sync thread 31467 ... [ 1102.333460][T31476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7027'. [ 1102.431909][T31422] lo speed is unknown, defaulting to 1000 [ 1102.711694][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 1102.738300][T31410] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1102.914332][T31489] netlink: 'syz.1.7032': attribute type 7 has an invalid length. [ 1102.946268][T31489] netlink: 'syz.1.7032': attribute type 5 has an invalid length. [ 1102.970063][T31489] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7032'. [ 1103.028253][T31490] dvmrp1: entered allmulticast mode [ 1103.062442][T31491] dvmrp1: left allmulticast mode [ 1103.191990][T31493] netlink: 'syz.3.7033': attribute type 13 has an invalid length. [ 1103.220097][T31495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7034'. [ 1103.292864][T31498] netlink: 332 bytes leftover after parsing attributes in process `syz.1.7035'. [ 1103.393321][T31499] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1103.403213][T31499] syzkaller0: entered promiscuous mode [ 1103.431014][T31499] syzkaller0: entered allmulticast mode [ 1103.462070][T31506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7038'. [ 1103.474204][T31493] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7033'. [ 1104.058306][T31531] netlink: 'syz.1.7048': attribute type 1 has an invalid length. [ 1104.176735][T31540] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1104.186662][T31540] bond3: (slave bond4): making interface the new active one [ 1104.195307][T31540] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1104.245306][T31531] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 1104.277022][T31547] syzkaller0: entered promiscuous mode [ 1104.283407][T31547] syzkaller0: entered allmulticast mode [ 1104.316057][T31540] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1104.789279][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 1104.870130][T31573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1105.084282][T31582] lo speed is unknown, defaulting to 1000 [ 1105.353374][T31582] lo speed is unknown, defaulting to 1000 [ 1105.638628][T28911] net_ratelimit: 116 callbacks suppressed [ 1105.638653][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1105.652690][T28911] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1105.778685][T28914] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1105.793312][T28914] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1105.919691][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1105.948130][T28911] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1105.998048][T31604] netlink: 'syz.2.7071': attribute type 12 has an invalid length. [ 1106.109348][T28914] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1106.145701][T28912] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1106.169267][T28914] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1106.177743][T28914] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1107.078229][T31536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1107.149114][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1107.157199][ C0] lec:lec_tx_timeout: lec0 [ 1107.162398][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1107.265607][T31620] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1107.342982][T31620] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1107.441139][T31627] syzkaller0: entered promiscuous mode [ 1107.452356][T31627] syzkaller0: entered allmulticast mode [ 1107.789563][T31633] __nla_validate_parse: 4 callbacks suppressed [ 1107.789587][T31633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7080'. [ 1107.806525][T31633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7080'. [ 1107.913144][T31620] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1107.987493][T31620] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1108.129893][T28912] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.175887][T28912] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.224565][T28912] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.274530][T28911] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1109.181755][T31642] lo speed is unknown, defaulting to 1000 [ 1109.670953][T31642] lo speed is unknown, defaulting to 1000 [ 1109.824907][T31656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7085'. [ 1110.069139][T31661] syzkaller0: entered promiscuous mode [ 1110.074702][T31661] syzkaller0: entered allmulticast mode [ 1110.111299][T31661] tipc: Enabled bearer , priority 0 [ 1110.147419][T31660] tipc: Resetting bearer [ 1110.200814][T31660] tipc: Disabling bearer [ 1110.438913][T31668] syzkaller0: entered promiscuous mode [ 1110.453390][T31668] syzkaller0: entered allmulticast mode [ 1110.669994][T28914] net_ratelimit: 137 callbacks suppressed [ 1110.670018][T28914] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1110.706387][T31670] netlink: 'syz.4.7090': attribute type 2 has an invalid length. [ 1110.706897][T28914] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1110.726690][T31670] netlink: 'syz.4.7090': attribute type 11 has an invalid length. [ 1110.742562][T31670] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7090'. [ 1110.782527][T31670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1110.805160][T31673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7091'. [ 1110.853889][T31675] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7092'. [ 1110.864689][T28914] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1110.880998][T28914] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1110.889489][T31675] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7092'. [ 1111.009475][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1111.017591][T28911] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1111.096508][T31678] bridge2: entered promiscuous mode [ 1111.109078][T31678] bridge2: entered allmulticast mode [ 1111.138628][T28912] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1111.159182][T28912] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1111.190630][T28912] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1111.267067][T31691] netlink: 'syz.3.7097': attribute type 62 has an invalid length. [ 1111.312774][T31691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7097'. [ 1111.520717][T31704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7098'. [ 1111.734713][T31717] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7104'. [ 1111.765171][T31717] bridge0: entered allmulticast mode [ 1111.824583][T31715] lo speed is unknown, defaulting to 1000 [ 1112.175519][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1112.183810][ C0] lec:lec_tx_timeout: lec0 [ 1112.189239][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1112.434760][T31715] lo speed is unknown, defaulting to 1000 [ 1112.644886][T31748] tipc: Enabled bearer , priority 0 [ 1112.655353][T31749] lo speed is unknown, defaulting to 1000 [ 1112.665708][T31748] syzkaller0: entered promiscuous mode [ 1112.677203][T31748] syzkaller0: entered allmulticast mode [ 1112.719928][T31748] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:52768 [ 1112.741944][T31748] tipc: Resetting bearer [ 1112.760321][T31746] tipc: Resetting bearer [ 1112.786558][T31746] tipc: Disabling bearer [ 1112.981723][T31752] syzkaller0: entered promiscuous mode [ 1112.987373][T31752] syzkaller0: entered allmulticast mode [ 1113.081613][T31749] lo speed is unknown, defaulting to 1000 [ 1113.092697][T31754] lo speed is unknown, defaulting to 1000 [ 1113.595596][T31763] batadv1: left promiscuous mode [ 1113.654588][T28912] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1113.654912][T31754] lo speed is unknown, defaulting to 1000 [ 1113.686112][T28912] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1113.722296][T28912] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1114.397990][T31782] __nla_validate_parse: 3 callbacks suppressed [ 1114.398013][T31782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7121'. [ 1114.478387][T31786] netlink: 'syz.0.7122': attribute type 3 has an invalid length. [ 1114.481784][T31787] netlink: 'syz.0.7122': attribute type 3 has an invalid length. [ 1114.873003][T31795] syzkaller0: entered promiscuous mode [ 1114.885504][T31795] syzkaller0: entered allmulticast mode [ 1114.986064][T31797] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7126'. [ 1115.249706][T31807] netlink: 'syz.4.7128': attribute type 1 has an invalid length. [ 1115.282133][T31806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7130'. [ 1115.339951][T31807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.719413][T28911] net_ratelimit: 115 callbacks suppressed [ 1115.719437][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1115.768615][T28911] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1115.814445][T31822] lo speed is unknown, defaulting to 1000 [ 1115.832982][T31817] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.7132:31817 [ 1115.879164][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1115.896537][T27394] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1116.018833][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1116.051720][T27394] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1116.188621][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1116.215776][T27394] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1116.335907][T31822] lo speed is unknown, defaulting to 1000 [ 1116.352841][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1116.720022][T31836] x_tables: duplicate underflow at hook 2 [ 1116.750627][T31834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7136'. [ 1116.873615][T31839] syzkaller0: entered promiscuous mode [ 1116.892499][T31839] syzkaller0: entered allmulticast mode [ 1116.906714][T31843] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.166497][T31843] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.209103][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1117.217205][ C0] lec:lec_tx_timeout: lec0 [ 1117.222661][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1117.270376][T31843] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.295784][T31850] syzkaller0: entered promiscuous mode [ 1117.304905][T31850] syzkaller0: entered allmulticast mode [ 1117.333360][T31853] tipc: Enabled bearer , priority 0 [ 1117.360465][T31843] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.395925][T31849] tipc: Resetting bearer [ 1117.500205][T31849] tipc: Disabling bearer [ 1117.625631][T28912] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.667465][T27394] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.717044][T28912] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.757170][T27402] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.766362][T31874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7148'. [ 1117.869099][T31861] netlink: 'syz.3.7145': attribute type 12 has an invalid length. [ 1117.882604][T31877] netlink: 'syz.0.7148': attribute type 10 has an invalid length. [ 1117.884216][T31861] netlink: 'syz.3.7145': attribute type 29 has an invalid length. [ 1117.912993][T31861] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7145'. [ 1117.923600][T31861] netlink: 'syz.3.7145': attribute type 3 has an invalid length. [ 1117.933339][T31861] netlink: 'syz.3.7145': attribute type 2 has an invalid length. [ 1117.943434][T31861] netlink: 19 bytes leftover after parsing attributes in process `syz.3.7145'. [ 1117.966694][T31885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7150'. [ 1117.974895][T31877] veth0_vlan: left promiscuous mode [ 1117.995307][T31877] veth0_vlan: entered promiscuous mode [ 1118.031296][T31877] team0: Device veth0_vlan failed to register rx_handler [ 1118.062405][T31887] netlink: 'syz.1.7150': attribute type 10 has an invalid length. [ 1118.088633][T31881] batadv_slave_0: entered promiscuous mode [ 1118.125566][T31881] netlink: 'syz.1.7150': attribute type 2 has an invalid length. [ 1118.155094][T31887] veth0_vlan: left promiscuous mode [ 1118.176933][T31887] veth0_vlan: entered promiscuous mode [ 1118.188079][T31887] team0: Device veth0_vlan failed to register rx_handler [ 1118.476102][T31893] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7152'. [ 1118.601342][T31901] syzkaller0: entered promiscuous mode [ 1118.618864][T31901] syzkaller0: entered allmulticast mode [ 1118.636345][T31903] netlink: 'syz.2.7153': attribute type 12 has an invalid length. [ 1118.760545][T31910] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7157'. [ 1118.965427][T31917] syzkaller0: entered promiscuous mode [ 1118.980327][T31917] syzkaller0: entered allmulticast mode [ 1118.998003][T31917] tipc: Enabled bearer , priority 0 [ 1119.033177][T31916] tipc: Resetting bearer [ 1119.091184][T31916] tipc: Disabling bearer [ 1119.119222][T31924] FAULT_INJECTION: forcing a failure. [ 1119.119222][T31924] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.133919][T31924] CPU: 0 UID: 0 PID: 31924 Comm: syz.0.7162 Not tainted syzkaller #0 PREEMPT(full) [ 1119.133956][T31924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1119.133971][T31924] Call Trace: [ 1119.133980][T31924] [ 1119.133991][T31924] dump_stack_lvl+0xe8/0x150 [ 1119.134024][T31924] should_fail_ex+0x412/0x560 [ 1119.134055][T31924] should_failslab+0xa8/0x100 [ 1119.134083][T31924] __kvmalloc_node_noprof+0x166/0x8d0 [ 1119.134108][T31924] ? rhashtable_init_noprof+0x52e/0xa70 [ 1119.134136][T31924] ? rhashtable_init_noprof+0x12d/0xa70 [ 1119.134171][T31924] rhashtable_init_noprof+0x52e/0xa70 [ 1119.134207][T31924] nft_rhash_init+0x118/0x3b0 [ 1119.134237][T31924] ? __pfx_nft_rhash_init+0x10/0x10 [ 1119.134263][T31924] ? __pfx_nft_rhash_key+0x10/0x10 [ 1119.134286][T31924] ? __pfx_nft_rhash_obj+0x10/0x10 [ 1119.134311][T31924] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 1119.134340][T31924] ? nf_tables_newset+0x13bf/0x2580 [ 1119.134378][T31924] nf_tables_newset+0x1c2b/0x2580 [ 1119.134423][T31924] ? __pfx_nf_tables_newset+0x10/0x10 [ 1119.134476][T31924] ? __nla_parse+0x40/0x60 [ 1119.134511][T31924] nfnetlink_rcv+0x1240/0x27b0 [ 1119.134571][T31924] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1119.134643][T31924] ? netlink_deliver_tap+0x2e/0x1b0 [ 1119.134668][T31924] ? netlink_deliver_tap+0x2e/0x1b0 [ 1119.134711][T31924] netlink_unicast+0x80f/0x9b0 [ 1119.134743][T31924] ? __pfx_netlink_unicast+0x10/0x10 [ 1119.134767][T31924] ? netlink_sendmsg+0x650/0xb40 [ 1119.134789][T31924] ? skb_put+0x11b/0x210 [ 1119.134820][T31924] netlink_sendmsg+0x813/0xb40 [ 1119.134856][T31924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1119.134885][T31924] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1119.134919][T31924] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1119.134950][T31924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1119.134974][T31924] ____sys_sendmsg+0xa68/0xad0 [ 1119.135004][T31924] ? __might_fault+0xaf/0x130 [ 1119.135042][T31924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1119.135083][T31924] ? import_iovec+0x73/0xa0 [ 1119.135119][T31924] ___sys_sendmsg+0x2a5/0x360 [ 1119.135147][T31924] ? __lock_acquire+0x6b5/0x2cf0 [ 1119.135182][T31924] ? __pfx____sys_sendmsg+0x10/0x10 [ 1119.135252][T31924] ? __fget_files+0x2a/0x420 [ 1119.135274][T31924] ? __fget_files+0x3a0/0x420 [ 1119.135309][T31924] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1119.135343][T31924] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1119.135384][T31924] ? __pfx_ksys_write+0x10/0x10 [ 1119.135429][T31924] do_syscall_64+0xe2/0xf80 [ 1119.135459][T31924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.135479][T31924] ? trace_irq_disable+0x37/0x100 [ 1119.135499][T31924] ? clear_bhb_loop+0x60/0xb0 [ 1119.135524][T31924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.135545][T31924] RIP: 0033:0x7f4708f9af79 [ 1119.135566][T31924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.135584][T31924] RSP: 002b:00007f4709e70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1119.135607][T31924] RAX: ffffffffffffffda RBX: 00007f4709215fa0 RCX: 00007f4708f9af79 [ 1119.135623][T31924] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 1119.135636][T31924] RBP: 00007f4709e70090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.135650][T31924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1119.135662][T31924] R13: 00007f4709216038 R14: 00007f4709215fa0 R15: 00007fff49757848 [ 1119.135698][T31924] [ 1119.593819][T31927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7164'. [ 1119.866937][T31943] IPVS: Error connecting to the multicast addr [ 1119.893455][T31945] netlink: 'syz.1.7168': attribute type 2 has an invalid length. [ 1119.902525][T31945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7168'. [ 1119.982468][T31948] netlink: 'syz.1.7168': attribute type 10 has an invalid length. [ 1120.009047][T31948] veth0_vlan: left promiscuous mode [ 1120.016664][T31948] veth0_vlan: entered promiscuous mode [ 1120.050809][T31948] team0: Device veth0_vlan failed to register rx_handler [ 1120.419623][T31927] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1120.429295][T31927] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1120.504136][T31927] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1120.523517][T31927] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1120.545745][T31927] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1120.565687][T31927] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1120.617618][T31927] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1120.641500][T31927] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1120.741619][T27402] net_ratelimit: 119 callbacks suppressed [ 1120.741644][T27402] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1120.804373][T27402] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1120.940134][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1120.948032][T28911] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1120.972851][T31982] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7173'. [ 1121.001756][T31982] lo speed is unknown, defaulting to 1000 [ 1121.040960][T31974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7173'. [ 1121.052610][T31974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7173'. [ 1121.063711][T31983] syzkaller0: entered promiscuous mode [ 1121.075540][T31983] syzkaller0: entered allmulticast mode [ 1121.095769][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1121.106530][T31979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7177'. [ 1121.119866][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1121.139195][T28912] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1121.153889][T31981] syzkaller0: entered promiscuous mode [ 1121.159932][T31981] syzkaller0: entered allmulticast mode [ 1121.176676][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1121.198397][T31981] tipc: Enabled bearer , priority 0 [ 1121.218615][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1121.238835][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1121.266785][T31980] tipc: Resetting bearer [ 1121.287258][T31980] tipc: Disabling bearer [ 1121.391070][T31992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7180'. [ 1121.475730][T31982] lo speed is unknown, defaulting to 1000 [ 1121.617627][T32001] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7181'. [ 1121.677898][T31990] lo speed is unknown, defaulting to 1000 [ 1121.770413][T32001] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7181'. [ 1121.823447][T32009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7183'. [ 1122.185254][T32019] syzkaller0: entered promiscuous mode [ 1122.204651][T31989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.216888][T32019] syzkaller0: entered allmulticast mode [ 1122.262118][T31990] lo speed is unknown, defaulting to 1000 [ 1122.372104][T32023] batadv_slave_0: entered promiscuous mode [ 1122.464549][T32024] veth0_vlan: left promiscuous mode [ 1122.471069][T32024] veth0_vlan: entered promiscuous mode [ 1122.479870][T32024] team0: Device veth0_vlan failed to register rx_handler [ 1122.763345][T32034] FAULT_INJECTION: forcing a failure. [ 1122.763345][T32034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.777177][T32034] CPU: 1 UID: 0 PID: 32034 Comm: syz.4.7189 Not tainted syzkaller #0 PREEMPT(full) [ 1122.777206][T32034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1122.777219][T32034] Call Trace: [ 1122.777230][T32034] [ 1122.777240][T32034] dump_stack_lvl+0xe8/0x150 [ 1122.777273][T32034] should_fail_ex+0x412/0x560 [ 1122.777305][T32034] _copy_from_user+0x2d/0xb0 [ 1122.777338][T32034] __copy_msghdr+0x3c5/0x5b0 [ 1122.777374][T32034] ___sys_sendmsg+0x213/0x360 [ 1122.777403][T32034] ? __lock_acquire+0x6b5/0x2cf0 [ 1122.777438][T32034] ? __pfx____sys_sendmsg+0x10/0x10 [ 1122.777474][T32034] ? kstrtouint+0x6e/0xe0 [ 1122.777527][T32034] ? __fget_files+0x2a/0x420 [ 1122.777551][T32034] ? __fget_files+0x3a0/0x420 [ 1122.777586][T32034] __sys_sendmmsg+0x27c/0x4e0 [ 1122.777622][T32034] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1122.777659][T32034] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1122.777718][T32034] ? ksys_write+0x242/0x270 [ 1122.777752][T32034] ? __pfx_ksys_write+0x10/0x10 [ 1122.777790][T32034] __x64_sys_sendmmsg+0xa0/0xc0 [ 1122.777822][T32034] do_syscall_64+0xe2/0xf80 [ 1122.777851][T32034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.777871][T32034] ? trace_irq_disable+0x37/0x100 [ 1122.777890][T32034] ? clear_bhb_loop+0x60/0xb0 [ 1122.777916][T32034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.777936][T32034] RIP: 0033:0x7f047859af79 [ 1122.777956][T32034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.777974][T32034] RSP: 002b:00007f04793dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1122.777997][T32034] RAX: ffffffffffffffda RBX: 00007f0478815fa0 RCX: 00007f047859af79 [ 1122.778013][T32034] RDX: 0000000000000001 RSI: 0000200000001280 RDI: 0000000000000003 [ 1122.778027][T32034] RBP: 00007f04793dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.778040][T32034] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1122.778053][T32034] R13: 00007f0478816038 R14: 00007f0478815fa0 R15: 00007ffcd5329778 [ 1122.778088][T32034] [ 1123.028520][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 1123.036630][ C0] lec:lec_tx_timeout: lec0 [ 1123.042092][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1123.399604][T32060] xt_policy: output policy not valid in PREROUTING and INPUT [ 1123.426832][T32057] validate_nla: 3 callbacks suppressed [ 1123.426855][T32057] netlink: 'syz.3.7193': attribute type 12 has an invalid length. [ 1123.685147][T32069] syzkaller0: entered promiscuous mode [ 1123.696227][T32069] syzkaller0: entered allmulticast mode [ 1123.992960][T32077] netlink: 'syz.1.7201': attribute type 21 has an invalid length. [ 1124.001219][T32077] netlink: 'syz.1.7201': attribute type 4 has an invalid length. [ 1124.042343][T32084] geneve4: entered promiscuous mode [ 1124.053379][T32084] geneve4: entered allmulticast mode [ 1124.059204][T32087] batadv_slave_0: entered promiscuous mode [ 1124.071392][T32087] netlink: 'syz.3.7206': attribute type 2 has an invalid length. [ 1124.114902][T32091] netlink: 'syz.0.7207': attribute type 1 has an invalid length. [ 1124.159357][T32090] netlink: 'syz.3.7206': attribute type 10 has an invalid length. [ 1124.182956][T32091] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1124.193748][T32090] veth0_vlan: left promiscuous mode [ 1124.202324][T32090] veth0_vlan: entered promiscuous mode [ 1124.211416][T32090] team0: Device veth0_vlan failed to register rx_handler [ 1124.285043][T32094] bond7: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1124.327031][T32091] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1124.520488][T32114] 8021q: VLANs not supported on ip_vti0 [ 1124.835027][T32125] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1125.000941][T32133] syzkaller0: entered promiscuous mode [ 1125.006656][T32133] syzkaller0: entered allmulticast mode [ 1125.019353][T32133] __nla_validate_parse: 15 callbacks suppressed [ 1125.019374][T32133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7218'. [ 1125.098421][T32135] netlink: 332 bytes leftover after parsing attributes in process `syz.2.7221'. [ 1125.145238][T32137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7220'. [ 1125.350578][T32149] syzkaller1: entered promiscuous mode [ 1125.356126][T32149] syzkaller1: entered allmulticast mode [ 1125.519294][T32156] lo speed is unknown, defaulting to 1000 [ 1125.537940][T32152] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7225'. [ 1125.729494][T32162] netlink: 'syz.0.7228': attribute type 2 has an invalid length. [ 1125.742393][T32162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7228'. [ 1125.751741][T12103] net_ratelimit: 156 callbacks suppressed [ 1125.751764][T12103] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1125.751790][T12103] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1125.751820][T12103] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1125.751865][T12103] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1125.858680][T12103] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1125.868711][T32165] netlink: 'syz.0.7228': attribute type 10 has an invalid length. [ 1125.876730][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1125.877742][T12103] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1125.910731][T32165] veth0_vlan: left promiscuous mode [ 1125.916713][T12103] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1125.937158][T32165] veth0_vlan: entered promiscuous mode [ 1125.951328][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1125.961917][T32165] team0: Device veth0_vlan failed to register rx_handler [ 1125.988851][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1126.023617][T32168] syzkaller0: entered promiscuous mode [ 1126.030447][T32168] syzkaller0: entered allmulticast mode [ 1126.116558][T32156] lo speed is unknown, defaulting to 1000 [ 1126.602624][T32189] netlink: 'syz.2.7237': attribute type 1 has an invalid length. [ 1126.877558][T32200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7237'. [ 1126.978323][T32203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7238'. [ 1127.115515][T32192] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1127.167578][T32194] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1127.212502][T32198] vlan2: entered allmulticast mode [ 1127.229665][T32198] bridge_slave_0: entered allmulticast mode [ 1127.699670][T32216] xt_hashlimit: size too large, truncated to 1048576 [ 1128.028022][T32227] syzkaller0: entered promiscuous mode [ 1128.048426][T32227] syzkaller0: entered allmulticast mode [ 1128.049611][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1128.062325][ C0] lec:lec_tx_timeout: lec0 [ 1128.067480][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1128.429033][T32239] netlink: 'syz.2.7248': attribute type 2 has an invalid length. [ 1128.530753][T32243] netlink: 'syz.2.7248': attribute type 10 has an invalid length. [ 1128.576506][T32247] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7251'. [ 1128.587170][T32247] 0ªX¹¦À: renamed from caif0 [ 1128.597791][T32247] 0ªX¹¦À: entered allmulticast mode [ 1128.826089][T32256] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7255'. [ 1128.849803][T32256] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7255'. [ 1129.594496][T32303] netlink: 'syz.4.7269': attribute type 1 has an invalid length. [ 1129.603360][T32302] vlan2: entered allmulticast mode [ 1129.613347][T32302] team0: entered allmulticast mode [ 1129.623480][T32302] team_slave_0: entered allmulticast mode [ 1129.634519][T32302] team_slave_1: entered allmulticast mode [ 1129.649860][T32302] macvlan2: entered allmulticast mode [ 1129.705359][T32303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1129.718668][T32305] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1129.830618][T32309] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1130.004995][T32319] netlink: 'syz.4.7275': attribute type 2 has an invalid length. [ 1130.077933][T32321] netlink: 'syz.4.7275': attribute type 10 has an invalid length. [ 1130.086961][T32321] veth0_vlan: left promiscuous mode [ 1130.093821][T32321] veth0_vlan: entered promiscuous mode [ 1130.102726][T32321] team0: Device veth0_vlan failed to register rx_handler [ 1130.163054][T32324] netlink: 'syz.1.7276': attribute type 1 has an invalid length. [ 1130.182477][T32324] __nla_validate_parse: 4 callbacks suppressed [ 1130.182497][T32324] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7276'. [ 1130.817919][T28911] net_ratelimit: 263 callbacks suppressed [ 1130.817942][T28911] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1130.833464][T12103] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1130.842108][T27402] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1130.889263][T12103] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1130.899500][T28911] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1130.908698][T27402] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1130.915646][T32338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7281'. [ 1130.934272][T12103] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1130.958673][T28912] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1130.991190][T28911] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1131.002281][T12103] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1131.164650][T32346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1131.235671][T32346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1131.249883][T32346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1131.264195][T32346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1131.274154][T32346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1131.346944][T32346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1131.370149][T32346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1131.415186][T32346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1131.530563][T32346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.538387][T32346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.968727][T27402] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.987394][T27402] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.040951][T27402] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.060566][T27402] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.148982][T32376] netlink: 'syz.2.7291': attribute type 1 has an invalid length. [ 1132.191442][T32381] netlink: 'syz.4.7293': attribute type 2 has an invalid length. [ 1132.253511][T32382] lo speed is unknown, defaulting to 1000 [ 1132.280469][T32383] netlink: 'syz.4.7293': attribute type 10 has an invalid length. [ 1132.291078][T32383] veth0_vlan: left promiscuous mode [ 1132.323174][T32383] veth0_vlan: entered promiscuous mode [ 1132.356687][T32383] team0: Device veth0_vlan failed to register rx_handler [ 1132.472057][T32393] netlink: 'syz.0.7295': attribute type 4 has an invalid length. [ 1132.818663][T32382] lo speed is unknown, defaulting to 1000 [ 1132.829724][T32378] siw: device registration error -23 [ 1133.089062][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1133.097128][ C0] lec:lec_tx_timeout: lec0 [ 1133.334131][T32446] bond0: (slave sit0): Error: Device type is different from other slaves [ 1133.525935][T32437] lo speed is unknown, defaulting to 1000 [ 1133.844733][T32458] syzkaller1: entered promiscuous mode [ 1133.878855][T32458] syzkaller1: entered allmulticast mode [ 1133.962151][T32437] lo speed is unknown, defaulting to 1000 [ 1135.818808][T28912] net_ratelimit: 332 callbacks suppressed [ 1135.818835][T28912] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1135.833461][T28915] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1135.858806][T28915] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1135.866949][T28912] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1135.882336][T28912] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1135.890366][T28915] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1135.916225][T28912] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1135.924244][T28915] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1135.949095][T28912] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1135.957432][T28915] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1136.215173][T32486] validate_nla: 2 callbacks suppressed [ 1136.215254][T32486] netlink: 'syz.1.7319': attribute type 1 has an invalid length. [ 1136.289459][T32490] __nla_validate_parse: 170 callbacks suppressed [ 1136.289481][T32490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7317'. [ 1136.471592][T32493] netlink: 'syz.4.7317': attribute type 10 has an invalid length. [ 1136.955858][T32486] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1136.963756][T32487] netlink: 'syz.4.7317': attribute type 2 has an invalid length. [ 1136.971851][T32489] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1137.016068][T32491] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1137.027483][T32493] veth0_vlan: left promiscuous mode [ 1137.049026][T32493] veth0_vlan: entered promiscuous mode [ 1137.057102][T32493] team0: Device veth0_vlan failed to register rx_handler [ 1137.184824][T12211] lec:lec_start_xmit: lec0:No lecd attached [ 1137.340160][T32484] lo speed is unknown, defaulting to 1000 [ 1137.673643][T32525] ip6tnl3: entered promiscuous mode [ 1137.679269][T32525] ip6tnl3: entered allmulticast mode [ 1137.976769][T32537] lo speed is unknown, defaulting to 1000 [ 1138.000027][T32484] lo speed is unknown, defaulting to 1000 [ 1138.503906][T32537] lo speed is unknown, defaulting to 1000 [ 1138.524465][T32558] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7332'. [ 1138.650948][T32544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7328'. [ 1138.778544][T32561] netlink: 'syz.2.7333': attribute type 2 has an invalid length. [ 1138.789881][T32562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7333'. [ 1138.894655][T32561] netlink: 'syz.2.7333': attribute type 10 has an invalid length. [ 1139.199603][T32574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7335'. [ 1139.523432][T32579] lo speed is unknown, defaulting to 1000 [ 1139.666165][T32589] netlink: 'syz.4.7339': attribute type 2 has an invalid length. [ 1139.700800][T32589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7339'. [ 1139.760108][T32579] lo speed is unknown, defaulting to 1000 [ 1139.805305][T32598] netlink: 'syz.4.7339': attribute type 10 has an invalid length. [ 1139.846152][T32598] veth0_vlan: left promiscuous mode [ 1139.873684][T32598] veth0_vlan: entered promiscuous mode [ 1139.922513][T32607] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7343'. [ 1139.931640][T32598] team0: Device veth0_vlan failed to register rx_handler [ 1140.063937][T32616] netlink: 'syz.1.7345': attribute type 1 has an invalid length. [ 1140.168149][T32622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7346'. [ 1140.210406][T32616] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1140.237565][T32624] x_tables: duplicate underflow at hook 1 [ 1140.239627][T32625] bond6: (slave ip6gretap2): making interface the new active one [ 1140.253516][T32625] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1140.262977][T32620] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1140.287414][T32622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7346'. [ 1140.288776][T28914] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.324030][T28914] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.376653][T28914] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.426582][T28914] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.514969][T32633] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7351'. [ 1140.660369][T32635] netlink: 'syz.1.7350': attribute type 2 has an invalid length. [ 1140.680937][T32645] netlink: 'syz.1.7350': attribute type 10 has an invalid length. [ 1140.689098][T32645] veth0_vlan: left promiscuous mode [ 1140.695499][T32645] veth0_vlan: entered promiscuous mode [ 1140.721394][T32645] team0: Device veth0_vlan failed to register rx_handler [ 1140.839527][T27402] net_ratelimit: 440 callbacks suppressed [ 1140.839549][T27402] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1140.855434][T28915] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1140.863886][T28914] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1140.875502][T28915] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1140.909449][T27402] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1140.919890][T28915] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1140.927768][T28915] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1140.979418][T28915] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1140.987782][T28915] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1140.996760][T27402] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1141.189981][T32672] team0: Failed to send options change via netlink (err -105) [ 1141.197746][T32672] team0: Port device dummy0 added [ 1141.235130][T32672] validate_nla: 1 callbacks suppressed [ 1141.235151][T32672] netlink: 'syz.4.7362': attribute type 10 has an invalid length. [ 1141.264024][T32672] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1141.302316][T32677] __nla_validate_parse: 3 callbacks suppressed [ 1141.302340][T32677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7364'. [ 1141.322622][T32672] team0: Failed to send options change via netlink (err -105) [ 1141.331148][T32672] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1141.341595][T32672] team0: Port device dummy0 removed [ 1141.351841][T32679] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7365'. [ 1141.365251][T32675] netlink: 'syz.0.7363': attribute type 7 has an invalid length. [ 1141.373996][T32675] netlink: 'syz.0.7363': attribute type 8 has an invalid length. [ 1141.583726][T32690] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7369'. [ 1141.700456][T32688] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7368'. [ 1141.713616][T32688] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7368'. [ 1141.732340][T32692] lo speed is unknown, defaulting to 1000 [ 1141.760933][T32698] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7373'. [ 1142.199073][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1142.207182][ C0] lec:lec_tx_timeout: lec0 [ 1142.233878][T32725] netlink: 'syz.2.7378': attribute type 2 has an invalid length. [ 1142.273301][T32725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7378'. [ 1142.352204][T32734] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7383'. [ 1142.365337][T32735] netlink: 'syz.2.7378': attribute type 10 has an invalid length. [ 1142.406880][T32692] lo speed is unknown, defaulting to 1000 [ 1142.476805][T32737] xt_policy: neither incoming nor outgoing policy selected [ 1142.498857][T32739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7385'. [ 1142.627666][T32741] vlan4: entered promiscuous mode [ 1142.633967][T32741] bridge0: entered promiscuous mode [ 1142.646072][T32746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7387'. [ 1142.927408][T32758] .70·: renamed from hsr0 [ 1142.937660][T32758] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1142.952672][T32758] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1142.964210][T32758] .70·: entered allmulticast mode [ 1142.971750][T32758] hsr_slave_0: entered allmulticast mode [ 1142.981946][T32758] hsr_slave_1: entered allmulticast mode [ 1143.103246][T32755] lo speed is unknown, defaulting to 1000 [ 1143.398761][ T305] lo speed is unknown, defaulting to 1000 [ 1143.404363][T32755] lo speed is unknown, defaulting to 1000 [ 1143.982367][ T305] lo speed is unknown, defaulting to 1000 [ 1144.005433][ T333] vlan4: entered promiscuous mode [ 1144.093321][ T332] tipc: Enabled bearer , priority 0 [ 1144.101156][ T334] syzkaller0: entered promiscuous mode [ 1144.106673][ T334] syzkaller0: entered allmulticast mode [ 1144.282851][ T331] tipc: Resetting bearer [ 1144.315501][ T339] netlink: 'syz.0.7404': attribute type 2 has an invalid length. [ 1144.392519][ T342] netlink: 'syz.0.7404': attribute type 10 has an invalid length. [ 1144.432075][ T331] tipc: Resetting bearer [ 1144.463534][ T331] tipc: Disabling bearer [ 1144.477576][ T342] veth0_vlan: left promiscuous mode [ 1144.484201][ T342] veth0_vlan: entered promiscuous mode [ 1144.493508][ T342] team0: Device veth0_vlan failed to register rx_handler [ 1144.544632][ T349] netlink: 'syz.1.7406': attribute type 29 has an invalid length. [ 1145.634244][ T390] netlink: 'syz.0.7423': attribute type 2 has an invalid length. [ 1145.707217][ T395] netlink: 'syz.0.7423': attribute type 10 has an invalid length. [ 1145.729403][ T394] bridge_slave_1: left allmulticast mode [ 1145.735136][ T394] bridge_slave_1: left promiscuous mode [ 1145.749278][ T394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.796838][ T394] bridge_slave_0: left allmulticast mode [ 1145.822982][ T394] bridge_slave_0: left promiscuous mode [ 1145.841337][ T394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.849220][T27402] net_ratelimit: 367 callbacks suppressed [ 1145.849240][T27402] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1145.858965][T12103] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1145.865066][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1145.898699][T12103] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1145.899771][T28918] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1145.930294][T28915] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1145.939762][T12103] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1145.978669][T12103] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1145.979970][T28915] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1145.999581][T12103] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1146.108698][ T395] veth0_vlan: left promiscuous mode [ 1146.115622][ T395] veth0_vlan: entered promiscuous mode [ 1146.124062][ T395] team0: Device veth0_vlan failed to register rx_handler [ 1146.231258][ T404] lo speed is unknown, defaulting to 1000 [ 1146.348207][ T394] __nla_validate_parse: 15 callbacks suppressed [ 1146.348228][ T394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7425'. [ 1146.412456][ T394] netlink: 336 bytes leftover after parsing attributes in process `syz.2.7425'. [ 1146.493207][ T413] tipc: Enabled bearer , priority 0 [ 1146.528637][ T394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7425'. [ 1146.577103][ T412] tipc: Disabling bearer [ 1146.601415][ T394] netlink: 336 bytes leftover after parsing attributes in process `syz.2.7425'. [ 1146.739840][ T394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7425'. [ 1146.905026][ T404] lo speed is unknown, defaulting to 1000 [ 1146.963651][ T432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7434'. [ 1146.974986][ T436] FAULT_INJECTION: forcing a failure. [ 1146.974986][ T436] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.004113][ T436] CPU: 1 UID: 0 PID: 436 Comm: syz.2.7436 Not tainted syzkaller #0 PREEMPT(full) [ 1147.004143][ T436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1147.004157][ T436] Call Trace: [ 1147.004166][ T436] [ 1147.004175][ T436] dump_stack_lvl+0xe8/0x150 [ 1147.004209][ T436] should_fail_ex+0x412/0x560 [ 1147.004242][ T436] should_failslab+0xa8/0x100 [ 1147.004269][ T436] __kmalloc_cache_noprof+0x83/0x6e0 [ 1147.004293][ T436] ? allocate_cgrp_cset_links+0xc9/0x320 [ 1147.004315][ T436] ? __kasan_kmalloc+0x93/0xb0 [ 1147.004343][ T436] allocate_cgrp_cset_links+0xc9/0x320 [ 1147.004373][ T436] find_css_set+0x9e2/0x1a60 [ 1147.004417][ T436] ? __pfx_find_css_set+0x10/0x10 [ 1147.004472][ T436] cgroup_migrate_prepare_dst+0x130/0x700 [ 1147.004509][ T436] cgroup_attach_task+0x485/0x830 [ 1147.004537][ T436] ? __pfx_cgroup_attach_task+0x10/0x10 [ 1147.004575][ T436] ? cgroup_attach_permissions+0x4f3/0x9e0 [ 1147.004613][ T436] __cgroup_procs_write+0x2a9/0x300 [ 1147.004650][ T436] cgroup_procs_write+0x27/0x50 [ 1147.004670][ T436] ? __pfx_cgroup_procs_write+0x10/0x10 [ 1147.004692][ T436] cgroup_file_write+0x36f/0x790 [ 1147.004720][ T436] ? __pfx_cgroup_file_write+0x10/0x10 [ 1147.004740][ T436] ? rcu_is_watching+0x15/0xb0 [ 1147.004775][ T436] ? __pfx_cgroup_file_write+0x10/0x10 [ 1147.004801][ T436] kernfs_fop_write_iter+0x3af/0x540 [ 1147.004834][ T436] vfs_write+0x61d/0xb90 [ 1147.004882][ T436] ? __pfx_vfs_write+0x10/0x10 [ 1147.004926][ T436] ? __fget_files+0x2a/0x420 [ 1147.004962][ T436] ksys_write+0x150/0x270 [ 1147.004996][ T436] ? __pfx_ksys_write+0x10/0x10 [ 1147.005042][ T436] do_syscall_64+0xe2/0xf80 [ 1147.005072][ T436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.005092][ T436] ? trace_irq_disable+0x37/0x100 [ 1147.005112][ T436] ? clear_bhb_loop+0x60/0xb0 [ 1147.005138][ T436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.005158][ T436] RIP: 0033:0x7f3145b9af79 [ 1147.005179][ T436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1147.005197][ T436] RSP: 002b:00007f3146a01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1147.005220][ T436] RAX: ffffffffffffffda RBX: 00007f3145e15fa0 RCX: 00007f3145b9af79 [ 1147.005236][ T436] RDX: 0000000000000012 RSI: 0000200000000380 RDI: 0000000000000007 [ 1147.005250][ T436] RBP: 00007f3146a01090 R08: 0000000000000000 R09: 0000000000000000 [ 1147.005264][ T436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1147.005277][ T436] R13: 00007f3145e16038 R14: 00007f3145e15fa0 R15: 00007fff321a3f38 [ 1147.005321][ T436] [ 1147.227762][ T444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7436'. [ 1147.362517][ T446] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7435'. [ 1147.377247][ T444] batadv1: entered promiscuous mode [ 1147.384538][ T444] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1147.658135][ T455] netlink: 'syz.2.7442': attribute type 2 has an invalid length. [ 1147.702838][ T455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7442'. [ 1147.731370][ T464] netlink: 'syz.0.7443': attribute type 3 has an invalid length. [ 1147.822963][ T465] netlink: 'syz.2.7442': attribute type 10 has an invalid length. [ 1147.856231][ T467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7444'. [ 1147.960379][ T469] pim6reg: entered allmulticast mode [ 1147.979681][ T468] pim6reg: left allmulticast mode [ 1148.076501][ T477] FAULT_INJECTION: forcing a failure. [ 1148.076501][ T477] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.089559][ T477] CPU: 1 UID: 0 PID: 477 Comm: syz.0.7449 Not tainted syzkaller #0 PREEMPT(full) [ 1148.089589][ T477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1148.089603][ T477] Call Trace: [ 1148.089612][ T477] [ 1148.089623][ T477] dump_stack_lvl+0xe8/0x150 [ 1148.089675][ T477] should_fail_ex+0x412/0x560 [ 1148.089708][ T477] should_failslab+0xa8/0x100 [ 1148.089735][ T477] __kmalloc_cache_noprof+0x83/0x6e0 [ 1148.089759][ T477] ? allocate_cgrp_cset_links+0xc9/0x320 [ 1148.089782][ T477] ? __kasan_kmalloc+0x93/0xb0 [ 1148.089808][ T477] allocate_cgrp_cset_links+0xc9/0x320 [ 1148.089839][ T477] find_css_set+0x9e2/0x1a60 [ 1148.089883][ T477] ? __pfx_find_css_set+0x10/0x10 [ 1148.089941][ T477] cgroup_migrate_prepare_dst+0x130/0x700 [ 1148.089978][ T477] cgroup_attach_task+0x485/0x830 [ 1148.090008][ T477] ? __pfx_cgroup_attach_task+0x10/0x10 [ 1148.090046][ T477] ? cgroup_attach_permissions+0x4f3/0x9e0 [ 1148.090084][ T477] __cgroup_procs_write+0x2a9/0x300 [ 1148.090121][ T477] cgroup_procs_write+0x27/0x50 [ 1148.090141][ T477] ? __pfx_cgroup_procs_write+0x10/0x10 [ 1148.090162][ T477] cgroup_file_write+0x36f/0x790 [ 1148.090190][ T477] ? __pfx_cgroup_file_write+0x10/0x10 [ 1148.090210][ T477] ? rcu_is_watching+0x15/0xb0 [ 1148.090245][ T477] ? __pfx_cgroup_file_write+0x10/0x10 [ 1148.090262][ T477] kernfs_fop_write_iter+0x3af/0x540 [ 1148.090296][ T477] vfs_write+0x61d/0xb90 [ 1148.090338][ T477] ? __pfx_vfs_write+0x10/0x10 [ 1148.090382][ T477] ? __fget_files+0x2a/0x420 [ 1148.090419][ T477] ksys_write+0x150/0x270 [ 1148.090453][ T477] ? __pfx_ksys_write+0x10/0x10 [ 1148.090499][ T477] do_syscall_64+0xe2/0xf80 [ 1148.090528][ T477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.090549][ T477] ? trace_irq_disable+0x37/0x100 [ 1148.090570][ T477] ? clear_bhb_loop+0x60/0xb0 [ 1148.090596][ T477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.090617][ T477] RIP: 0033:0x7f4708f9af79 [ 1148.090645][ T477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.090664][ T477] RSP: 002b:00007f4709e70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1148.090687][ T477] RAX: ffffffffffffffda RBX: 00007f4709215fa0 RCX: 00007f4708f9af79 [ 1148.090703][ T477] RDX: 0000000000000012 RSI: 0000200000000380 RDI: 0000000000000007 [ 1148.090717][ T477] RBP: 00007f4709e70090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.090730][ T477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.090743][ T477] R13: 00007f4709216038 R14: 00007f4709215fa0 R15: 00007fff49757848 [ 1148.090781][ T477] [ 1148.365164][ T477] batadv2: entered promiscuous mode [ 1148.375644][ T477] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1148.422987][ T482] netlink: 'syz.3.7451': attribute type 1 has an invalid length. [ 1148.507667][ T483] bridge_slave_1: left allmulticast mode [ 1148.534378][ T483] bridge_slave_1: left promiscuous mode [ 1148.546007][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.606042][ T482] bond7: entered promiscuous mode [ 1148.612610][ T482] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1148.714916][ T492] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1148.731179][ T492] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1148.751214][ T492] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1149.158312][ T506] tipc: Enabled bearer , priority 0 [ 1149.184428][ T506] syzkaller0: entered promiscuous mode [ 1149.199517][ T506] syzkaller0: entered allmulticast mode [ 1149.214787][ T509] batadv4: entered promiscuous mode [ 1149.223459][ T509] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1149.289499][ T504] tipc: Resetting bearer [ 1149.399136][ T504] tipc: Disabling bearer [ 1149.630369][ T527] netlink: 'syz.1.7464': attribute type 2 has an invalid length. [ 1149.694029][ T529] netlink: 'syz.1.7464': attribute type 10 has an invalid length. [ 1149.702941][ T529] veth0_vlan: left promiscuous mode [ 1149.710330][ T529] veth0_vlan: entered promiscuous mode [ 1149.718070][ T529] team0: Device veth0_vlan failed to register rx_handler [ 1150.123369][ T550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1150.131863][ T550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.442322][ T556] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1150.472774][ T556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.482792][ T556] bond8: (slave batadv0): Enslaving as an active interface with an up link [ 1150.510085][ T556] bond8 (unregistering): (slave batadv0): Releasing backup interface [ 1150.536891][ T556] bond8 (unregistering): Released all slaves [ 1150.730553][ T568] lo speed is unknown, defaulting to 1000 [ 1150.891369][T28918] net_ratelimit: 316 callbacks suppressed [ 1150.891395][T28918] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1150.905401][T28915] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1150.928655][T28911] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1150.947897][T28915] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1150.998600][T28918] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1151.006506][T28914] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1151.038735][T28918] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1151.056986][T28914] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1151.069115][T28918] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1151.079088][T27402] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1151.247007][ T568] lo speed is unknown, defaulting to 1000 [ 1151.345599][ T599] netlink: 'syz.0.7487': attribute type 2 has an invalid length. [ 1151.369772][ T599] __nla_validate_parse: 12 callbacks suppressed [ 1151.369796][ T599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7487'. [ 1151.487718][ T603] netlink: 'syz.0.7487': attribute type 10 has an invalid length. [ 1151.496623][ T603] veth0_vlan: left promiscuous mode [ 1151.506230][ T603] veth0_vlan: entered promiscuous mode [ 1151.515275][ T603] team0: Device veth0_vlan failed to register rx_handler [ 1151.732418][ T618] bond0: (slave dummy0): Releasing backup interface [ 1151.741149][ T618] bridge_slave_0: left allmulticast mode [ 1151.746970][ T618] bridge_slave_0: left promiscuous mode [ 1151.760000][ T618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.772170][ T618] bridge_slave_1: left allmulticast mode [ 1151.777475][ T620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7492'. [ 1151.779047][ T618] bridge_slave_1: left promiscuous mode [ 1151.794888][ T618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.798277][ T620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7492'. [ 1151.820042][ T618] bond0: (slave bond_slave_0): Releasing backup interface [ 1151.841521][ T618] bond0: (slave bond_slave_1): Releasing backup interface [ 1151.852765][ T618] team0: Port device team_slave_0 removed [ 1151.862077][ T618] team0: Port device team_slave_1 removed [ 1151.868308][ T618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.883999][ T618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1152.123021][ T629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7496'. [ 1152.486008][ T654] IPVS: Error connecting to the multicast addr [ 1152.629849][ T664] tipc: Enabling of bearer rejected, failed to enable media [ 1152.720980][ T670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7509'. [ 1152.732499][ T670] netlink: 'syz.1.7509': attribute type 11 has an invalid length. [ 1152.905845][ T682] lo speed is unknown, defaulting to 1000 [ 1153.061705][ T684] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7515'. [ 1153.097162][ T693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7517'. [ 1153.366578][ T690] lo speed is unknown, defaulting to 1000 [ 1153.372713][ T682] lo speed is unknown, defaulting to 1000 [ 1153.582501][ T713] netlink: 'syz.4.7523': attribute type 1 has an invalid length. [ 1153.635520][ T713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7523'. [ 1153.833333][ T713] bond2: (slave bond_slave_1): Device is not bonding slave [ 1153.875053][ T713] bond2: option active_slave: invalid value (bond_slave_1) [ 1153.900850][ T713] bond2 (unregistering): Released all slaves [ 1153.913614][ T730] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1154.042050][ T690] lo speed is unknown, defaulting to 1000 [ 1154.091081][ T734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7530'. [ 1154.118717][ T734] netlink: 'syz.2.7530': attribute type 7 has an invalid length. [ 1154.126992][ T734] netlink: 'syz.2.7530': attribute type 8 has an invalid length. [ 1154.198840][ T734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7530'. [ 1154.522134][ T750] tipc: Enabled bearer , priority 0 [ 1154.535391][ T750] syzkaller0: entered promiscuous mode [ 1154.541916][ T750] syzkaller0: entered allmulticast mode [ 1154.585493][ T750] tipc: Resetting bearer [ 1154.663626][ T749] tipc: Resetting bearer [ 1154.813619][ T749] tipc: Disabling bearer [ 1154.914416][ T762] tipc: Enabling of bearer rejected, failed to enable media [ 1155.126343][ T769] netlink: 'syz.0.7543': attribute type 54 has an invalid length. [ 1155.301563][ T783] netlink: 'syz.0.7545': attribute type 12 has an invalid length. [ 1155.586271][ T798] SET target dimension over the limit! [ 1155.766174][ T805] netlink: 'syz.3.7550': attribute type 12 has an invalid length. [ 1155.909951][T28915] net_ratelimit: 422 callbacks suppressed [ 1155.909975][T28915] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1155.924653][T28911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1155.942140][ T807] macsec2: entered promiscuous mode [ 1155.947420][ T807] bridge0: entered promiscuous mode [ 1155.950534][T28915] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1155.961478][T28911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1155.979138][T28914] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1155.989692][T28914] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1156.001175][T27402] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1156.009936][T28911] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1156.029649][T28911] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1156.046587][T28914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1156.422726][ T826] __nla_validate_parse: 3 callbacks suppressed [ 1156.422749][ T826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7559'. [ 1156.519280][ T834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7559'. [ 1156.813796][ T849] syzkaller0: entered promiscuous mode [ 1156.820894][ T849] syzkaller0: entered allmulticast mode [ 1156.916698][ T856] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7564'. [ 1156.942217][ T852] TCP: TCP_TX_DELAY enabled [ 1156.990787][ T842] lo speed is unknown, defaulting to 1000 [ 1157.173079][ T869] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7572'. [ 1157.336429][ T878] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7570'. [ 1157.372464][ T879] netlink: 'syz.3.7573': attribute type 12 has an invalid length. [ 1157.418985][ T842] lo speed is unknown, defaulting to 1000 [ 1157.466372][ T877] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7574'. [ 1158.050738][ T891] xt_connbytes: Forcing CT accounting to be enabled [ 1158.067944][ T891] Cannot find set identified by id 65470 to match [ 1158.143007][ T896] netlink: 'syz.1.7579': attribute type 10 has an invalid length. [ 1158.165986][ T898] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7580'. [ 1158.193422][ T897] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7580'. [ 1158.281864][ T900] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1158.306137][ T910] netlink: 332 bytes leftover after parsing attributes in process `syz.0.7583'. [ 1158.491314][ T917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7586'. [ 1158.589637][ T934] netlink: 'syz.3.7588': attribute type 18 has an invalid length. [ 1158.947654][ T941] pim6reg: entered allmulticast mode [ 1158.980875][ T944] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1158.999752][ T941] pim6reg: left allmulticast mode [ 1159.101486][ T952] tipc: Enabling of bearer rejected, failed to enable media [ 1159.359805][ T30] audit: type=1800 audit(1770687358.594:13): pid=970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7596" name="memory.events" dev="tmpfs" ino=1411 res=0 errno=0 [ 1160.086896][ T1015] netlink: 'syz.2.7609': attribute type 10 has an invalid length. [ 1160.257972][ T1022] bond0: (slave sit0): Error: Device type is different from other slaves [ 1160.359777][ T1025] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 1160.409432][ T1025] : renamed from bond_slave_0 [ 1160.793397][ T1044] lo speed is unknown, defaulting to 1000 [ 1160.918903][T27402] net_ratelimit: 432 callbacks suppressed [ 1160.918930][T27402] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1160.932758][T28914] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1160.940870][T28918] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1160.950760][T28914] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1160.968031][ T1067] netlink: 'syz.2.7624': attribute type 2 has an invalid length. [ 1160.978642][T28914] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1160.986674][T27402] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1160.994688][T28914] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1161.019246][T28914] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1161.080664][T28914] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1161.088705][T27402] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1161.111351][ T1044] lo speed is unknown, defaulting to 1000 [ 1161.203574][ T1076] netlink: 'syz.1.7626': attribute type 5 has an invalid length. [ 1161.490278][ T1086] __nla_validate_parse: 15 callbacks suppressed [ 1161.490382][ T1086] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7629'. [ 1161.509570][ T1086] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7629'. [ 1161.533656][ T1086] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7629'. [ 1161.613035][ T1090] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7628'. [ 1161.835477][ T1098] xt_recent: Unsupported userspace flags (000000b1) [ 1162.081861][ T1118] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7636'. [ 1162.112913][ T1119] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7636'. [ 1162.131164][ T1121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7638'. [ 1162.161843][ T1124] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1162.260904][ T1133] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7635'. [ 1162.547116][ T1148] netlink: 'syz.1.7646': attribute type 2 has an invalid length. [ 1162.556440][ T1148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7646'. [ 1162.805095][ T1160] netlink: 'syz.4.7648': attribute type 1 has an invalid length. [ 1162.830214][ T1160] netlink: 'syz.4.7648': attribute type 7 has an invalid length. [ 1162.846119][ T1160] netlink: 'syz.4.7648': attribute type 8 has an invalid length. [ 1163.027870][ T1172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7652'. [ 1163.580895][ T1195] xt_TCPMSS: Only works on TCP SYN packets [ 1163.826268][ T1219] bond7: option lacp_active: invalid value (8) [ 1163.839712][ T1219] bond7 (unregistering): Released all slaves [ 1164.091668][ T1240] tipc: Cannot configure node identity twice [ 1164.097899][ T1240] tipc: Cannot configure node identity twice [ 1164.148395][ T1242] netlink: 'syz.1.7671': attribute type 2 has an invalid length. [ 1164.228057][ T1249] netlink: 'syz.0.7675': attribute type 21 has an invalid length. [ 1164.388053][ T1253] lo speed is unknown, defaulting to 1000 [ 1164.391311][ T1257] netlink: 'syz.3.7674': attribute type 11 has an invalid length. [ 1164.410887][ T1261] netlink: 'syz.2.7676': attribute type 10 has an invalid length. [ 1164.486550][ T1263] syzkaller0: entered promiscuous mode [ 1164.492785][ T1263] syzkaller0: entered allmulticast mode [ 1164.513152][ T1263] tipc: Enabled bearer , priority 0 [ 1164.539894][ T1262] tipc: Resetting bearer [ 1164.588887][ T1262] tipc: Disabling bearer [ 1164.609478][ T1268] netlink: 'syz.2.7679': attribute type 12 has an invalid length. [ 1164.617764][ T1267] netlink: 'syz.2.7679': attribute type 12 has an invalid length. [ 1164.790210][ T1253] lo speed is unknown, defaulting to 1000 [ 1164.877558][ T1275] lo speed is unknown, defaulting to 1000 [ 1165.658930][ T1326] syzkaller0: entered promiscuous mode [ 1165.665193][ T1326] syzkaller0: entered allmulticast mode [ 1165.722953][ T1326] tipc: Enabled bearer , priority 0 [ 1165.737984][ T1325] tipc: Resetting bearer [ 1165.773686][ T1325] tipc: Disabling bearer [ 1165.786891][ T1275] lo speed is unknown, defaulting to 1000 [ 1165.905333][ T1336] netlink: 'syz.1.7693': attribute type 3 has an invalid length. [ 1165.932916][ T1336] netlink: 'syz.1.7693': attribute type 1 has an invalid length. [ 1165.943064][T28910] net_ratelimit: 328 callbacks suppressed [ 1165.943085][T28910] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1165.957603][T28861] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1165.966080][T15588] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1165.977117][ T1336] NCSI netlink: No device for ifindex 808464432 [ 1165.995613][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1166.007014][T28915] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1166.010865][T27394] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1166.029333][T28861] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1166.058668][T28861] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1166.068216][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1166.076674][T15588] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1166.206491][ T1335] netlink: 'syz.2.7694': attribute type 2 has an invalid length. [ 1166.344913][ T1344] lo speed is unknown, defaulting to 1000 [ 1166.643097][ T1344] lo speed is unknown, defaulting to 1000 [ 1167.151839][ T1376] __nla_validate_parse: 74 callbacks suppressed [ 1167.151861][ T1376] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7704'. [ 1167.170662][ T1376] netlink: 'syz.0.7704': attribute type 39 has an invalid length. [ 1167.201929][ T1378] FAULT_INJECTION: forcing a failure. [ 1167.201929][ T1378] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.232324][ T1378] CPU: 1 UID: 0 PID: 1378 Comm: syz.2.7703 Not tainted syzkaller #0 PREEMPT(full) [ 1167.232370][ T1378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1167.232394][ T1378] Call Trace: [ 1167.232409][ T1378] [ 1167.232420][ T1378] dump_stack_lvl+0xe8/0x150 [ 1167.232454][ T1378] should_fail_ex+0x412/0x560 [ 1167.232486][ T1378] should_failslab+0xa8/0x100 [ 1167.232513][ T1378] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1167.232544][ T1378] ? apparmor_capable+0x137/0x1a0 [ 1167.232576][ T1378] ? skb_clone+0x212/0x3a0 [ 1167.232612][ T1378] skb_clone+0x212/0x3a0 [ 1167.232640][ T1378] ? nfnetlink_rcv+0x4b0/0x27b0 [ 1167.232664][ T1378] nfnetlink_rcv+0x4e2/0x27b0 [ 1167.232696][ T1378] ? is_bpf_text_address+0x26/0x2b0 [ 1167.232725][ T1378] ? kernel_text_address+0xa5/0xe0 [ 1167.232753][ T1378] ? __kernel_text_address+0xd/0x30 [ 1167.232779][ T1378] ? unwind_get_return_address+0x4d/0x90 [ 1167.232808][ T1378] ? __lock_acquire+0x6b5/0x2cf0 [ 1167.232843][ T1378] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1167.232882][ T1378] ? __lock_acquire+0x6b5/0x2cf0 [ 1167.232923][ T1378] ? __netlink_lookup+0xc6/0x8b0 [ 1167.232961][ T1378] ? netlink_deliver_tap+0x2e/0x1b0 [ 1167.232986][ T1378] ? netlink_deliver_tap+0x2e/0x1b0 [ 1167.233029][ T1378] netlink_unicast+0x80f/0x9b0 [ 1167.233060][ T1378] ? __pfx_netlink_unicast+0x10/0x10 [ 1167.233084][ T1378] ? netlink_sendmsg+0x650/0xb40 [ 1167.233106][ T1378] ? skb_put+0x11b/0x210 [ 1167.233138][ T1378] netlink_sendmsg+0x813/0xb40 [ 1167.233172][ T1378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.233208][ T1378] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1167.233236][ T1378] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1167.233260][ T1378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.233284][ T1378] ____sys_sendmsg+0xa68/0xad0 [ 1167.233318][ T1378] ? __might_fault+0xaf/0x130 [ 1167.233357][ T1378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1167.233396][ T1378] ? import_iovec+0x73/0xa0 [ 1167.233432][ T1378] ___sys_sendmsg+0x2a5/0x360 [ 1167.233461][ T1378] ? __lock_acquire+0x6b5/0x2cf0 [ 1167.233495][ T1378] ? __pfx____sys_sendmsg+0x10/0x10 [ 1167.233563][ T1378] ? __fget_files+0x2a/0x420 [ 1167.233586][ T1378] ? __fget_files+0x3a0/0x420 [ 1167.233621][ T1378] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1167.233655][ T1378] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1167.233695][ T1378] ? __pfx_ksys_write+0x10/0x10 [ 1167.233739][ T1378] do_syscall_64+0xe2/0xf80 [ 1167.233768][ T1378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.233789][ T1378] ? trace_irq_disable+0x37/0x100 [ 1167.233809][ T1378] ? clear_bhb_loop+0x60/0xb0 [ 1167.233835][ T1378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.233855][ T1378] RIP: 0033:0x7f3145b9af79 [ 1167.233874][ T1378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.233893][ T1378] RSP: 002b:00007f3146a01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1167.233916][ T1378] RAX: ffffffffffffffda RBX: 00007f3145e15fa0 RCX: 00007f3145b9af79 [ 1167.233932][ T1378] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 1167.233946][ T1378] RBP: 00007f3146a01090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.233960][ T1378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.233972][ T1378] R13: 00007f3145e16038 R14: 00007f3145e15fa0 R15: 00007fff321a3f38 [ 1167.234008][ T1378] [ 1167.959672][ T1398] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7708'. [ 1167.981038][ T1399] netlink: 332 bytes leftover after parsing attributes in process `syz.1.7709'. [ 1167.996949][ T1398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7708'. [ 1168.047781][ T1398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7708'. [ 1168.094763][ T1398] batadv5: entered promiscuous mode [ 1168.104629][ T1398] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1168.130616][ T1404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7711'. [ 1168.220750][ T1410] IPVS: set_ctl: invalid protocol: 47 0.0.0.218:20001 [ 1168.270259][T30981] IPVS: starting estimator thread 0... [ 1168.378653][ T1413] IPVS: using max 26 ests per chain, 62400 per kthread [ 1168.683380][ T1412] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1168.716992][ T1412] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1168.765471][ T1435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7720'. [ 1168.772659][ T1431] gretap3: entered allmulticast mode [ 1168.783902][ T1431] bond2: (slave gretap3): making interface the new active one [ 1168.792612][ T1431] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 1168.835966][ T1435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7720'. [ 1169.186693][ T1459] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7723'. [ 1169.228820][ T1456] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7724'. [ 1169.739975][ T1487] lo speed is unknown, defaulting to 1000 [ 1169.823496][ T1491] validate_nla: 3 callbacks suppressed [ 1169.823516][ T1491] netlink: 'syz.3.7734': attribute type 2 has an invalid length. [ 1170.086025][ T1487] lo speed is unknown, defaulting to 1000 [ 1170.163660][ T1499] sctp: [Deprecated]: syz.4.7737 (pid 1499) Use of int in max_burst socket option deprecated. [ 1170.163660][ T1499] Use struct sctp_assoc_value instead [ 1170.597254][ T1512] syzkaller1: entered promiscuous mode [ 1170.602998][ T1512] syzkaller1: entered allmulticast mode [ 1170.949128][T28861] net_ratelimit: 354 callbacks suppressed [ 1170.949150][T28861] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1170.949620][T28863] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1170.955048][T28861] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1170.964776][T28915] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1171.019373][T28915] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.059200][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1171.079169][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1171.109207][T27394] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1171.117248][T28915] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1171.147567][T28915] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1171.225777][ T1542] netlink: 'syz.3.7748': attribute type 5 has an invalid length. [ 1171.722643][ T1562] sctp: [Deprecated]: syz.3.7754 (pid 1562) Use of int in maxseg socket option. [ 1171.722643][ T1562] Use struct sctp_assoc_value instead [ 1172.114908][ T1579] netlink: 'syz.3.7757': attribute type 12 has an invalid length. [ 1172.277103][ T1555] netlink: 'syz.2.7752': attribute type 13 has an invalid length. [ 1175.998857][T28910] net_ratelimit: 279 callbacks suppressed [ 1175.998883][T28910] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1176.012638][T28910] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1176.020282][T27394] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1176.039070][T28863] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1176.046952][T28863] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.050799][T28910] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1176.062602][T28910] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1176.128721][T28863] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1176.136537][T28863] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1176.159140][T28861] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.008734][T28863] net_ratelimit: 261 callbacks suppressed [ 1181.008759][T28863] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.022519][T28863] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1181.030147][T28863] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.037908][T28863] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.079208][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1181.087007][T27394] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1181.139144][T27394] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.147041][T27394] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1181.154557][T28910] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.169068][T27394] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1182.554354][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1186.029174][T28910] net_ratelimit: 261 callbacks suppressed [ 1186.029199][T28910] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1186.042833][T28915] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1186.050674][T28915] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1186.051684][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1186.058263][T28910] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.079155][T28910] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1186.086939][T28910] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1186.158719][T28910] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1186.166509][T28910] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1186.179141][T27394] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1187.988631][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 1187.996699][ C0] lec:lec_tx_timeout: lec0 [ 1191.048833][T27394] net_ratelimit: 264 callbacks suppressed [ 1191.048860][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1191.062794][T27394] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1191.079179][T27394] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1191.079303][T28910] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1191.086974][T27394] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1191.103206][T28910] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.178796][T28863] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1191.186695][T28863] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1191.189477][T28910] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1191.202401][T28910] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1196.059068][T28861] net_ratelimit: 262 callbacks suppressed [ 1196.059087][T28861] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1196.073307][T28915] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1196.073327][T28861] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1196.099150][T28863] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1196.106949][T28863] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1196.159236][T28915] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1196.167026][T28915] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1196.199151][T28915] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1196.206933][T28915] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1196.229276][T28863] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1201.078901][T28910] net_ratelimit: 261 callbacks suppressed [ 1201.078929][T28910] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1201.092729][T28910] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1201.149205][T28915] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1201.157605][T28915] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1201.165235][T28910] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1201.179061][T28915] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1201.186965][T28915] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1201.209117][T28910] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1201.216970][T28910] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1201.279092][T28910] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1201.977320][T12211] lec:lec_start_xmit: lec0:No lecd attached [ 1202.646334][ T1590] __nla_validate_parse: 3 callbacks suppressed [ 1202.646363][ T1590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7759'. [ 1202.697264][ T1595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7759'. [ 1202.874282][ T1593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7762'. [ 1203.271993][ T1631] netlink: 'syz.1.7769': attribute type 12 has an invalid length. [ 1203.568387][ T1635] syzkaller0: entered promiscuous mode [ 1203.575389][ T1635] syzkaller0: entered allmulticast mode [ 1203.591795][ T1635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7771'. [ 1203.788218][ T1641] macsec1: entered promiscuous mode [ 1203.815266][ T1646] macsec1: entered promiscuous mode [ 1203.853173][ T1649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7775'. [ 1203.995754][ T1654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7776'. [ 1204.062145][ T1658] netlink: 'syz.1.7777': attribute type 3 has an invalid length. [ 1204.141831][ T1666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7778'. [ 1204.383303][ T1680] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7782'. [ 1204.850372][ T1689] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1205.091094][ T1693] tipc: New replicast peer: 0.0.0.0 [ 1205.109743][ T1693] tipc: Enabled bearer , priority 10 [ 1205.277763][ T1701] netlink: 'syz.0.7787': attribute type 12 has an invalid length. [ 1205.388418][ T1709] lo speed is unknown, defaulting to 1000 [ 1205.445455][ T1703] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7788'. [ 1205.553612][ T1720] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 1205.582850][ T1723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7792'. [ 1205.810145][ T1709] lo speed is unknown, defaulting to 1000 [ 1205.930547][ T1732] netlink: 'syz.1.7794': attribute type 1 has an invalid length. [ 1205.983022][ T1735] lo speed is unknown, defaulting to 1000 [ 1206.010912][ T1739] netlink: 'syz.4.7795': attribute type 1 has an invalid length. [ 1206.100540][ T1739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1206.109273][T28861] net_ratelimit: 347 callbacks suppressed [ 1206.109296][T28861] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1206.125238][T28915] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1206.134456][T28863] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1206.248653][T28861] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1206.268662][T28861] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1206.289185][T28863] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1206.297006][T28863] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1206.309298][T28915] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1206.316989][ T1744] bond3 (unregistering): Released all slaves [ 1206.329092][T28861] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1206.339172][T28863] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1206.382317][ T5833] tipc: Node number set to 2198577384 [ 1206.458549][ T1735] lo speed is unknown, defaulting to 1000 [ 1206.563120][ T1758] xt_hashlimit: max too large, truncated to 1048576 [ 1206.597282][ T1751] syzkaller1: entered promiscuous mode [ 1206.603737][ T1751] syzkaller1: entered allmulticast mode [ 1206.611923][ T1758] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1206.967658][ T1773] netlink: 'syz.2.7804': attribute type 1 has an invalid length. [ 1207.029115][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms [ 1207.037259][ C0] lec:lec_tx_timeout: lec0 [ 1207.074264][ T1773] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1207.262794][ T1773] macvlan2: entered promiscuous mode [ 1207.268171][ T1773] macvlan2: entered allmulticast mode [ 1207.305575][ T1786] bond6: (slave ip6gretap2): making interface the new active one [ 1207.315799][ T1786] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1207.587720][ T1792] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 1207.641648][ T1792] erspan1: entered allmulticast mode [ 1207.754014][ T1795] netlink: 'syz.3.7806': attribute type 12 has an invalid length. [ 1207.975401][ T1803] netlink: 'syz.2.7808': attribute type 9 has an invalid length. [ 1208.276686][ T1820] lo speed is unknown, defaulting to 1000 [ 1208.344898][ T1822] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 1208.393599][ T1825] __nla_validate_parse: 8 callbacks suppressed [ 1208.393620][ T1825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7813'. [ 1208.419725][ T1822] bridge5: entered allmulticast mode [ 1208.609630][ T1834] netlink: 'syz.2.7816': attribute type 2 has an invalid length. [ 1208.623199][ T1837] netlink: 'syz.2.7816': attribute type 2 has an invalid length. [ 1208.637319][ T1827] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7814'. [ 1208.669844][ T1838] lo: Caught tx_queue_len zero misconfig [ 1208.675592][ T1838] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1208.728409][ T1820] lo speed is unknown, defaulting to 1000 [ 1208.734355][ T1835] lo speed is unknown, defaulting to 1000 [ 1209.199575][ T1835] lo speed is unknown, defaulting to 1000 [ 1209.552715][ T1863] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7823'. [ 1209.561904][ T1863] netlink: 51 bytes leftover after parsing attributes in process `syz.3.7823'. [ 1209.571327][ T1863] netlink: 'syz.3.7823': attribute type 4 has an invalid length. [ 1209.762495][ T1874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7827'. [ 1209.843758][ T1877] netlink: 'syz.1.7825': attribute type 12 has an invalid length. [ 1209.974318][ T1884] netlink: 'syz.3.7829': attribute type 1 has an invalid length. [ 1210.017429][ T1884] bond8: entered promiscuous mode [ 1210.025263][ T1884] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1210.287862][ T1896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7832'. [ 1210.303444][ T1897] netlink: 'syz.2.7832': attribute type 10 has an invalid length. [ 1210.307315][ T1892] lo speed is unknown, defaulting to 1000 [ 1210.340806][ T1894] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7831'. [ 1210.604390][ T1892] lo speed is unknown, defaulting to 1000 [ 1210.634385][ T1908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.643118][ T1912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7836'. [ 1210.945536][ T1919] lo speed is unknown, defaulting to 1000 [ 1210.949872][ T1925] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7839'. [ 1210.993913][ T1925] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7839'. [ 1211.233303][T28861] net_ratelimit: 426 callbacks suppressed [ 1211.233325][T28861] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1211.247901][T28910] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1211.256320][T27402] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1211.265136][T28861] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1211.289186][T28861] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1211.289329][T27394] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1211.329089][T28910] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1211.357582][T28910] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1211.389154][T28910] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1211.397214][T27402] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1211.500692][ T1919] lo speed is unknown, defaulting to 1000 [ 1211.630386][ T1958] block nbd4: not configured, cannot reconfigure [ 1211.671378][ T1958] nbd: must specify at least one socket [ 1211.681403][ T1958] nbd: couldn't find a device at index 0 [ 1212.503414][ T2003] netlink: 'syz.3.7861': attribute type 1 has an invalid length. [ 1212.537675][ T2003] bond9: entered promiscuous mode [ 1212.543842][ T2003] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1212.579797][ T2003] bond9: (slave bridge2): making interface the new active one [ 1212.587488][ T2003] bridge2: entered promiscuous mode [ 1212.594939][ T2003] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 1213.088143][ T2026] lo speed is unknown, defaulting to 1000 [ 1213.407683][ T2026] lo speed is unknown, defaulting to 1000 [ 1213.436443][ T2050] __nla_validate_parse: 4 callbacks suppressed [ 1213.436466][ T2050] netlink: 332 bytes leftover after parsing attributes in process `syz.4.7876'. [ 1213.550547][ T2056] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7878'. [ 1214.003656][ T2076] lo speed is unknown, defaulting to 1000 [ 1214.333668][ T2089] FAULT_INJECTION: forcing a failure. [ 1214.333668][ T2089] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.354601][ T2089] CPU: 1 UID: 0 PID: 2089 Comm: syz.1.7886 Not tainted syzkaller #0 PREEMPT(full) [ 1214.354633][ T2089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1214.354647][ T2089] Call Trace: [ 1214.354656][ T2089] [ 1214.354666][ T2089] dump_stack_lvl+0xe8/0x150 [ 1214.354699][ T2089] should_fail_ex+0x412/0x560 [ 1214.354731][ T2089] should_failslab+0xa8/0x100 [ 1214.354757][ T2089] __kmalloc_noprof+0xde/0x7e0 [ 1214.354778][ T2089] ? kfree+0x4d/0x650 [ 1214.354804][ T2089] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1214.354840][ T2089] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1214.354870][ T2089] ? tomoyo_domain+0xd7/0x130 [ 1214.354905][ T2089] ? tomoyo_path_number_perm+0x219/0x630 [ 1214.354930][ T2089] tomoyo_path_number_perm+0x246/0x630 [ 1214.354957][ T2089] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1214.354980][ T2089] ? __lock_acquire+0x6b5/0x2cf0 [ 1214.355027][ T2089] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1214.355081][ T2089] ? __fget_files+0x2a/0x420 [ 1214.355109][ T2089] ? __fget_files+0x2a/0x420 [ 1214.355131][ T2089] ? __fget_files+0x3a0/0x420 [ 1214.355154][ T2089] ? __fget_files+0x2a/0x420 [ 1214.355182][ T2089] security_file_ioctl+0xc3/0x2a0 [ 1214.355208][ T2089] __se_sys_ioctl+0x47/0x170 [ 1214.355242][ T2089] do_syscall_64+0xe2/0xf80 [ 1214.355271][ T2089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.355297][ T2089] ? trace_irq_disable+0x37/0x100 [ 1214.355318][ T2089] ? clear_bhb_loop+0x60/0xb0 [ 1214.355344][ T2089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.355365][ T2089] RIP: 0033:0x7f4103d9af79 [ 1214.355385][ T2089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.355411][ T2089] RSP: 002b:00007f4104c3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1214.355434][ T2089] RAX: ffffffffffffffda RBX: 00007f4104016090 RCX: 00007f4103d9af79 [ 1214.355450][ T2089] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 000000000000000b [ 1214.355464][ T2089] RBP: 00007f4104c3c090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.355478][ T2089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1214.355491][ T2089] R13: 00007f4104016128 R14: 00007f4104016090 R15: 00007ffce9eba168 [ 1214.355531][ T2089] [ 1214.355541][ T2089] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1214.674781][ T2098] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7891'. [ 1214.735088][ T2098] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7891'. [ 1214.764423][ T2098] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7891'. [ 1214.919751][ T2076] lo speed is unknown, defaulting to 1000 [ 1215.026743][ T2104] lo speed is unknown, defaulting to 1000 [ 1215.048008][ T2101] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7892'. [ 1215.057736][ T2101] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7892'. [ 1215.405622][ T2104] lo speed is unknown, defaulting to 1000 [ 1215.421313][ T2113] syzkaller1: entered promiscuous mode [ 1215.426868][ T2113] syzkaller1: entered allmulticast mode [ 1215.495223][ T2108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7893'. [ 1215.904671][ T2134] netlink: 'syz.3.7899': attribute type 1 has an invalid length. [ 1215.984598][ T2134] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1215.986506][ T2138] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7900'. [ 1216.024825][ T2136] bond10: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1216.071927][ T2134] bond10: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1216.248719][T27402] net_ratelimit: 359 callbacks suppressed [ 1216.248744][T27402] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1216.249042][T28861] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1216.254765][T27402] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1216.270270][T28910] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1216.292134][T28863] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1216.300683][T28861] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1216.338914][ T2149] netlink: 'syz.4.7902': attribute type 1 has an invalid length. [ 1216.347129][ T2145] netlink: 'syz.2.7901': attribute type 12 has an invalid length. [ 1216.355682][T27402] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1216.355723][T27402] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1216.358895][T28915] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1216.381122][T27402] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1216.430409][ T2150] FAULT_INJECTION: forcing a failure. [ 1216.430409][ T2150] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.471104][ T2150] CPU: 0 UID: 0 PID: 2150 Comm: syz.3.7903 Not tainted syzkaller #0 PREEMPT(full) [ 1216.471134][ T2150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1216.471148][ T2150] Call Trace: [ 1216.471157][ T2150] [ 1216.471167][ T2150] dump_stack_lvl+0xe8/0x150 [ 1216.471201][ T2150] should_fail_ex+0x412/0x560 [ 1216.471234][ T2150] should_failslab+0xa8/0x100 [ 1216.471269][ T2150] __kmalloc_noprof+0xde/0x7e0 [ 1216.471290][ T2150] ? tomoyo_encode+0x28b/0x550 [ 1216.471325][ T2150] tomoyo_encode+0x28b/0x550 [ 1216.471359][ T2150] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1216.471391][ T2150] ? tomoyo_domain+0xd7/0x130 [ 1216.471426][ T2150] ? tomoyo_path_number_perm+0x219/0x630 [ 1216.471451][ T2150] tomoyo_path_number_perm+0x246/0x630 [ 1216.471478][ T2150] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1216.471501][ T2150] ? __lock_acquire+0x6b5/0x2cf0 [ 1216.471548][ T2150] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1216.471603][ T2150] ? __fget_files+0x2a/0x420 [ 1216.471631][ T2150] ? __fget_files+0x2a/0x420 [ 1216.471653][ T2150] ? __fget_files+0x3a0/0x420 [ 1216.471676][ T2150] ? __fget_files+0x2a/0x420 [ 1216.471705][ T2150] security_file_ioctl+0xc3/0x2a0 [ 1216.471731][ T2150] __se_sys_ioctl+0x47/0x170 [ 1216.471765][ T2150] do_syscall_64+0xe2/0xf80 [ 1216.471795][ T2150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.471815][ T2150] ? trace_irq_disable+0x37/0x100 [ 1216.471836][ T2150] ? clear_bhb_loop+0x60/0xb0 [ 1216.471863][ T2150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.471884][ T2150] RIP: 0033:0x7f85fef9af79 [ 1216.471904][ T2150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.471922][ T2150] RSP: 002b:00007f85ffe6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1216.471946][ T2150] RAX: ffffffffffffffda RBX: 00007f85ff215fa0 RCX: 00007f85fef9af79 [ 1216.471962][ T2150] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 000000000000000b [ 1216.471976][ T2150] RBP: 00007f85ffe6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.471990][ T2150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.472003][ T2150] R13: 00007f85ff216038 R14: 00007f85ff215fa0 R15: 00007ffcfc412388 [ 1216.472038][ T2150] [ 1216.472060][ T2150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1216.781461][ T2153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7906'. [ 1216.810197][ T2153] nbd: illegal input index -1113835520 [ 1216.895370][ T2153] dvmrp0: entered allmulticast mode [ 1217.309523][ T10] IPVS: starting estimator thread 0... [ 1217.429094][ T2180] IPVS: using max 26 ests per chain, 62400 per kthread [ 1217.595540][ T2179] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1217.618870][ T2179] bond7 (unregistering): Released all slaves [ 1218.046587][ T2217] netlink: 'syz.1.7918': attribute type 12 has an invalid length. [ 1218.235675][ T2219] lo speed is unknown, defaulting to 1000 [ 1218.362803][ T2227] IPv6: sit1: Disabled Multicast RS [ 1218.381835][ T2227] sit1: entered allmulticast mode [ 1218.463851][ T2219] lo speed is unknown, defaulting to 1000 [ 1219.403724][ T2265] __nla_validate_parse: 6 callbacks suppressed [ 1219.403745][ T2265] netlink: 124 bytes leftover after parsing attributes in process `syz.0.7931'. [ 1219.640130][ T2274] lo speed is unknown, defaulting to 1000 [ 1219.713370][ T2282] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7935'. [ 1220.152768][ T2274] lo speed is unknown, defaulting to 1000 [ 1220.159909][ T2278] lo speed is unknown, defaulting to 1000 [ 1220.204799][ T2298] netlink: 'syz.2.7940': attribute type 1 has an invalid length. [ 1220.256253][ T2300] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7941'. [ 1220.291615][ T2303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7940'. [ 1220.332148][ T2298] bond7: entered promiscuous mode [ 1220.337869][ T2298] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1220.376467][ T2303] bond7: entered allmulticast mode [ 1220.541169][ T2310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7944'. [ 1220.578020][ T2298] bond7: (slave bridge0): making interface the new active one [ 1220.598901][ T2298] bridge0: entered promiscuous mode [ 1220.618935][ T2298] bridge0: entered allmulticast mode [ 1220.639728][ T2298] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 1220.743208][ T2278] lo speed is unknown, defaulting to 1000 [ 1220.823792][ T2319] netlink: 'syz.2.7947': attribute type 4 has an invalid length. [ 1220.896803][ T2316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7946'. [ 1220.974910][ T2323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7948'. [ 1220.997225][ T2316] 8021q: VLANs not supported on caif0 [ 1221.226764][ T2331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7950'. [ 1221.330715][T28861] net_ratelimit: 537 callbacks suppressed [ 1221.330738][T28861] bond6: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1221.345061][T27402] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1221.345079][ T8872] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1221.358966][T27402] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1221.359008][T27402] bond10: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1221.359084][T27402] bond10: (slave ip6gretap3): failed to get link speed/duplex [ 1221.369000][T28861] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 1221.421354][ T2337] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7952'. [ 1221.432050][T28861] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1221.445523][T28861] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1221.469589][T27394] bond10: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1221.756836][ T2352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7955'. [ 1222.352562][ T2370] lo speed is unknown, defaulting to 1000 [ 1222.467450][ T2377] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1222.676642][T27394] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1222.709985][T27394] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1222.737139][T27394] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1222.755826][T27394] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.011860][ T2370] lo speed is unknown, defaulting to 1000 [ 1223.031167][ T2394] lo speed is unknown, defaulting to 1000 [ 1223.450834][ T2394] lo speed is unknown, defaulting to 1000 [ 1223.591803][ T2419] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1223.950946][ T2435] syzkaller0: entered promiscuous mode [ 1223.956494][ T2435] syzkaller0: entered allmulticast mode [ 1223.977275][ T2435] netlink: 'syz.4.7980': attribute type 61 has an invalid length. [ 1223.987075][ T2435] netlink: 'syz.4.7980': attribute type 62 has an invalid length. [ 1224.504536][ T2470] __nla_validate_parse: 9 callbacks suppressed [ 1224.504559][ T2470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7988'. [ 1224.662604][ T2487] netlink: 'syz.2.7988': attribute type 1 has an invalid length. [ 1224.676389][ T2487] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7988'. [ 1224.691623][ T2488] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7992'. [ 1224.735245][ T2488] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7992'. [ 1224.768290][ T2488] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7992'. [ 1224.983370][ T2506] netlink: 'syz.2.7997': attribute type 10 has an invalid length. [ 1225.180760][ T2521] netlink: 332 bytes leftover after parsing attributes in process `syz.0.8003'. [ 1225.295409][ T2534] ip6gre1: entered allmulticast mode [ 1225.369335][ T2535] lo speed is unknown, defaulting to 1000 [ 1225.383633][ T2531] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1225.415620][ T2537] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1225.485714][ T2543] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1225.511519][ T2549] netlink: 'syz.3.8009': attribute type 11 has an invalid length. [ 1225.525321][ T2549] netlink: 684 bytes leftover after parsing attributes in process `syz.3.8009'. [ 1225.561846][ T2543] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1225.683853][ T2535] lo speed is unknown, defaulting to 1000 [ 1225.691204][ T2549] lo speed is unknown, defaulting to 1000 [ 1225.699615][ T2549] lo speed is unknown, defaulting to 1000 [ 1225.703943][ T2554] netlink: 6308 bytes leftover after parsing attributes in process `syz.0.8010'. [ 1225.707604][ T2549] lo speed is unknown, defaulting to 1000 [ 1225.981462][ T2560] bond0: Caught tx_queue_len zero misconfig [ 1226.171202][ T2549] infiniband sqz0: set down [ 1226.175936][T30980] lo speed is unknown, defaulting to 1000 [ 1226.182141][ T2549] infiniband sqz0: added lo [ 1226.265024][ T2549] RDS/IB: sqz0: added [ 1226.270385][ T2549] smc: adding ib device sqz0 with port count 1 [ 1226.276685][ T2549] smc: ib device sqz0 port 1 has no pnetid [ 1226.284288][T30977] lo speed is unknown, defaulting to 1000 [ 1226.303638][ T2549] lo speed is unknown, defaulting to 1000 [ 1226.323640][ T2562] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8012'. [ 1226.333960][ T2562] nbd: must specify at least one socket [ 1226.389845][T28861] net_ratelimit: 279 callbacks suppressed [ 1226.389870][T28861] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1226.405854][T28915] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1226.414875][T28915] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1226.444506][ T2535] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1226.456509][ T2535] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1226.465046][ T2535] CPU: 0 UID: 0 PID: 2535 Comm: syz.1.8006 Not tainted syzkaller #0 PREEMPT(full) [ 1226.474374][ T2535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1226.484471][ T2535] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 1226.490247][ T2535] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 1d 81 68 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 f5 80 68 f7 4d 8b 75 00 4d 8d a7 30 [ 1226.510067][ T2535] RSP: 0018:ffffc9000c017828 EFLAGS: 00010046 [ 1226.516171][ T2535] RAX: 0000000000000000 RBX: ffff888034919800 RCX: dffffc0000000000 [ 1226.524296][ T2535] RDX: 0000000000000000 RSI: ffffffff8c0739e0 RDI: ffff888034919800 [ 1226.532294][ T2535] RBP: ffff88807b00a000 R08: ffffffff8ed01ab3 R09: 1ffffffff1da0356 [ 1226.540304][ T2535] R10: dffffc0000000000 R11: fffffbfff1da0357 R12: ffff88806ef18650 [ 1226.548314][ T2535] R13: 0000000000000000 R14: ffff888034919830 R15: ffff88806ef18000 [ 1226.556326][ T2535] FS: 0000000000000000(0000) GS:ffff8881256ea000(0000) knlGS:0000000000000000 [ 1226.565368][ T2535] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1226.571976][ T2535] CR2: 00007f3145b85e80 CR3: 00000000796fe000 CR4: 00000000003526f0 [ 1226.579977][ T2535] Call Trace: [ 1226.583284][ T2535] [ 1226.586357][ T2535] lec_push+0x3cb/0x19d0 [ 1226.590651][ T2535] ? __local_bh_enable_ip+0xd0/0x130 [ 1226.595972][ T2535] ? __pfx_lec_push+0x10/0x10 [ 1226.600689][ T2535] vcc_release+0x15f/0x580 [ 1226.605142][ T2535] sock_close+0xc3/0x240 [ 1226.609420][ T2535] ? __pfx_sock_close+0x10/0x10 [ 1226.614385][ T2535] __fput+0x44f/0xa70 [ 1226.618411][ T2535] task_work_run+0x1d9/0x270 [ 1226.623046][ T2535] ? __pfx_task_work_run+0x10/0x10 [ 1226.628188][ T2535] ? do_raw_spin_unlock+0xf5/0x210 [ 1226.633342][ T2535] do_exit+0x69b/0x2310 [ 1226.637544][ T2535] ? __pfx_do_exit+0x10/0x10 [ 1226.642162][ T2535] ? do_raw_spin_lock+0x12b/0x2f0 [ 1226.647321][ T2535] do_group_exit+0x21b/0x2d0 [ 1226.651939][ T2535] ? _raw_spin_unlock_irq+0x23/0x50 [ 1226.657294][ T2535] get_signal+0x1284/0x1330 [ 1226.661842][ T2535] arch_do_signal_or_restart+0xbc/0x830 [ 1226.667609][ T2535] ? unshare_nsproxy_namespaces+0x143/0x160 [ 1226.673542][ T2535] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1226.679727][ T2535] ? ksys_unshare+0x7fc/0x900 [ 1226.684444][ T2535] ? __pfx_ksys_unshare+0x10/0x10 [ 1226.689497][ T2535] exit_to_user_mode_loop+0x86/0x480 [ 1226.694826][ T2535] ? rcu_is_watching+0x15/0xb0 [ 1226.699702][ T2535] do_syscall_64+0x2b7/0xf80 [ 1226.704415][ T2535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.710505][ T2535] ? trace_irq_disable+0x37/0x100 [ 1226.715551][ T2535] ? clear_bhb_loop+0x60/0xb0 [ 1226.720396][ T2535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.726406][ T2535] RIP: 0033:0x7f4103d9af79 [ 1226.730939][ T2535] Code: Unable to access opcode bytes at 0x7f4103d9af4f. [ 1226.737980][ T2535] RSP: 002b:00007f4104c3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1226.746427][ T2535] RAX: fffffffffffffffc RBX: 00007f4104016090 RCX: 00007f4103d9af79 [ 1226.754427][ T2535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1226.762423][ T2535] RBP: 00007f4103e316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1226.770416][ T2535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.778406][ T2535] R13: 00007f4104016128 R14: 00007f4104016090 R15: 00007ffce9eba168 [ 1226.786422][ T2535] [ 1226.789562][ T2535] Modules linked in: [ 1226.793492][ T2535] ---[ end trace 0000000000000000 ]--- [ 1226.798970][ T2535] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 1226.804811][ T2535] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 1d 81 68 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 f5 80 68 f7 4d 8b 75 00 4d 8d a7 30 [ 1226.824610][ T2535] RSP: 0018:ffffc9000c017828 EFLAGS: 00010046 [ 1226.830702][ T2535] RAX: 0000000000000000 RBX: ffff888034919800 RCX: dffffc0000000000 [ 1226.838692][ T2535] RDX: 0000000000000000 RSI: ffffffff8c0739e0 RDI: ffff888034919800 [ 1226.846687][ T2535] RBP: ffff88807b00a000 R08: ffffffff8ed01ab3 R09: 1ffffffff1da0356 [ 1226.854673][ T2535] R10: dffffc0000000000 R11: fffffbfff1da0357 R12: ffff88806ef18650 [ 1226.862667][ T2535] R13: 0000000000000000 R14: ffff888034919830 R15: ffff88806ef18000 [ 1226.870660][ T2535] FS: 0000000000000000(0000) GS:ffff8881256ea000(0000) knlGS:0000000000000000 [ 1226.879869][ T2535] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1226.886472][ T2535] CR2: 00007f3145b85e80 CR3: 00000000796fe000 CR4: 00000000003526f0 [ 1226.894470][ T2535] Kernel panic - not syncing: Fatal exception [ 1226.901145][ T2535] Kernel Offset: disabled [ 1226.905483][ T2535] Rebooting in 86400 seconds..