last executing test programs: 16.011439697s ago: executing program 1 (id=4653): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async, rerun: 32) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@local, 0x0}, &(0x7f00000001c0)=0x14) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008040) 15.623720192s ago: executing program 1 (id=4656): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911300000000000851000000200000085000000b400000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000f900"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x2e36, 0x10000}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 14.684653039s ago: executing program 1 (id=4663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x300}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0xe, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) 14.604812957s ago: executing program 1 (id=4664): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)={0x398, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x760f440}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4c000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9e}]}, @TIPC_NLA_SOCK={0xe4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf86}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff76a9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ffe0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfcb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdfb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x97b1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcc3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2fa787b3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x32, 0x3, "3e31945473e9c77073d9163731ebc081d4819d5411fce5ac23de4bf041d633dab2d02628fc3f228027140c4cf7bc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "9a1e40a0b2697e38427a7316dd94f35256c20cb2064da8cda10a698db2"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ef25f6323388c00a1e1227045efecbf2c95723af029fc84db870bb6389ea36a253"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff617b}]}]}, 0x398}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r0, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', r4, r0, 0x5, 0x2, 0x1}, 0x50) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x1406, 0x300, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40042) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000003ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003a80)={&(0x7f0000000900)={0x316c, 0x12, 0x0, 0x70bd2d, 0x25dfdbfd, {0x28, 0x7, 0x4, 0xd3, {0x4e21, 0x4e23, [0x8, 0x2, 0x8, 0x2], [0x43, 0x80, 0x9, 0x4], r4, [0xff, 0xd0000000]}, 0x9, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xf, 0x1, "278ba97eee4045ea55a77f"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "53f0da6da9dc12322086d32ce3b5b04609a3c1a784fce57a59297f8faaeae104e0e88b24397028c3812907a54d1b11f0dd8b97366c8c8a8f478ca3aa0bd1baa926b6efff8be7dd23c168b8aa0e"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "9cbb80e08d5952cab6d6b7e0062c1baddc2e8e19eb1dc18e4cbca824ae60b40fc517818870b7fad86b2f094788f1b0fc87f97551abd5645913b9da6cb491e15a1dc63060ada437dbe898dc9a7de580e72f581f6fc916d1840d83f40f21afbfa2a5c910af5128f577fdbc9e59292ceb62493b2217efdaf3d819896ef86368ec2118a59b9bef9f65383d1654f88f449fb3e2fe2bdebc0167983f76c47bb98d32a56512e37c15537513ace0f3"}]}, 0x316c}, 0x1, 0x0, 0x0, 0x4880}, 0x10004845) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003b40), r0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000003c40)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003b80)={0x78, r6, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x10) connect$pppl2tp(r0, &(0x7f0000003c80)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x4, 0x0, 0x4, {0xa, 0x4e20, 0xfffffff9, @local, 0x6}}}, 0x32) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000003cc0)={"84e7e7568ca3c6e9057eaef4d6878854", 0x0, 0x0, {0x27, 0x5}, {0x800, 0x9}, 0x5aba, [0x15b, 0xffffffff, 0x8001, 0x1000, 0x4, 0x47, 0xe7, 0x10001, 0xffffffff, 0x64, 0xfffffffffffffffc, 0x4, 0x1, 0x3, 0x4, 0x5]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000003e40)={{r5}, r7, 0x18, @inherit={0x58, &(0x7f0000003dc0)={0x0, 0x2, 0x46d9, 0x2, {0x3, 0x7fff, 0x7, 0x8000000000000000, 0xfffffffffffffffd}, [0x0, 0x8]}}, @subvolid=0x1f4e}) syz_genetlink_get_family_id$ethtool(&(0x7f0000004e40), r0) r8 = socket$inet_udp(0x2, 0x2, 0x0) read(r8, &(0x7f0000004e80)=""/173, 0xad) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$nl_route_sched_retired(r9, &(0x7f0000005500)={&(0x7f0000004f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000054c0)={&(0x7f0000004f80)=@newtclass={0x540, 0x28, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xe, 0x8}, {0xf, 0xe}, {0x4, 0x10}}, [@c_cbq={{0x8}, {0x430, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x6a, 0x1, 0x8, 0xf, 0x7ff, 0x7fa3fbe0}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x11, 0x3, 0x1f, 0x6, 0x9544, 0x1, 0x8000, 0x6d18}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x10, 0x2, 0x2, 0x7, 0xa37f, 0x75e6, 0x0, 0x94b8, 0xa, 0x6, 0x800, 0xffffff12, 0x5, 0x5, 0x7, 0x40, 0x40, 0x7fff, 0x3, 0x81, 0xffffffff, 0xdfb, 0x3, 0x807e, 0x5, 0x1, 0x4, 0x0, 0x34eb, 0x1f, 0x9, 0xdab, 0x6, 0x8, 0x0, 0xd47, 0x401, 0x4, 0x401, 0x400, 0x4, 0x8e, 0x9, 0x5, 0x1, 0x0, 0xa, 0xfffffffc, 0x5, 0x3, 0x44, 0x178cb936, 0x8, 0x1, 0x7, 0x6, 0xcc4, 0x2, 0x2, 0x0, 0x3, 0x3, 0x4, 0x80000001, 0x9, 0x0, 0x8, 0x9, 0x9c, 0x9, 0x7, 0x6d61, 0x7, 0x5b, 0x4, 0x3, 0xaf2, 0x30, 0x40, 0x1, 0x2, 0x1, 0x7, 0x8001, 0x1, 0x6, 0x1, 0x200, 0x7, 0xdf9, 0x8089, 0x29a, 0xf7e, 0x6, 0x8, 0x4, 0x2, 0xc4, 0x7, 0x4, 0xcdc5, 0x63da, 0x9, 0x1000, 0x3, 0xa, 0xa, 0x6, 0x8, 0x7fffffff, 0xfffffffa, 0xbf7, 0x8, 0x3, 0x3, 0x6, 0x4, 0x10, 0x10, 0x101, 0x8001, 0xb2f, 0x7, 0x5, 0x0, 0x4, 0x2, 0x77c7, 0x7, 0x7fffffff, 0x1, 0xfffffffc, 0x5, 0x7fff, 0x7fffffff, 0xfffffffc, 0x7, 0x7fffffff, 0x5f, 0x7e8, 0x10000, 0x2, 0xf10, 0x3, 0x1625, 0x1, 0x2, 0xfffffff8, 0x2, 0x5, 0x0, 0xdd, 0x100, 0x2, 0x1, 0x4, 0x2, 0x6, 0x400, 0x3ff, 0x6, 0xfffffff8, 0x4, 0x0, 0x8, 0x3, 0x6, 0x1000, 0x542c57ec, 0xf, 0xfffffff9, 0x9, 0x0, 0x8, 0x3, 0xfffffffa, 0x8, 0x9, 0x7, 0xc03, 0x5, 0x64cc4677, 0xfffffff9, 0x4, 0x13, 0x2, 0xfffffff7, 0x8, 0x14000, 0x0, 0x0, 0x81, 0x3, 0x2, 0x3, 0xa, 0x3, 0x4, 0xc, 0x80, 0x5, 0x8, 0x3, 0x8, 0x2, 0x1, 0x6, 0x81, 0x0, 0x1ff, 0xe0, 0x0, 0x0, 0x5, 0x1d, 0xfa, 0x1, 0xfffffffd, 0x4, 0xff, 0x81, 0x1, 0x3, 0x5, 0x1, 0x80000000, 0x4, 0x4, 0xfffffff0, 0x7b1, 0x6, 0x3, 0x8, 0x9, 0x9, 0x5, 0x6, 0x4, 0x6, 0x6, 0xf4, 0x8, 0x4, 0xec00000, 0x6, 0x7, 0x9eb, 0x8, 0x81, 0x0, 0x614, 0x4, 0x80000000, 0x6, 0x36]}]}}, @c_cbq={{0x8}, {0x4}}, @c_atm={{0x8}, {0x50, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0x10}}, @TCA_ATM_HDR={0x42, 0x3, "5bb6b098fe9c9eacfc96fdd07c718db08494d622ccc667697219898dd73cc8a7f67f590735072ca3e3e08a09726fe5c0507edf5ed0c953ca28a02c8f2602"}]}}, @c_atm={{0x8}, {0x78, 0x2, [@TCA_ATM_FD={0x8, 0x1, r10}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x18, 0x3, "7030ce1b3b60d178a1395c86d3c8f08fecfdb4d0"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0x7}}, @TCA_ATM_HDR={0x43, 0x3, "eac6551b8fa5cb15b13565cf5394dd3a56d526c5fcb987dd61e91af7a302073d4ec3f8b69428b3f7e102cda97d82f000507bad63c5b0031bfa3fd6472acb0a"}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) write$nbd(r0, &(0x7f0000005540)={0x67446698, 0x0, 0x2, 0x4, 0x3, "22200d69cca26af8eeead38394b2b1ae3fcc0a81db9c11bf440b989c8e5ce760e795aa6dab18ce38dd8edd0b638d19a191220ccc7dca8229136108c9566aee22e24ddf355f69c41949e4adb1b76c13aee1f74d03e70de9b8085ccc1aa7a9cfd7b3a692b5da0cc3207238abd8a673aa4bd4d33d742778d72a66d5488bbb32a6f46595b3a58a5d28e797771a8f81dd4cad8c312c6f78f2fbef"}, 0xa8) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000005600)={0x4, 0x5, 0x3, 0xfff, 0xa, 0x0, [{0x1, 0x3, 0xc, '\x00', 0x501}, {0xe, 0x7fffffff, 0x8, '\x00', 0x3001}, {0x1, 0xf, 0x0, '\x00', 0x2}, {0x7ff, 0x0, 0x9, '\x00', 0x8}, {0x9, 0x8000000000, 0x9, '\x00', 0x2000}, {0x3, 0x7, 0x2, '\x00', 0x4}, {0xbc, 0xfffffffffffffff8, 0x9a}, {0x1000, 0xb1, 0x800, '\x00', 0x18c}, {0x7, 0x100, 0x13bc00000000, '\x00', 0x400}, {0x8478, 0x100, 0xfffffffffffffff9, '\x00', 0x1588}]}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000058c0), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000005a40)={&(0x7f0000005880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005a00)={&(0x7f0000005900)={0xd8, r11, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) getsockopt$IP_VS_SO_GET_SERVICE(r10, 0x0, 0x483, &(0x7f0000005a80), &(0x7f0000005b00)=0x68) bpf$PROG_LOAD(0x5, &(0x7f0000005e40)={0x8, 0x11, &(0x7f0000005b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2a}, [@call={0x85, 0x0, 0x0, 0x6b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x64}, @cb_func={0x18, 0xf, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000005c00)='GPL\x00', 0x3, 0xee, &(0x7f0000005c40)=""/238, 0x40f00, 0x1e, '\x00', 0x0, @cgroup_skb, r0, 0x8, &(0x7f0000005d40)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000005d80)={0x3, 0x5, 0xb89, 0x3}, 0x10, 0xffffffffffffffff, r0, 0x1, &(0x7f0000005dc0)=[r5], &(0x7f0000005e00)=[{0x2, 0x1, 0x4, 0x5}]}, 0x94) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000006080)={&(0x7f0000005f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006040)={&(0x7f0000005f40)={0xd0, r11, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x829}, {0x8, 0x15, 0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x4000) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000060c0)=""/16, &(0x7f0000006100)=0x10) 13.682645904s ago: executing program 1 (id=4670): syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000c00019078ac1e0001ac1414aa0b009078000100004529000400688001020201ffac141436ac14"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000020000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000003ef0001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024) 13.49878398s ago: executing program 1 (id=4672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2}, 0x94) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x4, 0xdf, 0x0, 0x4, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x8, 0xff, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000a40)={'syztnl1\x00', 0x0, 0x7, 0x10, 0x1, 0xf09, {{0x3e, 0x4, 0x2, 0x28, 0xf8, 0x67, 0x0, 0x9, 0x29, 0x0, @loopback, @empty, {[@ssrr={0x89, 0x1b, 0x82, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, @remote, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010101]}, @generic={0x7, 0xc, "4040a04fc19d2b6fc424"}, @timestamp_addr={0x44, 0x44, 0x65, 0x1, 0x9, [{@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x7}, {@multicast1, 0x401}, {@rand_addr=0x64010102, 0x47}, {@remote}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x8e, 0x3, 0x2, [{@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x4}, {@empty, 0x6}, {@multicast2, 0x8163}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x8}, {@remote, 0x98f3}]}, @timestamp={0x44, 0xc, 0x2b, 0x0, 0x3, [0x5, 0x1]}, @timestamp_prespec={0x44, 0xc, 0xcc, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x7}]}, @rr={0x7, 0x2b, 0x49, [@loopback, @private=0xa010101, @local, @private=0xa010100, @remote, @remote, @broadcast, @empty, @empty, @rand_addr=0x64010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000bc0)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000bc0)={'wg2\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f0000000000)={0x1d, r8, 0x1, {0x2, 0xff}, 0xfe}, 0x18) (async) bind$can_j1939(r9, &(0x7f0000000000)={0x1d, r8, 0x1, {0x2, 0xff}, 0xfe}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r8}, 0x18) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r8, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r8, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x5c}}, 0x0) r15 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) recvmmsg(r15, 0x0, 0x0, 0x600100a2, 0x0) sendmsg$can_raw(r15, &(0x7f0000000240)={&(0x7f0000000540)={0x1d, r16}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000000000001e"}, 0x10}}, 0x4040) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000c40)={@private, @multicast1}, &(0x7f0000000c80)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000c40)={@private, @multicast1, 0x0}, &(0x7f0000000c80)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001900)={&(0x7f0000000cc0)={0xc04, 0x0, 0x210, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffa84}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9e3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x1, 0xb, 0x9}, {0xd03, 0x5, 0x8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r11}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x609}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0xc04}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xa0}}, 0x0) 2.471984876s ago: executing program 3 (id=4837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080001020000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x70}, 0x94) 2.32755037s ago: executing program 3 (id=4840): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602200000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) 2.059318602s ago: executing program 3 (id=4846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0xf00}}}, 0xcc}}, 0x0) 1.871812169s ago: executing program 3 (id=4850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) close(r0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="181100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000ffff00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0xfd45}}, 0x0) write$nci(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) close(0x3) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r12, &(0x7f0000000000), 0x2a979d) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="0600000000000000000900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r14}, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r15, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) write$nci(r9, &(0x7f0000001140)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x1, 0x1}, 0x4) listen(0xffffffffffffffff, 0x80) 1.667959605s ago: executing program 2 (id=4856): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f000001000000000000000020"], 0x60}}, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000c00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303afffe8000000000000002000000000000aaff12d1650200000000000000000000000000018700907800000000fe8000000000000000000000000000aafc02000000000000000000000000000001012025b0"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) socket$inet(0x2, 0x800, 0x6) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=""/39, 0x27}, 0xf}], 0x1, 0x23, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.383788994s ago: executing program 3 (id=4859): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.2839144s ago: executing program 2 (id=4860): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYBLOB="50820b2a84ae95b52272da3f5e159f18443f41e621a129dcf0fa3d7bbbbb93cf658dca1f3e9d585bfc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9"], 0x1508}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1}, 0x9}], 0x1, 0x122, 0x0) sendmmsg(r2, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r3, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x2, 0xb007}, 0x4) socket(0xf, 0x3, 0x13) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x4}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}}, 0x24000041) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) openat$ppp(0xffffffffffffff9c, 0x0, 0x121c02, 0x0) write$tun(r9, &(0x7f0000001080)=ANY=[@ANYBLOB="000000f60204050008"], 0x124a) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 1.283732819s ago: executing program 4 (id=4861): unshare(0x400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000b21a07a5080f0b9fd1db899bc47c86651000010000000000000000000000000a4c000000060a0b040000000000000000020000002c000480280001801fd0166a426e81ef557b0f36deb107000100637400001c00028008000140000000020800024000000016080004400000000c0900010073797a300000000014000000"], 0x74}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x44}, 0x1, 0x1000000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r2, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x80, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:bin_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000090}, 0x8800) 1.217338153s ago: executing program 3 (id=4862): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000e9ffffffffff030400000000006d305d18091dbb6706d202ff613c852161d6aa9024d14f02effa40ad5d5608b9a5d3c02b67a80e406f6350eddfbc7163da6676fcc592fcbe696f105da3de38065a88facba189386c2e6c3522ca11bdb047c6467df775fbe9b7fe538cc857000000000000050000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x607, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0xfb}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.100077074s ago: executing program 4 (id=4864): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d040000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac0002800800030001000000080001001000000004000400"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 967.101207ms ago: executing program 4 (id=4866): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r3, 0x0, 0x8040) close(r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x54, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d30000000000000000000"], 0x110}}, 0x800) sendmsg$NFT_BATCH(r8, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000500)={'security\x00', 0xac, "90fc40e7ad3a006296e32737cd08c00a75563b36e99f7256713a79bd1e83b1b805166c27710c8fc0a720b4e9abd0d6209f59903a81314459020122ff65641ffd4022d0c632bcf353f832a541ec027290f7411b6baa92e2e5f5210fe45093e33f5588ac19f8e221b6e7579832a879e1cb335613c15dd8e0a49c2489dc421d86937540476923b51d6e9d5eb82b3f654f45a8baa8ec87839ede06668f8fcf4f6583c0d7b8bb9d77dfc44823509e"}, &(0x7f0000000240)=0xd0) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000100)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x9, 'syz0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shutdown(r1, 0x1) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket(0x15, 0x5, 0x0) 942.035928ms ago: executing program 0 (id=4867): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b9376000000000000000000000000000000000000000000020000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 675.345688ms ago: executing program 0 (id=4868): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4b000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8ad6ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0xfec, &(0x7f0000002e00)=""/4076, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x64}, 0x94) 522.737561ms ago: executing program 4 (id=4869): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002540)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', r2, r4, 0x4, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 521.675834ms ago: executing program 2 (id=4870): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=""/39, 0x27}, 0xf}], 0x1, 0x23, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 419.996955ms ago: executing program 0 (id=4871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000fff5009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014070080090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) 374.57739ms ago: executing program 4 (id=4872): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 369.240225ms ago: executing program 0 (id=4873): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1838180000000000000e00000000000000000004", @ANYRES16=r0, @ANYRESOCT=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x20, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x3f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f00000002c0)={0x0, 0x7, 0xefff, 0xfa64}) 307.329764ms ago: executing program 0 (id=4874): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000040000000000000000002000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200407fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000001200)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x4, @empty, 0x40}}, 0x2, 0x9}, 0x90) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000100)=0x40000006, 0xfda8) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0xf1}], 0x1, 0x22, 0x0) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x800) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7d, 0x7d, 0x6, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x2e, 0x0, 0x54, 0x7}, @volatile={0x2, 0x0, 0x0, 0x9, 0x1}, @typedef={0xe}, @typedef={0x0, 0x0, 0x0, 0x8, 0x3}, @datasec={0xb, 0x5, 0x0, 0xf, 0x1, [{0x2, 0x3, 0x9}, {0x3, 0x200, 0xfffffffe}, {0x2, 0x3, 0x2c6986fc}, {0x4, 0xff, 0x6}, {0x3, 0x1, 0x9}], "f7"}]}, {0x0, [0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000540)=""/146, 0x9e, 0x92, 0x1, 0x400, 0x10000}, 0x28) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xb, 0x3}, {0x10, 0x2}, {0xf, 0x1}]}, @func={0x3, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x5f, 0x30, 0xe, 0x2e]}}, &(0x7f0000000700)=""/38, 0x4f, 0x26, 0x0, 0x3}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x5eef, 0x240, 0x5, 0x8003, r2, 0x9, '\x00', r6, r7, 0x2, 0x5, 0x3, 0x4, @value=r8}, 0x50) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000000340)={{0x8001, 0x8}, 0x100, './file0\x00'}) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x9, 0x0, 0x5, 0x2, 0x1, 0x744d1c4f, 0x0, 0xe83, 0x0}, &(0x7f0000000180)=0x20) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x40003}}}}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f00000001c0)={0x6, 0x8008, 0x6, 0x1000, r10}, &(0x7f0000000200)=0x10) 306.771636ms ago: executing program 2 (id=4875): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 196.360403ms ago: executing program 2 (id=4876): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d040000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac0002800800030001000000080001001000000004000400"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 194.29149ms ago: executing program 4 (id=4877): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) getsockname(r0, 0x0, &(0x7f0000000a80)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=""/39, 0x27}, 0xf}], 0x1, 0x23, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) 97.419513ms ago: executing program 2 (id=4878): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c000004"], 0x44}, 0x1, 0x0, 0x0, 0x200440e5}, 0xc000) r4 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x33}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r5}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 0s ago: executing program 0 (id=4879): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): 403.420840][T16517] pim6reg: entered allmulticast mode [ 403.443291][T16519] pim6reg: left allmulticast mode [ 403.665122][T16515] tipc: Started in network mode [ 403.670495][T16515] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 403.701878][T16515] tipc: Enabled bearer , priority 0 [ 404.069636][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.107521][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.189964][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.225812][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.460170][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3180'. [ 404.549401][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3180'. [ 404.819854][ T1210] tipc: Node number set to 11578026 [ 405.382024][T16568] tipc: Enabled bearer , priority 0 [ 405.413905][T16568] syzkaller0: entered promiscuous mode [ 405.431436][T16568] syzkaller0: entered allmulticast mode [ 405.573684][T16574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3318'. [ 405.609763][T16574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3318'. [ 405.640701][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'. [ 405.669417][T16568] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 405.686442][T16573] tipc: Resetting bearer [ 405.785245][T16566] tipc: Resetting bearer [ 405.813567][T16566] tipc: Disabling bearer [ 405.833178][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 405.845490][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.856534][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.882167][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 405.892564][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 405.905163][ T3502] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.059796][T16579] netlink: 'syz.1.3319': attribute type 23 has an invalid length. [ 406.162226][ T3502] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.204146][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3323'. [ 406.355825][ T3502] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.494702][T16596] pim6reg: entered allmulticast mode [ 406.816731][T16600] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.824865][T16600] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.313796][T16600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.346936][T16600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.759485][T16603] pim6reg: left allmulticast mode [ 407.963364][ T3502] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.995350][T15030] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.006447][ T51] Bluetooth: hci2: command tx timeout [ 408.021032][T15030] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.039688][T15030] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.106384][T15035] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.505330][T16625] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 409.355314][T16659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3341'. [ 409.477340][T16664] Bluetooth: MGMT ver 1.23 [ 410.034735][ T3502] bond1 (unregistering): Released all slaves [ 410.079196][ T51] Bluetooth: hci2: command tx timeout [ 410.297171][ T3502] bond2 (unregistering): Released all slaves [ 410.542789][ T3502] bond3 (unregistering): Released all slaves [ 410.654452][ T3502] bond4 (unregistering): Released all slaves [ 410.759888][ T3502] bond5 (unregistering): Released all slaves [ 410.864345][ T3502] bond6 (unregistering): Released all slaves [ 410.972139][ T3502] bond7 (unregistering): Released all slaves [ 411.072818][ T3502] bond8 (unregistering): Released all slaves [ 411.176189][ T3502] bond9 (unregistering): Released all slaves [ 411.282610][T16662] pim6reg: entered allmulticast mode [ 411.297424][T16666] pim6reg: left allmulticast mode [ 411.463031][T16673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.501162][ T3502] tipc: Left network mode [ 411.516486][T16580] chnl_net:caif_netlink_parms(): no params data found [ 411.638070][T16685] netlink: 'syz.0.3344': attribute type 11 has an invalid length. [ 411.819950][T16690] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 412.161027][ T51] Bluetooth: hci2: command tx timeout [ 412.239860][T16707] netlink: 728 bytes leftover after parsing attributes in process `syz.4.3351'. [ 412.305098][T16580] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.332315][T16580] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.347377][T16580] bridge_slave_0: entered allmulticast mode [ 412.356725][T16580] bridge_slave_0: entered promiscuous mode [ 412.441252][T16580] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.452162][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3354'. [ 412.456177][T16580] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.476208][T16580] bridge_slave_1: entered allmulticast mode [ 412.565615][T16580] bridge_slave_1: entered promiscuous mode [ 412.586275][T16724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3357'. [ 412.754323][T16722] pim6reg: entered allmulticast mode [ 412.765316][T16724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3357'. [ 412.819819][T16727] pim6reg: left allmulticast mode [ 412.869377][T16731] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3359'. [ 413.072678][T16580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.103854][T16580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.154571][ T3502] batadv0: left promiscuous mode [ 413.205671][T16737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3360'. [ 414.244475][ T51] Bluetooth: hci2: command tx timeout [ 414.324282][T16750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3365'. [ 414.717866][T16743] batadv_slave_0: entered promiscuous mode [ 414.726030][T16743] batadv_slave_0: entered allmulticast mode [ 414.797657][T16580] team0: Port device team_slave_0 added [ 414.811499][T16580] team0: Port device team_slave_1 added [ 414.978226][T16580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.008837][T16580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.067111][T16580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.150239][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3368'. [ 415.210714][T16760] bond0: entered promiscuous mode [ 415.236709][T16760] bond_slave_0: entered promiscuous mode [ 415.253205][T16760] bond_slave_1: entered promiscuous mode [ 415.273604][T16760] batadv0: entered promiscuous mode [ 415.299634][T16760] debugfs: 'hsr1' already exists in 'hsr' [ 415.319839][T16760] Cannot create hsr debugfs directory [ 415.325556][T16760] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 415.339058][T16760] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 415.396469][T16760] hsr1: entered allmulticast mode [ 415.408650][T16760] bond0: entered allmulticast mode [ 415.413998][T16760] bond_slave_0: entered allmulticast mode [ 415.424644][T16760] bond_slave_1: entered allmulticast mode [ 415.438650][T16760] batadv0: entered allmulticast mode [ 415.445026][T16760] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 415.457671][T16580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.470819][T16580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.501269][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3372'. [ 415.515732][T16580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.621882][T16774] pim6reg: entered allmulticast mode [ 415.729657][T16780] pim6reg: left allmulticast mode [ 415.951913][T16580] hsr_slave_0: entered promiscuous mode [ 415.961333][T16580] hsr_slave_1: entered promiscuous mode [ 416.017561][T16580] debugfs: 'hsr0' already exists in 'hsr' [ 416.023518][T16580] Cannot create hsr debugfs directory [ 416.120992][ T3502] IPVS: stop unused estimator thread 0... [ 416.133381][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3378'. [ 416.147893][T16791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3378'. [ 416.399646][T16793] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3380'. [ 416.454710][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'. [ 416.455994][T16798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3380'. [ 417.036974][T16810] netlink: 'syz.4.3386': attribute type 32 has an invalid length. [ 417.058960][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3386'. [ 417.105803][T16810] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 417.293665][T16823] FAULT_INJECTION: forcing a failure. [ 417.293665][T16823] name failslab, interval 1, probability 0, space 0, times 0 [ 417.318178][T16823] CPU: 1 UID: 0 PID: 16823 Comm: syz.4.3389 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 417.318208][T16823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.318220][T16823] Call Trace: [ 417.318228][T16823] [ 417.318237][T16823] dump_stack_lvl+0x189/0x250 [ 417.318272][T16823] ? __pfx____ratelimit+0x10/0x10 [ 417.318300][T16823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.318325][T16823] ? __pfx__printk+0x10/0x10 [ 417.318360][T16823] ? __pfx___might_resched+0x10/0x10 [ 417.318379][T16823] ? fs_reclaim_acquire+0x7d/0x100 [ 417.318417][T16823] should_fail_ex+0x414/0x560 [ 417.318456][T16823] should_failslab+0xa8/0x100 [ 417.318488][T16823] __kmalloc_cache_noprof+0x70/0x3d0 [ 417.318517][T16823] ? nf_tables_newtable+0x435/0x1890 [ 417.318544][T16823] nf_tables_newtable+0x435/0x1890 [ 417.318564][T16823] ? nfnetlink_subsys_unregister+0x192/0x1b0 [ 417.318612][T16823] nfnetlink_rcv+0x1132/0x2520 [ 417.318675][T16823] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 417.318760][T16823] ? netlink_deliver_tap+0x2e/0x1b0 [ 417.318811][T16823] netlink_unicast+0x82c/0x9e0 [ 417.318855][T16823] ? __pfx_netlink_unicast+0x10/0x10 [ 417.318885][T16823] ? netlink_sendmsg+0x642/0xb30 [ 417.318912][T16823] ? skb_put+0x11b/0x210 [ 417.318940][T16823] netlink_sendmsg+0x805/0xb30 [ 417.318982][T16823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.319023][T16823] ? aa_sock_msg_perm+0xf1/0x1d0 [ 417.319057][T16823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 417.319080][T16823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.319111][T16823] __sock_sendmsg+0x219/0x270 [ 417.319141][T16823] ____sys_sendmsg+0x505/0x830 [ 417.319169][T16823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.319201][T16823] ? import_iovec+0x74/0xa0 [ 417.319229][T16823] ___sys_sendmsg+0x21f/0x2a0 [ 417.319253][T16823] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.319319][T16823] ? __fget_files+0x2a/0x420 [ 417.319336][T16823] ? __fget_files+0x3a0/0x420 [ 417.319367][T16823] __x64_sys_sendmsg+0x19b/0x260 [ 417.319397][T16823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 417.319431][T16823] ? __pfx_ksys_write+0x10/0x10 [ 417.319455][T16823] ? rcu_is_watching+0x15/0xb0 [ 417.319483][T16823] ? do_syscall_64+0xbe/0x3b0 [ 417.319516][T16823] do_syscall_64+0xfa/0x3b0 [ 417.319544][T16823] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.319571][T16823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.319591][T16823] ? clear_bhb_loop+0x60/0xb0 [ 417.319616][T16823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.319636][T16823] RIP: 0033:0x7f311bf8ebe9 [ 417.319654][T16823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.319672][T16823] RSP: 002b:00007f311cd27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.319694][T16823] RAX: ffffffffffffffda RBX: 00007f311c1b5fa0 RCX: 00007f311bf8ebe9 [ 417.319708][T16823] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 417.319720][T16823] RBP: 00007f311cd27090 R08: 0000000000000000 R09: 0000000000000000 [ 417.319732][T16823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.319744][T16823] R13: 00007f311c1b6038 R14: 00007f311c1b5fa0 R15: 00007ffd909eeb28 [ 417.319778][T16823] [ 417.684163][T16580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.748718][T16580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.765957][T16580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.867874][T16580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.058122][T16832] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 418.217130][T16580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.310670][T16580] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.388922][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.396116][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.419335][T15030] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.426564][T15030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.792425][T16863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3403'. [ 418.906654][T16870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3404'. [ 419.297490][T16580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.503453][T16580] veth0_vlan: entered promiscuous mode [ 419.591650][T16580] veth1_vlan: entered promiscuous mode [ 419.696146][T16580] veth0_macvtap: entered promiscuous mode [ 419.724272][T16580] veth1_macvtap: entered promiscuous mode [ 419.776494][T16580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.813124][T16580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.860976][ T9632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.882381][ T9632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.914281][ T9632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.981525][ T9632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.192448][ T9632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.211072][T16919] __nla_validate_parse: 5 callbacks suppressed [ 420.211090][T16919] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3426'. [ 420.235257][ T9632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.347337][ T9632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.393366][ T9632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.709072][T16942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3435'. [ 420.778782][T16942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3435'. [ 421.164668][T16958] tipc: Resetting bearer [ 421.285931][T16970] netlink: 'syz.0.3439': attribute type 16 has an invalid length. [ 421.455650][T16980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3446'. [ 422.909551][T16968] team0: Unable to change to the same mode the team is in [ 423.021426][T16958] tipc: Enabling of bearer rejected, already enabled [ 423.296342][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3448'. [ 423.340591][T16985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3448'. [ 423.700741][T17012] netlink: 728 bytes leftover after parsing attributes in process `syz.4.3457'. [ 424.064714][T17031] syz_tun: entered promiscuous mode [ 424.086267][T17031] syz_tun: left promiscuous mode [ 424.389365][T17051] nbd4: detected capacity change from 0 to 63 [ 424.403517][T17056] block nbd4: NBD_DISCONNECT [ 424.417924][T17056] block nbd4: Disconnected due to user request. [ 424.430554][T17056] block nbd4: shutting down sockets [ 424.442006][ C1] blk_print_req_error: 24 callbacks suppressed [ 424.442026][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.457922][ C1] buffer_io_error: 23 callbacks suppressed [ 424.457939][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 424.474951][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.484160][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 424.492088][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.501219][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 424.509137][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.518209][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 424.526638][T15090] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.564956][T15090] Buffer I/O error on dev nbd4, logical block 0, async page read [ 424.589163][T15090] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.598270][T15090] Buffer I/O error on dev nbd4, logical block 1, async page read [ 424.624745][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3477'. [ 424.634322][T15090] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.660219][T15090] Buffer I/O error on dev nbd4, logical block 2, async page read [ 424.677148][T15090] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.689187][T15090] Buffer I/O error on dev nbd4, logical block 3, async page read [ 424.697325][T15090] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.707062][T15090] Buffer I/O error on dev nbd4, logical block 0, async page read [ 424.718574][T17064] netlink: 'syz.3.3476': attribute type 39 has an invalid length. [ 424.730841][T15090] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.769587][T15090] Buffer I/O error on dev nbd4, logical block 1, async page read [ 424.781344][T17067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3476'. [ 424.804292][T15090] ldm_validate_partition_table(): Disk read failed. [ 424.852237][T15090] Dev nbd4: unable to read RDB block 0 [ 424.863506][T15090] nbd4: unable to read partition table [ 424.898812][T15090] ldm_validate_partition_table(): Disk read failed. [ 424.922463][T15090] Dev nbd4: unable to read RDB block 0 [ 424.944270][T15090] nbd4: unable to read partition table [ 425.618527][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3490'. [ 425.620101][T17110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3491'. [ 425.839658][T17113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3492'. [ 425.904596][T17116] netlink: 'syz.4.3490': attribute type 23 has an invalid length. [ 426.297442][T17147] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3506'. [ 426.372709][T17152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3509'. [ 426.407758][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3508'. [ 426.695908][T17168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3515'. [ 427.003760][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3520'. [ 427.029349][T17183] erspan0: entered promiscuous mode [ 427.227018][T17196] netlink: 'syz.3.3524': attribute type 12 has an invalid length. [ 427.245714][T17196] netlink: 'syz.3.3524': attribute type 29 has an invalid length. [ 427.254919][T17194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3523'. [ 427.259767][T17196] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3524'. [ 427.283680][T17196] netlink: 'syz.3.3524': attribute type 2 has an invalid length. [ 427.297855][T17196] netlink: 'syz.3.3524': attribute type 3 has an invalid length. [ 428.577946][T17256] openvswitch: netlink: Tunnel attr 770 out of range max 16 [ 429.556279][T17291] netlink: 'syz.3.3553': attribute type 23 has an invalid length. [ 429.576943][T17289] bridge_slave_0: left allmulticast mode [ 429.583383][T17289] bridge_slave_0: left promiscuous mode [ 429.601400][T17289] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.624268][T17289] bridge_slave_1: left allmulticast mode [ 429.642273][T17289] bridge_slave_1: left promiscuous mode [ 429.659768][T17289] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.679607][T17289] bond0: (slave bond_slave_0): Releasing backup interface [ 429.692157][T17289] bond_slave_0: left promiscuous mode [ 429.697954][T17289] bond_slave_0: left allmulticast mode [ 429.707830][T17289] bond0: (slave bond_slave_1): Releasing backup interface [ 429.721546][T17298] netlink: 'syz.4.3555': attribute type 16 has an invalid length. [ 429.752040][T17289] bond_slave_1: left promiscuous mode [ 429.772840][T17289] bond_slave_1: left allmulticast mode [ 429.824570][T17289] team0: Port device team_slave_0 removed [ 429.844581][T17289] team0: Port device team_slave_1 removed [ 429.851499][T17289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.875367][T17289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.900756][T17294] team0: Mode changed to "broadcast" [ 429.906522][T17298] vlan0: entered promiscuous mode [ 429.943401][T17301] tipc: Started in network mode [ 429.952878][T17301] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 429.982478][T17301] tipc: Enabled bearer , priority 0 [ 430.707169][T17341] netlink: 'syz.2.3570': attribute type 13 has an invalid length. [ 430.753331][T17341] netlink: 'syz.2.3570': attribute type 17 has an invalid length. [ 430.800941][T17311] __nla_validate_parse: 9 callbacks suppressed [ 430.800966][T17311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3562'. [ 430.933297][T17341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 431.062964][T17343] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 431.096466][T17341] netlink: 'syz.2.3570': attribute type 10 has an invalid length. [ 431.113850][ T5943] tipc: Node number set to 11578026 [ 431.142261][T17341] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 431.185487][T17343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3570'. [ 431.188002][T17341] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 431.205740][T17356] FAULT_INJECTION: forcing a failure. [ 431.205740][T17356] name failslab, interval 1, probability 0, space 0, times 0 [ 431.251366][T17356] CPU: 0 UID: 0 PID: 17356 Comm: syz.4.3575 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 431.251396][T17356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 431.251408][T17356] Call Trace: [ 431.251417][T17356] [ 431.251426][T17356] dump_stack_lvl+0x189/0x250 [ 431.251455][T17356] ? __pfx____ratelimit+0x10/0x10 [ 431.251481][T17356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.251503][T17356] ? __pfx__printk+0x10/0x10 [ 431.251534][T17356] ? __pfx___might_resched+0x10/0x10 [ 431.251557][T17356] should_fail_ex+0x414/0x560 [ 431.251585][T17356] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 431.251610][T17356] should_failslab+0xa8/0x100 [ 431.251639][T17356] __kvmalloc_node_noprof+0x161/0x5f0 [ 431.251665][T17356] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 431.251697][T17356] bpf_test_run_xdp_live+0x18e/0x1b10 [ 431.251728][T17356] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 431.251769][T17356] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 431.251806][T17356] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 431.251839][T17356] ? bpf_dispatcher_xdp+0x800/0x1000 [ 431.251858][T17356] ? bpf_dispatcher_xdp+0x800/0x1000 [ 431.251922][T17356] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 431.251956][T17356] ? _copy_from_user+0x94/0xb0 [ 431.251978][T17356] ? bpf_test_init+0x133/0x170 [ 431.252000][T17356] ? xdp_convert_md_to_buff+0x5b/0x330 [ 431.252041][T17356] bpf_prog_test_run_xdp+0x713/0x1000 [ 431.252093][T17356] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 431.252125][T17356] ? __fget_files+0x2a/0x420 [ 431.252147][T17356] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 431.252175][T17356] bpf_prog_test_run+0x2c4/0x340 [ 431.252204][T17356] __sys_bpf+0x581/0x870 [ 431.252232][T17356] ? __pfx___sys_bpf+0x10/0x10 [ 431.252253][T17356] ? preempt_schedule_irq+0xde/0x150 [ 431.252308][T17356] __x64_sys_bpf+0x7c/0x90 [ 431.252331][T17356] do_syscall_64+0xfa/0x3b0 [ 431.252356][T17356] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.252380][T17356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.252401][T17356] ? clear_bhb_loop+0x60/0xb0 [ 431.252426][T17356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.252446][T17356] RIP: 0033:0x7f311bf8ebe9 [ 431.252465][T17356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.252481][T17356] RSP: 002b:00007f311cd27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.252502][T17356] RAX: ffffffffffffffda RBX: 00007f311c1b5fa0 RCX: 00007f311bf8ebe9 [ 431.252515][T17356] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 431.252527][T17356] RBP: 00007f311cd27090 R08: 0000000000000000 R09: 0000000000000000 [ 431.252539][T17356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.252548][T17356] R13: 00007f311c1b6038 R14: 00007f311c1b5fa0 R15: 00007ffd909eeb28 [ 431.252578][T17356] [ 431.596889][T17343] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 431.625306][T17358] tipc: Resetting bearer [ 431.672266][T17343] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 431.713316][T17343] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 431.816855][T17358] netlink: 'syz.0.3574': attribute type 10 has an invalid length. [ 431.889140][T17358] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 431.896850][T17371] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3581'. [ 431.929174][T17358] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 431.937506][T17358] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 432.210533][T17382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3586'. [ 432.250151][T17382] dummy0: entered promiscuous mode [ 432.264381][T17382] dummy0: left promiscuous mode [ 432.304357][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3588'. [ 432.397925][T17391] FAULT_INJECTION: forcing a failure. [ 432.397925][T17391] name failslab, interval 1, probability 0, space 0, times 0 [ 432.408029][T17387] pim6reg: entered allmulticast mode [ 432.428156][T17391] CPU: 1 UID: 0 PID: 17391 Comm: syz.2.3589 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 432.428187][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.428200][T17391] Call Trace: [ 432.428208][T17391] [ 432.428217][T17391] dump_stack_lvl+0x189/0x250 [ 432.428248][T17391] ? __pfx____ratelimit+0x10/0x10 [ 432.428281][T17391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.428305][T17391] ? __pfx__printk+0x10/0x10 [ 432.428341][T17391] ? __pfx___might_resched+0x10/0x10 [ 432.428366][T17391] should_fail_ex+0x414/0x560 [ 432.428398][T17391] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 432.428426][T17391] should_failslab+0xa8/0x100 [ 432.428457][T17391] __kvmalloc_node_noprof+0x161/0x5f0 [ 432.428487][T17391] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 432.428523][T17391] bpf_test_run_xdp_live+0x1b5/0x1b10 [ 432.428558][T17391] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 432.428590][T17391] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 432.428650][T17391] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 432.428674][T17391] ? bpf_dispatcher_xdp+0x800/0x1000 [ 432.428695][T17391] ? bpf_dispatcher_xdp+0x800/0x1000 [ 432.428766][T17391] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 432.428805][T17391] ? _copy_from_user+0x94/0xb0 [ 432.428828][T17391] ? bpf_test_init+0x133/0x170 [ 432.428854][T17391] ? xdp_convert_md_to_buff+0x5b/0x330 [ 432.428886][T17391] bpf_prog_test_run_xdp+0x713/0x1000 [ 432.428934][T17391] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 432.428969][T17391] ? __fget_files+0x2a/0x420 [ 432.428993][T17391] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 432.429033][T17391] bpf_prog_test_run+0x2c4/0x340 [ 432.429078][T17391] __sys_bpf+0x581/0x870 [ 432.429107][T17391] ? __pfx___sys_bpf+0x10/0x10 [ 432.429158][T17391] ? rcu_is_watching+0x15/0xb0 [ 432.429184][T17391] __x64_sys_bpf+0x7c/0x90 [ 432.429208][T17391] do_syscall_64+0xfa/0x3b0 [ 432.429235][T17391] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.429258][T17391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.429275][T17391] ? clear_bhb_loop+0x60/0xb0 [ 432.429295][T17391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.429312][T17391] RIP: 0033:0x7f55bf18ebe9 [ 432.429328][T17391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.429342][T17391] RSP: 002b:00007f55c0000038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 432.429360][T17391] RAX: ffffffffffffffda RBX: 00007f55bf3b5fa0 RCX: 00007f55bf18ebe9 [ 432.429372][T17391] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 432.429382][T17391] RBP: 00007f55c0000090 R08: 0000000000000000 R09: 0000000000000000 [ 432.429392][T17391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.429402][T17391] R13: 00007f55bf3b6038 R14: 00007f55bf3b5fa0 R15: 00007ffc787e1018 [ 432.429430][T17391] [ 432.910618][T17392] pim6reg: left allmulticast mode [ 433.339874][T17412] netlink: 'syz.1.3594': attribute type 3 has an invalid length. [ 433.347695][T17412] netlink: 'syz.1.3594': attribute type 3 has an invalid length. [ 433.559413][T17423] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3600'. [ 433.579915][T17422] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3598'. [ 433.814717][T17427] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3602'. [ 433.872021][T17428] netlink: 'syz.0.3601': attribute type 2 has an invalid length. [ 433.983174][T17437] veth0_to_team: entered promiscuous mode [ 433.999911][T17437] veth0_to_team: entered allmulticast mode [ 434.027345][T17428] k›*·]‘: entered promiscuous mode [ 434.088243][T17434] tipc: Resetting bearer [ 434.123645][T17434] tipc: Resetting bearer [ 434.197525][T17434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.358902][T17439] syzkaller1: entered promiscuous mode [ 434.371165][T17439] syzkaller1: entered allmulticast mode [ 434.937210][T17464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3611'. [ 435.005157][T17469] FAULT_INJECTION: forcing a failure. [ 435.005157][T17469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.025870][T17469] CPU: 1 UID: 0 PID: 17469 Comm: syz.2.3614 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 435.025902][T17469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 435.025916][T17469] Call Trace: [ 435.025924][T17469] [ 435.025934][T17469] dump_stack_lvl+0x189/0x250 [ 435.025964][T17469] ? __pfx____ratelimit+0x10/0x10 [ 435.025993][T17469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.026018][T17469] ? __pfx__printk+0x10/0x10 [ 435.026047][T17469] ? __might_fault+0xb0/0x130 [ 435.026088][T17469] should_fail_ex+0x414/0x560 [ 435.026120][T17469] _copy_from_user+0x2d/0xb0 [ 435.026145][T17469] ___sys_sendmsg+0x158/0x2a0 [ 435.026170][T17469] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.026234][T17469] ? __fget_files+0x2a/0x420 [ 435.026251][T17469] ? __fget_files+0x3a0/0x420 [ 435.026281][T17469] __x64_sys_sendmsg+0x19b/0x260 [ 435.026306][T17469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.026339][T17469] ? __pfx_ksys_write+0x10/0x10 [ 435.026364][T17469] ? rcu_is_watching+0x15/0xb0 [ 435.026390][T17469] ? do_syscall_64+0xbe/0x3b0 [ 435.026424][T17469] do_syscall_64+0xfa/0x3b0 [ 435.026452][T17469] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.026479][T17469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.026500][T17469] ? clear_bhb_loop+0x60/0xb0 [ 435.026526][T17469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.026546][T17469] RIP: 0033:0x7f55bf18ebe9 [ 435.026564][T17469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.026582][T17469] RSP: 002b:00007f55c0000038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.026604][T17469] RAX: ffffffffffffffda RBX: 00007f55bf3b5fa0 RCX: 00007f55bf18ebe9 [ 435.026619][T17469] RDX: 000000000000c804 RSI: 00002000000026c0 RDI: 0000000000000003 [ 435.026632][T17469] RBP: 00007f55c0000090 R08: 0000000000000000 R09: 0000000000000000 [ 435.026645][T17469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.026657][T17469] R13: 00007f55bf3b6038 R14: 00007f55bf3b5fa0 R15: 00007ffc787e1018 [ 435.026691][T17469] [ 435.040831][T17465] bridge_slave_0: left allmulticast mode [ 435.222499][T17471] netlink: 'syz.3.3612': attribute type 16 has an invalid length. [ 435.354332][T17465] bridge_slave_0: left promiscuous mode [ 435.380452][T17465] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.390913][T17482] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3618'. [ 435.441742][T17465] bridge_slave_1: left allmulticast mode [ 435.447460][T17465] bridge_slave_1: left promiscuous mode [ 435.453683][T17465] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.532724][T17465] bond0: (slave bond_slave_0): Releasing backup interface [ 435.556054][T17465] bond_slave_0: left promiscuous mode [ 435.603667][T17465] bond_slave_0: left allmulticast mode [ 435.640674][T17465] bond0: (slave bond_slave_1): Releasing backup interface [ 435.656087][T17465] bond_slave_1: left promiscuous mode [ 435.663237][T17465] bond_slave_1: left allmulticast mode [ 435.701803][T17465] team0: Port device team_slave_0 removed [ 435.770779][T17465] team0: Port device team_slave_1 removed [ 435.777728][T17465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.793136][T17465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.803912][T17465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.814450][T17465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.846105][T17465] bond1: (slave bridge1): Releasing backup interface [ 435.854135][T17465] bridge1: left promiscuous mode [ 435.896474][T17470] team0: Mode changed to "broadcast" [ 435.915249][T17471] vlan0: entered promiscuous mode [ 435.975205][T17481] tipc: Enabled bearer , priority 0 [ 435.991977][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3621'. [ 436.098171][T17496] netlink: 'syz.4.3621': attribute type 23 has an invalid length. [ 436.803899][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3633'. [ 436.858677][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3633'. [ 437.144282][T17555] netlink: 'syz.1.3638': attribute type 1 has an invalid length. [ 437.164819][T17555] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3638'. [ 437.607209][T17573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3645'. [ 437.950575][T17589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3651'. [ 438.044853][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'. [ 438.097331][T17593] bond0: entered promiscuous mode [ 438.117524][T17593] bond_slave_0: entered promiscuous mode [ 438.124521][T17593] bond_slave_1: entered promiscuous mode [ 438.131465][T17593] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode [ 438.146134][T17593] batadv0: entered promiscuous mode [ 438.153183][T17593] debugfs: 'hsr1' already exists in 'hsr' [ 438.161433][T17593] Cannot create hsr debugfs directory [ 438.170036][T17593] hsr1: entered allmulticast mode [ 438.175297][T17593] bond0: entered allmulticast mode [ 438.175911][T17600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.192742][T17593] bond_slave_0: entered allmulticast mode [ 438.202440][T17593] bond_slave_1: entered allmulticast mode [ 438.205754][T17600] netlink: 'syz.4.3654': attribute type 23 has an invalid length. [ 438.211971][T17599] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3655'. [ 438.223883][T17593] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 438.234667][T17593] batadv0: entered allmulticast mode [ 438.242267][T17593] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 438.774023][T17619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3658'. [ 438.787972][T17619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3658'. [ 438.834492][T17619] lo speed is unknown, defaulting to 1000 [ 438.840944][T17619] lo speed is unknown, defaulting to 1000 [ 438.847550][T17619] lo speed is unknown, defaulting to 1000 [ 438.901815][T17619] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 439.023927][T17619] lo speed is unknown, defaulting to 1000 [ 439.046157][T17619] lo speed is unknown, defaulting to 1000 [ 439.090058][T17619] lo speed is unknown, defaulting to 1000 [ 439.151046][T17619] lo speed is unknown, defaulting to 1000 [ 439.285545][T17619] lo speed is unknown, defaulting to 1000 [ 439.295060][T17619] lo speed is unknown, defaulting to 1000 [ 439.333195][T17619] lo speed is unknown, defaulting to 1000 [ 439.347872][T17645] tipc: Resetting bearer [ 439.433732][T17649] FAULT_INJECTION: forcing a failure. [ 439.433732][T17649] name failslab, interval 1, probability 0, space 0, times 0 [ 439.451332][T17649] CPU: 1 UID: 0 PID: 17649 Comm: syz.1.3670 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 439.451362][T17649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.451375][T17649] Call Trace: [ 439.451384][T17649] [ 439.451392][T17649] dump_stack_lvl+0x189/0x250 [ 439.451431][T17649] ? __pfx____ratelimit+0x10/0x10 [ 439.451460][T17649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.451484][T17649] ? __pfx__printk+0x10/0x10 [ 439.451515][T17649] ? __lock_acquire+0xab9/0xd20 [ 439.451556][T17649] should_fail_ex+0x414/0x560 [ 439.451590][T17649] should_failslab+0xa8/0x100 [ 439.451622][T17649] kmem_cache_alloc_noprof+0x73/0x3c0 [ 439.451649][T17649] ? skb_clone+0x212/0x3a0 [ 439.451676][T17649] skb_clone+0x212/0x3a0 [ 439.451703][T17649] __netlink_deliver_tap+0x404/0x850 [ 439.451748][T17649] ? netlink_deliver_tap+0x2e/0x1b0 [ 439.451779][T17649] netlink_deliver_tap+0x19c/0x1b0 [ 439.451811][T17649] netlink_unicast+0x7fa/0x9e0 [ 439.451848][T17649] ? __pfx_netlink_unicast+0x10/0x10 [ 439.451878][T17649] ? netlink_sendmsg+0x642/0xb30 [ 439.451906][T17649] ? skb_put+0x11b/0x210 [ 439.451930][T17649] netlink_sendmsg+0x805/0xb30 [ 439.451972][T17649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.452005][T17649] ? aa_sock_msg_perm+0xf1/0x1d0 [ 439.452041][T17649] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 439.452063][T17649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.452095][T17649] __sock_sendmsg+0x219/0x270 [ 439.452125][T17649] ____sys_sendmsg+0x505/0x830 [ 439.452153][T17649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.452186][T17649] ? import_iovec+0x74/0xa0 [ 439.452230][T17649] ___sys_sendmsg+0x21f/0x2a0 [ 439.452254][T17649] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.452320][T17649] ? __fget_files+0x2a/0x420 [ 439.452337][T17649] ? __fget_files+0x3a0/0x420 [ 439.452368][T17649] __x64_sys_sendmsg+0x19b/0x260 [ 439.452393][T17649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.452432][T17649] ? __pfx_ksys_write+0x10/0x10 [ 439.452457][T17649] ? rcu_is_watching+0x15/0xb0 [ 439.452484][T17649] ? do_syscall_64+0xbe/0x3b0 [ 439.452517][T17649] do_syscall_64+0xfa/0x3b0 [ 439.452545][T17649] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.452571][T17649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.452591][T17649] ? clear_bhb_loop+0x60/0xb0 [ 439.452616][T17649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.452636][T17649] RIP: 0033:0x7f7763b8ebe9 [ 439.452654][T17649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.452670][T17649] RSP: 002b:00007f7764a8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.452692][T17649] RAX: ffffffffffffffda RBX: 00007f7763db5fa0 RCX: 00007f7763b8ebe9 [ 439.452707][T17649] RDX: 000000000000c804 RSI: 00002000000026c0 RDI: 0000000000000003 [ 439.452720][T17649] RBP: 00007f7764a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 439.452732][T17649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.452744][T17649] R13: 00007f7763db6038 R14: 00007f7763db5fa0 R15: 00007ffd34074d68 [ 439.452779][T17649] [ 439.452989][T17647] team0: Unable to change to the same mode the team is in [ 439.538203][T17645] netlink: 'syz.3.3669': attribute type 16 has an invalid length. [ 439.599162][T17650] tipc: Enabled bearer , priority 0 [ 439.816418][T17647] tipc: Enabling of bearer rejected, already enabled [ 439.839950][T17659] syzkaller0: entered promiscuous mode [ 439.848424][T17659] syzkaller0: entered allmulticast mode [ 439.938145][T17650] tipc: Resetting bearer [ 439.972363][T17667] netlink: 'syz.2.3675': attribute type 1 has an invalid length. [ 440.022706][T17660] syzkaller0: entered promiscuous mode [ 440.051283][T17660] syzkaller0: entered allmulticast mode [ 440.057881][T17648] tipc: Resetting bearer [ 440.094658][T17648] tipc: Disabling bearer [ 440.176394][T17667] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 440.225502][T17667] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 440.334693][T17675] gretap1: entered promiscuous mode [ 440.350115][T17675] bond1: (slave gretap1): making interface the new active one [ 440.360240][T17675] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 440.364827][T17685] FAULT_INJECTION: forcing a failure. [ 440.364827][T17685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.392786][T17685] CPU: 1 UID: 0 PID: 17685 Comm: syz.1.3681 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 440.392819][T17685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.392832][T17685] Call Trace: [ 440.392841][T17685] [ 440.392850][T17685] dump_stack_lvl+0x189/0x250 [ 440.392881][T17685] ? __pfx____ratelimit+0x10/0x10 [ 440.392910][T17685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.392936][T17685] ? __pfx__printk+0x10/0x10 [ 440.392965][T17685] ? __might_fault+0xb0/0x130 [ 440.393013][T17685] should_fail_ex+0x414/0x560 [ 440.393046][T17685] _copy_from_user+0x2d/0xb0 [ 440.393071][T17685] do_sock_getsockopt+0x17d/0x450 [ 440.393096][T17685] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 440.393116][T17685] ? write_ibpb+0x30/0x40 [ 440.393148][T17685] ? ksys_write+0x1e1/0x250 [ 440.393182][T17685] __x64_sys_getsockopt+0x1a5/0x250 [ 440.393202][T17685] ? write_ibpb+0x30/0x40 [ 440.393232][T17685] ? write_ibpb+0x30/0x40 [ 440.393265][T17685] do_syscall_64+0xfa/0x3b0 [ 440.393294][T17685] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.393320][T17685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.393340][T17685] ? clear_bhb_loop+0x60/0xb0 [ 440.393366][T17685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.393386][T17685] RIP: 0033:0x7f7763b8ebe9 [ 440.393404][T17685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.393421][T17685] RSP: 002b:00007f7764a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 440.393443][T17685] RAX: ffffffffffffffda RBX: 00007f7763db5fa0 RCX: 00007f7763b8ebe9 [ 440.393458][T17685] RDX: 0000000000000487 RSI: 0000000000000119 RDI: 0000000000000004 [ 440.393471][T17685] RBP: 00007f7764a8d090 R08: 0000200000000480 R09: 0000000000000000 [ 440.393484][T17685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.393496][T17685] R13: 00007f7763db6038 R14: 00007f7763db5fa0 R15: 00007ffd34074d68 [ 440.393530][T17685] [ 440.970575][T17700] FAULT_INJECTION: forcing a failure. [ 440.970575][T17700] name failslab, interval 1, probability 0, space 0, times 0 [ 441.017134][T17700] CPU: 1 UID: 0 PID: 17700 Comm: syz.1.3687 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 441.017164][T17700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.017175][T17700] Call Trace: [ 441.017182][T17700] [ 441.017191][T17700] dump_stack_lvl+0x189/0x250 [ 441.017222][T17700] ? __pfx____ratelimit+0x10/0x10 [ 441.017251][T17700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.017275][T17700] ? __pfx__printk+0x10/0x10 [ 441.017308][T17700] ? __pfx___might_resched+0x10/0x10 [ 441.017327][T17700] ? fs_reclaim_acquire+0x7d/0x100 [ 441.017364][T17700] should_fail_ex+0x414/0x560 [ 441.017397][T17700] should_failslab+0xa8/0x100 [ 441.017428][T17700] __kmalloc_noprof+0xcb/0x4f0 [ 441.017455][T17700] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 441.017486][T17700] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 441.017520][T17700] genl_family_rcv_msg_doit+0xb8/0x300 [ 441.017551][T17700] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 441.017583][T17700] ? apparmor_capable+0x137/0x1b0 [ 441.017610][T17700] ? bpf_lsm_capable+0x9/0x20 [ 441.017637][T17700] ? security_capable+0x7e/0x2e0 [ 441.017675][T17700] genl_rcv_msg+0x60e/0x790 [ 441.017705][T17700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.017728][T17700] ? __pfx_smc_nl_flush_ueid+0x10/0x10 [ 441.017756][T17700] ? __asan_memcpy+0x40/0x70 [ 441.017779][T17700] ? __pfx_ref_tracker_free+0x10/0x10 [ 441.017816][T17700] netlink_rcv_skb+0x205/0x470 [ 441.017841][T17700] ? __lock_acquire+0xab9/0xd20 [ 441.017871][T17700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.017897][T17700] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.017962][T17700] ? down_read+0x1ad/0x2e0 [ 441.017984][T17700] genl_rcv+0x28/0x40 [ 441.018004][T17700] netlink_unicast+0x82c/0x9e0 [ 441.018042][T17700] ? __pfx_netlink_unicast+0x10/0x10 [ 441.018071][T17700] ? netlink_sendmsg+0x642/0xb30 [ 441.018099][T17700] ? skb_put+0x11b/0x210 [ 441.018123][T17700] netlink_sendmsg+0x805/0xb30 [ 441.018164][T17700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.018197][T17700] ? aa_sock_msg_perm+0xf1/0x1d0 [ 441.018232][T17700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.018254][T17700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.018290][T17700] __sock_sendmsg+0x219/0x270 [ 441.018320][T17700] ____sys_sendmsg+0x505/0x830 [ 441.018347][T17700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.018378][T17700] ? import_iovec+0x74/0xa0 [ 441.018406][T17700] ___sys_sendmsg+0x21f/0x2a0 [ 441.018430][T17700] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.018495][T17700] ? __fget_files+0x2a/0x420 [ 441.018512][T17700] ? __fget_files+0x3a0/0x420 [ 441.018543][T17700] __x64_sys_sendmsg+0x19b/0x260 [ 441.018568][T17700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.018601][T17700] ? __pfx_ksys_write+0x10/0x10 [ 441.018626][T17700] ? rcu_is_watching+0x15/0xb0 [ 441.018653][T17700] ? do_syscall_64+0xbe/0x3b0 [ 441.018686][T17700] do_syscall_64+0xfa/0x3b0 [ 441.018711][T17700] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.018737][T17700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.018756][T17700] ? clear_bhb_loop+0x60/0xb0 [ 441.018780][T17700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.018798][T17700] RIP: 0033:0x7f7763b8ebe9 [ 441.018816][T17700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.018832][T17700] RSP: 002b:00007f7764a8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.018852][T17700] RAX: ffffffffffffffda RBX: 00007f7763db5fa0 RCX: 00007f7763b8ebe9 [ 441.018867][T17700] RDX: 000000000000c804 RSI: 00002000000026c0 RDI: 0000000000000003 [ 441.018879][T17700] RBP: 00007f7764a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 441.018891][T17700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.018902][T17700] R13: 00007f7763db6038 R14: 00007f7763db5fa0 R15: 00007ffd34074d68 [ 441.018935][T17700] [ 441.034947][T17631] udevd[17631]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 441.429936][T17709] __nla_validate_parse: 7 callbacks suppressed [ 441.429960][T17709] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3690'. [ 441.466867][T17712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3691'. [ 441.547095][T17713] macsec1: entered promiscuous mode [ 441.685636][T17713] team0: entered promiscuous mode [ 442.020774][T17734] FAULT_INJECTION: forcing a failure. [ 442.020774][T17734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.039306][T17733] lo speed is unknown, defaulting to 1000 [ 442.063676][T17734] CPU: 0 UID: 0 PID: 17734 Comm: syz.2.3697 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 442.063707][T17734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.063720][T17734] Call Trace: [ 442.063728][T17734] [ 442.063737][T17734] dump_stack_lvl+0x189/0x250 [ 442.063767][T17734] ? __pfx____ratelimit+0x10/0x10 [ 442.063796][T17734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.063820][T17734] ? __pfx__printk+0x10/0x10 [ 442.063864][T17734] should_fail_ex+0x414/0x560 [ 442.063898][T17734] _copy_to_user+0x31/0xb0 [ 442.063943][T17734] simple_read_from_buffer+0xe1/0x170 [ 442.063978][T17734] proc_fail_nth_read+0x1b3/0x220 [ 442.064005][T17734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.064033][T17734] ? rw_verify_area+0x2a6/0x4d0 [ 442.064059][T17734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.064084][T17734] vfs_read+0x1fd/0xa30 [ 442.064114][T17734] ? kcm_getsockopt+0x206/0x290 [ 442.064140][T17734] ? __pfx_vfs_read+0x10/0x10 [ 442.064168][T17734] ? rep_movs_alternative+0xf/0x90 [ 442.064192][T17734] ? __pfx_kcm_getsockopt+0x10/0x10 [ 442.064217][T17734] ? do_sock_getsockopt+0x372/0x450 [ 442.064249][T17734] ksys_read+0x145/0x250 [ 442.064278][T17734] ? __pfx_ksys_read+0x10/0x10 [ 442.064312][T17734] ? do_syscall_64+0xbe/0x3b0 [ 442.064346][T17734] do_syscall_64+0xfa/0x3b0 [ 442.064373][T17734] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.064400][T17734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.064421][T17734] ? clear_bhb_loop+0x60/0xb0 [ 442.064445][T17734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.064465][T17734] RIP: 0033:0x7f55bf18d5fc [ 442.064483][T17734] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 442.064501][T17734] RSP: 002b:00007f55c0000030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 442.064522][T17734] RAX: ffffffffffffffda RBX: 00007f55bf3b5fa0 RCX: 00007f55bf18d5fc [ 442.064537][T17734] RDX: 000000000000000f RSI: 00007f55c00000a0 RDI: 0000000000000005 [ 442.064550][T17734] RBP: 00007f55c0000090 R08: 0000000000000000 R09: 0000000000000000 [ 442.064562][T17734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.064573][T17734] R13: 00007f55bf3b6038 R14: 00007f55bf3b5fa0 R15: 00007ffc787e1018 [ 442.064607][T17734] [ 442.662281][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3702'. [ 442.892752][T17760] FAULT_INJECTION: forcing a failure. [ 442.892752][T17760] name failslab, interval 1, probability 0, space 0, times 0 [ 442.909436][T17760] CPU: 1 UID: 0 PID: 17760 Comm: syz.0.3707 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 442.909467][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.909480][T17760] Call Trace: [ 442.909489][T17760] [ 442.909499][T17760] dump_stack_lvl+0x189/0x250 [ 442.909529][T17760] ? __pfx____ratelimit+0x10/0x10 [ 442.909558][T17760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.909583][T17760] ? __pfx__printk+0x10/0x10 [ 442.909618][T17760] ? __pfx___might_resched+0x10/0x10 [ 442.909638][T17760] ? fs_reclaim_acquire+0x7d/0x100 [ 442.909675][T17760] should_fail_ex+0x414/0x560 [ 442.909708][T17760] should_failslab+0xa8/0x100 [ 442.909740][T17760] __kmalloc_cache_noprof+0x70/0x3d0 [ 442.909779][T17760] ? nfnetlink_rcv+0xeff/0x2520 [ 442.909811][T17760] nfnetlink_rcv+0xeff/0x2520 [ 442.909875][T17760] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 442.909921][T17760] ? ref_tracker_free+0x63a/0x7d0 [ 442.909985][T17760] ? __netlink_deliver_tap+0x807/0x850 [ 442.910015][T17760] ? netlink_deliver_tap+0x2e/0x1b0 [ 442.910066][T17760] netlink_unicast+0x82c/0x9e0 [ 442.910104][T17760] ? __pfx_netlink_unicast+0x10/0x10 [ 442.910133][T17760] ? netlink_sendmsg+0x642/0xb30 [ 442.910160][T17760] ? skb_put+0x11b/0x210 [ 442.910184][T17760] netlink_sendmsg+0x805/0xb30 [ 442.910230][T17760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.910264][T17760] ? aa_sock_msg_perm+0xf1/0x1d0 [ 442.910298][T17760] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 442.910320][T17760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.910352][T17760] __sock_sendmsg+0x219/0x270 [ 442.910382][T17760] ____sys_sendmsg+0x505/0x830 [ 442.910411][T17760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.910443][T17760] ? import_iovec+0x74/0xa0 [ 442.910472][T17760] ___sys_sendmsg+0x21f/0x2a0 [ 442.910496][T17760] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.910561][T17760] ? __fget_files+0x2a/0x420 [ 442.910578][T17760] ? __fget_files+0x3a0/0x420 [ 442.910609][T17760] __x64_sys_sendmsg+0x19b/0x260 [ 442.910634][T17760] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.910667][T17760] ? __pfx_ksys_write+0x10/0x10 [ 442.910691][T17760] ? rcu_is_watching+0x15/0xb0 [ 442.910719][T17760] ? do_syscall_64+0xbe/0x3b0 [ 442.910753][T17760] do_syscall_64+0xfa/0x3b0 [ 442.910787][T17760] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.910814][T17760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.910834][T17760] ? clear_bhb_loop+0x60/0xb0 [ 442.910860][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.910880][T17760] RIP: 0033:0x7f2270d8ebe9 [ 442.910899][T17760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.910916][T17760] RSP: 002b:00007f2271c83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.910938][T17760] RAX: ffffffffffffffda RBX: 00007f2270fb5fa0 RCX: 00007f2270d8ebe9 [ 442.910953][T17760] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 442.910965][T17760] RBP: 00007f2271c83090 R08: 0000000000000000 R09: 0000000000000000 [ 442.910977][T17760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.910988][T17760] R13: 00007f2270fb6038 R14: 00007f2270fb5fa0 R15: 00007ffc7614b8f8 [ 442.911023][T17760] [ 442.931220][T17751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3703'. [ 443.364759][T17773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3709'. [ 443.412754][T17769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3710'. [ 443.473109][T17769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3710'. [ 443.564914][T17782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3714'. [ 443.844934][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3719'. [ 443.977601][T17799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3721'. [ 444.243066][T17807] syzkaller0: entered promiscuous mode [ 444.258177][T17807] syzkaller0: entered allmulticast mode [ 444.491187][T17823] syzkaller0: entered promiscuous mode [ 444.515705][T17823] syzkaller0: entered allmulticast mode [ 444.550908][T17821] tipc: Enabled bearer , priority 0 [ 444.617133][T17821] tipc: Resetting bearer [ 444.627045][T17818] tipc: Resetting bearer [ 444.755020][T17818] tipc: Disabling bearer [ 444.829438][T17835] lo speed is unknown, defaulting to 1000 [ 446.276073][T17879] IPv6: Can't replace route, no match found [ 446.635304][T17908] syz_tun: entered promiscuous mode [ 446.667040][T17908] syz_tun: left promiscuous mode [ 446.829497][T17915] netlink: 'syz.1.3756': attribute type 1 has an invalid length. [ 447.116659][T17934] __nla_validate_parse: 8 callbacks suppressed [ 447.116682][T17934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3764'. [ 447.377656][T17949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3765'. [ 447.827472][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3778'. [ 448.206505][T17997] netlink: 'syz.0.3783': attribute type 2 has an invalid length. [ 448.367706][T18005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3788'. [ 448.407144][T18005] bridge0: entered promiscuous mode [ 448.414370][T18005] vlan2: entered promiscuous mode [ 448.461495][T18009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3790'. [ 448.471821][T18009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3790'. [ 449.076599][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3799'. [ 449.171891][T18035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3802'. [ 449.189148][T18035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3802'. [ 449.266379][T18039] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3803'. [ 449.349768][T18046] netlink: 'syz.0.3805': attribute type 8 has an invalid length. [ 449.672678][T18064] netlink: 'syz.1.3807': attribute type 16 has an invalid length. [ 450.051943][T18056] tipc: Resetting bearer [ 450.249410][T18063] lo speed is unknown, defaulting to 1000 [ 450.488879][T18070] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 450.613902][T18084] veth0_virt_wifi: renamed from veth0_vlan [ 450.668153][T18090] syz_tun: entered promiscuous mode [ 450.706958][T18090] syz_tun: left promiscuous mode [ 451.141365][T18113] tipc: Resetting bearer [ 451.215605][T18113] bond0: (slave wlan1): Releasing backup interface [ 451.227527][T18113] mac80211_hwsim hwsim29 wlan1: left promiscuous mode [ 451.240347][T18113] mac80211_hwsim hwsim29 wlan1: left allmulticast mode [ 451.272951][T18124] netlink: 'syz.0.3820': attribute type 16 has an invalid length. [ 451.373810][T18119] team0: Unable to change to the same mode the team is in [ 451.433656][T18131] tipc: Enabling of bearer rejected, already enabled [ 451.750447][T18145] syzkaller0: entered promiscuous mode [ 451.766266][T18145] syzkaller0: entered allmulticast mode [ 451.883397][T18153] syz_tun: entered promiscuous mode [ 451.902871][T18153] syz_tun: left promiscuous mode [ 452.102136][T18163] pim6reg: entered allmulticast mode [ 452.118868][T18163] pim6reg: left allmulticast mode [ 452.205077][T18169] __nla_validate_parse: 6 callbacks suppressed [ 452.205097][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3835'. [ 452.427456][T18182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3840'. [ 452.542948][T18175] tipc: Enabling of bearer rejected, failed to enable media [ 453.214319][T18212] team0: No ports can be present during mode change [ 453.747495][T18230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3856'. [ 453.933901][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3858'. [ 454.808490][T18275] netlink: 'syz.4.3868': attribute type 16 has an invalid length. [ 454.924567][T18284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3871'. [ 454.926654][T18285] syzkaller0: entered promiscuous mode [ 454.958994][T18285] syzkaller0: entered allmulticast mode [ 455.017288][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3874'. [ 455.096451][T18290] pim6reg: entered allmulticast mode [ 455.108072][T18290] pim6reg: left allmulticast mode [ 455.174410][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3874'. [ 455.953826][T18307] lo speed is unknown, defaulting to 1000 [ 456.220915][T18319] syz_tun: entered promiscuous mode [ 456.274960][T18319] syz_tun: left promiscuous mode [ 456.403663][T18327] netlink: 'syz.2.3886': attribute type 1 has an invalid length. [ 456.454910][T18327] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3886'. [ 456.545362][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3887'. [ 456.979273][T18348] netlink: 'syz.4.3890': attribute type 16 has an invalid length. [ 457.143566][T18345] lo speed is unknown, defaulting to 1000 [ 457.427875][T18358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3894'. [ 457.507843][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3896'. [ 457.563891][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3893'. [ 458.003248][T18370] syz_tun: entered promiscuous mode [ 458.028986][T18370] syz_tun: left promiscuous mode [ 458.127032][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3899'. [ 458.297287][T18376] pim6reg: entered allmulticast mode [ 458.314030][T18379] pim6reg: left allmulticast mode [ 458.334092][T18376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3899'. [ 458.612620][T18392] gretap0: entered promiscuous mode [ 458.625911][T18392] vlan2: entered promiscuous mode [ 458.710162][T18394] netlink: 'syz.4.3905': attribute type 10 has an invalid length. [ 458.724781][T18394] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode [ 458.733468][T18394] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 459.327579][T18411] syz_tun: entered promiscuous mode [ 459.353590][T18411] syz_tun: left promiscuous mode [ 460.060515][T18431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.094218][T18431] bond0: (slave bond1): Enslaving as an active interface with an up link [ 460.625792][T18446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3923'. [ 460.654017][T18446] dummy0: entered promiscuous mode [ 460.695164][T18446] dummy0: left promiscuous mode [ 460.856352][T18454] syz_tun: entered promiscuous mode [ 460.915821][T18454] syz_tun: left promiscuous mode [ 460.943260][T18455] FAULT_INJECTION: forcing a failure. [ 460.943260][T18455] name failslab, interval 1, probability 0, space 0, times 0 [ 460.987652][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3927'. [ 460.997752][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3927'. [ 461.005690][T18455] CPU: 0 UID: 0 PID: 18455 Comm: syz.4.3925 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 461.005726][T18455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.005740][T18455] Call Trace: [ 461.005749][T18455] [ 461.005759][T18455] dump_stack_lvl+0x189/0x250 [ 461.005793][T18455] ? __pfx____ratelimit+0x10/0x10 [ 461.005824][T18455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.005851][T18455] ? __pfx__printk+0x10/0x10 [ 461.005893][T18455] ? __pfx___might_resched+0x10/0x10 [ 461.005922][T18455] should_fail_ex+0x414/0x560 [ 461.005959][T18455] should_failslab+0xa8/0x100 [ 461.005994][T18455] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 461.006027][T18455] ? __alloc_skb+0x112/0x2d0 [ 461.006067][T18455] __alloc_skb+0x112/0x2d0 [ 461.006106][T18455] netlink_sendmsg+0x5c6/0xb30 [ 461.006153][T18455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.006190][T18455] ? aa_sock_msg_perm+0xf1/0x1d0 [ 461.006229][T18455] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.006253][T18455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.006288][T18455] __sock_sendmsg+0x219/0x270 [ 461.006321][T18455] ____sys_sendmsg+0x52d/0x830 [ 461.006352][T18455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.006388][T18455] ? import_iovec+0x74/0xa0 [ 461.006419][T18455] ___sys_sendmsg+0x21f/0x2a0 [ 461.006453][T18455] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.006522][T18455] ? __fget_files+0x2a/0x420 [ 461.006541][T18455] ? __fget_files+0x3a0/0x420 [ 461.006573][T18455] __sys_sendmmsg+0x227/0x430 [ 461.006603][T18455] ? __pfx___sys_sendmmsg+0x10/0x10 [ 461.006623][T18455] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 461.006685][T18455] ? ksys_write+0x22a/0x250 [ 461.006715][T18455] ? __pfx_ksys_write+0x10/0x10 [ 461.006739][T18455] ? rcu_is_watching+0x15/0xb0 [ 461.006767][T18455] __x64_sys_sendmmsg+0xa0/0xc0 [ 461.006791][T18455] do_syscall_64+0xfa/0x3b0 [ 461.006818][T18455] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.006846][T18455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.006866][T18455] ? clear_bhb_loop+0x60/0xb0 [ 461.006891][T18455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.006910][T18455] RIP: 0033:0x7f311bf8ebe9 [ 461.006928][T18455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.006945][T18455] RSP: 002b:00007f311a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 461.006966][T18455] RAX: ffffffffffffffda RBX: 00007f311c1b6090 RCX: 00007f311bf8ebe9 [ 461.006981][T18455] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 461.006995][T18455] RBP: 00007f311a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 461.007007][T18455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.007019][T18455] R13: 00007f311c1b6128 R14: 00007f311c1b6090 R15: 00007ffd909eeb28 [ 461.007053][T18455] [ 461.452416][T18468] tipc: Enabling of bearer rejected, failed to enable media [ 461.641997][T18480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3932'. [ 461.730852][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3936'. [ 462.171822][T18500] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 4294967272. macoff=96 [ 462.817959][T18511] syz_tun: entered promiscuous mode [ 462.897659][T18511] syz_tun: left promiscuous mode [ 463.207791][T18520] __nla_validate_parse: 1 callbacks suppressed [ 463.207812][T18520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3949'. [ 463.254735][T18520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3949'. [ 463.299996][T18520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3949'. [ 463.362666][T18520] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3949'. [ 463.623829][T18531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3952'. [ 463.733713][T18535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3953'. [ 463.777244][T18537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3955'. [ 463.933133][T18544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3958'. [ 463.983480][T18544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3958'. [ 464.039278][T18550] netlink: 'syz.3.3959': attribute type 1 has an invalid length. [ 464.334766][T18560] syz.4.3964 uses old SIOCAX25GETINFO [ 464.437954][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3965'. [ 464.719365][T18575] team0: Unable to change to the same mode the team is in [ 464.741076][T18575] netlink: 'syz.4.3971': attribute type 16 has an invalid length. [ 464.774581][T18575] tipc: Enabling of bearer rejected, already enabled [ 465.071610][T18585] lo speed is unknown, defaulting to 1000 [ 465.088199][T18592] syz_tun: entered allmulticast mode [ 465.133777][T18581] lo speed is unknown, defaulting to 1000 [ 465.187648][T18592] syz_tun: left allmulticast mode [ 465.846915][T18623] FAULT_INJECTION: forcing a failure. [ 465.846915][T18623] name failslab, interval 1, probability 0, space 0, times 0 [ 465.896626][T18623] CPU: 1 UID: 0 PID: 18623 Comm: syz.3.3985 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 465.896657][T18623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 465.896670][T18623] Call Trace: [ 465.896679][T18623] [ 465.896688][T18623] dump_stack_lvl+0x189/0x250 [ 465.896718][T18623] ? __pfx____ratelimit+0x10/0x10 [ 465.896748][T18623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.896781][T18623] ? __pfx__printk+0x10/0x10 [ 465.896812][T18623] ? __lock_acquire+0xab9/0xd20 [ 465.896853][T18623] should_fail_ex+0x414/0x560 [ 465.896886][T18623] should_failslab+0xa8/0x100 [ 465.896919][T18623] kmem_cache_alloc_noprof+0x73/0x3c0 [ 465.896945][T18623] ? skb_clone+0x212/0x3a0 [ 465.896973][T18623] skb_clone+0x212/0x3a0 [ 465.897000][T18623] __netlink_deliver_tap+0x404/0x850 [ 465.897045][T18623] ? netlink_deliver_tap+0x2e/0x1b0 [ 465.897077][T18623] netlink_deliver_tap+0x19c/0x1b0 [ 465.897108][T18623] netlink_unicast+0x7fa/0x9e0 [ 465.897146][T18623] ? __pfx_netlink_unicast+0x10/0x10 [ 465.897176][T18623] ? netlink_sendmsg+0x642/0xb30 [ 465.897203][T18623] ? skb_put+0x11b/0x210 [ 465.897226][T18623] netlink_sendmsg+0x805/0xb30 [ 465.897269][T18623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.897303][T18623] ? aa_sock_msg_perm+0xf1/0x1d0 [ 465.897338][T18623] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 465.897361][T18623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.897393][T18623] __sock_sendmsg+0x219/0x270 [ 465.897432][T18623] ____sys_sendmsg+0x52d/0x830 [ 465.897460][T18623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.897494][T18623] ? import_iovec+0x74/0xa0 [ 465.897522][T18623] ___sys_sendmsg+0x21f/0x2a0 [ 465.897546][T18623] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.897612][T18623] ? __fget_files+0x2a/0x420 [ 465.897629][T18623] ? __fget_files+0x3a0/0x420 [ 465.897660][T18623] __sys_sendmmsg+0x227/0x430 [ 465.897689][T18623] ? __pfx___sys_sendmmsg+0x10/0x10 [ 465.897707][T18623] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 465.897778][T18623] ? ksys_write+0x22a/0x250 [ 465.897809][T18623] ? __pfx_ksys_write+0x10/0x10 [ 465.897833][T18623] ? rcu_is_watching+0x15/0xb0 [ 465.897863][T18623] __x64_sys_sendmmsg+0xa0/0xc0 [ 465.897887][T18623] do_syscall_64+0xfa/0x3b0 [ 465.897916][T18623] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.897943][T18623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.897964][T18623] ? clear_bhb_loop+0x60/0xb0 [ 465.897990][T18623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.898010][T18623] RIP: 0033:0x7fe9b218ebe9 [ 465.898028][T18623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.898045][T18623] RSP: 002b:00007fe9b3010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 465.898067][T18623] RAX: ffffffffffffffda RBX: 00007fe9b23b6180 RCX: 00007fe9b218ebe9 [ 465.898082][T18623] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 465.898096][T18623] RBP: 00007fe9b3010090 R08: 0000000000000000 R09: 0000000000000000 [ 465.898109][T18623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.898121][T18623] R13: 00007fe9b23b6218 R14: 00007fe9b23b6180 R15: 00007ffd610cf1a8 [ 465.898157][T18623] [ 466.620229][T18643] netlink: 'syz.1.3994': attribute type 13 has an invalid length. [ 466.653399][T18643] netlink: 'syz.1.3994': attribute type 17 has an invalid length. [ 466.855635][T18643] tipc: Resetting bearer [ 466.874242][T18643] tipc: Resetting bearer [ 466.884836][T18643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.995545][T18655] ip6gretap0: entered promiscuous mode [ 467.004043][T18655] vlan2: entered promiscuous mode [ 467.077011][T18650] lo speed is unknown, defaulting to 1000 [ 467.951170][T18698] lo speed is unknown, defaulting to 1000 [ 468.003306][T18718] dummy0: entered promiscuous mode [ 468.035714][T18718] dummy0: left promiscuous mode [ 468.146689][T18719] netlink: 'syz.1.4015': attribute type 4 has an invalid length. [ 468.440905][T18739] __nla_validate_parse: 6 callbacks suppressed [ 468.440987][T18739] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4023'. [ 468.471667][T18731] netlink: zone id is out of range [ 468.477047][T18731] netlink: zone id is out of range [ 468.480424][T18740] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4023'. [ 468.492672][T18731] netlink: zone id is out of range [ 468.506371][T18731] netlink: zone id is out of range [ 468.533571][T18731] netlink: zone id is out of range [ 468.544237][T18731] netlink: zone id is out of range [ 468.571584][T18731] netlink: zone id is out of range [ 468.576956][T18731] netlink: zone id is out of range [ 468.587079][T18731] netlink: zone id is out of range [ 468.980347][T18762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4030'. [ 469.072709][T18766] netlink: 'syz.4.4032': attribute type 4 has an invalid length. [ 469.112692][T18766] netlink: 'syz.4.4032': attribute type 4 has an invalid length. [ 469.133647][ T5874] lo speed is unknown, defaulting to 1000 [ 469.140397][ T5874] syz2: Port: 1 Link ACTIVE [ 469.481940][T18788] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4038'. [ 469.611397][T18791] team0: Device gtp0 is up. Set it down before adding it as a team port [ 469.774401][T18802] team0: Unable to change to the same mode the team is in [ 469.782933][T18802] netlink: 'syz.4.4045': attribute type 16 has an invalid length. [ 469.795337][T18802] tipc: Enabling of bearer rejected, already enabled [ 470.026016][T18811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4048'. [ 470.329341][T18818] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 470.525253][T18831] tipc: Resetting bearer [ 470.591466][T18831] bond0: (slave bond1): Releasing backup interface [ 470.604274][T18838] netlink: 'syz.0.4060': attribute type 1 has an invalid length. [ 470.635091][T18832] team0: Unable to change to the same mode the team is in [ 470.676541][T18831] netlink: 'syz.1.4057': attribute type 16 has an invalid length. [ 470.702773][T18831] tipc: Enabling of bearer rejected, already enabled [ 470.870094][T18846] netlink: 'syz.1.4065': attribute type 29 has an invalid length. [ 470.885858][T18846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4065'. [ 471.003498][T18853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4067'. [ 471.038842][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 471.058294][T18853] ip6gretap0: entered promiscuous mode [ 471.094459][T18853] vlan2: entered promiscuous mode [ 471.417789][T18869] netlink: 'syz.2.4073': attribute type 21 has an invalid length. [ 471.433075][T18869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4073'. [ 471.546785][T18878] netlink: 'syz.3.4076': attribute type 10 has an invalid length. [ 471.567421][T18878] team0: Port device dummy0 added [ 471.576729][T18878] netlink: 'syz.3.4076': attribute type 10 has an invalid length. [ 471.595083][T18878] team0: Port device dummy0 removed [ 471.617711][T18878] dummy0: entered promiscuous mode [ 471.637308][T18878] dummy0: entered allmulticast mode [ 471.645815][T18878] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 471.661238][ T152] tipc: Resetting bearer [ 471.829537][T18889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4081'. [ 472.014213][T18900] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4085'. [ 472.022621][T18901] syz_tun: entered promiscuous mode [ 472.047122][T18901] syz_tun: left promiscuous mode [ 472.385998][T18919] netlink: 'syz.0.4091': attribute type 13 has an invalid length. [ 472.605196][T18919] tipc: Resetting bearer [ 472.707681][T18919] tipc: Resetting bearer [ 472.722698][T15035] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 472.762696][T18919] net_ratelimit: 164 callbacks suppressed [ 472.762709][T18919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.935970][T18926] lo speed is unknown, defaulting to 1000 [ 473.948925][T18997] __nla_validate_parse: 5 callbacks suppressed [ 473.948949][T18997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4121'. [ 473.966521][T18995] team0: Port device dummy0 added [ 473.980904][T19003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4122'. [ 474.010180][T18999] tipc: Enabling of bearer rejected, failed to enable media [ 474.067901][T19000] team0: Port device dummy0 removed [ 474.093190][T19000] dummy0: entered promiscuous mode [ 474.124891][T19000] dummy0: entered allmulticast mode [ 474.194575][T18997] dummy0: entered promiscuous mode [ 474.204809][T18997] dummy0: left promiscuous mode [ 474.314022][T19014] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4125'. [ 474.413336][T19007] netlink: 23932 bytes leftover after parsing attributes in process `syz.3.4122'. [ 474.633336][T19018] bridge_slave_0: left allmulticast mode [ 474.657665][T19018] bridge_slave_0: left promiscuous mode [ 474.668122][T19018] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.691318][T19018] bridge_slave_1: left allmulticast mode [ 474.697324][T19018] bridge_slave_1: left promiscuous mode [ 474.706520][T19023] validate_nla: 3 callbacks suppressed [ 474.706539][T19023] netlink: 'syz.2.4127': attribute type 16 has an invalid length. [ 474.726669][T19018] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.807989][T19018] bond0: (slave bond_slave_0): Releasing backup interface [ 474.855082][T19018] bond_slave_0: left promiscuous mode [ 474.868759][T19018] bond_slave_0: left allmulticast mode [ 474.876199][T19029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4130'. [ 474.887293][T19018] bond0: (slave bond_slave_1): Releasing backup interface [ 474.903833][T19018] bond_slave_1: left promiscuous mode [ 474.917228][T19018] bond_slave_1: left allmulticast mode [ 474.954496][T19018] team0: Port device team_slave_0 removed [ 475.000049][T19018] team0: Port device team_slave_1 removed [ 475.023142][T19018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.055045][T19018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.081194][T19018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.089670][T19018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.114278][T19018] bond0: (slave wlan1): Releasing backup interface [ 475.156015][T19018] mac80211_hwsim hwsim38 wlan1: left promiscuous mode [ 475.174463][T19018] bond1: (slave gretap1): Releasing active interface [ 475.212516][T19020] team0: Mode changed to "broadcast" [ 475.265461][T19023] vlan0: entered promiscuous mode [ 475.309189][T19027] tipc: Started in network mode [ 475.320118][T19027] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 475.330767][T19027] tipc: Enabled bearer , priority 0 [ 475.539316][T19046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4135'. [ 475.612427][T19052] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4138'. [ 475.834889][T19058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4141'. [ 475.997869][T19062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4143'. [ 476.019053][T19062] vlan0: entered promiscuous mode [ 476.307945][T19068] team0: Unable to change to the same mode the team is in [ 476.348034][T19068] netlink: 'syz.4.4146': attribute type 16 has an invalid length. [ 476.383803][T19068] tipc: Enabling of bearer rejected, already enabled [ 476.448969][ T5874] tipc: Node number set to 11578026 [ 476.655460][T19079] lo speed is unknown, defaulting to 1000 [ 476.965055][T19089] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4151'. [ 477.180092][T19091] lo speed is unknown, defaulting to 1000 [ 477.837336][T19110] tipc: Resetting bearer [ 477.944846][T19117] netlink: 'syz.2.4160': attribute type 16 has an invalid length. [ 477.945151][T19114] team0: Unable to change to the same mode the team is in [ 478.036305][T19116] vlan2: entered promiscuous mode [ 478.100403][T19110] tipc: Enabling of bearer rejected, already enabled [ 478.303446][T19127] netlink: 'syz.1.4167': attribute type 21 has an invalid length. [ 478.338514][T19127] netlink: 'syz.1.4167': attribute type 4 has an invalid length. [ 478.383508][T19127] netlink: 'syz.1.4167': attribute type 5 has an invalid length. [ 478.405824][T19129] netlink: 'syz.1.4167': attribute type 21 has an invalid length. [ 478.416323][T19129] netlink: 'syz.1.4167': attribute type 4 has an invalid length. [ 478.424930][T19129] netlink: 'syz.1.4167': attribute type 5 has an invalid length. [ 479.068977][T19156] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3223750180/3223750182 [ 479.126799][T19156] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3223750180/3223750182 [ 479.173524][T19156] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3223750180/3223750182 [ 479.393111][T19174] __nla_validate_parse: 10 callbacks suppressed [ 479.393133][T19174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4185'. [ 479.461762][T19174] ip6gretap0: entered promiscuous mode [ 479.467434][T19174] vlan0: entered promiscuous mode [ 479.813053][T19189] veth1_to_bond: entered allmulticast mode [ 479.861148][T19192] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4192'. [ 479.954288][T19188] veth1_to_bond: left allmulticast mode [ 479.975065][T19190] lo speed is unknown, defaulting to 1000 [ 480.316763][T19211] netlink: 'syz.0.4196': attribute type 16 has an invalid length. [ 480.366530][T19203] tipc: Resetting bearer [ 480.416390][T19214] netlink: 'syz.4.4199': attribute type 2 has an invalid length. [ 480.446500][T19209] team0: Unable to change to the same mode the team is in [ 480.507055][T19213] tipc: Enabling of bearer rejected, already enabled [ 480.759717][T19223] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4202'. [ 480.772780][T19221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4201'. [ 480.822903][T19221] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 480.829561][T19226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4203'. [ 480.847672][T19226] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4203'. [ 480.904030][T19230] netlink: 728 bytes leftover after parsing attributes in process `syz.4.4204'. [ 480.914064][T19226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4203'. [ 481.049095][T19233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4206'. [ 481.111040][T19237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4205'. [ 481.248021][T19244] pim6reg: entered allmulticast mode [ 481.291747][T19244] pim6reg: left allmulticast mode [ 481.495150][T19253] netlink: 'syz.1.4212': attribute type 10 has an invalid length. [ 481.572654][T19257] netlink: 'syz.1.4212': attribute type 10 has an invalid length. [ 481.671472][T19253] dummy0: entered promiscuous mode [ 481.686701][T19261] netlink: 'syz.0.4213': attribute type 16 has an invalid length. [ 481.691289][T19253] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 481.718615][T19253] team0: Failed to send options change via netlink (err -105) [ 481.730864][T19253] team0: Port device dummy0 added [ 481.755081][T19256] tipc: Resetting bearer [ 481.816290][T19259] team0: Unable to change to the same mode the team is in [ 481.839337][T19257] dummy0: left promiscuous mode [ 481.867755][T19257] team0: Failed to send options change via netlink (err -105) [ 481.886170][T19257] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 481.909889][T19257] team0: Port device dummy0 removed [ 481.943940][T19257] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 481.954090][ T3576] tipc: Resetting bearer [ 481.999335][T19262] tipc: Enabling of bearer rejected, already enabled [ 482.644903][T19286] netlink: 'syz.3.4224': attribute type 8 has an invalid length. [ 482.699415][T19288] netlink: 'syz.3.4224': attribute type 8 has an invalid length. [ 482.880441][ T51] Bluetooth: hci0: command tx timeout [ 482.944791][T19290] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.132377][T19290] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.322036][T19307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.445825][T19290] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.512999][T19307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.586808][T19290] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.617004][ T152] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 483.661208][T19307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.730509][ T3502] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.764671][T19307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.790939][ T3502] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.818059][T15035] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.853085][ T3502] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.972959][ T152] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.010325][ T3502] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.043142][ T3502] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.083212][ T152] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.211670][ T5943] hid-generic 0005:046D:FFF9.0002: item fetching failed at offset 0/1 [ 484.245272][ T5943] hid-generic 0005:046D:FFF9.0002: probe with driver hid-generic failed with error -22 [ 484.425881][T19349] netlink: 'syz.3.4244': attribute type 2 has an invalid length. [ 484.454196][T19348] @ÿÿÿ: renamed from bond_slave_0 [ 484.547770][T19349] þ: entered promiscuous mode [ 484.905763][T19365] __nla_validate_parse: 9 callbacks suppressed [ 484.905786][T19365] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4251'. [ 484.971228][T19369] syzkaller0: entered promiscuous mode [ 484.989474][T19369] syzkaller0: entered allmulticast mode [ 485.324658][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4253'. [ 485.462614][T19390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4260'. [ 485.663845][T19392] vlan2: entered promiscuous mode [ 485.681790][T19392] ip6gretap0: entered promiscuous mode [ 486.042621][T19402] lo speed is unknown, defaulting to 1000 [ 486.370690][T19420] syz_tun: entered promiscuous mode [ 486.375983][T19420] syz_tun: entered allmulticast mode [ 487.255267][T19470] lo speed is unknown, defaulting to 1000 [ 487.320600][T19476] netlink: 'syz.0.4290': attribute type 3 has an invalid length. [ 487.566254][T19485] netlink: 'syz.0.4292': attribute type 10 has an invalid length. [ 487.614990][T19485] team0: Port device dummy0 added [ 487.842459][T19497] netlink: 'syz.1.4297': attribute type 10 has an invalid length. [ 487.894927][T19498] netlink: 'syz.1.4297': attribute type 10 has an invalid length. [ 487.943855][T19502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4299'. [ 487.999338][T19497] bond0: (slave dummy0): Releasing backup interface [ 488.042718][T19497] dummy0: entered promiscuous mode [ 488.049584][T19497] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 488.060563][T19497] team0: Failed to send options change via netlink (err -105) [ 488.072295][T19497] team0: Port device dummy0 added [ 488.082099][T19498] dummy0: left promiscuous mode [ 488.117066][T19498] team0: Failed to send options change via netlink (err -105) [ 488.135015][T19508] netlink: 'syz.4.4300': attribute type 1 has an invalid length. [ 488.149877][T19498] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 488.164970][T19498] team0: Port device dummy0 removed [ 488.194988][T19498] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 488.219096][ T3576] tipc: Resetting bearer [ 488.478592][ T5879] Bluetooth: hci4: command 0x0406 tx timeout [ 488.897355][T19533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4313'. [ 489.134237][T19543] netlink: 'syz.2.4315': attribute type 10 has an invalid length. [ 489.207548][T19543] team0: Port device dummy0 added [ 489.217220][T19547] netlink: 'syz.2.4315': attribute type 10 has an invalid length. [ 489.318162][T19550] gretap1: entered promiscuous mode [ 489.380132][T19547] team0: Port device dummy0 removed [ 489.411694][T19547] dummy0: entered promiscuous mode [ 489.417114][T19547] dummy0: entered allmulticast mode [ 489.471542][T19547] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 489.489377][ T152] tipc: Resetting bearer [ 489.502738][T19558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4323'. [ 489.702645][T19569] netlink: 728 bytes leftover after parsing attributes in process `syz.3.4328'. [ 489.962846][T19585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4333'. [ 490.431738][T19602] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4340'. [ 490.731526][T19605] syzkaller1: entered promiscuous mode [ 490.737560][T19605] syzkaller1: entered allmulticast mode [ 491.027292][T19620] netlink: 'syz.3.4345': attribute type 1 has an invalid length. [ 491.051980][T19617] vlan2: entered promiscuous mode [ 491.057084][T19617] bridge0: entered promiscuous mode [ 491.145839][T19625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4348'. [ 491.781841][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4362'. [ 492.064117][T19670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4366'. [ 492.122111][T19673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4366'. [ 492.890392][T15035] bond0 (unregistering): left promiscuous mode [ 492.904230][T15035] bond0 (unregistering): Released all slaves [ 493.027362][T15035] bond1 (unregistering): Released all slaves [ 493.128963][T15035] bond2 (unregistering): Released all slaves [ 493.247275][T15035] bond3 (unregistering): Released all slaves [ 493.351249][T15035] bond4 (unregistering): Released all slaves [ 493.366563][T15035] bond5 (unregistering): Released all slaves [ 493.469979][T15035] bond6 (unregistering): Released all slaves [ 493.573212][T15035] bond7 (unregistering): Released all slaves [ 493.600872][ T5879] Bluetooth: hci1: command 0x0406 tx timeout [ 493.826758][T15035] tipc: Disabling bearer [ 493.873891][T15035] tipc: Left network mode [ 493.984023][T19698] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4371'. [ 494.065217][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4376'. [ 494.177735][T19702] bridge0: entered promiscuous mode [ 494.183603][T19702] vlan2: entered promiscuous mode [ 494.233340][T19703] pim6reg: entered allmulticast mode [ 494.253986][T19705] pim6reg: left allmulticast mode [ 494.435549][T19712] netlink: 'syz.1.4380': attribute type 10 has an invalid length. [ 494.514465][T19718] netlink: 'syz.1.4380': attribute type 10 has an invalid length. [ 494.660867][T19723] FAULT_INJECTION: forcing a failure. [ 494.660867][T19723] name failslab, interval 1, probability 0, space 0, times 0 [ 494.678480][T15035] batadv0: left promiscuous mode [ 494.691320][T15035] hsr_slave_0: left promiscuous mode [ 494.706254][T15035] hsr_slave_1: left promiscuous mode [ 494.706512][T19723] CPU: 0 UID: 0 PID: 19723 Comm: syz.3.4382 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 494.706544][T19723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.706559][T19723] Call Trace: [ 494.706570][T19723] [ 494.706582][T19723] dump_stack_lvl+0x189/0x250 [ 494.706617][T19723] ? __pfx____ratelimit+0x10/0x10 [ 494.706651][T19723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.706680][T19723] ? __pfx__printk+0x10/0x10 [ 494.706717][T19723] ? __pfx___might_resched+0x10/0x10 [ 494.706741][T19723] ? fs_reclaim_acquire+0x7d/0x100 [ 494.706783][T19723] should_fail_ex+0x414/0x560 [ 494.706823][T19723] should_failslab+0xa8/0x100 [ 494.706859][T19723] __kmalloc_noprof+0xcb/0x4f0 [ 494.706890][T19723] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 494.706926][T19723] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 494.706966][T19723] genl_family_rcv_msg_doit+0xb8/0x300 [ 494.707006][T19723] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 494.707035][T19723] ? __pfx___mutex_lock+0x10/0x10 [ 494.707070][T19723] ? __pfx_genl_get_cmd+0x10/0x10 [ 494.707091][T19723] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 494.707119][T19723] ? __pfx_cgroupstats_user_cmd+0x10/0x10 [ 494.707157][T19723] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 494.707186][T19723] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 494.707225][T19723] genl_rcv_msg+0x60e/0x790 [ 494.707268][T19723] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.707294][T19723] ? __pfx_cgroupstats_user_cmd+0x10/0x10 [ 494.707344][T19723] netlink_rcv_skb+0x205/0x470 [ 494.707376][T19723] ? __lock_acquire+0xab9/0xd20 [ 494.707409][T19723] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.707438][T19723] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.707495][T19723] ? down_read+0x1ad/0x2e0 [ 494.707518][T19723] genl_rcv+0x28/0x40 [ 494.707542][T19723] netlink_unicast+0x82c/0x9e0 [ 494.707583][T19723] ? __pfx_netlink_unicast+0x10/0x10 [ 494.707617][T19723] ? netlink_sendmsg+0x642/0xb30 [ 494.707647][T19723] ? skb_put+0x11b/0x210 [ 494.707675][T19723] netlink_sendmsg+0x805/0xb30 [ 494.707724][T19723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.707762][T19723] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.707802][T19723] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.707827][T19723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.707863][T19723] __sock_sendmsg+0x219/0x270 [ 494.707900][T19723] ____sys_sendmsg+0x505/0x830 [ 494.707931][T19723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.707966][T19723] ? import_iovec+0x74/0xa0 [ 494.707997][T19723] ___sys_sendmsg+0x21f/0x2a0 [ 494.708025][T19723] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.708057][T19723] ? rcu_read_lock_any_held+0xb3/0x120 [ 494.708101][T19723] ? sb_end_write+0xe9/0x1c0 [ 494.708141][T19723] ? __pfx_vfs_write+0x10/0x10 [ 494.708185][T19723] __x64_sys_sendmsg+0x19b/0x260 [ 494.708213][T19723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.708258][T19723] ? __pfx_ksys_write+0x10/0x10 [ 494.708296][T19723] ? do_syscall_64+0xbe/0x3b0 [ 494.708335][T19723] do_syscall_64+0xfa/0x3b0 [ 494.708367][T19723] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.708397][T19723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.708419][T19723] ? clear_bhb_loop+0x60/0xb0 [ 494.708448][T19723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.708472][T19723] RIP: 0033:0x7fe9b218ebe9 [ 494.708491][T19723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.708512][T19723] RSP: 002b:00007fe9b3052038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.708537][T19723] RAX: ffffffffffffffda RBX: 00007fe9b23b5fa0 RCX: 00007fe9b218ebe9 [ 494.708554][T19723] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 494.708569][T19723] RBP: 00007fe9b3052090 R08: 0000000000000000 R09: 0000000000000000 [ 494.708583][T19723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.708597][T19723] R13: 00007fe9b23b6038 R14: 00007fe9b23b5fa0 R15: 00007ffd610cf1a8 [ 494.708636][T19723] [ 495.150282][T15035] veth1_macvtap: left promiscuous mode [ 495.156267][T15035] veth0_macvtap: left promiscuous mode [ 496.614265][T19766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4398'. [ 496.817051][T19712] bond0: (slave dummy0): Releasing backup interface [ 496.828102][T19712] dummy0: entered promiscuous mode [ 496.836870][T19712] team0: Port device dummy0 added [ 496.846444][T19718] dummy0: left promiscuous mode [ 496.856318][T19718] team0: Port device dummy0 removed [ 496.867346][T19718] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 496.877863][ T3576] tipc: Resetting bearer [ 497.014437][T19768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4399'. [ 497.263745][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4405'. [ 497.291824][T15035] IPVS: stop unused estimator thread 0... [ 497.358078][T19781] syzkaller1: entered promiscuous mode [ 497.376867][T19781] syzkaller1: entered allmulticast mode [ 497.828886][T19802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4414'. [ 497.899598][T19806] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4415'. [ 497.917445][T19806] netlink: 'syz.4.4415': attribute type 7 has an invalid length. [ 497.962500][T19809] netlink: 'syz.1.4416': attribute type 10 has an invalid length. [ 497.974047][T19809] bond0: (slave dummy0): Releasing backup interface [ 498.014077][T19809] dummy0: entered promiscuous mode [ 498.019260][T19807] netlink: 'syz.1.4416': attribute type 10 has an invalid length. [ 498.046506][T19809] team0: Port device dummy0 added [ 498.083383][T19807] dummy0: left promiscuous mode [ 498.148702][T19807] team0: Port device dummy0 removed [ 498.175542][T19807] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 498.207957][ T3576] tipc: Resetting bearer [ 498.283612][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4421'. [ 498.377852][T19823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4423'. [ 498.401329][T19826] netlink: 'syz.0.4422': attribute type 10 has an invalid length. [ 498.421643][T19823] vlan2: entered promiscuous mode [ 498.456516][T19826] netlink: 'syz.0.4422': attribute type 10 has an invalid length. [ 498.458192][ T3576] tipc: Resetting bearer [ 498.477600][T19826] team0: Port device dummy0 removed [ 498.494908][T19826] dummy0: entered promiscuous mode [ 498.522341][T19826] dummy0: entered allmulticast mode [ 498.536913][T19826] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 498.641271][T19801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.664520][T19837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4427'. [ 498.724221][T19839] macsec1: entered promiscuous mode [ 498.730292][T19839] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 498.737744][T19839] macsec1: entered allmulticast mode [ 498.751199][T19839] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 498.959651][T19849] netlink: 728 bytes leftover after parsing attributes in process `syz.1.4432'. [ 499.237008][T19873] Bluetooth: MGMT ver 1.23 [ 499.274750][T19873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4440'. [ 499.280739][T19875] sctp: [Deprecated]: syz.3.4442 (pid 19875) Use of int in max_burst socket option. [ 499.280739][T19875] Use struct sctp_assoc_value instead [ 499.884497][T19908] ip6gretap0: entered promiscuous mode [ 499.898794][T19908] vlan0: entered promiscuous mode [ 500.001545][T19916] vlan2: entered promiscuous mode [ 500.134012][T19922] tipc: Enabled bearer , priority 0 [ 500.150085][T19922] syzkaller0: entered promiscuous mode [ 500.158650][T19922] syzkaller0: entered allmulticast mode [ 500.192718][T19922] tipc: Resetting bearer [ 500.332000][T19921] tipc: Resetting bearer [ 500.392548][T19921] tipc: Disabling bearer [ 500.547587][T19938] veth0_to_bond: entered allmulticast mode [ 500.996897][T19949] tipc: Resetting bearer [ 501.017856][T19949] bond0: (slave dummy0): Releasing backup interface [ 501.070687][T19949] dummy0: left promiscuous mode [ 501.075860][T19949] dummy0: left allmulticast mode [ 501.134753][T19949] team0: Mode changed to "activebackup" [ 501.194202][T19956] tipc: Enabled bearer , priority 10 [ 501.395819][T19964] vlan2: entered promiscuous mode [ 501.436944][T19968] netlink: 'syz.0.4476': attribute type 10 has an invalid length. [ 501.483561][T19968] team0: Port device dummy0 added [ 501.489182][T19974] netlink: 'syz.0.4476': attribute type 10 has an invalid length. [ 501.517009][T19974] team0: Port device dummy0 removed [ 501.572291][T19974] dummy0: entered promiscuous mode [ 501.593820][T19974] dummy0: entered allmulticast mode [ 501.629999][T19974] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 501.683072][T15035] tipc: Resetting bearer [ 501.753574][T19980] tipc: Resetting bearer [ 501.774889][T19980] bond0: (slave dummy0): Releasing backup interface [ 501.811070][T19985] __nla_validate_parse: 9 callbacks suppressed [ 501.811092][T19985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4481'. [ 501.832044][T19986] netlink: 'syz.2.4480': attribute type 16 has an invalid length. [ 501.893876][T19980] dummy0: left promiscuous mode [ 501.901639][T19980] dummy0: left allmulticast mode [ 501.935456][T19983] team0: Unable to change to the same mode the team is in [ 501.985879][T19991] tipc: Enabling of bearer rejected, already enabled [ 502.218174][T20006] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4489'. [ 502.234058][T20002] syzkaller1: entered allmulticast mode [ 502.263599][T20008] dvmrp0: entered allmulticast mode [ 502.288477][T20002] syzkaller1: left allmulticast mode [ 502.328458][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4487'. [ 502.383554][T20014] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4494'. [ 502.665034][T20030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4498'. [ 502.796371][T20038] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4502'. [ 502.973254][T20030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4498'. [ 503.176083][T20047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4504'. [ 503.444409][T20047] tipc: Resetting bearer [ 503.812756][T20068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4509'. [ 503.838800][ T5879] Bluetooth: hci3: command 0x0405 tx timeout [ 503.884902][T20047] hsr1: left allmulticast mode [ 503.928755][T20047] bond0: left allmulticast mode [ 503.934045][T20047] dummy0: left allmulticast mode [ 503.939463][T20047] batadv0: left allmulticast mode [ 503.959013][T20047] bond1: left promiscuous mode [ 504.159617][ T3576] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.201884][ T3576] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.235371][ T3576] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.258060][ T3576] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.473807][T20080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4514'. [ 504.887960][T20098] netlink: 'syz.2.4524': attribute type 10 has an invalid length. [ 504.913881][T20098] team0: Port device dummy0 added [ 504.936067][T20098] netlink: 'syz.2.4524': attribute type 10 has an invalid length. [ 504.958787][T20098] team0: Port device dummy0 removed [ 504.981631][T20098] dummy0: entered promiscuous mode [ 505.017311][T20098] dummy0: entered allmulticast mode [ 505.034377][T20098] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 505.050232][ T9639] tipc: Resetting bearer [ 505.349189][T20120] netlink: 'syz.2.4530': attribute type 10 has an invalid length. [ 505.389939][T20120] team0: Device veth0_macvtap failed to register rx_handler [ 505.713116][T20132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.837647][T20136] veth0: entered promiscuous mode [ 505.872950][T20136] veth0 (unregistering): left promiscuous mode [ 505.932929][ T51] Bluetooth: hci2: command tx timeout [ 505.977794][T20132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.102163][T20132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.167468][T20153] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 506.323008][T20132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.562684][T15035] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.634064][T15035] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.670188][T20171] netlink: 'syz.0.4547': attribute type 12 has an invalid length. [ 506.711515][T15035] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.763526][T15035] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.800263][T20179] lo speed is unknown, defaulting to 1000 [ 506.963035][T20184] block nbd0: server does not support multiple connections per device. [ 506.988980][T20184] block nbd0: shutting down sockets [ 507.105461][T20188] sctp: [Deprecated]: syz.3.4553 (pid 20188) Use of int in maxseg socket option. [ 507.105461][T20188] Use struct sctp_assoc_value instead [ 507.174065][T20188] netlink: 'syz.3.4553': attribute type 15 has an invalid length. [ 507.246562][T20202] __nla_validate_parse: 9 callbacks suppressed [ 507.246585][T20202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4556'. [ 507.569945][T20213] netlink: 'syz.1.4558': attribute type 13 has an invalid length. [ 507.588662][T20213] netlink: 'syz.1.4558': attribute type 17 has an invalid length. [ 507.634322][T20213] tipc: Resetting bearer [ 507.662687][T20213] tipc: Resetting bearer [ 507.703324][T20213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 507.895944][T20215] lo speed is unknown, defaulting to 1000 [ 507.904898][T20223] team0: Mode changed to "activebackup" [ 507.934226][T20213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.010486][T20213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.076734][T20213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.327371][T20237] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4565'. [ 508.482909][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4569'. [ 508.506492][T20243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4569'. [ 508.535384][T20245] netlink: 728 bytes leftover after parsing attributes in process `syz.3.4570'. [ 508.541213][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4569'. [ 508.554048][T20247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4569'. [ 509.176793][T20267] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4576'. [ 510.017304][T20291] IPv6: sit1: Disabled Multicast RS [ 510.399826][T20308] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 510.431748][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4592'. [ 510.449777][T20310] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4593'. [ 511.151090][T20330] tipc: Enabling of bearer rejected, failed to enable media [ 511.179961][T20330] syzkaller1: entered promiscuous mode [ 511.185515][T20330] syzkaller1: entered allmulticast mode [ 511.508742][T20344] nft_compat: unsupported protocol 0 [ 511.583905][T20349] bridge0: entered promiscuous mode [ 511.589643][T20349] vlan0: entered promiscuous mode [ 511.640865][T15035] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 511.827760][T20363] vlan2: entered promiscuous mode [ 512.462769][T15029] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 512.558156][T20392] __nla_validate_parse: 5 callbacks suppressed [ 512.558177][T20392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4621'. [ 512.587247][T20393] lo speed is unknown, defaulting to 1000 [ 512.772912][T20400] mac80211_hwsim hwsim32 wlan0: left allmulticast mode [ 512.780402][T20400] mac80211_hwsim hwsim32 wlan0: left promiscuous mode [ 512.788718][ T1210] lo speed is unknown, defaulting to 1000 [ 512.795676][ T1210] syz2: Port: 1 Link DOWN [ 513.381663][T20410] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4628'. [ 513.393955][T20410] netlink: 'syz.4.4628': attribute type 32 has an invalid length. [ 513.418404][T20410] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 513.477943][T20416] netlink: 'syz.1.4627': attribute type 10 has an invalid length. [ 513.508188][T20416] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4627'. [ 513.531309][T20416] bridge0: port 1(team0) entered blocking state [ 513.555205][T20416] bridge0: port 1(team0) entered disabled state [ 513.579724][T20423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4632'. [ 513.596177][T20416] team0: entered allmulticast mode [ 513.604267][T20416] team0: left allmulticast mode [ 513.614477][T20423] team0: Unable to change to the same mode the team is in [ 513.633230][T20423] netlink: 'syz.4.4632': attribute type 16 has an invalid length. [ 513.712143][T20419] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.857752][T20427] tipc: Enabling of bearer rejected, already enabled [ 514.010350][T20419] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.152876][T20419] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.288128][T15035] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 514.311415][T20419] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.583939][ T9639] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.617185][T20464] netlink: 'syz.1.4643': attribute type 10 has an invalid length. [ 514.636508][T15035] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.667834][T15035] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.684052][T20466] netlink: 'syz.1.4643': attribute type 10 has an invalid length. [ 514.701130][T20464] bond0: (slave dummy0): Releasing backup interface [ 514.714582][T20464] dummy0: entered promiscuous mode [ 514.721412][T20464] team0: Port device dummy0 added [ 514.727758][T20466] dummy0: left promiscuous mode [ 514.737860][T20466] team0: Port device dummy0 removed [ 514.749921][T20466] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 514.760046][ T9639] tipc: Resetting bearer [ 514.773353][ T9639] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.006146][T20471] netlink: 'syz.2.4645': attribute type 1 has an invalid length. [ 515.184191][T20478] lo speed is unknown, defaulting to 1000 [ 515.294848][T20479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4646'. [ 515.400312][T20488] netlink: 'syz.1.4650': attribute type 29 has an invalid length. [ 515.422717][T20488] netlink: 'syz.1.4650': attribute type 29 has an invalid length. [ 515.436861][T20489] netlink: 'syz.1.4650': attribute type 29 has an invalid length. [ 515.656501][T20501] bond0: (slave dummy0): Releasing backup interface [ 515.667246][T20501] dummy0: left promiscuous mode [ 515.694026][T20501] team0: Unable to change to the same mode the team is in [ 515.821515][T20478] netlink: 'syz.0.4648': attribute type 13 has an invalid length. [ 515.928051][T20478] tipc: Resetting bearer [ 516.014491][T20478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.134747][T20513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.276781][T20513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.653230][T20505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.669070][T20505] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.676993][T20505] tipc: Resetting bearer [ 516.689051][T20505] tipc: Resetting bearer [ 516.747349][T20505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.764923][T20534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4661'. [ 516.822109][T20536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4662'. [ 516.834400][T20506] lo speed is unknown, defaulting to 1000 [ 516.861507][T20533] pim6reg: entered allmulticast mode [ 516.934140][T20533] pim6reg: left allmulticast mode [ 517.897197][T20560] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4669'. [ 517.963207][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4671'. [ 518.013741][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4671'. [ 518.165270][T20571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4672'. [ 518.215504][T20568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4672'. [ 518.232912][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4672'. [ 518.751714][T20594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4683'. [ 518.775439][T20595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4682'. [ 518.800909][T20595] tipc: Resetting bearer [ 518.812146][T20595] bond0: (slave dummy0): Releasing backup interface [ 518.823895][T20595] dummy0: left promiscuous mode [ 518.830763][T20595] dummy0: left allmulticast mode [ 518.889200][T20595] team0: Mode changed to "broadcast" [ 518.896772][T20595] validate_nla: 4 callbacks suppressed [ 518.896790][T20595] netlink: 'syz.0.4682': attribute type 16 has an invalid length. [ 518.923606][T20595] tipc: Enabling of bearer rejected, already enabled [ 519.016967][T20597] lo speed is unknown, defaulting to 1000 [ 519.550522][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4687'. [ 519.668733][T20612] IPv6: Can't replace route, no match found [ 520.061882][T20635] tipc: Resetting bearer [ 520.073070][T20635] team0: Mode changed to "broadcast" [ 520.091710][T20635] netlink: 'syz.3.4694': attribute type 16 has an invalid length. [ 520.109237][T20635] tipc: Enabling of bearer rejected, already enabled [ 520.497370][T20659] tipc: Resetting bearer [ 520.525809][T20659] team0: Mode changed to "activebackup" [ 520.547924][T20661] team0: Unable to change to the same mode the team is in [ 520.558924][T20661] netlink: 'syz.4.4705': attribute type 16 has an invalid length. [ 520.567773][T20661] tipc: Enabling of bearer rejected, already enabled [ 520.754848][T20673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4710'. [ 520.787910][T20675] netlink: 'syz.0.4712': attribute type 1 has an invalid length. [ 520.810339][T20675] netlink: 'syz.0.4712': attribute type 3 has an invalid length. [ 520.860350][T20682] netlink: zone id is out of range [ 520.866551][T20682] netlink: zone id is out of range [ 520.873123][T15029] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 520.892974][T20682] netlink: zone id is out of range [ 520.898209][T20682] netlink: zone id is out of range [ 520.909153][T20682] netlink: zone id is out of range [ 520.915548][T20682] netlink: zone id is out of range [ 520.932498][T20682] netlink: zone id is out of range [ 520.947353][T20682] netlink: zone id is out of range [ 521.027080][T20682] net_ratelimit: 13 callbacks suppressed [ 521.027101][T20682] netlink: set zone limit has 4 unknown bytes [ 521.173471][T20697] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 521.210909][T20697] tipc: Resetting bearer [ 521.241083][T20699] tipc: Resetting bearer [ 521.322842][T20704] netlink: 'syz.3.4718': attribute type 16 has an invalid length. [ 521.453552][T20711] openvswitch: netlink: Flow actions attr not present in new flow. [ 521.832920][T20728] netlink: 'syz.2.4731': attribute type 1 has an invalid length. [ 521.947538][T20734] bond2: (slave geneve2): making interface the new active one [ 521.957178][T20734] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 521.981325][ T9639] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 522.027646][ T9639] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 522.072085][ T9639] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 522.097507][ T9639] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 522.123745][T20741] netlink: 'syz.0.4732': attribute type 10 has an invalid length. [ 522.150594][T20741] team0: Port device dummy0 added [ 522.165021][T20741] netlink: 'syz.0.4732': attribute type 10 has an invalid length. [ 522.180311][T20741] team0: Port device dummy0 removed [ 522.194092][T20741] dummy0: entered promiscuous mode [ 522.200413][T20741] dummy0: entered allmulticast mode [ 522.206529][T20741] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 522.216377][ T152] tipc: Resetting bearer [ 522.230764][T20745] team0: Mode changed to "activebackup" [ 522.412374][T20752] netlink: 'syz.4.4738': attribute type 21 has an invalid length. [ 522.910313][T20772] team0: Port device dummy0 added [ 522.960584][T20772] team0: Port device dummy0 removed [ 522.992986][T20772] dummy0: entered promiscuous mode [ 523.007988][T20772] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 523.017573][ T3576] tipc: Resetting bearer [ 523.134190][T20786] __nla_validate_parse: 5 callbacks suppressed [ 523.134210][T20786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4753'. [ 523.153883][T20786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4753'. [ 523.493412][T20806] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4760'. [ 523.592454][T20806] lo speed is unknown, defaulting to 1000 [ 523.619230][T20808] vlan0: entered promiscuous mode [ 523.753173][T20803] Set syz1 is full, maxelem 6117 reached [ 523.862379][T20814] tipc: Resetting bearer [ 523.878981][T20814] bond0: (slave dummy0): Releasing backup interface [ 523.889974][T20814] dummy0: left promiscuous mode [ 523.924541][T20814] team0: Unable to change to the same mode the team is in [ 524.436031][T20839] !: renamed from dummy0 (while UP) [ 524.647244][T20850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4775'. [ 524.704919][T20850] team0: Mode changed to "broadcast" [ 524.711970][T20850] validate_nla: 4 callbacks suppressed [ 524.711988][T20850] netlink: 'syz.4.4775': attribute type 16 has an invalid length. [ 524.730848][T20850] tipc: Enabling of bearer rejected, already enabled [ 524.843057][T20851] lo speed is unknown, defaulting to 1000 [ 526.293077][T20900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4788'. [ 526.437618][T20900] tipc: Resetting bearer [ 526.493352][T20911] netlink: 'syz.0.4788': attribute type 16 has an invalid length. [ 526.531110][T20900] bond0: (slave dummy0): Releasing backup interface [ 526.593896][T20900] dummy0: left promiscuous mode [ 526.614970][T20900] dummy0: left allmulticast mode [ 526.815301][T20913] tipc: Enabling of bearer rejected, already enabled [ 526.839299][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4791'. [ 526.859132][T20918] netlink: 'syz.4.4791': attribute type 30 has an invalid length. [ 526.865758][T20920] tipc: Resetting bearer [ 526.874646][T20918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4791'. [ 526.936753][T20920] team0: Unable to change to the same mode the team is in [ 527.073828][T20928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4796'. [ 527.215392][T20936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4799'. [ 527.225479][T20938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4800'. [ 527.315781][T20944] IPv6: Can't replace route, no match found [ 527.324814][T20944] netlink: 'syz.3.4800': attribute type 4 has an invalid length. [ 527.542913][T20954] tipc: Enabled bearer , priority 0 [ 527.553302][T20950] syzkaller0: entered promiscuous mode [ 527.561595][T20950] syzkaller0: entered allmulticast mode [ 527.597022][T20950] tipc: Resetting bearer [ 527.619307][T20948] tipc: Resetting bearer [ 527.641108][T20948] tipc: Disabling bearer [ 528.422009][T20997] __nla_validate_parse: 4 callbacks suppressed [ 528.422033][T20997] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4821'. [ 528.523834][T21002] team0: Mode changed to "activebackup" [ 528.698076][T21014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4829'. [ 528.715706][T21016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4828'. [ 528.753238][T21014] tipc: Resetting bearer [ 528.774904][T21019] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4830'. [ 528.818129][T21021] team0: Unable to change to the same mode the team is in [ 528.951370][T21023] bond3: entered promiscuous mode [ 528.980097][T21023] bond3: entered allmulticast mode [ 528.985801][T21023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 529.063382][T21027] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4832'. [ 529.293426][T21042] netlink: 'syz.3.4840': attribute type 10 has an invalid length. [ 529.317239][T21042] team0: Port device dummy0 added [ 529.336329][T21042] netlink: 'syz.3.4840': attribute type 10 has an invalid length. [ 529.357372][T21042] team0: Port device dummy0 removed [ 529.359051][T21048] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4843'. [ 529.377640][T21042] dummy0: entered promiscuous mode [ 529.391519][T21042] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 529.421264][T15029] tipc: Resetting bearer [ 529.643702][T21060] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4848'. [ 529.778988][T21071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4853'. [ 529.820619][T15036] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 529.852824][T21071] tipc: Resetting bearer [ 529.892477][T21071] team0: Unable to change to the same mode the team is in [ 529.901510][T21071] netlink: 'syz.0.4853': attribute type 16 has an invalid length. [ 529.914997][T21071] tipc: Enabling of bearer rejected, already enabled [ 529.954651][T21083] tipc: Invalid UDP bearer configuration [ 529.954712][T21083] tipc: Enabling of bearer rejected, failed to enable media [ 530.245692][T21096] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4859'. [ 530.344543][T21099] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4860'. [ 530.397834][T21103] lo speed is unknown, defaulting to 1000 [ 530.746447][T21114] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 531.195283][T21119] netem: change failed [ 531.532401][T21145] tipc: Resetting bearer [ 531.540025][T21145] bond0: (slave 0!): Releasing backup interface [ 531.560633][T21145] !: left promiscuous mode [ 531.574744][T21145] !: left allmulticast mode [ 531.583418][T21145] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI [ 531.595361][T21145] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] [ 531.604941][T21145] CPU: 1 UID: 0 PID: 21145 Comm: syz.2.4878 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59 #0 PREEMPT(full) [ 531.617068][T21145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 531.627156][T21145] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 531.632927][T21145] Code: d9 77 bb f7 c6 05 78 24 89 05 01 48 c7 c7 80 a0 9e 8c be 97 05 00 00 48 c7 c2 00 a1 9e 8c e8 2a 52 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 f4 e0 1e f8 4d 8b 2c 24 4d 39 f5 [ 531.652654][T21145] RSP: 0018:ffffc9000ab66658 EFLAGS: 00010206 [ 531.658915][T21145] RAX: ffffffff8a04337e RBX: 000000001fffe1ac RCX: 0000000000080000 [ 531.666909][T21145] RDX: ffffc9000b0b9000 RSI: 0000000000037b0a RDI: 0000000000037b0b [ 531.674958][T21145] RBP: ffff888057cee820 R08: ffffffff8f537c67 R09: 1ffffffff1ea6f8c [ 531.682946][T21145] R10: dffffc0000000000 R11: fffffbfff1ea6f8d R12: 00000000ffff0d60 [ 531.690928][T21145] R13: dffffc0000000000 R14: ffff88805ecf3600 R15: 1ffff1100af9dd04 [ 531.698911][T21145] FS: 00007f55c00006c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 531.707878][T21145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.714471][T21145] CR2: 00002000000044c1 CR3: 000000005baea000 CR4: 00000000003526f0 [ 531.722453][T21145] Call Trace: [ 531.725744][T21145] [ 531.728683][T21145] inetdev_event+0x2a7/0x15b0 [ 531.733378][T21145] ? __pfx_inetdev_event+0x10/0x10 [ 531.738503][T21145] notifier_call_chain+0x1b6/0x3e0 [ 531.743626][T21145] netif_close_many+0x29c/0x410 [ 531.748505][T21145] ? __pfx_netif_close_many+0x10/0x10 [ 531.753886][T21145] ? kvfree_call_rcu+0x374/0x410 [ 531.758840][T21145] ? __pfx___mutex_lock+0x10/0x10 [ 531.763885][T21145] netif_close+0x158/0x210 [ 531.768322][T21145] ? __pfx_netif_close+0x10/0x10 [ 531.773278][T21145] ? __local_bh_enable_ip+0x12d/0x1c0 [ 531.778696][T21145] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 531.784426][T21145] dev_close+0x10a/0x220 [ 531.788772][T21145] __bond_release_one+0xbb5/0x10e0 [ 531.793901][T21145] ? __pfx___bond_release_one+0x10/0x10 [ 531.799465][T21145] ? __pfx___mutex_lock+0x10/0x10 [ 531.804518][T21145] ? netif_state_change+0x29e/0x3a0 [ 531.809734][T21145] ? mutex_is_locked+0x17/0x50 [ 531.814506][T21145] do_set_master+0x312/0x6d0 [ 531.819111][T21145] do_setlink+0xcf0/0x41c0 [ 531.823538][T21145] ? __kernel_text_address+0xd/0x40 [ 531.828755][T21145] ? arch_stack_walk+0xfc/0x150 [ 531.833622][T21145] ? __pfx_do_setlink+0x10/0x10 [ 531.838489][T21145] ? __lock_acquire+0xab9/0xd20 [ 531.843366][T21145] ? __mutex_trylock_common+0x153/0x260 [ 531.848923][T21145] ? __pfx___mutex_trylock_common+0x10/0x10 [ 531.855177][T21145] ? rcu_is_watching+0x15/0xb0 [ 531.859951][T21145] ? trace_contention_end+0x39/0x120 [ 531.865254][T21145] ? __mutex_lock+0x335/0x1360 [ 531.870035][T21145] ? __pfx___nla_validate_parse+0x10/0x10 [ 531.875954][T21145] ? rtnl_newlink+0x8db/0x1c70 [ 531.880751][T21145] ? __pfx___mutex_lock+0x10/0x10 [ 531.885804][T21145] ? ns_capable+0x8a/0xf0 [ 531.890157][T21145] ? rtnl_link_get_net_capable+0x16a/0x350 [ 531.895975][T21145] rtnl_newlink+0x149f/0x1c70 [ 531.900674][T21145] ? netlink_sendmsg+0x805/0xb30 [ 531.905649][T21145] ? __pfx_rtnl_newlink+0x10/0x10 [ 531.910695][T21145] ? kasan_quarantine_put+0xdd/0x220 [ 531.915990][T21145] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.921208][T21145] ? nlmon_xmit+0xb0/0x100 [ 531.925653][T21145] ? kmem_cache_free+0x18f/0x400 [ 531.930608][T21145] ? __local_bh_enable_ip+0x12d/0x1c0 [ 531.935983][T21145] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.941194][T21145] ? __local_bh_enable_ip+0x12d/0x1c0 [ 531.946581][T21145] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 531.952308][T21145] ? __dev_queue_xmit+0x27b/0x3b50 [ 531.957433][T21145] ? __dev_queue_xmit+0x27b/0x3b50 [ 531.962554][T21145] ? __dev_queue_xmit+0x27b/0x3b50 [ 531.967674][T21145] ? __dev_queue_xmit+0x1d79/0x3b50 [ 531.972970][T21145] ? __lock_acquire+0xab9/0xd20 [ 531.977850][T21145] ? __pfx_rtnl_newlink+0x10/0x10 [ 531.982888][T21145] rtnetlink_rcv_msg+0x7cc/0xb70 [ 531.987851][T21145] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 531.992996][T21145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 531.998481][T21145] ? ref_tracker_free+0x63a/0x7d0 [ 532.003535][T21145] ? __asan_memcpy+0x40/0x70 [ 532.008141][T21145] ? __pfx_ref_tracker_free+0x10/0x10 [ 532.013544][T21145] netlink_rcv_skb+0x205/0x470 [ 532.018412][T21145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 532.023890][T21145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.029202][T21145] ? netlink_deliver_tap+0x2e/0x1b0 [ 532.034428][T21145] netlink_unicast+0x82c/0x9e0 [ 532.039223][T21145] ? __pfx_netlink_unicast+0x10/0x10 [ 532.044551][T21145] ? netlink_sendmsg+0x642/0xb30 [ 532.049524][T21145] ? skb_put+0x11b/0x210 [ 532.053798][T21145] netlink_sendmsg+0x805/0xb30 [ 532.058579][T21145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.063882][T21145] ? aa_sock_msg_perm+0xf1/0x1d0 [ 532.068859][T21145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 532.074155][T21145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.079544][T21145] __sock_sendmsg+0x219/0x270 [ 532.084243][T21145] ____sys_sendmsg+0x505/0x830 [ 532.089113][T21145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.094442][T21145] ? import_iovec+0x74/0xa0 [ 532.098986][T21145] ___sys_sendmsg+0x21f/0x2a0 [ 532.103870][T21145] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.109095][T21145] ? __fget_files+0x2a/0x420 [ 532.113718][T21145] ? __fget_files+0x3a0/0x420 [ 532.118408][T21145] __x64_sys_sendmsg+0x19b/0x260 [ 532.123357][T21145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 532.128853][T21145] ? rcu_is_watching+0x15/0xb0 [ 532.133626][T21145] ? do_syscall_64+0xbe/0x3b0 [ 532.138321][T21145] do_syscall_64+0xfa/0x3b0 [ 532.142842][T21145] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.148048][T21145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.154121][T21145] ? clear_bhb_loop+0x60/0xb0 [ 532.158814][T21145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.164715][T21145] RIP: 0033:0x7f55bf18ebe9 [ 532.169142][T21145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.188755][T21145] RSP: 002b:00007f55c0000038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.197179][T21145] RAX: ffffffffffffffda RBX: 00007f55bf3b5fa0 RCX: 00007f55bf18ebe9 [ 532.205158][T21145] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 532.213314][T21145] RBP: 00007f55bf211e19 R08: 0000000000000000 R09: 0000000000000000 [ 532.221479][T21145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.229549][T21145] R13: 00007f55bf3b6038 R14: 00007f55bf3b5fa0 R15: 00007ffc787e1018 [ 532.237600][T21145] [ 532.240651][T21145] Modules linked in: [ 532.245652][T21145] ---[ end trace 0000000000000000 ]--- [ 532.275698][T21145] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 532.283061][T21145] Code: d9 77 bb f7 c6 05 78 24 89 05 01 48 c7 c7 80 a0 9e 8c be 97 05 00 00 48 c7 c2 00 a1 9e 8c e8 2a 52 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 f4 e0 1e f8 4d 8b 2c 24 4d 39 f5 [ 532.303184][T21145] RSP: 0018:ffffc9000ab66658 EFLAGS: 00010206 [ 532.309383][T21145] RAX: ffffffff8a04337e RBX: 000000001fffe1ac RCX: 0000000000080000 [ 532.317487][T21145] RDX: ffffc9000b0b9000 RSI: 0000000000037b0a RDI: 0000000000037b0b [ 532.328797][T21145] RBP: ffff888057cee820 R08: ffffffff8f537c67 R09: 1ffffffff1ea6f8c [ 532.336838][T21145] R10: dffffc0000000000 R11: fffffbfff1ea6f8d R12: 00000000ffff0d60 [ 532.344954][T21145] R13: dffffc0000000000 R14: ffff88805ecf3600 R15: 1ffff1100af9dd04 [ 532.353046][T21145] FS: 00007f55c00006c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 532.362381][T21145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.369099][T21145] CR2: 00007f2271c82f98 CR3: 000000005baea000 CR4: 00000000003526f0 [ 532.377142][T21145] Kernel panic - not syncing: Fatal exception [ 532.383544][T21145] Kernel Offset: disabled [ 532.387908][T21145] Rebooting in 86400 seconds..