last executing test programs: 1m21.320047195s ago: executing program 4 (id=639): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0xff7f}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 1m8.990549742s ago: executing program 4 (id=639): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0xff7f}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 53.662419107s ago: executing program 4 (id=639): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0xff7f}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 37.544478385s ago: executing program 4 (id=639): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0xff7f}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 21.520024491s ago: executing program 4 (id=639): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0xff7f}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 5.294355891s ago: executing program 4 (id=639): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0xff7f}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 3.991139926s ago: executing program 1 (id=1562): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005003f000000000000000c0002000000000000000200100007"], 0x3c}}, 0x0) 3.85079672s ago: executing program 1 (id=1565): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180)=0x9, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x9}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0000000400000002000000030000003c080000", @ANYRES32=r5, @ANYBLOB="0200001f000000000000000000000000000000002e0397963f4fbfdcb20d03ba059f447b1112650c384519947e3d69a8058c9f1dfff180f8e1e19f897c2647130b80e93e9c", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0400000003000000010000000500"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000010000009c0b00000100000002100000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="040000000500000005000000020000000000000000000000000000000260ec19d57f34028aa8ea7834dd70af5cf28ebbe1dfa0bde9de4532ee860c7dee9348452d13d0c2eb5b72bd17b8"], 0x50) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x7b, &(0x7f0000000440)=@assoc_value, &(0x7f0000000080)=0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0xa0010000000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x840}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) sendmsg$can_bcm(r1, 0x0, 0x20000010) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 3.831172147s ago: executing program 3 (id=1566): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x68, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3, 0x2}, @timestamp={0x5, 0xa}, @generic={0x0, 0x2}]}}, {"6cce80206dc3fe0c10b881ce12bde0d45d"}}}}}, 0x57) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000304000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010069703667726500001400028005000b000000000008000c0000000000"], 0x44}}, 0x0) 2.942095417s ago: executing program 0 (id=1569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32], 0x20}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x44, 0x1000}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0xc, 0x9, {0x7fe, 0x29, 0x8}}, @RTA_NH_ID={0x8, 0x1e, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(0x3) 2.210890933s ago: executing program 1 (id=1571): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) (async) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) socket$inet6(0xa, 0x3, 0x7) (async) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$sock_int(r4, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe(&(0x7f0000000800)) (async) pipe(&(0x7f0000000800)) 2.121825409s ago: executing program 3 (id=1572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400efffffff0000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00142102800800010008000000060002000100000008000500", @ANYRES32=r5], 0x54}}, 0x0) 2.121263002s ago: executing program 0 (id=1573): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000a00)=""/4096, 0xe22}, {&(0x7f0000001a00)=""/110, 0x6e}, {&(0x7f0000000400)=""/217, 0xd9}], 0x5}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0xf04}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x40000000, 0x0) 2.006048188s ago: executing program 0 (id=1574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x54) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000100)={{r0}, "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"}) select(0x40, &(0x7f0000001100)={0xbb, 0x7, 0x2, 0x3, 0x17c, 0x72, 0x3, 0x8000000000000001}, &(0x7f0000001140)={0x2, 0x2, 0x27b2, 0x9, 0x2, 0xff, 0x80000000, 0xfffffffffffffffd}, &(0x7f0000001180)={0x5, 0x4, 0x7847bdab, 0x9, 0x2, 0x5, 0x9, 0xaca0}, &(0x7f00000011c0)={0x77359400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x20a00, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000001240)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0xc800c108}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, r6, 0x2, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004881}, 0x101) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = accept4(r0, &(0x7f0000001580)=@un=@abs, &(0x7f0000001600)=0x80, 0x80000) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0xac, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '--+}![$&}*'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008000}, 0x40008d0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f00000017c0), &(0x7f0000001800)=0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000001840)={0x0, 0x401}, &(0x7f0000001880)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f00000018c0)={r10, @in6={{0xa, 0x4e24, 0x4, @private0}}}, 0x84) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000019c0), r2) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000001a80)={&(0x7f0000001980), 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x3c, r11, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x54) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b00)={0x14c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x12c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x659}, @NL802154_DEVKEY_ATTR_ID={0x9c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1347}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9b30}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x62b}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff80000001}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40400d0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, r6, 0x8, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4014800}, 0x20000001) sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000002040)={&(0x7f0000001e00), 0xc, &(0x7f0000002000)={&(0x7f0000001e40)={0x18c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4800}, 0x4040) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002100)={{0x1}, &(0x7f0000002080), &(0x7f00000020c0)='%pB \x00'}, 0x20) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r8) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000002300)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000022c0)={&(0x7f00000021c0)={0xd4, r12, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf9d7, 0x4e}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfffff159}, @NL80211_ATTR_IE={0xa9, 0x2a, [@random={0x0, 0xa3, "03a942e09cc83608dde8cb4e84a3b5c4036d019e513e24508deffa58c17393d6cbd990a707f7975cb44e9ebf525cc51b6024edc586c0ab3d0334a268dc9fbcf8d1cddd9b1226b2b1fec78eb7c3807a95405b368139df47e938636fb7be1e8e5eb6843d8caaf131a5d38035f23c7ecd7d0e05db69cdff35d5f28f3ac31d7f49de3c06509950ae945f57b3397148f7fab5c31a0f1e954952f95ac76ffee70c2127462694"}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000014}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x10002080}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40085) 1.772213063s ago: executing program 3 (id=1575): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000fcdbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="40007a800c000300a0d4e01051d6ff6314000100a141185d34a8353d9ec86372a23b0de6f87470a91cbb99c0fe5b1c37abc0da7ab2"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000f80)=ANY=[@ANYBLOB="aaea91d685aaaaaaaaaaaabb008cabb50184fd46b746d9bd482efccd930000aa1f5a3a88a800"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000000"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffe13) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)={0x14, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x1}]}, 0x14}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8bbfffff420105003b00128009000100626f6e64000000000c00028005001100060000009501869a7c39fc7153125dd57a0eedec3e6dd5288d"], 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x400000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x27, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r8, 0x0}, 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000000fc0)=""/208, &(0x7f00000010c0)=0xd0) r9 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x29, 0xeb, 0x8, 0x700000, 0x17, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @private1, 0x40, 0x7800, 0x5, 0x9}}) socket$nl_generic(0x10, 0x3, 0x10) 1.592213597s ago: executing program 0 (id=1576): r0 = socket(0x10, 0x803, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000180)={'bridge_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001b000100000000000000004774b4444574a7e400fc020000000000000000000000000001"], 0x28}}, 0x4840) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 1.569476615s ago: executing program 2 (id=1577): pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f80)={'veth0_to_bond\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000006c0)=@newtaction={0x18, 0x30, 0x8, 0x70bd2b, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x802) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf2501fdff000c0005003f000000000000000c0002000000000000000000100007800c00018008000100", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, {0x0, 0x1}}}, 0x24}}, 0x4014) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) 1.511176521s ago: executing program 3 (id=1578): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180)=0x9, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x9}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0000000400000002000000030000003c080000", @ANYRES32=r5, @ANYBLOB="0200001f000000000000000000000000000000002e0397963f4fbfdcb20d03ba059f447b1112650c384519947e3d69a8058c9f1dfff180f8e1e19f897c2647130b80e93e9c", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0400000003000000010000000500"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="040000000500000005000000020000000000000000000000000000000260ec19d57f34028aa8ea7834dd70af5cf28ebbe1dfa0bde9de4532ee860c7dee9348452d13d0c2eb5b72bd17b8"], 0x50) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x7b, &(0x7f0000000440)=@assoc_value, &(0x7f0000000080)=0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 1.298534797s ago: executing program 2 (id=1579): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006080)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3c, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x23000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000180)={&(0x7f0000000140)="6cdff72993e4fe6d6ca2a5fd6f335ff5c898924d21e75f4782c39738ac8418cf4239fe7a5070da668efaa31fd35d73604d199e4c39876e6414add9", 0x3b}, 0x1, 0x0, 0x0, 0x40010}, 0x20000054) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={r4, @in={{0x2, 0x4e23, @empty}}, 0xcc9, 0xb, 0x7, 0x3ff, 0xb9, 0x33, 0x37}, &(0x7f0000000040)=0x9c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0xde20, 0x0, @mcast2}, 0x1c) 925.992778ms ago: executing program 2 (id=1580): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x1b8, 0xd0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8, 0x11}}}, {{@ipv6={@private0, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8, 0x0, {0x8000000}}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 809.096299ms ago: executing program 0 (id=1581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x300000000000000}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b91f0000000000008000f0fffeffe809000000ffd9dd00000010000100000808004149004006040800", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='tlb_flush\x00', r5, 0x0, 0x9}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) poll(&(0x7f00000002c0)=[{r5, 0x12}, {r4, 0xba}, {r4}], 0x3, 0x7ae6) sendmmsg$alg(r3, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)="b8dce3", 0x3}, {&(0x7f0000000500)="82c3e4", 0xffffff57}], 0x2, &(0x7f0000003440)=ANY=[], 0x118, 0x20000004}], 0x1, 0x20004000) 758.785646ms ago: executing program 2 (id=1582): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff01000000ffffffffffffffa4000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310) 447.89751ms ago: executing program 3 (id=1583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32], 0x20}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x44, 0x1000}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0xc, 0x9, {0x7fe, 0x29, 0x8}}, @RTA_NH_ID={0x8, 0x1e, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(0x3) 447.729461ms ago: executing program 2 (id=1584): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001140)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x9}]}}]}, 0x38}, 0x1, 0x10000000000, 0x0, 0x4800}, 0x0) 416.090252ms ago: executing program 0 (id=1585): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x15) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1301, 0x0) socket(0x1, 0x80000, 0x82) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x13}}}, 0x24}}, 0x20044810) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) (async) socket$netlink(0x10, 0x3, 0x15) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1301, 0x0) (async) socket(0x1, 0x80000, 0x82) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x13}}}, 0x24}}, 0x20044810) (async) 322.697303ms ago: executing program 1 (id=1586): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x1, 0x20, 0x4, 0x8, {{0x13, 0x4, 0x1, 0x8, 0x4c, 0x6c, 0x0, 0xdd, 0x4, 0x0, @empty, @empty, {[@rr={0x7, 0x13, 0xe1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @ssrr={0x89, 0x1b, 0xee, [@remote, @empty, @broadcast, @local, @rand_addr=0x64010100, @remote]}, @ssrr={0x89, 0x7, 0xb6, [@rand_addr=0x64010101]}]}}}}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r1, @ANYBLOB='\x00'/20, @ANYRESDEC=r2, @ANYRESHEX=r2, @ANYBLOB="00000000000000fcbe00"/28], 0x50) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) (async) mmap(&(0x7f00008c6000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0xffffe000) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) (async) readv(r4, &(0x7f0000000340), 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r2, @ANYRES8=r2, @ANYRESDEC, @ANYRES16=r4, @ANYRESHEX=r4], 0x80}}, 0x20000044) (async) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0xfffffffa, 0xfffffff8}, 0x10) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$kcm(0x1e, 0x2, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x14, 0xe, &(0x7f0000000180)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x280cc31f1676d22, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000240)={0x800, 0x400000, 0xfffffffc, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) write$cgroup_subtree(r9, 0x0, 0xfdef) 242.511627ms ago: executing program 1 (id=1587): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x2, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x54, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2a]}, @NL80211_ATTR_FRAME={0x2e, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1b9e}, @broadcast, @device_a, @random="95c2978aa78b", {0x8, 0x10}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x6, {0x0, 0x3, @val=0x7, @void, @void}}}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc5}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x41}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xb}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x2000404d) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="05"], 0x10) r7 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r7, 0x2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="db47a9c73d693207a5658395ac30833d371c2add8ad4eb83860adb5876deac835eb2faf672f0fe6cc647be4afca2593602e1f2307a361017ca79ba8c4a32a6d01df9213ab4da2ee94d41f7b821f3fbbbdfcb57bbb662a8e429c7ad0e39e2659cd6ceaaff78483d8dc444d28749b77cb95a977d68dd265531dbcb667952ac3983f05bb376896530995ce8dea9baa3cce01a3fddfa188431b571093b65a2b4e519773a1a7489ef8f97b8657b7e5bd30412574fd10e2af3233c037bab3988c2f5ea7f96da10c772da6de59a39065d218e40d12b9267aed21ae521c493480f2ec44141f03dea", @ANYRES32, @ANYRES64=r8, @ANYRESDEC=r4, @ANYBLOB="ed", @ANYRES16, @ANYRES64=r0], 0x20) 235.94612ms ago: executing program 2 (id=1588): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000fcdbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="40007a800c000300a0d4e01051d6ff6314000100a141185d34a8353d9ec86372a23b0de6f87470a91cbb99c0fe5b1c37abc0da7ab2"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000f80)=ANY=[@ANYBLOB="aaea91d685aaaaaaaaaaaabb008cabb50184fd46b746d9bd482efccd930000aa1f5a3a88a800"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000000"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffe13) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)={0x14, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x1}]}, 0x14}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8bbfffff420105003b00128009000100626f6e64000000000c00028005001100060000009501869a7c39fc7153125dd57a0eedec3e6dd5288d"], 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x400000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x27, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r8, 0x0}, 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000000fc0)=""/208, &(0x7f00000010c0)=0xd0) r9 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x29, 0xeb, 0x8, 0x700000, 0x17, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @private1, 0x40, 0x7800, 0x5, 0x9}}) socket$nl_generic(0x10, 0x3, 0x10) 26.641634ms ago: executing program 1 (id=1589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @loopback, {[@rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@multicast1}, {@remote}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private}]}]}}}}}}}, 0x0) 0s ago: executing program 3 (id=1590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290a00000000ebdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="240003"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x3f}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 1 has an invalid length. [ 168.427779][ T8281] tipc: Started in network mode [ 168.433821][ T8281] tipc: Node identity 4, cluster identity 229 [ 168.463913][ T8281] tipc: Node number set to 4 [ 168.651562][ T8290] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.670590][ T4471] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 168.822936][ T8295] veth3: entered promiscuous mode [ 168.844844][ T8295] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 168.927586][ T8146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.961713][ T8288] bond0: (slave team0): Releasing backup interface [ 168.981185][ T8288] ªªªªª@: left allmulticast mode [ 168.986239][ T8288] ªªªªª@: left promiscuous mode [ 168.992067][ T8288] bridge0: port 1(ªªªªª@) entered disabled state [ 169.022985][ T8288] bridge_slave_1: left allmulticast mode [ 169.028775][ T8288] bridge_slave_1: left promiscuous mode [ 169.034847][ T8288] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.072521][ T8288] bond0: (slave bond_slave_0): Releasing backup interface [ 169.124343][ T8288] bond0: (slave bond_slave_1): Releasing backup interface [ 169.179157][ T8288] team0: Port device team_slave_0 removed [ 169.222131][ T8288] team0: Port device team_slave_1 removed [ 169.228770][ T8288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.269812][ T8288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.284479][ T8288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.293241][ T8288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.320378][ T8288] bond0: (slave bond1): Releasing backup interface [ 169.346653][ T8288] bond3: (slave veth3): Releasing backup interface [ 169.358183][ T8146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.526798][ T8146] team0: Port device team_slave_0 added [ 169.538207][ T8321] FAULT_INJECTION: forcing a failure. [ 169.538207][ T8321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.557626][ T8146] team0: Port device team_slave_1 added [ 169.566871][ T8321] CPU: 1 UID: 0 PID: 8321 Comm: syz.2.691 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 169.566896][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.566906][ T8321] Call Trace: [ 169.566914][ T8321] [ 169.566922][ T8321] dump_stack_lvl+0x189/0x250 [ 169.566957][ T8321] ? __pfx____ratelimit+0x10/0x10 [ 169.566986][ T8321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.567016][ T8321] ? __pfx__printk+0x10/0x10 [ 169.567050][ T8321] should_fail_ex+0x414/0x560 [ 169.567079][ T8321] _copy_to_user+0x31/0xb0 [ 169.567101][ T8321] simple_read_from_buffer+0xe1/0x170 [ 169.567126][ T8321] proc_fail_nth_read+0x1df/0x250 [ 169.567173][ T8321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.567202][ T8321] ? rw_verify_area+0x258/0x650 [ 169.567233][ T8321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.567259][ T8321] vfs_read+0x200/0x980 [ 169.567307][ T8321] ? __pfx___mutex_lock+0x10/0x10 [ 169.567326][ T8321] ? __pfx_vfs_read+0x10/0x10 [ 169.567360][ T8321] ? __fget_files+0x2a/0x420 [ 169.567386][ T8321] ? __fget_files+0x3a0/0x420 [ 169.567407][ T8321] ? __fget_files+0x2a/0x420 [ 169.567437][ T8321] ksys_read+0x145/0x250 [ 169.567469][ T8321] ? __pfx_ksys_read+0x10/0x10 [ 169.567496][ T8321] ? rcu_is_watching+0x15/0xb0 [ 169.567532][ T8321] ? do_syscall_64+0xbe/0x3b0 [ 169.567554][ T8321] do_syscall_64+0xfa/0x3b0 [ 169.567570][ T8321] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.567598][ T8321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.567617][ T8321] ? clear_bhb_loop+0x60/0xb0 [ 169.567642][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.567661][ T8321] RIP: 0033:0x7fe586b8d33c [ 169.567680][ T8321] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 169.567696][ T8321] RSP: 002b:00007fe58791c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.567718][ T8321] RAX: ffffffffffffffda RBX: 00007fe586db5fa0 RCX: 00007fe586b8d33c [ 169.567732][ T8321] RDX: 000000000000000f RSI: 00007fe58791c0a0 RDI: 000000000000001a [ 169.567745][ T8321] RBP: 00007fe58791c090 R08: 0000000000000000 R09: 0000000000000000 [ 169.567757][ T8321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.567768][ T8321] R13: 0000000000000000 R14: 00007fe586db5fa0 R15: 00007ffc6ad076d8 [ 169.567801][ T8321] [ 169.816388][ T51] Bluetooth: hci0: command tx timeout [ 170.176535][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.190774][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.233827][ T8146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.252684][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.272156][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.311432][ T8146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.456567][ T8348] netlink: 'syz.0.698': attribute type 10 has an invalid length. [ 170.488010][ T8348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.698'. [ 170.685775][ T8146] hsr_slave_0: entered promiscuous mode [ 170.712351][ T8146] hsr_slave_1: entered promiscuous mode [ 170.731780][ T8146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.739388][ T8146] Cannot create hsr debugfs directory [ 170.780618][ T8360] vlan2: entered promiscuous mode [ 170.799706][ T8360] gretap0: entered promiscuous mode [ 170.975554][ T8365] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 170.995497][ T8365] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 171.009720][ T8365] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 171.043654][ T8373] netlink: 36 bytes leftover after parsing attributes in process `syz.3.703'. [ 171.144503][ T8368] netlink: zone id is out of range [ 171.160027][ T8368] netlink: zone id is out of range [ 171.165635][ T8368] netlink: zone id is out of range [ 171.219827][ T8368] netlink: zone id is out of range [ 171.225236][ T8368] netlink: zone id is out of range [ 171.232269][ T8368] netlink: zone id is out of range [ 171.249532][ T8368] netlink: zone id is out of range [ 171.272393][ T8368] netlink: zone id is out of range [ 171.302350][ T8368] netlink: zone id is out of range [ 171.321386][ T8381] netlink: 220 bytes leftover after parsing attributes in process `syz.1.704'. [ 171.878498][ T51] Bluetooth: hci0: command tx timeout [ 172.144774][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 172.369207][ T8416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.715'. [ 172.379464][ T8416] netlink: 'syz.1.715': attribute type 7 has an invalid length. [ 172.387892][ T8416] netlink: 'syz.1.715': attribute type 8 has an invalid length. [ 172.399474][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 172.419344][ T8412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.713'. [ 172.875907][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 173.042261][ T8146] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.068795][ T8146] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.103048][ T8146] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.137783][ T8146] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.195140][ T8425] __nla_validate_parse: 1 callbacks suppressed [ 173.195159][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'. [ 173.426819][ T8146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.525471][ T8146] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.553667][ T8455] x_tables: duplicate underflow at hook 1 [ 173.602595][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.609877][ T6348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.694664][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.701891][ T7081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.843171][ T8462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.885496][ T8462] bond0: (slave bond1): Enslaving as an active interface with an up link [ 174.177867][ T8475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.729'. [ 174.431290][ T7084] net_ratelimit: 10 callbacks suppressed [ 174.431309][ T7084] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 174.986099][ T8146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.182407][ T8524] netlink: 36 bytes leftover after parsing attributes in process `syz.2.740'. [ 175.191475][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 175.248124][ T8528] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 175.384256][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 175.664346][ T8541] FAULT_INJECTION: forcing a failure. [ 175.664346][ T8541] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 175.718076][ T8541] CPU: 1 UID: 0 PID: 8541 Comm: syz.3.744 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 175.718105][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.718117][ T8541] Call Trace: [ 175.718125][ T8541] [ 175.718134][ T8541] dump_stack_lvl+0x189/0x250 [ 175.718172][ T8541] ? __pfx____ratelimit+0x10/0x10 [ 175.718203][ T8541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.718236][ T8541] ? __pfx__printk+0x10/0x10 [ 175.718267][ T8541] ? fs_reclaim_acquire+0x7d/0x100 [ 175.718300][ T8541] should_fail_ex+0x414/0x560 [ 175.718333][ T8541] prepare_alloc_pages+0x213/0x610 [ 175.718365][ T8541] __alloc_frozen_pages_noprof+0x123/0x370 [ 175.718395][ T8541] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 175.718423][ T8541] ? __pfx_css_rstat_updated+0x10/0x10 [ 175.718456][ T8541] ? policy_nodemask+0x27c/0x720 [ 175.718481][ T8541] alloc_pages_mpol+0x232/0x4a0 [ 175.718507][ T8541] folio_alloc_mpol_noprof+0x39/0x70 [ 175.718531][ T8541] shmem_alloc_and_add_folio+0x447/0xf60 [ 175.718566][ T8541] ? filemap_get_entry+0xad/0x2f0 [ 175.718592][ T8541] ? filemap_get_entry+0xad/0x2f0 [ 175.718611][ T8541] ? filemap_get_entry+0xad/0x2f0 [ 175.718639][ T8541] ? shmem_huge_global_enabled+0x174/0x3a0 [ 175.718667][ T8541] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 175.718703][ T8541] ? shmem_allowable_huge_orders+0x414/0x420 [ 175.718744][ T8541] shmem_get_folio_gfp+0x59d/0x1660 [ 175.718793][ T8541] shmem_fault+0x179/0x390 [ 175.718822][ T8541] __do_fault+0x138/0x390 [ 175.718848][ T8541] __handle_mm_fault+0x198b/0x5620 [ 175.718902][ T8541] ? __pfx___handle_mm_fault+0x10/0x10 [ 175.718950][ T8541] ? follow_page_pte+0x8d6/0x14b0 [ 175.718992][ T8541] handle_mm_fault+0x40a/0x8e0 [ 175.719036][ T8541] __get_user_pages+0x1af4/0x30b0 [ 175.719105][ T8541] ? __pfx___get_user_pages+0x10/0x10 [ 175.719134][ T8541] ? __gup_longterm_locked+0x1005/0x15b0 [ 175.719165][ T8541] ? down_read_killable+0x1d1/0x350 [ 175.719193][ T8541] __gup_longterm_locked+0x118a/0x15b0 [ 175.719239][ T8541] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 175.719272][ T8541] ? gup_fast_fallback+0x1afc/0x2260 [ 175.719305][ T8541] gup_fast_fallback+0x1cd4/0x2260 [ 175.719337][ T8541] ? __lock_acquire+0xab9/0xd20 [ 175.719378][ T8541] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 175.719427][ T8541] ? __pfx_gup_fast_fallback+0x10/0x10 [ 175.719461][ T8541] ? rcu_is_watching+0x15/0xb0 [ 175.719496][ T8541] ? rcu_is_watching+0x15/0xb0 [ 175.719526][ T8541] ? is_valid_gup_args+0x11f/0x200 [ 175.719558][ T8541] ? pin_user_pages_fast+0x4d/0xb0 [ 175.719591][ T8541] rds_info_getsockopt+0x1fb/0x470 [ 175.719619][ T8541] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 175.719642][ T8541] ? __might_fault+0xb0/0x130 [ 175.719666][ T8541] ? rds_getsockopt+0x2d4/0x500 [ 175.719697][ T8541] do_sock_getsockopt+0x35d/0x650 [ 175.719736][ T8541] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 175.719761][ T8541] ? __pfx_do_syscall_64+0x10/0x10 [ 175.719779][ T8541] ? __fget_files+0x3a0/0x420 [ 175.719801][ T8541] ? __fget_files+0x2a/0x420 [ 175.719832][ T8541] __x64_sys_getsockopt+0x1a5/0x250 [ 175.719857][ T8541] ? __pfx_do_syscall_64+0x10/0x10 [ 175.719877][ T8541] ? __pfx_do_syscall_64+0x10/0x10 [ 175.719920][ T8541] do_syscall_64+0xfa/0x3b0 [ 175.719938][ T8541] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.719969][ T8541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.719990][ T8541] ? clear_bhb_loop+0x60/0xb0 [ 175.720017][ T8541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.720037][ T8541] RIP: 0033:0x7f10a2d8e929 [ 175.720056][ T8541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.720073][ T8541] RSP: 002b:00007f10a3c34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 175.720095][ T8541] RAX: ffffffffffffffda RBX: 00007f10a2fb5fa0 RCX: 00007f10a2d8e929 [ 175.720111][ T8541] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 175.720124][ T8541] RBP: 00007f10a3c34090 R08: 0000200000000000 R09: 0000000000000000 [ 175.720137][ T8541] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 175.720150][ T8541] R13: 0000000000000000 R14: 00007f10a2fb5fa0 R15: 00007fffbe801658 [ 175.720183][ T8541] [ 176.134998][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 176.205115][ T8544] netlink: 60 bytes leftover after parsing attributes in process `syz.2.745'. [ 176.226081][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.746'. [ 176.544788][ T8146] veth0_vlan: entered promiscuous mode [ 176.559561][ T8146] veth1_vlan: entered promiscuous mode [ 176.627701][ T8146] veth0_macvtap: entered promiscuous mode [ 176.662866][ T8146] veth1_macvtap: entered promiscuous mode [ 176.718086][ T8146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.759299][ T8146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.807581][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 176.826526][ T8146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.859709][ T8146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.868554][ T8146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.917574][ T8146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.954884][ T8574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.359711][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.390334][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.500396][ T7081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.508274][ T7081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.642812][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 178.318874][ T7081] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.466025][ T7081] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.664129][ T7081] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.752923][ T8628] gretap0: entered promiscuous mode [ 178.804196][ T8628] vlan5: entered promiscuous mode [ 179.046340][ T7081] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.139435][ T8637] vlan2: entered promiscuous mode [ 179.148965][ T8637] vlan2: entered allmulticast mode [ 179.176688][ T8637] hsr_slave_1: entered allmulticast mode [ 179.229091][ T8647] netlink: 'syz.2.771': attribute type 10 has an invalid length. [ 179.297400][ T8647] netlink: 40 bytes leftover after parsing attributes in process `syz.2.771'. [ 179.376665][ T8647] bridge0: port 1(0!) entered blocking state [ 179.391766][ T8647] bridge0: port 1(0!) entered disabled state [ 179.398202][ T8647] !: entered allmulticast mode [ 179.436661][ T8647] bridge0: port 1(0!) entered blocking state [ 179.443045][ T8647] bridge0: port 1(0!) entered forwarding state [ 179.726386][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.735680][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.744044][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.757761][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.766208][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.802442][ T7081] bridge_slave_1: left allmulticast mode [ 179.808145][ T7081] bridge_slave_1: left promiscuous mode [ 179.814111][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.847411][ T7081] bridge_slave_0: left allmulticast mode [ 179.878694][ T7081] bridge_slave_0: left promiscuous mode [ 179.916589][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.193438][ T7078] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 180.235946][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.777'. [ 180.571499][ T8694] netlink: 2116 bytes leftover after parsing attributes in process `syz.1.779'. [ 180.669018][ T7081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.693371][ T7081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.705270][ T7081] bond0 (unregistering): Released all slaves [ 181.108422][ T8710] netlink: 'syz.1.783': attribute type 1 has an invalid length. [ 181.138883][ T8710] netlink: 224 bytes leftover after parsing attributes in process `syz.1.783'. [ 181.272899][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 181.282052][ T8718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.785'. [ 181.430809][ T8722] netlink: 'syz.2.787': attribute type 10 has an invalid length. [ 181.438631][ T8722] netlink: 40 bytes leftover after parsing attributes in process `syz.2.787'. [ 181.615187][ T7081] hsr_slave_0: left promiscuous mode [ 181.624156][ T7081] hsr_slave_1: left promiscuous mode [ 181.632283][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.643126][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.651871][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.659469][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.704248][ T7081] veth1_macvtap: left promiscuous mode [ 181.711074][ T7081] veth0_macvtap: left promiscuous mode [ 181.717486][ T7081] veth1_vlan: left promiscuous mode [ 181.724007][ T7081] veth0_vlan: left promiscuous mode [ 181.869807][ T51] Bluetooth: hci0: command tx timeout [ 181.901585][ T8733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.789'. [ 182.220887][ T7081] team0 (unregistering): Port device team_slave_1 removed [ 182.259338][ T7081] team0 (unregistering): Port device team_slave_0 removed [ 182.601797][ T8727] dummy0: left allmulticast mode [ 182.606948][ T8727] bridge0: port 3(dummy0) entered disabled state [ 182.625882][ T8727] ªªªªª@: left allmulticast mode [ 182.634684][ T8727] ªªªªª@: left promiscuous mode [ 182.640321][ T8727] bridge0: port 1(ªªªªª@) entered disabled state [ 182.649443][ T8727] bridge_slave_1: left allmulticast mode [ 182.658421][ T8727] bridge_slave_1: left promiscuous mode [ 182.664718][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.676990][ T8727] bond0: (slave bond_slave_0): Releasing backup interface [ 182.687068][ T8727] bond0: (slave bond_slave_1): Releasing backup interface [ 182.704323][ T8727] team0: Port device team_slave_0 removed [ 182.717852][ T8727] team0: Port device team_slave_1 removed [ 182.737665][ T8727] bond0: (slave bond1): Releasing backup interface [ 182.884091][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'. [ 183.093897][ T8743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.791'. [ 183.376202][ T8668] chnl_net:caif_netlink_parms(): no params data found [ 183.910055][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.930601][ T8668] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.937854][ T8668] bridge_slave_0: entered allmulticast mode [ 183.949818][ T51] Bluetooth: hci0: command tx timeout [ 183.999498][ T8668] bridge_slave_0: entered promiscuous mode [ 184.189757][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.213583][ T8668] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.232532][ T8668] bridge_slave_1: entered allmulticast mode [ 184.254195][ T8668] bridge_slave_1: entered promiscuous mode [ 184.332949][ T8779] __nla_validate_parse: 2 callbacks suppressed [ 184.332969][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 184.472647][ T8668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.549037][ T8668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.563652][ T8789] netlink: 'syz.0.801': attribute type 10 has an invalid length. [ 184.584798][ T8789] netlink: 40 bytes leftover after parsing attributes in process `syz.0.801'. [ 184.716926][ T8790] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.773436][ T8790] bond0: (slave bond4): Enslaving as an active interface with an up link [ 184.793129][ T8789] bridge0: port 1(dummy0) entered blocking state [ 184.827949][ T8789] bridge0: port 1(dummy0) entered disabled state [ 184.856169][ T8789] dummy0: entered allmulticast mode [ 184.877091][ T8789] bridge0: port 1(dummy0) entered blocking state [ 184.883745][ T8789] bridge0: port 1(dummy0) entered forwarding state [ 184.959390][ T8813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.805'. [ 184.988432][ T8668] team0: Port device team_slave_0 added [ 185.058893][ T8668] team0: Port device team_slave_1 added [ 185.247398][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.263085][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.313377][ T8668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.479272][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.523767][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.567451][ T8668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.681970][ T8832] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 185.694111][ T8832] netlink: 'syz.0.809': attribute type 2 has an invalid length. [ 185.776451][ T8836] xt_connbytes: Forcing CT accounting to be enabled [ 185.791426][ T8836] set match dimension is over the limit! [ 185.812624][ T8668] hsr_slave_0: entered promiscuous mode [ 185.817663][ T8838] netlink: 'syz.2.813': attribute type 24 has an invalid length. [ 185.819497][ T8668] hsr_slave_1: entered promiscuous mode [ 185.826767][ T8836] netlink: 'syz.3.812': attribute type 11 has an invalid length. [ 185.845788][ T8668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.854521][ T8668] Cannot create hsr debugfs directory [ 185.951393][ T7081] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 186.029849][ T51] Bluetooth: hci0: command tx timeout [ 186.106459][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 186.188364][ T8846] netlink: 'syz.2.815': attribute type 5 has an invalid length. [ 186.475825][ T8861] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 186.587326][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.821'. [ 186.712054][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 186.713013][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 187.095820][ T8883] hsr0: left promiscuous mode [ 187.725854][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.829'. [ 187.807808][ T8906] batadv0: entered promiscuous mode [ 187.815078][ T8906] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 187.830829][ T8906] batadv0: left promiscuous mode [ 187.900291][ T8668] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.957256][ T8668] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 188.060881][ T8668] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.112649][ T51] Bluetooth: hci0: command tx timeout [ 188.146438][ T8668] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.634388][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.837'. [ 188.672006][ T8668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.757703][ T8941] syz.0.837: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 188.838505][ T8668] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.847543][ T8941] CPU: 0 UID: 0 PID: 8941 Comm: syz.0.837 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 188.847565][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.847575][ T8941] Call Trace: [ 188.847581][ T8941] [ 188.847587][ T8941] dump_stack_lvl+0x189/0x250 [ 188.847634][ T8941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.847670][ T8941] ? __pfx__printk+0x10/0x10 [ 188.847695][ T8941] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 188.847721][ T8941] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 188.847748][ T8941] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 188.847767][ T8941] warn_alloc+0x214/0x310 [ 188.847785][ T8941] ? stack_depot_save_flags+0x40/0x900 [ 188.847809][ T8941] ? __pfx_warn_alloc+0x10/0x10 [ 188.847828][ T8941] ? kasan_save_track+0x4f/0x80 [ 188.847852][ T8941] ? xskq_create+0x56/0x170 [ 188.847874][ T8941] ? xsk_init_queue+0xb0/0x110 [ 188.847894][ T8941] ? xsk_setsockopt+0x43f/0x710 [ 188.847913][ T8941] ? do_sock_setsockopt+0x257/0x3e0 [ 188.847931][ T8941] ? __x64_sys_setsockopt+0x18b/0x220 [ 188.847948][ T8941] ? do_syscall_64+0xfa/0x3b0 [ 188.847960][ T8941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.847982][ T8941] __vmalloc_node_range_noprof+0x125/0x12f0 [ 188.848023][ T8941] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 188.848045][ T8941] ? __kasan_kmalloc+0x93/0xb0 [ 188.848062][ T8941] vmalloc_user_noprof+0xad/0xf0 [ 188.848079][ T8941] ? xskq_create+0xbf/0x170 [ 188.848101][ T8941] xskq_create+0xbf/0x170 [ 188.848126][ T8941] xsk_init_queue+0xb0/0x110 [ 188.848169][ T8941] xsk_setsockopt+0x43f/0x710 [ 188.848191][ T8941] ? __pfx_xsk_setsockopt+0x10/0x10 [ 188.848210][ T8941] ? __lock_acquire+0xab9/0xd20 [ 188.848239][ T8941] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 188.848258][ T8941] ? __pfx_xsk_setsockopt+0x10/0x10 [ 188.848279][ T8941] do_sock_setsockopt+0x257/0x3e0 [ 188.848299][ T8941] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 188.848320][ T8941] ? __fget_files+0x2a/0x420 [ 188.848343][ T8941] __x64_sys_setsockopt+0x18b/0x220 [ 188.848366][ T8941] do_syscall_64+0xfa/0x3b0 [ 188.848378][ T8941] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.848400][ T8941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.848414][ T8941] ? clear_bhb_loop+0x60/0xb0 [ 188.848433][ T8941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.848447][ T8941] RIP: 0033:0x7f1e4998e929 [ 188.848467][ T8941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.848480][ T8941] RSP: 002b:00007f1e4a7e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 188.848496][ T8941] RAX: ffffffffffffffda RBX: 00007f1e49bb5fa0 RCX: 00007f1e4998e929 [ 188.848507][ T8941] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 188.848516][ T8941] RBP: 00007f1e49a10b39 R08: 0000000000000004 R09: 0000000000000000 [ 188.848526][ T8941] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.848535][ T8941] R13: 0000000000000000 R14: 00007f1e49bb5fa0 R15: 00007fff6f1e6988 [ 188.848558][ T8941] [ 188.848564][ T8941] Mem-Info: [ 189.200782][ T8941] active_anon:7796 inactive_anon:0 isolated_anon:0 [ 189.200782][ T8941] active_file:1612 inactive_file:39869 isolated_file:0 [ 189.200782][ T8941] unevictable:768 dirty:278 writeback:0 [ 189.200782][ T8941] slab_reclaimable:10205 slab_unreclaimable:98927 [ 189.200782][ T8941] mapped:30684 shmem:1371 pagetables:1270 [ 189.200782][ T8941] sec_pagetables:0 bounce:0 [ 189.200782][ T8941] kernel_misc_reclaimable:0 [ 189.200782][ T8941] free:1331964 free_pcp:13476 free_cma:0 [ 189.204392][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.253397][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.297699][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.304915][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.312224][ T8941] Node 0 active_anon:31384kB inactive_anon:0kB active_file:6448kB inactive_file:159276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122736kB dirty:1112kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12424kB pagetables:4712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 189.408911][ T8941] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 189.535320][ T8941] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.669511][ T8941] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 189.704051][ T8941] Node 0 DMA32 free:1410952kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31136kB inactive_anon:0kB active_file:6448kB inactive_file:157436kB unevictable:1536kB writepending:1108kB present:3129332kB managed:2561028kB mlocked:0kB bounce:0kB free_pcp:36784kB local_pcp:16040kB free_cma:0kB [ 189.763636][ T8947] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 189.788491][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 189.810066][ T8941] lowmem_reserve[]: 0 0 1 1 1 [ 189.851252][ T8941] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 189.887658][ T8968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.934468][ T8941] lowmem_reserve[]: 0 0 0 0 0 [ 190.024490][ T8941] Node 1 Normal free:3901596kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17580kB local_pcp:6016kB free_cma:0kB [ 190.128376][ T8941] lowmem_reserve[]: 0 0 0 0 0 [ 190.164330][ T8941] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 190.197618][ T8941] Node 0 DMA32: 351*4kB (UME) 147*8kB (UM) 154*16kB (M) 41*32kB (M) 10*64kB (ME) 0*128kB 30*256kB (UE) 41*512kB (UM) 17*1024kB (UM) 7*2048kB (UME) 326*4096kB (UM) = 1402708kB [ 190.248937][ T8941] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 190.281369][ T8941] Node 1 Normal: 207*4kB (UE) 46*8kB (UME) 45*16kB (UME) 61*32kB (UME) 26*64kB (UME) 6*128kB (UME) 2*256kB (M) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3901596kB [ 190.322348][ T8941] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.370801][ T8941] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.411704][ T8941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.442632][ T8941] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.479644][ T8941] 42850 total pagecache pages [ 190.489699][ T8941] 0 pages in swap cache [ 190.493900][ T8941] Free swap = 124996kB [ 190.503317][ T8941] Total swap = 124996kB [ 190.507521][ T8941] 2097051 pages RAM [ 190.522991][ T8941] 0 pages HighMem/MovableOnly [ 190.533101][ T8941] 424688 pages reserved [ 190.537295][ T8941] 0 pages cma reserved [ 191.712551][ T7084] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 192.612805][ T8668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.626924][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'. [ 192.637843][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 192.647922][ T9043] FAULT_INJECTION: forcing a failure. [ 192.647922][ T9043] name failslab, interval 1, probability 0, space 0, times 0 [ 192.663092][ T9043] CPU: 0 UID: 0 PID: 9043 Comm: syz.2.851 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 192.663124][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.663138][ T9043] Call Trace: [ 192.663146][ T9043] [ 192.663156][ T9043] dump_stack_lvl+0x189/0x250 [ 192.663196][ T9043] ? __pfx____ratelimit+0x10/0x10 [ 192.663229][ T9043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.663264][ T9043] ? __pfx__printk+0x10/0x10 [ 192.663292][ T9043] ? __mutex_trylock_common+0x153/0x260 [ 192.663333][ T9043] should_fail_ex+0x414/0x560 [ 192.663367][ T9043] should_failslab+0xa8/0x100 [ 192.663392][ T9043] __kmalloc_cache_noprof+0x70/0x3d0 [ 192.663414][ T9043] ? __hw_addr_add_ex+0x1f4/0x770 [ 192.663447][ T9043] __hw_addr_add_ex+0x1f4/0x770 [ 192.663484][ T9043] dev_addr_init+0x14f/0x230 [ 192.663516][ T9043] ? __pfx_dev_addr_init+0x10/0x10 [ 192.663560][ T9043] alloc_netdev_mqs+0x2f3/0x11e0 [ 192.663602][ T9043] ? __pfx_vlan_setup+0x10/0x10 [ 192.663634][ T9043] register_vlan_device+0x24f/0x4c0 [ 192.663664][ T9043] ? __pfx_register_vlan_device+0x10/0x10 [ 192.663691][ T9043] ? security_capable+0x7e/0x2e0 [ 192.663726][ T9043] vlan_ioctl_handler+0x281/0x650 [ 192.663750][ T9043] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 192.663775][ T9043] ? __lock_acquire+0xab9/0xd20 [ 192.663820][ T9043] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 192.663844][ T9043] sock_ioctl+0x610/0x790 [ 192.663878][ T9043] ? __pfx_sock_ioctl+0x10/0x10 [ 192.663908][ T9043] ? __fget_files+0x2a/0x420 [ 192.663930][ T9043] ? __fget_files+0x3a0/0x420 [ 192.663951][ T9043] ? __fget_files+0x2a/0x420 [ 192.663978][ T9043] ? bpf_lsm_file_ioctl+0x9/0x20 [ 192.664009][ T9043] ? __pfx_sock_ioctl+0x10/0x10 [ 192.664038][ T9043] __se_sys_ioctl+0xf9/0x170 [ 192.664073][ T9043] do_syscall_64+0xfa/0x3b0 [ 192.664090][ T9043] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.664121][ T9043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.664142][ T9043] ? clear_bhb_loop+0x60/0xb0 [ 192.664168][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.664188][ T9043] RIP: 0033:0x7fe586b8e929 [ 192.664207][ T9043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.664226][ T9043] RSP: 002b:00007fe58791c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.664248][ T9043] RAX: ffffffffffffffda RBX: 00007fe586db5fa0 RCX: 00007fe586b8e929 [ 192.664263][ T9043] RDX: 0000200000000400 RSI: 0000000000008982 RDI: 0000000000000003 [ 192.664277][ T9043] RBP: 00007fe58791c090 R08: 0000000000000000 R09: 0000000000000000 [ 192.664289][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.664302][ T9043] R13: 0000000000000000 R14: 00007fe586db5fa0 R15: 00007ffc6ad076d8 [ 192.664343][ T9043] [ 192.664567][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 193.346573][ T9063] netlink: 'syz.0.856': attribute type 12 has an invalid length. [ 193.380528][ T9063] netlink: 132 bytes leftover after parsing attributes in process `syz.0.856'. [ 193.418980][ T9068] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 193.466846][ T9071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.859'. [ 193.519161][ T9071] netlink: 48 bytes leftover after parsing attributes in process `syz.3.859'. [ 193.577605][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 193.595842][ T8668] veth0_vlan: entered promiscuous mode [ 193.619026][ T9071] hsr_slave_0: left promiscuous mode [ 193.634490][ T9071] hsr_slave_1: left promiscuous mode [ 193.739505][ T8668] veth1_vlan: entered promiscuous mode [ 193.796569][ T9081] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 193.851146][ T8668] veth0_macvtap: entered promiscuous mode [ 193.865468][ T8668] veth1_macvtap: entered promiscuous mode [ 193.884761][ T9083] netlink: 100 bytes leftover after parsing attributes in process `syz.2.863'. [ 193.963109][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.028492][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.085962][ T8668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.129784][ T8668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.156313][ T8668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.181876][ T8668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.280811][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.451113][ T7081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.489401][ T7081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.584400][ T9113] dummy0: left allmulticast mode [ 194.596878][ T9113] bridge0: port 1(dummy0) entered disabled state [ 194.646161][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.662989][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.271344][ T7081] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.428943][ T7081] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.551578][ T7081] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.591518][ T9132] netlink: 156 bytes leftover after parsing attributes in process `syz.1.879'. [ 195.888413][ T9142] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 195.912592][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.881'. [ 195.936746][ T7081] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.043632][ T9141] batadv0: entered promiscuous mode [ 196.063045][ T9141] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 196.091177][ T9141] batadv0: left promiscuous mode [ 196.226692][ T9154] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 196.404957][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 196.490434][ T7081] bridge_slave_1: left allmulticast mode [ 196.496147][ T7081] bridge_slave_1: left promiscuous mode [ 196.527508][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.548181][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.559156][ T7081] bridge_slave_0: left allmulticast mode [ 196.559968][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.573420][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.574245][ T7081] bridge_slave_0: left promiscuous mode [ 196.588604][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.598771][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.598819][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.910015][ T9182] netlink: 40 bytes leftover after parsing attributes in process `syz.0.895'. [ 196.923461][ T9183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.890'. [ 197.236549][ T7081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.247408][ T7081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.258985][ T7081] bond0 (unregistering): Released all slaves [ 197.317021][ T9167] pim6reg1: entered promiscuous mode [ 197.323374][ T9167] pim6reg1: entered allmulticast mode [ 197.418820][ T9190] dummy0: left promiscuous mode [ 197.471230][ T6348] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 197.552525][ T9190] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.561473][ T9190] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.571616][ T9190] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.580541][ T9190] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.594187][ T9190] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 197.643124][ T9190] bridge1: left allmulticast mode [ 197.973092][ T9202] batadv_slave_0: entered promiscuous mode [ 198.000659][ T9197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.898'. [ 198.115290][ T9199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.899'. [ 198.136471][ T7081] hsr_slave_0: left promiscuous mode [ 198.151667][ T7081] hsr_slave_1: left promiscuous mode [ 198.163873][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.186815][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.216637][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.237367][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.318603][ T7081] veth1_macvtap: left promiscuous mode [ 198.324855][ T7081] veth0_macvtap: left promiscuous mode [ 198.331144][ T7081] veth1_vlan: left promiscuous mode [ 198.340315][ T7081] veth0_vlan: left promiscuous mode [ 198.669902][ T5832] Bluetooth: hci0: command tx timeout [ 198.987510][ T7081] team0 (unregistering): Port device team_slave_1 removed [ 199.022792][ T7081] team0 (unregistering): Port device team_slave_0 removed [ 199.923437][ T9252] vlan3: entered promiscuous mode [ 200.038661][ T9163] chnl_net:caif_netlink_parms(): no params data found [ 200.288313][ T9265] netlink: 3 bytes leftover after parsing attributes in process `syz.1.912'. [ 200.387615][ T9265] batadv0: entered promiscuous mode [ 200.394467][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.914'. [ 200.423099][ T9265] batadv0: entered allmulticast mode [ 200.445009][ T9270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.913'. [ 200.627566][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.664526][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.697792][ T9163] bridge_slave_0: entered allmulticast mode [ 200.718829][ T9163] bridge_slave_0: entered promiscuous mode [ 200.738852][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.750830][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.759024][ T9163] bridge_slave_1: entered allmulticast mode [ 200.769615][ T5832] Bluetooth: hci0: command 0x041b tx timeout [ 200.782096][ T9163] bridge_slave_1: entered promiscuous mode [ 200.905256][ T9285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.985842][ T9163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.987896][ T9285] netlink: 'syz.0.917': attribute type 4 has an invalid length. [ 201.024396][ T9163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.039762][ T9296] netlink: 'syz.0.917': attribute type 4 has an invalid length. [ 201.148358][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 201.160051][ T9299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.919'. [ 201.308199][ T9163] team0: Port device team_slave_0 added [ 201.545466][ T9163] team0: Port device team_slave_1 added [ 201.844683][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.880096][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.944516][ T9163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.959402][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.999425][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.065133][ T9163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.278097][ T9328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.927'. [ 202.336003][ T9336] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 202.502053][ T9163] hsr_slave_0: entered promiscuous mode [ 202.508881][ T9163] hsr_slave_1: entered promiscuous mode [ 202.521013][ T9163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.544080][ T9163] Cannot create hsr debugfs directory [ 202.735432][ T9354] netlink: 'syz.3.930': attribute type 1 has an invalid length. [ 202.830850][ T51] Bluetooth: hci0: command 0x041b tx timeout [ 202.986027][ T9354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.037560][ T9358] vlan3: entered allmulticast mode [ 203.047233][ T9358] veth1: entered allmulticast mode [ 203.237213][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 203.530833][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'. [ 204.829253][ T9409] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 204.909739][ T51] Bluetooth: hci0: command 0x041b tx timeout [ 205.120199][ T9427] Bluetooth: MGMT ver 1.23 [ 205.194546][ T9163] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.218803][ T9163] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.276732][ T9437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.949'. [ 205.345027][ T9163] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.383694][ T9433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.949'. [ 205.403139][ T9163] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.437480][ T9442] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.506133][ T9433] xt_CT: No such helper "snmp_trap" [ 205.894191][ T9458] ip6tnl1: entered promiscuous mode [ 205.899469][ T9458] ip6tnl1: entered allmulticast mode [ 205.984552][ T9163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.004844][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'. [ 206.076832][ T9163] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.113028][ T7078] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.120278][ T7078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.163501][ T7078] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.170800][ T7078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.348879][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 206.752013][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 206.990357][ T51] Bluetooth: hci0: command 0x041b tx timeout [ 207.018817][ T9163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.352543][ T9518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.967'. [ 207.379324][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 207.425204][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'. [ 207.983827][ T9163] veth0_vlan: entered promiscuous mode [ 208.058234][ T9550] netlink: 3 bytes leftover after parsing attributes in process `syz.1.975'. [ 208.105158][ T9163] veth1_vlan: entered promiscuous mode [ 208.161810][ T9550] batadv0: entered promiscuous mode [ 208.167367][ T9550] batadv0: entered allmulticast mode [ 208.301905][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 208.426656][ T9163] veth0_macvtap: entered promiscuous mode [ 208.563496][ T9163] veth1_macvtap: entered promiscuous mode [ 208.719874][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.795264][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.843325][ T9163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.889748][ T9163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.939490][ T9163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.978848][ T9163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.990219][ T7078] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 209.012651][ T9581] netlink: 830 bytes leftover after parsing attributes in process `syz.1.983'. [ 209.058638][ T9583] netlink: 830 bytes leftover after parsing attributes in process `syz.1.983'. [ 209.079476][ T9577] xt_hashlimit: size too large, truncated to 1048576 [ 209.141853][ T9580] C: renamed from lo (while UP) [ 209.185770][ T9595] netlink: 'syz.3.985': attribute type 10 has an invalid length. [ 209.202567][ T9580] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 209.241049][ T9595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.985'. [ 209.387723][ T9595] batman_adv: batadv0: Adding interface: ÿÿÿÿÿÿ [ 209.402308][ T9595] batman_adv: batadv0: The MTU of interface ÿÿÿÿÿÿ is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.443287][ T9595] batman_adv: batadv0: Interface activated: ÿÿÿÿÿÿ [ 209.701316][ T9606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.124558][ T7078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.141825][ T7078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.378672][ T7078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.419907][ T7078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.424893][ T9627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.180506][ T6348] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.266633][ T6348] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.356716][ T6348] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.535372][ T6348] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.715614][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 211.723621][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 211.724904][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 211.884507][ T6348] bridge_slave_1: left allmulticast mode [ 211.891393][ T6348] bridge_slave_1: left promiscuous mode [ 211.897183][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.908978][ T6348] bridge_slave_0: left allmulticast mode [ 211.917078][ T6348] bridge_slave_0: left promiscuous mode [ 211.925302][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.289035][ T9669] __nla_validate_parse: 2 callbacks suppressed [ 212.289054][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 212.319483][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1001'. [ 212.432943][ T9685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.001614][ T6348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.036244][ T6348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.057393][ T6348] bond0 (unregistering): Released all slaves [ 213.138626][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.150517][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.163771][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.190758][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.203338][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.335021][ T9701] vlan5: entered promiscuous mode [ 213.478496][ T5153] block nbd2: Receive control failed (result -32) [ 213.636209][ T9715] netlink: 'syz.2.1005': attribute type 10 has an invalid length. [ 213.645795][ T9715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1005'. [ 213.955675][ T6348] hsr_slave_0: left promiscuous mode [ 213.989684][ T6348] hsr_slave_1: left promiscuous mode [ 214.001644][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.032204][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 214.041562][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.062582][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.077731][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.107696][ T6348] veth1_macvtap: left promiscuous mode [ 214.113964][ T6348] veth0_macvtap: left promiscuous mode [ 214.120223][ T6348] veth1_vlan: left promiscuous mode [ 214.130387][ T6348] veth0_vlan: left promiscuous mode [ 214.552476][ T6348] team0 (unregistering): Port device team_slave_1 removed [ 214.593052][ T6348] team0 (unregistering): Port device team_slave_0 removed [ 215.244853][ T5153] Bluetooth: hci0: command tx timeout [ 215.413636][ T9698] chnl_net:caif_netlink_parms(): no params data found [ 215.525808][ T9752] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.768983][ T9698] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.791089][ T9698] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.798403][ T9698] bridge_slave_0: entered allmulticast mode [ 215.807182][ T9698] bridge_slave_0: entered promiscuous mode [ 215.817284][ T9698] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.824628][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.840682][ T9698] bridge_slave_1: entered allmulticast mode [ 215.848565][ T9698] bridge_slave_1: entered promiscuous mode [ 216.120129][ T9776] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 216.195667][ T9770] batadv_slave_1: entered promiscuous mode [ 216.225074][ T9698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.265910][ T9698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.294349][ T9770] batadv_slave_1: left promiscuous mode [ 216.435916][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 216.462530][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'. [ 216.490007][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1018'. [ 216.504720][ T9789] netlink: 'syz.0.1019': attribute type 14 has an invalid length. [ 216.531953][ T9794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.713025][ T9792] dummy0: left promiscuous mode [ 216.868893][ T9792] batman_adv: batadv0: Interface deactivated: ÿÿÿÿÿÿ [ 216.917950][ T9792] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.927188][ T9792] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.938946][ T9792] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.948638][ T9792] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.995693][ T9792] vlan3: left allmulticast mode [ 217.005108][ T9792] veth1: left allmulticast mode [ 217.033632][ T9698] team0: Port device team_slave_0 added [ 217.088560][ T9698] team0: Port device team_slave_1 added [ 217.283651][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.292646][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.320090][ T5153] Bluetooth: hci0: command tx timeout [ 217.320228][ T9698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.358286][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1022'. [ 217.368246][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.375635][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.420734][ T9698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.566839][ T9698] hsr_slave_0: entered promiscuous mode [ 217.574452][ T9698] hsr_slave_1: entered promiscuous mode [ 217.580913][ T9698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.588522][ T9698] Cannot create hsr debugfs directory [ 218.823136][ T9698] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.880280][ T9698] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.944455][ T9698] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.995297][ T9698] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.231092][ T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 219.332788][ T9698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.390085][ T5153] Bluetooth: hci0: command tx timeout [ 219.422852][ T9698] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.484081][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.491316][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.532349][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.539634][ T7081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.063926][ T9877] syzkaller1: entered promiscuous mode [ 220.089728][ T9877] syzkaller1: entered allmulticast mode [ 220.597011][ T9698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.679027][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 220.727865][ T9912] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 48874 - 0 [ 220.783932][ T9912] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 48874 - 0 [ 220.829731][ T9912] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 48874 - 0 [ 220.844188][ T9912] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 48874 - 0 [ 220.909963][ T9912] geneve2: entered promiscuous mode [ 220.915239][ T9912] geneve2: entered allmulticast mode [ 221.470117][ T5153] Bluetooth: hci0: command tx timeout [ 221.679350][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1051'. [ 221.772849][ T9945] netlink: 'syz.2.1052': attribute type 10 has an invalid length. [ 221.805535][ T9945] !: left allmulticast mode [ 221.807028][ T9943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.811215][ T9945] bridge0: port 1(0!) entered disabled state [ 222.046738][ T9698] veth0_vlan: entered promiscuous mode [ 222.072082][ T9698] veth1_vlan: entered promiscuous mode [ 222.134829][ T9698] veth0_macvtap: entered promiscuous mode [ 222.147594][ T9698] veth1_macvtap: entered promiscuous mode [ 222.174796][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.199684][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.220160][ T9698] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.228964][ T9698] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.248019][ T9698] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.263506][ T9698] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.317326][ T9953] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 222.327396][ T24] IPVS: starting estimator thread 0... [ 222.449746][ T9954] IPVS: using max 26 ests per chain, 62400 per kthread [ 222.525496][ T9956] netlink: 'syz.0.1054': attribute type 4 has an invalid length. [ 222.827614][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.861279][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.968676][ T7081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.026897][ T7081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.057155][ T9980] Cannot find add_set index 0 as target [ 223.353113][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 223.434088][ T9987] xt_TCPMSS: Only works on TCP SYN packets [ 223.528603][ T9990] netlink: 'syz.1.1062': attribute type 10 has an invalid length. [ 223.547004][ T9990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1062'. [ 223.602306][ T7081] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.777597][ T7081] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.077935][ T7081] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.284360][ T7081] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.401946][ T7081] bridge_slave_1: left allmulticast mode [ 224.408459][ T7081] bridge_slave_1: left promiscuous mode [ 224.414701][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.425749][ T7081] bridge_slave_0: left allmulticast mode [ 224.432013][ T7081] bridge_slave_0: left promiscuous mode [ 224.437788][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.757568][T10011] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1068'. [ 224.823260][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'. [ 224.847685][T10014] netlink: 'syz.1.1068': attribute type 9 has an invalid length. [ 224.994464][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 225.131092][T10020] netlink: 'syz.0.1071': attribute type 10 has an invalid length. [ 225.149310][T10020] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1071'. [ 225.174174][ T7081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.186969][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.194836][ T7081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.206221][ T7081] bond0 (unregistering): Released all slaves [ 225.212973][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.222557][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.234096][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.243135][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.294311][T10014] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 225.320879][T10014] macvlan2: entered allmulticast mode [ 225.340792][T10014] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 225.463813][T10020] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 226.138107][ T7081] hsr_slave_0: left promiscuous mode [ 226.178093][ T7081] hsr_slave_1: left promiscuous mode [ 226.203129][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.226842][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.243465][T10059] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1081'. [ 226.259394][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.274762][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.383463][ T7081] veth1_macvtap: left promiscuous mode [ 226.400399][ T7081] veth0_macvtap: left promiscuous mode [ 226.418920][ T7081] veth1_vlan: left promiscuous mode [ 226.442468][ T7081] veth0_vlan: left promiscuous mode [ 227.253858][ T7081] team0 (unregistering): Port device team_slave_1 removed [ 227.292057][ T7081] team0 (unregistering): Port device team_slave_0 removed [ 227.312007][ T5153] Bluetooth: hci0: command tx timeout [ 227.728628][T10072] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1084'. [ 227.775771][T10072] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 227.936928][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1086'. [ 228.063182][T10094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.341009][T10107] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1092'. [ 228.493647][T10021] chnl_net:caif_netlink_parms(): no params data found [ 228.666465][T10119] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.669759][T10121] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 228.686959][T10121] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 229.256900][T10142] netlink: 'syz.3.1100': attribute type 10 has an invalid length. [ 229.270840][T10142] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1100'. [ 229.285838][T10142] dummy0: entered promiscuous mode [ 229.306194][T10142] bridge0: port 1(dummy0) entered blocking state [ 229.317285][T10142] bridge0: port 1(dummy0) entered disabled state [ 229.325604][T10142] dummy0: entered allmulticast mode [ 229.337399][T10021] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.344950][T10021] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.355474][T10021] bridge_slave_0: entered allmulticast mode [ 229.364832][T10021] bridge_slave_0: entered promiscuous mode [ 229.389697][ T5153] Bluetooth: hci0: command tx timeout [ 229.415305][T10149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1101'. [ 229.438639][T10149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1101'. [ 229.502909][T10021] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.541823][T10021] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.560613][T10021] bridge_slave_1: entered allmulticast mode [ 229.572540][T10021] bridge_slave_1: entered promiscuous mode [ 229.749070][T10153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1102'. [ 229.765382][T10021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.840661][T10021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.987583][T10021] team0: Port device team_slave_0 added [ 230.055695][T10021] team0: Port device team_slave_1 added [ 230.097960][T10163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1106'. [ 230.114623][ T7081] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 230.123788][ T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 230.139464][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 230.276455][T10021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.311696][T10021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.355373][T10021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.397162][T10021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.440532][T10021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.496121][T10021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.777830][T10021] hsr_slave_0: entered promiscuous mode [ 230.790938][T10021] hsr_slave_1: entered promiscuous mode [ 230.810978][T10021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.835480][T10021] Cannot create hsr debugfs directory [ 230.838127][T10192] netlink: 'syz.1.1112': attribute type 10 has an invalid length. [ 230.880064][T10192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1112'. [ 231.474174][ T5153] Bluetooth: hci0: command tx timeout [ 231.573311][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1115'. [ 231.970240][T10232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1121'. [ 231.995436][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 232.658806][T10261] vlan4: entered allmulticast mode [ 232.677818][T10261] bridge3: entered allmulticast mode [ 233.517277][T10289] syz_tun: entered allmulticast mode [ 233.550163][ T5153] Bluetooth: hci0: command tx timeout [ 233.655297][T10288] syz_tun: left allmulticast mode [ 233.675295][T10021] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 233.719316][T10021] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 233.737848][T10021] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 233.800005][T10021] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 234.307436][T10021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.339701][ T5153] block nbd3: Receive control failed (result -32) [ 234.356216][T10021] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.374123][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.381324][ T6348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.434082][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.441302][ T6348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.461148][T10321] __nla_validate_parse: 69 callbacks suppressed [ 234.461169][T10321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1140'. [ 234.554603][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1140'. [ 234.616871][T10321] netlink: 'syz.1.1140': attribute type 10 has an invalid length. [ 234.663683][T10321] bridge0: port 2(team0) entered blocking state [ 234.696583][T10321] bridge0: port 2(team0) entered disabled state [ 234.725637][T10321] team0: entered allmulticast mode [ 234.739031][T10332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1142'. [ 234.769452][T10321] team0: entered promiscuous mode [ 235.052441][T10348] netlink: 'syz.1.1144': attribute type 13 has an invalid length. [ 235.118617][T10348] gretap0: refused to change device tx_queue_len [ 235.145667][T10348] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 235.245425][T10021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.416091][T10361] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1149'. [ 235.678537][T10370] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1153'. [ 235.726468][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'. [ 235.753150][T10368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1152'. [ 235.832646][T10373] netlink: 'syz.3.1154': attribute type 10 has an invalid length. [ 235.858138][T10373] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1154'. [ 235.871160][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 235.943902][T10375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1155'. [ 236.133487][T10384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.134010][T10385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1159'. [ 236.152411][T10379] xt_ecn: cannot match TCP bits for non-tcp packets [ 236.177822][T10379] syz_tun: entered promiscuous mode [ 236.203459][T10379] syz_tun: left promiscuous mode [ 236.548782][T10021] veth0_vlan: entered promiscuous mode [ 236.622204][T10021] veth1_vlan: entered promiscuous mode [ 236.721894][T10410] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 236.755786][T10407] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.115316][T10021] veth0_macvtap: entered promiscuous mode [ 237.159903][T10021] veth1_macvtap: entered promiscuous mode [ 237.188965][T10021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.252367][T10021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.301784][T10021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.339389][T10021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.364464][T10021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.373816][T10021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.010624][ T6348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.018493][ T6348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.165107][ T6348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.206139][ T6348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.967705][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.341543][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.428080][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.499204][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.694331][ T36] bridge_slave_1: left allmulticast mode [ 239.703957][ T36] bridge_slave_1: left promiscuous mode [ 239.718122][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.735807][ T36] bridge_slave_0: left allmulticast mode [ 239.741870][ T36] bridge_slave_0: left promiscuous mode [ 239.747678][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.088946][T10525] netlink: 'syz.3.1193': attribute type 2 has an invalid length. [ 240.199498][T10532] netlink: 'syz.0.1190': attribute type 3 has an invalid length. [ 240.479465][T10544] netlink: 'syz.2.1197': attribute type 10 has an invalid length. [ 240.489245][T10543] __nla_validate_parse: 6 callbacks suppressed [ 240.489265][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1196'. [ 240.509310][T10544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1197'. [ 240.703235][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.736013][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.747733][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.769784][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.781674][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.792761][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.801182][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.851610][ T36] bond0 (unregistering): Released all slaves [ 240.930544][T10544] bridge0: port 1(0!) entered blocking state [ 240.937632][T10544] bridge0: port 1(0!) entered disabled state [ 240.990726][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 240.996278][T10544] !: entered allmulticast mode [ 241.021847][T10544] bridge0: port 1(0!) entered blocking state [ 241.028263][T10544] bridge0: port 1(0!) entered forwarding state [ 241.934942][ T36] hsr_slave_0: left promiscuous mode [ 241.944137][ T36] hsr_slave_1: left promiscuous mode [ 241.985563][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.033731][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.057022][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.072488][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.115660][ T36] veth1_macvtap: left promiscuous mode [ 242.121371][ T36] veth0_macvtap: left promiscuous mode [ 242.128166][ T36] veth1_vlan: left promiscuous mode [ 242.141192][ T36] veth0_vlan: left promiscuous mode [ 242.835762][ T5153] Bluetooth: hci0: command tx timeout [ 243.108588][ T36] team0 (unregistering): Port device team_slave_1 removed [ 243.164966][ T36] team0 (unregistering): Port device team_slave_0 removed [ 244.599937][T10555] chnl_net:caif_netlink_parms(): no params data found [ 244.915158][ T5153] Bluetooth: hci0: command tx timeout [ 245.509917][T10555] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.528921][T10555] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.558609][T10697] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 245.571341][T10555] bridge_slave_0: entered allmulticast mode [ 245.602849][T10555] bridge_slave_0: entered promiscuous mode [ 245.648273][T10555] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.690335][T10555] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.705374][T10555] bridge_slave_1: entered allmulticast mode [ 245.726969][T10555] bridge_slave_1: entered promiscuous mode [ 245.975679][T10555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.012474][T10555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.252663][T10720] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1225'. [ 246.276122][T10555] team0: Port device team_slave_0 added [ 246.323265][T10555] team0: Port device team_slave_1 added [ 246.462543][T10555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.479695][T10555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.554065][T10555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.624734][T10555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.643136][T10555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.738929][T10555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.752672][ T6348] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 246.949462][T10742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1230'. [ 246.990426][ T5153] Bluetooth: hci0: command tx timeout [ 247.006328][T10744] macsec1: entered allmulticast mode [ 247.012395][T10744] hsr0: entered allmulticast mode [ 247.018078][T10744] hsr_slave_0: entered allmulticast mode [ 247.033637][T10744] hsr0: left allmulticast mode [ 247.046364][T10744] hsr_slave_0: left allmulticast mode [ 247.104271][T10555] hsr_slave_0: entered promiscuous mode [ 247.126693][T10555] hsr_slave_1: entered promiscuous mode [ 247.146682][T10555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.169471][T10555] Cannot create hsr debugfs directory [ 247.404774][T10757] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1233'. [ 247.785779][T10769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1235'. [ 248.053199][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 248.685775][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 248.863521][T10555] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 248.940319][T10555] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 248.975590][T10555] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.006586][T10555] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 249.040791][T10809] netlink: 'syz.0.1248': attribute type 10 has an invalid length. [ 249.051113][T10809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1248'. [ 249.070920][ T5153] Bluetooth: hci0: command tx timeout [ 249.150760][T10809] dummy0: entered promiscuous mode [ 249.174802][T10809] bridge0: port 1(dummy0) entered blocking state [ 249.216681][T10809] bridge0: port 1(dummy0) entered disabled state [ 249.244281][T10809] dummy0: entered allmulticast mode [ 249.293420][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1249'. [ 249.373322][T10823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1250'. [ 249.725520][T10839] netlink: 'syz.0.1254': attribute type 39 has an invalid length. [ 249.811721][T10808] netlink: 1040 bytes leftover after parsing attributes in process `syz.1.1246'. [ 249.821433][T10808] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 249.939488][T10555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.033341][T10555] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.072331][ T4471] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.079618][ T4471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.345055][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.352288][ T6348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.418511][T10861] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.420861][T10555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.595724][T10900] Illegal XDP return value 778302004 on prog (id 421) dev N/A, expect packet loss! [ 251.726747][T10909] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 251.784847][T10912] __nla_validate_parse: 2 callbacks suppressed [ 251.784865][T10912] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1270'. [ 251.943273][T10909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.011255][T10912] batadv0: entered promiscuous mode [ 252.016539][T10912] batadv0: entered allmulticast mode [ 252.155903][T10917] bond1: (slave gretap1): making interface the new active one [ 252.186043][T10917] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 252.203969][T10919] netlink: 'syz.3.1271': attribute type 5 has an invalid length. [ 252.510850][ T7078] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 252.685258][T10899] bond1 (unregistering): (slave gretap1): Releasing active interface [ 252.715158][T10899] bond1 (unregistering): Released all slaves [ 253.098888][T10958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1281'. [ 253.189882][T10555] veth0_vlan: entered promiscuous mode [ 253.293699][T10555] veth1_vlan: entered promiscuous mode [ 253.413658][T10555] veth0_macvtap: entered promiscuous mode [ 253.447105][T10555] veth1_macvtap: entered promiscuous mode [ 253.523573][T10555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.581559][T10555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.623153][T10555] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.676272][T10555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.710626][T10555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.729751][T10555] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.876914][T10988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1289'. [ 254.093454][ T4471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.118952][ T4471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.243702][ T4471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.280673][ T4471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.311955][T11008] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1295'. [ 254.623595][T11017] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.632608][T11017] bond0: (slave bond5): Enslaving as an active interface with an up link [ 254.791728][T11032] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1300'. [ 254.892817][T11035] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1300'. [ 254.967069][T11032] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20000 [ 255.195280][ T7078] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.416092][ T7078] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.516698][ T7078] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.715085][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.804927][ T7078] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.919344][ T7078] bridge_slave_1: left allmulticast mode [ 255.926186][ T7078] bridge_slave_1: left promiscuous mode [ 255.933999][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.944122][ T7078] bridge_slave_0: left allmulticast mode [ 255.951046][ T7078] bridge_slave_0: left promiscuous mode [ 255.956765][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.312944][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1308'. [ 256.332257][ T7078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.344035][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1305'. [ 256.344400][ T7078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.393974][ T7078] bond0 (unregistering): Released all slaves [ 256.517746][T11067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.645721][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1309'. [ 257.107886][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.119917][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.128658][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.137103][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.144985][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.579754][ T7078] hsr_slave_0: left promiscuous mode [ 257.615472][ T7078] hsr_slave_1: left promiscuous mode [ 257.628973][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1315'. [ 257.630367][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 257.646201][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.657776][ T7078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.667817][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.681728][ T7078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.741466][ T7078] veth1_macvtap: left promiscuous mode [ 257.747068][ T7078] veth0_macvtap: left promiscuous mode [ 257.779919][ T7078] veth1_vlan: left promiscuous mode [ 257.799033][ T7078] veth0_vlan: left promiscuous mode [ 258.265435][ T7078] team0 (unregistering): Port device team_slave_1 removed [ 258.306451][ T7078] team0 (unregistering): Port device team_slave_0 removed [ 258.662309][T11111] vlan4: entered promiscuous mode [ 258.667495][T11111] vlan4: entered allmulticast mode [ 258.675167][T11111] hsr_slave_1: entered allmulticast mode [ 258.957879][T11132] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 259.120261][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 259.158965][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 259.176264][T11142] tipc: Can't bind to reserved service type 1 [ 259.208944][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 259.219422][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 259.230984][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 259.232092][ T51] Bluetooth: hci0: command tx timeout [ 259.248921][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 259.282230][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 259.310906][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 259.405003][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 259.672900][T11159] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 260.306739][T11182] netlink: 'syz.3.1330': attribute type 10 has an invalid length. [ 260.477071][T11088] chnl_net:caif_netlink_parms(): no params data found [ 260.495583][T11182] bridge0: port 1(dummy0) entered blocking state [ 260.502173][T11182] bridge0: port 1(dummy0) entered forwarding state [ 260.516364][T11182] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 261.187587][T11088] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.204903][T11088] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.219843][T11088] bridge_slave_0: entered allmulticast mode [ 261.236259][T11088] bridge_slave_0: entered promiscuous mode [ 261.271892][T11088] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.302672][T11088] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.322082][ T51] Bluetooth: hci0: command 0x041b tx timeout [ 261.335841][T11088] bridge_slave_1: entered allmulticast mode [ 261.349424][T11088] bridge_slave_1: entered promiscuous mode [ 261.478879][ T5153] block nbd4: Receive control failed (result -32) [ 261.687298][T11088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.744916][T11088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.858758][T11088] team0: Port device team_slave_0 added [ 261.926456][T11088] team0: Port device team_slave_1 added [ 262.156961][T11252] FAULT_INJECTION: forcing a failure. [ 262.156961][T11252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.173275][T11252] CPU: 1 UID: 0 PID: 11252 Comm: syz.3.1347 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 262.173307][T11252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.173320][T11252] Call Trace: [ 262.173330][T11252] [ 262.173339][T11252] dump_stack_lvl+0x189/0x250 [ 262.173379][T11252] ? __pfx____ratelimit+0x10/0x10 [ 262.173412][T11252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.173446][T11252] ? __pfx__printk+0x10/0x10 [ 262.173470][T11252] ? __might_fault+0xb0/0x130 [ 262.173504][T11252] should_fail_ex+0x414/0x560 [ 262.173538][T11252] _copy_from_iter+0x1db/0x16f0 [ 262.173574][T11252] ? rcu_is_watching+0x15/0xb0 [ 262.173627][T11252] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 262.173649][T11252] ? __pfx__copy_from_iter+0x10/0x10 [ 262.173681][T11252] ? __build_skb_around+0x257/0x3e0 [ 262.173716][T11252] ? netlink_sendmsg+0x642/0xb30 [ 262.173739][T11252] ? skb_put+0x11b/0x210 [ 262.173768][T11252] netlink_sendmsg+0x6b2/0xb30 [ 262.173802][T11252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.173830][T11252] ? aa_sock_msg_perm+0x94/0x160 [ 262.173876][T11252] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.173904][T11252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.173931][T11252] __sock_sendmsg+0x219/0x270 [ 262.173968][T11252] ____sys_sendmsg+0x505/0x830 [ 262.174001][T11252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.174040][T11252] ? import_iovec+0x74/0xa0 [ 262.174065][T11252] ___sys_sendmsg+0x21f/0x2a0 [ 262.174096][T11252] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.174165][T11252] ? __fget_files+0x2a/0x420 [ 262.174188][T11252] ? __fget_files+0x3a0/0x420 [ 262.174224][T11252] __x64_sys_sendmsg+0x19b/0x260 [ 262.174255][T11252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.174294][T11252] ? __pfx_ksys_write+0x10/0x10 [ 262.174311][T11252] ? rcu_is_watching+0x15/0xb0 [ 262.174349][T11252] ? do_syscall_64+0xbe/0x3b0 [ 262.174374][T11252] do_syscall_64+0xfa/0x3b0 [ 262.174392][T11252] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.174423][T11252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.174444][T11252] ? clear_bhb_loop+0x60/0xb0 [ 262.174471][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.174492][T11252] RIP: 0033:0x7f10a2d8e929 [ 262.174511][T11252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.174530][T11252] RSP: 002b:00007f10a3c34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.174554][T11252] RAX: ffffffffffffffda RBX: 00007f10a2fb5fa0 RCX: 00007f10a2d8e929 [ 262.174570][T11252] RDX: 0000000000004000 RSI: 0000200000000300 RDI: 0000000000000003 [ 262.174584][T11252] RBP: 00007f10a3c34090 R08: 0000000000000000 R09: 0000000000000000 [ 262.174597][T11252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.174609][T11252] R13: 0000000000000000 R14: 00007f10a2fb5fa0 R15: 00007fffbe801658 [ 262.174643][T11252] [ 262.528875][T11257] syz_tun: entered allmulticast mode [ 262.546872][T11088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.568211][T11088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.646693][T11088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.664543][T11255] syz_tun: left allmulticast mode [ 262.670832][ T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 262.686515][T11088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.693835][T11088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.720399][T11088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.941572][T11088] hsr_slave_0: entered promiscuous mode [ 262.956581][T11088] hsr_slave_1: entered promiscuous mode [ 262.974284][T11088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.999666][T11088] Cannot create hsr debugfs directory [ 263.238807][T11286] Cannot find set identified by id 2 to match [ 263.389700][ T5153] Bluetooth: hci0: command 0x041b tx timeout [ 264.041436][T11300] __nla_validate_parse: 41 callbacks suppressed [ 264.041456][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'. [ 264.093989][T11300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.106406][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1363'. [ 264.116250][T11309] smc: net device bond0 applied user defined pnetid SYZ [ 264.137135][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1364'. [ 264.340570][ T5969] IPVS: starting estimator thread 0... [ 264.358998][T11323] netlink: 'syz.2.1366': attribute type 1 has an invalid length. [ 264.489782][T11325] IPVS: using max 26 ests per chain, 62400 per kthread [ 264.693630][T11331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1368'. [ 265.055633][T11088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.120937][T11088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.157717][T11345] macsec1: entered promiscuous mode [ 265.166597][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1374'. [ 265.182299][T11345] macsec1: entered allmulticast mode [ 265.197139][T11345] veth1_macvtap: entered allmulticast mode [ 265.214823][T11345] veth1_macvtap: left allmulticast mode [ 265.313511][T11088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.351001][T11088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.469886][ T5153] Bluetooth: hci0: command 0x041b tx timeout [ 265.690864][T11088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.760339][T11377] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1381'. [ 265.772538][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'. [ 265.780656][T11382] netlink: 'syz.3.1382': attribute type 10 has an invalid length. [ 265.789460][T11382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1382'. [ 265.888786][T11385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1383'. [ 265.946761][T11088] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.057432][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.064704][ T6348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.171451][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.178684][ T7081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.414297][T11400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1387'. [ 266.939824][T11419] netlink: 'syz.2.1393': attribute type 24 has an invalid length. [ 267.115065][T11088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.549754][ T5153] Bluetooth: hci0: command 0x041b tx timeout [ 267.871102][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 268.067394][T11465] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 268.242500][T11472] !: left allmulticast mode [ 268.255681][T11472] bridge0: port 1(0!) entered disabled state [ 268.359334][T11472] bond0: (slave bond4): Releasing backup interface [ 268.387106][T11472] bond0: (slave bond4): the permanent HWaddr of slave - a6:e3:8b:25:bf:d2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 268.449025][T11472] bond0: (slave bond5): Releasing backup interface [ 268.595082][T11088] veth0_vlan: entered promiscuous mode [ 268.711075][T11088] veth1_vlan: entered promiscuous mode [ 268.838102][T11088] veth0_macvtap: entered promiscuous mode [ 268.933936][T11088] veth1_macvtap: entered promiscuous mode [ 269.101359][T11500] __nla_validate_parse: 8 callbacks suppressed [ 269.101379][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'. [ 269.425599][T11088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.467073][T11088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.602456][T11088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.627272][T11088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.655663][T11088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.665262][T11088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.022047][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.065676][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.184456][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.213323][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.354204][T11545] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.880274][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1435'. [ 270.930367][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'. [ 271.344207][ T7078] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.404640][T11580] vlan5: entered promiscuous mode [ 271.528910][ T7078] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.690917][ T7078] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.902079][ T7078] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.068024][ T7078] bridge_slave_1: left allmulticast mode [ 272.076598][ T7078] bridge_slave_1: left promiscuous mode [ 272.083500][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.096048][ T7078] bridge_slave_0: left allmulticast mode [ 272.102887][ T7078] bridge_slave_0: left promiscuous mode [ 272.108654][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.917196][ T7078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.958435][ T7078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.996052][ T7078] bond0 (unregistering): Released all slaves [ 273.088067][T11625] 8021q: VLANs not supported on gre0 [ 273.305992][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.317150][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.327767][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.338978][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.349408][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.474094][T11635] pim6reg1: entered promiscuous mode [ 273.479677][T11635] pim6reg1: entered allmulticast mode [ 273.634606][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 273.733941][T11652] sock: sock_timestamping_bind_phc: sock not bind to device [ 273.856615][T11659] sock: sock_timestamping_bind_phc: sock not bind to device [ 273.901981][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1449'. [ 273.987310][ T7078] hsr_slave_0: left promiscuous mode [ 273.995604][ T7078] hsr_slave_1: left promiscuous mode [ 274.004710][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.012346][ T7078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.022803][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.031437][ T7078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.058408][ T7078] veth1_macvtap: left promiscuous mode [ 274.064512][ T7078] veth0_macvtap: left promiscuous mode [ 274.071091][ T7078] veth1_vlan: left promiscuous mode [ 274.077582][ T7078] veth0_vlan: left promiscuous mode [ 274.529775][ T7078] team0 (unregistering): Port device team_slave_1 removed [ 274.566049][ T7078] team0 (unregistering): Port device team_slave_0 removed [ 274.822310][T11674] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1453'. [ 275.075823][T11673] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1453'. [ 275.391255][ T5153] Bluetooth: hci0: command tx timeout [ 275.561489][T11692] team0: Refused to change device type [ 275.642273][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1458'. [ 275.665696][T11696] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.940904][T11709] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 275.987322][T11639] chnl_net:caif_netlink_parms(): no params data found [ 276.201606][T11716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'. [ 276.233956][T11716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'. [ 276.255824][T11717] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1465'. [ 276.366428][T11639] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.383307][T11639] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.405458][T11639] bridge_slave_0: entered allmulticast mode [ 276.425556][T11639] bridge_slave_0: entered promiscuous mode [ 276.447724][T11639] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.467719][T11639] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.475065][T11639] bridge_slave_1: entered allmulticast mode [ 276.483074][T11639] bridge_slave_1: entered promiscuous mode [ 276.557834][T11726] tipc: New replicast peer: 255.255.255.255 [ 276.573787][T11726] tipc: Enabled bearer , priority 10 [ 276.627065][T11729] vxcan5: entered allmulticast mode [ 276.665379][T11639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.702056][T11639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.874548][T11639] team0: Port device team_slave_0 added [ 276.916222][T11639] team0: Port device team_slave_1 added [ 276.976475][T11737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1471'. [ 277.007046][T11737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.035122][T11639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.074393][T11639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.133022][T11639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.224907][T11639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.261257][T11639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.327684][T11639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.475157][ T5153] Bluetooth: hci0: command tx timeout [ 277.636266][T11639] hsr_slave_0: entered promiscuous mode [ 277.665512][T11639] hsr_slave_1: entered promiscuous mode [ 277.687429][T11639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.716648][T11639] Cannot create hsr debugfs directory [ 277.956274][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 278.054694][T11775] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1486'. [ 278.156218][T11780] ip6t_srh: unknown srh invflags 4449 [ 278.679087][T11795] FAULT_INJECTION: forcing a failure. [ 278.679087][T11795] name failslab, interval 1, probability 0, space 0, times 0 [ 278.712285][T11795] CPU: 0 UID: 0 PID: 11795 Comm: syz.3.1495 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 278.712315][T11795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.712327][T11795] Call Trace: [ 278.712335][T11795] [ 278.712344][T11795] dump_stack_lvl+0x189/0x250 [ 278.712381][T11795] ? __pfx____ratelimit+0x10/0x10 [ 278.712428][T11795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.712480][T11795] ? __pfx__printk+0x10/0x10 [ 278.712507][T11795] ? __pfx___might_resched+0x10/0x10 [ 278.712541][T11795] ? fs_reclaim_acquire+0x7d/0x100 [ 278.712574][T11795] should_fail_ex+0x414/0x560 [ 278.712609][T11795] should_failslab+0xa8/0x100 [ 278.712635][T11795] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 278.712657][T11795] ? __local_bh_enable_ip+0x12d/0x1c0 [ 278.712688][T11795] ? __alloc_skb+0x112/0x2d0 [ 278.712718][T11795] __alloc_skb+0x112/0x2d0 [ 278.712747][T11795] batadv_netlink_set_mesh+0xc90/0x1210 [ 278.712783][T11795] genl_family_rcv_msg_doit+0x215/0x300 [ 278.712826][T11795] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 278.712875][T11795] ? bpf_lsm_capable+0x9/0x20 [ 278.712895][T11795] ? security_capable+0x7e/0x2e0 [ 278.712931][T11795] genl_rcv_msg+0x60e/0x790 [ 278.712970][T11795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.713000][T11795] ? __pfx_batadv_pre_doit+0x10/0x10 [ 278.713024][T11795] ? __pfx_batadv_netlink_set_mesh+0x10/0x10 [ 278.713050][T11795] ? __pfx_batadv_post_doit+0x10/0x10 [ 278.713094][T11795] netlink_rcv_skb+0x205/0x470 [ 278.713122][T11795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.713155][T11795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.713219][T11795] ? down_read+0x1ad/0x2e0 [ 278.713246][T11795] genl_rcv+0x28/0x40 [ 278.713275][T11795] netlink_unicast+0x758/0x8d0 [ 278.713312][T11795] netlink_sendmsg+0x805/0xb30 [ 278.713351][T11795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.713381][T11795] ? aa_sock_msg_perm+0x94/0x160 [ 278.713412][T11795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.713439][T11795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.713467][T11795] __sock_sendmsg+0x219/0x270 [ 278.713505][T11795] ____sys_sendmsg+0x505/0x830 [ 278.713540][T11795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.713581][T11795] ? import_iovec+0x74/0xa0 [ 278.713607][T11795] ___sys_sendmsg+0x21f/0x2a0 [ 278.713638][T11795] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.713711][T11795] ? __fget_files+0x2a/0x420 [ 278.713734][T11795] ? __fget_files+0x3a0/0x420 [ 278.713782][T11795] __x64_sys_sendmsg+0x19b/0x260 [ 278.713813][T11795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.713852][T11795] ? __pfx_ksys_write+0x10/0x10 [ 278.713869][T11795] ? rcu_is_watching+0x15/0xb0 [ 278.713907][T11795] ? do_syscall_64+0xbe/0x3b0 [ 278.713942][T11795] do_syscall_64+0xfa/0x3b0 [ 278.713959][T11795] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.713987][T11795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.714007][T11795] ? clear_bhb_loop+0x60/0xb0 [ 278.714032][T11795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.714051][T11795] RIP: 0033:0x7f10a2d8e929 [ 278.714069][T11795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.714085][T11795] RSP: 002b:00007f10a3c34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.714106][T11795] RAX: ffffffffffffffda RBX: 00007f10a2fb5fa0 RCX: 00007f10a2d8e929 [ 278.714120][T11795] RDX: 0000000000004000 RSI: 0000200000000300 RDI: 0000000000000003 [ 278.714133][T11795] RBP: 00007f10a3c34090 R08: 0000000000000000 R09: 0000000000000000 [ 278.714145][T11795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.714156][T11795] R13: 0000000000000000 R14: 00007f10a2fb5fa0 R15: 00007fffbe801658 [ 278.714188][T11795] [ 279.091389][T11796] netlink: 'syz.2.1494': attribute type 11 has an invalid length. [ 279.392020][ T7081] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 279.549651][ T5153] Bluetooth: hci0: command tx timeout [ 280.816645][T11805] hsr0: entered promiscuous mode [ 280.917693][T11816] syz_tun: entered allmulticast mode [ 280.926982][T11815] syz_tun: left allmulticast mode [ 281.018849][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1505'. [ 281.052801][T11823] netlink: 'syz.1.1505': attribute type 4 has an invalid length. [ 281.077315][T11823] netlink: 'syz.1.1505': attribute type 4 has an invalid length. [ 281.145645][T11829] netlink: 'syz.3.1507': attribute type 10 has an invalid length. [ 281.156844][T11829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1507'. [ 281.322787][T11836] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 281.465183][T11639] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 281.482941][T11639] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 281.525208][T11639] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 281.537006][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1514'. [ 281.555203][T11639] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 281.566039][T11846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.632330][ T5153] Bluetooth: hci0: command tx timeout [ 282.097168][T11876] macsec1: entered allmulticast mode [ 282.105632][T11876] hsr0: entered allmulticast mode [ 282.118842][T11876] hsr_slave_0: entered allmulticast mode [ 282.162295][T11876] hsr0: left allmulticast mode [ 282.167125][T11876] hsr_slave_0: left allmulticast mode [ 282.318162][T11639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.322550][T11881] FAULT_INJECTION: forcing a failure. [ 282.322550][T11881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 282.353986][T11639] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.363639][T11881] CPU: 0 UID: 0 PID: 11881 Comm: syz.0.1523 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 282.363679][T11881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.363690][T11881] Call Trace: [ 282.363697][T11881] [ 282.363705][T11881] dump_stack_lvl+0x189/0x250 [ 282.363739][T11881] ? __pfx____ratelimit+0x10/0x10 [ 282.363767][T11881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.363795][T11881] ? __pfx__printk+0x10/0x10 [ 282.363817][T11881] ? fs_reclaim_acquire+0x7d/0x100 [ 282.363847][T11881] should_fail_ex+0x414/0x560 [ 282.363875][T11881] prepare_alloc_pages+0x213/0x610 [ 282.363904][T11881] __alloc_frozen_pages_noprof+0x123/0x370 [ 282.363931][T11881] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 282.363963][T11881] ? __pfx_css_rstat_updated+0x10/0x10 [ 282.363994][T11881] ? policy_nodemask+0x27c/0x720 [ 282.364018][T11881] alloc_pages_mpol+0x232/0x4a0 [ 282.364043][T11881] folio_alloc_mpol_noprof+0x39/0x70 [ 282.364065][T11881] shmem_alloc_and_add_folio+0x447/0xf60 [ 282.364099][T11881] ? filemap_get_entry+0xad/0x2f0 [ 282.364119][T11881] ? filemap_get_entry+0xad/0x2f0 [ 282.364138][T11881] ? filemap_get_entry+0xad/0x2f0 [ 282.364169][T11881] ? shmem_huge_global_enabled+0x174/0x3a0 [ 282.364195][T11881] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 282.364228][T11881] ? shmem_allowable_huge_orders+0x414/0x420 [ 282.364261][T11881] shmem_get_folio_gfp+0x59d/0x1660 [ 282.364324][T11881] shmem_fault+0x179/0x390 [ 282.364352][T11881] __do_fault+0x138/0x390 [ 282.364377][T11881] __handle_mm_fault+0x198b/0x5620 [ 282.364427][T11881] ? __pfx___handle_mm_fault+0x10/0x10 [ 282.364472][T11881] ? follow_page_pte+0x8d6/0x14b0 [ 282.364512][T11881] handle_mm_fault+0x40a/0x8e0 [ 282.364552][T11881] __get_user_pages+0x1af4/0x30b0 [ 282.364615][T11881] ? __pfx___get_user_pages+0x10/0x10 [ 282.364641][T11881] ? __gup_longterm_locked+0x1005/0x15b0 [ 282.364670][T11881] ? down_read_killable+0x1d1/0x350 [ 282.364696][T11881] __gup_longterm_locked+0x118a/0x15b0 [ 282.364737][T11881] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 282.364767][T11881] ? gup_fast_fallback+0x1afc/0x2260 [ 282.364799][T11881] gup_fast_fallback+0x1cd4/0x2260 [ 282.364828][T11881] ? __lock_acquire+0xab9/0xd20 [ 282.364866][T11881] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 282.364925][T11881] ? __pfx_gup_fast_fallback+0x10/0x10 [ 282.364974][T11881] ? rcu_is_watching+0x15/0xb0 [ 282.365008][T11881] ? rcu_is_watching+0x15/0xb0 [ 282.365038][T11881] ? is_valid_gup_args+0x11f/0x200 [ 282.365072][T11881] ? pin_user_pages_fast+0x4d/0xb0 [ 282.365104][T11881] rds_info_getsockopt+0x1fb/0x470 [ 282.365133][T11881] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 282.365156][T11881] ? __might_fault+0xb0/0x130 [ 282.365187][T11881] ? rds_getsockopt+0x2d4/0x500 [ 282.365219][T11881] do_sock_getsockopt+0x35d/0x650 [ 282.365249][T11881] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 282.365273][T11881] ? __pfx_do_syscall_64+0x10/0x10 [ 282.365292][T11881] ? __fget_files+0x3a0/0x420 [ 282.365314][T11881] ? __fget_files+0x2a/0x420 [ 282.365344][T11881] __x64_sys_getsockopt+0x1a5/0x250 [ 282.365369][T11881] ? __pfx_do_syscall_64+0x10/0x10 [ 282.365390][T11881] ? __pfx_do_syscall_64+0x10/0x10 [ 282.365414][T11881] do_syscall_64+0xfa/0x3b0 [ 282.365432][T11881] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.365460][T11881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.365481][T11881] ? clear_bhb_loop+0x60/0xb0 [ 282.365507][T11881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.365527][T11881] RIP: 0033:0x7f1e4998e929 [ 282.365545][T11881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.365564][T11881] RSP: 002b:00007f1e4a7e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 282.365585][T11881] RAX: ffffffffffffffda RBX: 00007f1e49bb5fa0 RCX: 00007f1e4998e929 [ 282.365601][T11881] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 282.365614][T11881] RBP: 00007f1e4a7e1090 R08: 0000200000000000 R09: 0000000000000000 [ 282.365628][T11881] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 282.365641][T11881] R13: 0000000000000000 R14: 00007f1e49bb5fa0 R15: 00007fff6f1e6988 [ 282.365674][T11881] [ 282.811409][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.818579][ T7081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.870596][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.877813][ T7081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.997342][T11639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.016819][T11888] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1526'. [ 283.124569][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1526'. [ 283.370535][T11902] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 283.499027][T11910] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 283.545372][T11913] ipt_REJECT: ECHOREPLY no longer supported. [ 283.564842][T11917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1533'. [ 283.754943][T11639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.520252][ T6348] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 285.864621][T11639] veth0_vlan: entered promiscuous mode [ 285.894075][T11639] veth1_vlan: entered promiscuous mode [ 285.949347][T11961] netlink: 'syz.2.1546': attribute type 1 has an invalid length. [ 285.966789][T11639] veth0_macvtap: entered promiscuous mode [ 285.990229][T11639] veth1_macvtap: entered promiscuous mode [ 286.052759][T11639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.098113][T11639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.123730][T11639] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.139228][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'. [ 286.144681][T11639] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.179760][T11639] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.188486][T11639] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.494521][ T4471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.516727][ T4471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.557813][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.594123][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.663036][T11981] xt_bpf: check failed: parse error [ 286.791837][T11979] erspan0: left promiscuous mode [ 286.800791][T11986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1555'. [ 286.804383][T11989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1556'. [ 286.857725][T11979] bond0: (slave bridge0): Releasing backup interface [ 286.866560][T11979] bridge0: port 1(dummy0) entered disabled state [ 286.877283][T11979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.885839][T11979] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.893662][T11979] dummy0: left allmulticast mode [ 286.898716][T11979] dummy0: left promiscuous mode [ 286.905529][T11979] bridge0: port 1(dummy0) entered disabled state [ 286.921504][T11979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.939244][T11982] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 287.186868][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1557'. [ 287.358845][ T7078] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.578303][ T7078] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.637663][ T7078] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.805244][ T7078] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.974779][ T7078] bridge_slave_1: left allmulticast mode [ 287.981003][ T7078] bridge_slave_1: left promiscuous mode [ 287.986704][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.996050][ T7078] bridge_slave_0: left allmulticast mode [ 288.003200][ T7078] bridge_slave_0: left promiscuous mode [ 288.009034][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.315801][ T7078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.327079][ T7078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.337167][ T7078] bond0 (unregistering): Released all slaves [ 288.552696][T12016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1563'. [ 288.757691][ T7078] hsr_slave_0: left promiscuous mode [ 288.783416][ T7078] hsr_slave_1: left promiscuous mode [ 288.804871][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.828164][ T7078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.859284][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.891863][ T7078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.996997][ T7078] veth1_macvtap: left promiscuous mode [ 289.016224][ T7078] veth0_macvtap: left promiscuous mode [ 289.037192][ T7078] veth1_vlan: left promiscuous mode [ 289.058080][ T7078] veth0_vlan: left promiscuous mode [ 289.249968][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 289.262148][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 289.271040][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 289.284044][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 289.294394][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 289.747361][ T7078] team0 (unregistering): Port device team_slave_1 removed [ 289.784360][ T7078] team0 (unregistering): Port device team_slave_0 removed [ 290.270094][ T4471] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 290.337165][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1570'. [ 290.433537][T12048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.434290][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1572'. [ 290.523547][T12054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1572'. [ 290.617524][T12054] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 290.850443][T12066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1575'. [ 290.946371][T12033] chnl_net:caif_netlink_parms(): no params data found [ 291.024189][ T51] block nbd5: Receive control failed (result -32) [ 291.395045][ T51] Bluetooth: hci0: command tx timeout [ 291.739012][T12090] netlink: 'syz.0.1581': attribute type 1 has an invalid length. [ 291.874720][T12093] bond2 (unregistering): Released all slaves [ 291.917658][T12033] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.935048][T12033] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.953900][T12033] bridge_slave_0: entered allmulticast mode [ 291.963380][T12033] bridge_slave_0: entered promiscuous mode [ 291.979885][T12033] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.987362][T12033] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.002589][T12033] bridge_slave_1: entered allmulticast mode [ 292.040801][T12033] bridge_slave_1: entered promiscuous mode [ 292.187847][T12033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.212122][T12033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.287070][T12102] tipc: Started in network mode [ 292.293424][T12102] tipc: Node identity 522cdc5c623e, cluster identity 4711 [ 292.301377][T12102] tipc: Enabled bearer , priority 0 [ 292.314237][T12033] team0: Port device team_slave_0 added [ 292.323823][T12033] team0: Port device team_slave_1 added [ 292.330921][T12108] hsr0: entered promiscuous mode [ 292.342518][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1585'. [ 292.400076][T12102] hsr_slave_0: left promiscuous mode [ 292.421706][T12102] hsr0 (unregistering): left promiscuous mode [ 292.440034][T12102] ------------[ cut here ]------------ [ 292.445577][T12102] WARNING: CPU: 1 PID: 12102 at net/core/dev.c:12149 unregister_netdevice_many_notify+0x1d96/0x2320 [ 292.456576][T12102] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 292.461132][T12102] CPU: 1 UID: 0 PID: 12102 Comm: syz.0.1585 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 292.473812][T12102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.483982][T12102] RIP: 0010:unregister_netdevice_many_notify+0x1d96/0x2320 [ 292.491321][T12102] Code: 74 08 48 89 df e8 3a f1 d3 f8 48 8b 1b 48 89 1c 24 4c 39 e3 0f 84 83 01 00 00 e8 b5 79 70 f8 e9 17 f0 ff ff e8 ab 79 70 f8 90 <0f> 0b 90 e9 4f ff ff ff e8 9d 79 70 f8 90 0f 0b 90 eb 9c e8 92 79 [ 292.511191][T12102] RSP: 0018:ffffc90003fb6fa0 EFLAGS: 00010293 [ 292.517289][T12102] RAX: ffffffff894fe545 RBX: ffff88807fe461a8 RCX: ffff888025ef5a00 [ 292.525733][T12102] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 292.533982][T12102] RBP: ffffc90003fb7170 R08: ffffffff8f50fa27 R09: 1ffffffff1ea1f44 [ 292.542001][T12102] R10: dffffc0000000000 R11: fffffbfff1ea1f45 R12: ffffc90003fb71e0 [ 292.550123][T12102] R13: ffff88807fe46c18 R14: ffff888079b73140 R15: dffffc0000000000 [ 292.558111][T12102] FS: 00007f1e4a7e16c0(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 292.567087][T12102] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.573747][T12102] CR2: 00007f1e4a79ef98 CR3: 0000000078094000 CR4: 00000000003526f0 [ 292.581795][T12102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 292.590050][T12102] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 292.598051][T12102] Call Trace: [ 292.601469][T12102] [ 292.604473][T12102] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 292.611560][T12102] ? kasan_quarantine_put+0xdd/0x220 [ 292.616919][T12102] ? unregister_netdevice_queue+0x1b3/0x380 [ 292.622927][T12102] ? hsr_del_nodes+0x77/0x90 [ 292.627597][T12102] ? __pfx_hsr_dellink+0x10/0x10 [ 292.632646][T12102] rtnl_dellink+0x488/0x710 [ 292.637185][T12102] ? __lock_acquire+0xab9/0xd20 [ 292.642130][T12102] ? __pfx_rtnl_dellink+0x10/0x10 [ 292.648456][T12102] ? finish_task_switch+0x18b/0x950 [ 292.653778][T12102] ? finish_task_switch+0x266/0x950 [ 292.659229][T12102] ? __pfx_rtnl_dellink+0x10/0x10 [ 292.664397][T12102] rtnetlink_rcv_msg+0x7cf/0xb70 [ 292.669388][T12102] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 292.674575][T12102] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.680213][T12102] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 292.685351][T12102] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.691025][T12102] netlink_rcv_skb+0x205/0x470 [ 292.695834][T12102] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.701422][T12102] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.706779][T12102] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.712042][T12102] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.717314][T12102] netlink_unicast+0x758/0x8d0 [ 292.722548][T12102] netlink_sendmsg+0x805/0xb30 [ 292.727384][T12102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.732747][T12102] ? aa_sock_msg_perm+0x94/0x160 [ 292.737725][T12102] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.743105][T12102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.748435][T12102] __sock_sendmsg+0x219/0x270 [ 292.753225][T12102] ____sys_sendmsg+0x505/0x830 [ 292.758053][T12102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.763467][T12102] ? import_iovec+0x74/0xa0 [ 292.768021][T12102] ___sys_sendmsg+0x21f/0x2a0 [ 292.772805][T12102] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.778151][T12102] ? __fget_files+0x2a/0x420 [ 292.782842][T12102] ? __fget_files+0x3a0/0x420 [ 292.787606][T12102] __x64_sys_sendmsg+0x19b/0x260 [ 292.792647][T12102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.798209][T12102] ? do_syscall_64+0xbe/0x3b0 [ 292.803001][T12102] do_syscall_64+0xfa/0x3b0 [ 292.807546][T12102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.813720][T12102] ? asm_sysvec_call_function_single+0x1a/0x20 [ 292.820093][T12102] ? clear_bhb_loop+0x60/0xb0 [ 292.824824][T12102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.831316][T12102] RIP: 0033:0x7f1e4998e929 [ 292.835762][T12102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.855535][T12102] RSP: 002b:00007f1e4a7e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.864091][T12102] RAX: ffffffffffffffda RBX: 00007f1e49bb5fa0 RCX: 00007f1e4998e929 [ 292.872182][T12102] RDX: 0000000020044810 RSI: 00002000000003c0 RDI: 0000000000000009 [ 292.880259][T12102] RBP: 00007f1e49a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 292.888265][T12102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.896337][T12102] R13: 0000000000000000 R14: 00007f1e49bb5fa0 R15: 00007fff6f1e6988 [ 292.904428][T12102] [ 292.907477][T12102] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 292.914783][T12102] CPU: 1 UID: 0 PID: 12102 Comm: syz.0.1585 Not tainted 6.16.0-rc1-syzkaller-00223-gf40627350c10 #0 PREEMPT(full) [ 292.926858][T12102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.937006][T12102] Call Trace: [ 292.940308][T12102] [ 292.943265][T12102] dump_stack_lvl+0x99/0x250 [ 292.947896][T12102] ? __asan_memcpy+0x40/0x70 [ 292.952522][T12102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.957767][T12102] ? __pfx__printk+0x10/0x10 [ 292.962400][T12102] panic+0x2db/0x790 [ 292.966351][T12102] ? __pfx_panic+0x10/0x10 [ 292.970790][T12102] ? show_trace_log_lvl+0x4fb/0x550 [ 292.976041][T12102] __warn+0x31b/0x4b0 [ 292.980054][T12102] ? unregister_netdevice_many_notify+0x1d96/0x2320 [ 292.986678][T12102] ? unregister_netdevice_many_notify+0x1d96/0x2320 [ 292.993293][T12102] report_bug+0x2be/0x4f0 [ 292.997661][T12102] ? unregister_netdevice_many_notify+0x1d96/0x2320 [ 293.004278][T12102] ? unregister_netdevice_many_notify+0x1d96/0x2320 [ 293.010886][T12102] ? unregister_netdevice_many_notify+0x1d98/0x2320 [ 293.017488][T12102] handle_bug+0x84/0x160 [ 293.021732][T12102] exc_invalid_op+0x1a/0x50 [ 293.026239][T12102] asm_exc_invalid_op+0x1a/0x20 [ 293.031090][T12102] RIP: 0010:unregister_netdevice_many_notify+0x1d96/0x2320 [ 293.038293][T12102] Code: 74 08 48 89 df e8 3a f1 d3 f8 48 8b 1b 48 89 1c 24 4c 39 e3 0f 84 83 01 00 00 e8 b5 79 70 f8 e9 17 f0 ff ff e8 ab 79 70 f8 90 <0f> 0b 90 e9 4f ff ff ff e8 9d 79 70 f8 90 0f 0b 90 eb 9c e8 92 79 [ 293.057904][T12102] RSP: 0018:ffffc90003fb6fa0 EFLAGS: 00010293 [ 293.064079][T12102] RAX: ffffffff894fe545 RBX: ffff88807fe461a8 RCX: ffff888025ef5a00 [ 293.072052][T12102] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 293.080025][T12102] RBP: ffffc90003fb7170 R08: ffffffff8f50fa27 R09: 1ffffffff1ea1f44 [ 293.088006][T12102] R10: dffffc0000000000 R11: fffffbfff1ea1f45 R12: ffffc90003fb71e0 [ 293.095980][T12102] R13: ffff88807fe46c18 R14: ffff888079b73140 R15: dffffc0000000000 [ 293.103977][T12102] ? unregister_netdevice_many_notify+0x1d95/0x2320 [ 293.110616][T12102] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 293.117397][T12102] ? kasan_quarantine_put+0xdd/0x220 [ 293.122710][T12102] ? unregister_netdevice_queue+0x1b3/0x380 [ 293.128630][T12102] ? hsr_del_nodes+0x77/0x90 [ 293.133242][T12102] ? __pfx_hsr_dellink+0x10/0x10 [ 293.138209][T12102] rtnl_dellink+0x488/0x710 [ 293.142738][T12102] ? __lock_acquire+0xab9/0xd20 [ 293.147615][T12102] ? __pfx_rtnl_dellink+0x10/0x10 [ 293.152655][T12102] ? finish_task_switch+0x18b/0x950 [ 293.157886][T12102] ? finish_task_switch+0x266/0x950 [ 293.163163][T12102] ? __pfx_rtnl_dellink+0x10/0x10 [ 293.168198][T12102] rtnetlink_rcv_msg+0x7cf/0xb70 [ 293.173151][T12102] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 293.178300][T12102] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 293.183770][T12102] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 293.188884][T12102] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.194119][T12102] netlink_rcv_skb+0x205/0x470 [ 293.198892][T12102] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 293.204355][T12102] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 293.209667][T12102] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.214870][T12102] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.220074][T12102] netlink_unicast+0x758/0x8d0 [ 293.224858][T12102] netlink_sendmsg+0x805/0xb30 [ 293.229651][T12102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.234963][T12102] ? aa_sock_msg_perm+0x94/0x160 [ 293.239916][T12102] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 293.245218][T12102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.250518][T12102] __sock_sendmsg+0x219/0x270 [ 293.255209][T12102] ____sys_sendmsg+0x505/0x830 [ 293.259991][T12102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.265298][T12102] ? import_iovec+0x74/0xa0 [ 293.269847][T12102] ___sys_sendmsg+0x21f/0x2a0 [ 293.274535][T12102] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.279776][T12102] ? __fget_files+0x2a/0x420 [ 293.284379][T12102] ? __fget_files+0x3a0/0x420 [ 293.289081][T12102] __x64_sys_sendmsg+0x19b/0x260 [ 293.294034][T12102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 293.299524][T12102] ? do_syscall_64+0xbe/0x3b0 [ 293.304232][T12102] do_syscall_64+0xfa/0x3b0 [ 293.308743][T12102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.314827][T12102] ? asm_sysvec_call_function_single+0x1a/0x20 [ 293.321001][T12102] ? clear_bhb_loop+0x60/0xb0 [ 293.325683][T12102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.331590][T12102] RIP: 0033:0x7f1e4998e929 [ 293.336010][T12102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.355621][T12102] RSP: 002b:00007f1e4a7e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.364047][T12102] RAX: ffffffffffffffda RBX: 00007f1e49bb5fa0 RCX: 00007f1e4998e929 [ 293.372034][T12102] RDX: 0000000020044810 RSI: 00002000000003c0 RDI: 0000000000000009 [ 293.380013][T12102] RBP: 00007f1e49a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 293.387991][T12102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.395977][T12102] R13: 0000000000000000 R14: 00007f1e49bb5fa0 R15: 00007fff6f1e6988 [ 293.403969][T12102] [ 293.407306][T12102] Kernel Offset: disabled [ 293.411641][T12102] Rebooting in 86400 seconds..