last executing test programs: 5.144596899s ago: executing program 4 (id=3570): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x8, 0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005c80)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x12, r4, {0x0, 0xfff3}, {0x0, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket(0x10, 0x3, 0x0) recvfrom$ax25(r7, &(0x7f0000000100)=""/87, 0x57, 0xeb59d7796265ba1a, &(0x7f00000002c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000001c0)={r5, 0x4, 0x6, 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r9, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0x68, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000800), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f0000000bc0)={0x3}, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a40)={0xe, 0x0}, 0x8) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x8, 0xfa, &(0x7f0000000480)=""/250, 0x41100, 0xe0, '\x00', r11, @fallback=0x18, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x4, 0x4, 0x10000, 0xfff}, 0x10, r12, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[r13, r0, r0], 0x0, 0x10, 0x8}, 0x94) ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000000380)=r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r14, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010000200"/20, @ANYRES32=0x0, @ANYBLOB="08200000e1800000f7ff1a0000000000"], 0x28}}, 0x0) 4.757950405s ago: executing program 4 (id=3576): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61123c00000000006113500000000000bf200000000000001500000008ffffffbd03010000000000cf000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @sched_cls=0x37}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 4.573603808s ago: executing program 4 (id=3581): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x70, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b49, 0x20000000, 0x1, 0x2, 0xcd69, {0x92, 0x2, 0x2, 0x0, 0x7, 0x8}, {0x7, 0x1, 0xffff, 0x1, 0x1000, 0x10}, 0x7, 0x0, 0x101}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x8c4) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a2aba0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000400)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x18, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}, 'nr0\x00'}) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907071200000f0000ff3f21000000170a001700000000040014001000030001302564aa25b9a64411f6bbf44dc48f57", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70300000000000085000000c4000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.547867157s ago: executing program 2 (id=3582): r0 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{&(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000001b00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000037c0)=[@ip_ttl={{0x10, 0x0, 0x2, 0x10001}}], 0x10}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc4}}], 0x3, 0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1_to_bond\x00', 0x200}) 4.329927284s ago: executing program 2 (id=3585): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x81, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x42, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 4.312614594s ago: executing program 0 (id=3586): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'ip6gretap0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}}) ioctl$SIOCRSSL2CALL(r1, 0x8915, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r3, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_skb}, 0x94) 4.19772829s ago: executing program 3 (id=3587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6f390000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x499}, @md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x8c, 0x0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x2e90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, &(0x7f00000000c0), &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfcbf}, 0x94) 4.071368012s ago: executing program 0 (id=3588): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x99, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) (async, rerun: 64) r3 = getpid() (rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r3, r2, 0x0, 0x5, &(0x7f0000000140)='&#\'*\x00'}, 0x30) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=[0x200, 0x99, 0x6, 0x6, 0x10001, 0x8000000000000001, 0x0, 0x8], &(0x7f0000000240)=[0x1, 0x3, 0x0, 0x5, 0x5, 0x0], 0x28, 0x8, 0x0, r3}}, 0x40) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) 1.956881184s ago: executing program 2 (id=3589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000000180)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289", 0x1f}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) r2 = accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @rose}, [@netrom, @bcast, @null, @null, @rose, @null, @rose, @rose]}, &(0x7f0000000240)=0x48) ioctl$SIOCNRDECOBS(r2, 0x89e2) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/4080, 0xff0}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) socket$qrtr(0x2a, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100)={0x77359400}, 0x10) 1.86979251s ago: executing program 1 (id=3590): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0x58) (async) r1 = accept(r0, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000100)=0x80) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002bbd70f1dcdbdf251b000000af03cf5c1de57ff54f40409b30bd461cbc37e43a565ed67beb20c27fc31ddfdec19bd95f1be12c4b372323bf339c79254f277cd81198175774552854dcd01c97d99bf154f04a4ea4989bac3853650400be80c098777533492a562be087894586b30c128673685f1096d62de0919fb439e83d7efc3017d696"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8840) (async) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="46c7058360bcd90000008968d5a062", @ANYRES16=r4, @ANYBLOB="020029bd7000fcdbdf25730000000800ef0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040006}, 0x80) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000280)="04000ae2", 0x4) 1.869261284s ago: executing program 3 (id=3591): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="50010000100013042bbd700000000000ac1414aa000000000000000000000000ac1e0101000000000000000000000000000000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x804) (async) gettid() (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x400, 0x0, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x9, 0x18}, 0xc) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24066c89", @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x80, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4b, 0xe, {{{}, {}, @broadcast, @device_a, @random="8e742f592bf6"}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x7f, 0x1, 0x7}}, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x5, 0xb5, 0x4}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x979}}}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x6, 0x80, [@supported_rates]}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x80}}, 0xc010) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f0000000500)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0x1, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) (async) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x6000, r0}, 0x18) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r13, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0x1}, &(0x7f0000000a40), &(0x7f0000000a80)='%-010d \x00'}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r16, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendmmsg(r15, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="bd591511", 0x4}], 0x1}}], 0x1, 0x400300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x3e, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87a}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0xb, 0x7, 0x2, 0x40, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_val={0x18, 0xb, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x8000}, @call={0x85, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @generic={0x1, 0x6, 0xf, 0x4, 0x101}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b00)='syzkaller\x00', 0x3, 0x1f, &(0x7f00000007c0)=""/31, 0x41000, 0x14, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000008c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0xf, 0x6}, 0x10, 0xc81e, r12, 0x4, &(0x7f0000000b80)=[r13, r14, 0xffffffffffffffff, r11, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x5, 0x3, 0x6}, {0x2, 0x1, 0xe, 0xb}, {0x4, 0x1, 0xf, 0x3}, {0x1, 0x4, 0xd, 0x5884aa6c91f6380}], 0x10, 0x1}, 0x94) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) 1.868978061s ago: executing program 0 (id=3592): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x1bd, 0x9ffffd}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x0) r2 = socket(0x22, 0x2, 0xffffffff) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.706729652s ago: executing program 3 (id=3593): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x1d, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x3, 0x6, 0xb, 0xfffffff8}, {0x0, 0x81, 0xe, 0x1}]}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x0, 0x0, 0xc, 0xfffffffc}, 0x9c) 1.625347461s ago: executing program 1 (id=3594): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r3], 0x50}}, 0x2) 1.393635124s ago: executing program 3 (id=3595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) connect$ax25(r1, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @null]}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006000600843b0000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r4, &(0x7f0000000340)=@l2, &(0x7f00000003c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89fa, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @multicast1}}}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r12 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x4f, 0x1}, 0x14}}, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x1) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r5, 0x1, 0xffffffff, 0x80000003, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_WME={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x0) 1.359668477s ago: executing program 1 (id=3596): r0 = socket(0x1d, 0x80805, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0xc9, 0x4, 0x4e25, 0x4, 0x3, 0x1, 0x4a69, {0x0, @in6={{0xa, 0x4e24, 0x7fff, @empty}}, 0x400, 0xffffff7b, 0x9, 0x4, 0x3}}, &(0x7f0000000480)=0xb0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet(0xa, 0x801, 0x84) unshare(0x20000400) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x4) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f00000024c0)=0x7d, 0x4) listen(r3, 0x8) r6 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r6, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendmmsg$inet6(r6, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) close(r6) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x8, 0x3}, @sadb_sa={0x2, 0x1, 0x4d5, 0xb1, 0x2, 0xbf, 0x1, 0xe0000002}]}, 0x68}, 0x1, 0x7}, 0x0) 1.130078279s ago: executing program 4 (id=3597): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x30, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x30}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012002102000000001000000000"], 0x38}}, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={r2, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x25, 0x0, 0xbb, 0x20, 0x2, 0x8}, &(0x7f0000000240)=0x9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.031936226s ago: executing program 3 (id=3598): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a147ae41213208004500001c0000000000029078ac1e0001ac1414aa16009078e0000001"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) 1.020505072s ago: executing program 1 (id=3599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000280)=@newtaction={0xf8, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0xe4, 0x1, [@m_skbedit={0x60, 0x1, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x3, 0xffffffffffffffff, 0xfffffffa, 0x7}}]}, {0x4, 0x6, "fd241950faba1865d941fd70b96c96e2d8cf967d8d196676f5c2a51c02"}, {0xc}, {0xc}}}, @m_bpf={0x80, 0x2, 0x0, 0x0, {{0x8}, {0xffffffffffffffeb, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x8, 0x3, 0x0, 0xfff}, {0x5, 0x5, 0x5, 0x6}, {0x800, 0x95, 0x10, 0x6}, {0x8000, 0xba, 0x3}, {0x4, 0xbb, 0xf7, 0xa15c}, {0x6d7b, 0xf, 0x6, 0x3}, {0x8000, 0xff, 0x52, 0x53}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x6, 0x8, 0x8, 0x32}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=0x1, @ANYBLOB="00000000008d234c525297e2ae471b2b9e6d1b6a6d7a5cc9fe275f09df0e16273e967e3265d4c228fa7e625294727966be9a60", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 912.676898ms ago: executing program 2 (id=3600): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="b810000000000000100100000d"], 0x10b8}, 0xff00) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="00000000060005"], 0x24}}, 0x0) 837.98026ms ago: executing program 4 (id=3601): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x7, &(0x7f0000000000), 0xa0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) syz_emit_ethernet(0x80, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb28feee412b8f86dd60ddff00002d2f00fc020000000000000000000000000000fe8000000000000000000000000000aa242088a80020000007ff0001000008000006000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000080000000000800655800000000"], 0x0) 724.566292ms ago: executing program 0 (id=3602): r0 = socket(0xf, 0x2, 0x8) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000d40)={0x2d, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x22020400) getpeername$packet(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYRES16=r2, @ANYRES64=r2, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64=0x0], 0x34}, 0x1, 0x0, 0x0, 0x2400c815}, 0xc000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000b00)="a980e27d08cec255ab17304d12a2e46daeb7e3039dac2b960f7624ad973da7de996bf1f33d91846db62f63e7521c586af60eff231cdab70f8a8fb68da3af62f6444dc1a12828d41b76473ad5f9e47efb2a89c921e1fd72560ce91f0f2fb4ddd3398a20e7d2f63c301f004dc73a3ce51af362336ac9ca5338fc5fcb915558625d32de52a1b5688c376de6eb0a32696559cf1c7dc88061827cde71ba428ecf66eda852e97248c7ef249ed6b9451f7faf7c60f7ec7b4b5b6ff66ff8d1e17c78b5180cd8c1fa983285a85f0c5b4320050403903a1fb8dc1cf24b", 0xd8, 0x4000, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000c00)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x24000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x22, 0x2, 0x2) accept$alg(r6, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000009c0)={0x8, &(0x7f00000008c0)=[{0x7, 0xa3, &(0x7f0000000400)="227926414749d063289f5ff323b9c7fc77b6aee2c68b362be8e2a31c5063e1ce1097880ccfdfcfc5f52597f3d50eff50440c8c0bb9217a1d95987d724a38588ac5381d97aaa4f5a73d938cf6476a770d923b6b94e42843eed1bea420adbcb1389874560a9473c626b9a2623575f29b1e477a89e51e01d561971f173c2554788c5db16c1154b58b14c28758f618910ec20e9ea448281997675f75e262b44cdbe5f924a3", 0x0, 0x1}, {0x4, 0xb5, &(0x7f00000004c0)="8ba61d8df428ff1f4f7300f05a75ed198f02b8b4a7e28f93d1b78c62be536ddcf174b3187cc153022a992aa12e55d5b070b9cb501300101644c850f65517371ee8761c3bce788eb1d99ba09fee563fef0c8427101eb18f5e4a7261220602bffd0f62486f6990c6039c9d976920d1568b4c634a96a2568d0aaeea55723128426d7ca3b016f46492e593ff88df5289919e5c4aa727fe714fa413bb74ee07f7623961739e898da3b628f9ac2e695cdfc47d9f92c415b9", 0x1, 0x1}, {0x80000000, 0xd7, &(0x7f0000000580)="2ce9fdeca968f2d29e8927f67b6ef751b72f9f5b02c19d92937330812b196dea29e17b1ccd7553d9d03631e34a838988dbdcb3040fb0eb15f3e887c02da98d619ab0d1fcf0998a28e45aa8d31e8f31cb63b42d5c65b7f8c2a6c068dd43aadab42db6b44f97c5c7a69f6c64c0d88ca6372ad84ffc724844e3bc6da0cab0320f2f609b30817194c8c166ac9fed2033f478a5e58232ecc01e1774fe5aabf6201a693607757ccc12aeb00183ac0b419412e1d5ac808b6f1ede778405dce156a67040aa312aa0d77e72d698c79da31010d21f8b7789b578af21"}, {0x401, 0x22, &(0x7f0000000140)="d1ce8399654a5542a5dd0798f70944b7752cbf934394b85b088e11ce7e70e26f91ee", 0x1, 0x1}, {0x7, 0x0, &(0x7f0000000340)}, {0x9, 0x6e, &(0x7f00000006c0)="5582bbd662013fcf3a1aa6da191390237fe74c975cea86acb8fe7a77fbfb7e98960917c8491edf45e5b2b6133c2fad5dabdfde706f6a5b7685495c71763bfb09ff21dc3e28c852260c8f01099cad743b8eb13057a9eca0d0c89e97b72eb2ef513ff7e329ae53bd59a71fe975c1ea", 0x1, 0x1}, {0x3c, 0xf7, &(0x7f0000000740)="6023be5666e4ff46aa2c9d73b328f5bea73269a78057eef97b972d95a9f5803dbadfdf8860d16512295566056189e0e6299508b8a980758902ad772590cc93fbadb9bfd26ce1a3358e736589ccb70bf78e2b5ab29699c0b8d4e21498d35cb34c1131cd000bf1a383fca27750913bd3dfd88c897ab4e3cfeab1219e66b7bc1d4a018bcd73f0439f86487ded034465ec2921ff3fb0872ca64dde81b3adc54d9c096724a01c119bb3ffe697a03049680567ebd852c83d79fccc79fc999c93940cbf53e2bf1035707c256923c7155fe7623af4702959a37b4bbb3d62da6633e06be9dcfc4bbb42cfba71b283d5ff63ca1fc5704cacdfbea8c4", 0x1}, {0x2, 0x60, &(0x7f0000000840)="b15755c7a7310688f1b2d0eccaf5803e34fcb9f271812f20c8bf6ed94199071c876f6b0f5feffc55956d5dedd3572e455397ffe9737d795fe48bdd49b072efb1f6f255155b282614789e3c42cca1a818612fa5ad51dc0dd193ed4e359b9b5cc8", 0x1}]}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x7c}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="200000003f781de33a256373af0f7039fc98fde764ced0f2da4744f37bff3baa1289948dcf5e668293a6b440c4aa48c6716549d042ab18c884c3303dee59cb352d902d8796189f9551066fb4765d11d54efb4b485da4b427cd7bbb204ec5bf79128201a6cadcc58cef1871b9a418ffcdc45026cdc3fe136152e3387abb2d4d58ad538602220daa9c63fb1e98b11a8911ee00beb6ed4d64766e0c979063bc1e6c47d78c672ae39ed34f2f1780f7ef17e20aea8f2b172815b6dcad221db6d486509e2613bcf9aeb43c426f365afadc543bca", @ANYRES16=r7, @ANYBLOB="01002cbd7000fbdbdf25050000000c0006000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r8, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x8200, 0x5, 0x10001}, &(0x7f00000000c0)=0x10) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711031000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000c40)=""/204, &(0x7f0000000340)=0xcc) 705.27601ms ago: executing program 1 (id=3603): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0xd4, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xdf15003157931110, 0x10}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xa0, 0x16, 0x0, 0x1, [{0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x257}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xffffffff, 0xcff, 0x6}}, {0x14, 0x1, {0x51, 0x2f9, 0x2, 0x8100}}, {0x14, 0x1, {0xfffffffd, 0x4e7, 0x10001, 0x8100}}, {0x14, 0x1, {0x3c5a, 0x32, 0x798a19e7, 0x88a8}}, {0x14, 0x1, {0x6, 0x6fa, 0x80000000, 0x88a8}}, {0x14, 0x1, {0x8, 0xd19, 0x3800000, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0xf13, 0x4}}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000084}, 0x4800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r4, r5, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000"], 0xa4}}, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r10], 0x4) 633.133768ms ago: executing program 2 (id=3604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xb, &(0x7f0000001e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) listen(r6, 0x0) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800a0001007265646972000000140002800800014000000012080002400002000e0900010073797a30"], 0xf8}}, 0x0) 257.797955ms ago: executing program 3 (id=3605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x24000000, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 247.671079ms ago: executing program 0 (id=3606): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r4], 0x50}}, 0x2) 155.649947ms ago: executing program 4 (id=3607): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x3, 0x4, {0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x7fffffff}}}, 0x32) ioctl$SIOCSIFMTU(r0, 0x8949, &(0x7f0000000580)={'bond0\x00'}) 81.942717ms ago: executing program 2 (id=3608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x4e21, @local}}, 0x24) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000100001000000000000000000ac141400000000000000000022000000ac14140000040000000000f4ff00000074f1764ac8cb33a7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006c7a7300"/240], 0x138}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40044) (async) r7 = socket$packet(0x11, 0x3, 0x300) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async, rerun: 64) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) (async, rerun: 64) sendto$inet6(r7, &(0x7f0000000280)="02042c08c9fb4802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x40) (async, rerun: 32) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000000000000005200000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0xe, 0x0, 0x0) 68.835047ms ago: executing program 1 (id=3609): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a00"], 0x5c}, 0x1, 0x6c}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000094b6d61970ec05a8caaf0d014920bd01d0061ce90f04da22ac1aebaa4f230e398da9d9a5fbdc28746e7582b577ec7435fad7e36eef0ba8b0030c4085238b18efce782a11be386ee69cb3a259da389507253105ee5ab6b54f2f427f08f6ac8cc221c9cd57dde3a5a83bb3ba29fd4e43176fdc78e29bc29acb3d026d50bef0bb9a74058d08833221020420a307d561cb32cf7eb2dc7796172a43fd05dd4ea476701738e9b8b9b2992f37dcf65043553a4618b3118d", @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf25070000000400018008000400ea00000004000680"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x2}, 0x8}], 0x3, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYRESOCT=r5, @ANYRES32=r1, @ANYRES64=r2, @ANYRES64=r2], 0x84}}, 0x40851) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0x24}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004f00010800"/20], 0x14}}, 0x0) ioctl$AUTOFS_IOC_READY(r9, 0x9360, 0x1) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r8, 0x1, 0xffffffff, 0x80000003, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_WME={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x0) 0s ago: executing program 0 (id=3610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x4008104) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) kernel console output (not intermixed with test programs): 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.748070][T14498] RSP: 002b:00007f3561c29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.748093][T14498] RAX: ffffffffffffffda RBX: 00007f3560fd5fa0 RCX: 00007f3560d8eba9 [ 335.748107][T14498] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 335.748121][T14498] RBP: 00007f3561c29090 R08: 0000000000000000 R09: 0000000000000000 [ 335.748133][T14498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.748145][T14498] R13: 00007f3560fd6038 R14: 00007f3560fd5fa0 R15: 00007fff2e7b8968 [ 335.748180][T14498] [ 336.103981][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2420'. [ 336.245124][T14506] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 336.347240][T14506] 0ªî{X¹¦: entered allmulticast mode [ 336.353074][T14506] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 336.586046][T14524] tipc: Enabled bearer , priority 0 [ 336.606050][T14524] syzkaller0: entered promiscuous mode [ 336.646916][T14524] syzkaller0: entered allmulticast mode [ 336.688095][T14524] tipc: Resetting bearer [ 336.734337][T14519] tipc: Resetting bearer [ 336.797632][T14519] tipc: Disabling bearer [ 336.853616][T14534] batman_adv: batadv0: Adding interface: wlan1 [ 336.873509][T14534] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.917229][T14534] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 337.110957][T14542] ve: renamed from ipvlan1 [ 337.157550][T14548] __nla_validate_parse: 2 callbacks suppressed [ 337.157574][T14548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2433'. [ 337.232524][T14552] netlink: 'syz.2.2434': attribute type 1 has an invalid length. [ 337.258262][T14552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2434'. [ 337.372491][T14559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2437'. [ 337.563244][T14570] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2440'. [ 337.757651][T14573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2441'. [ 337.804127][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2441'. [ 338.055526][T14590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2447'. [ 338.110518][T14591] tipc: Enabling of bearer rejected, already enabled [ 338.212807][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2451'. [ 338.440290][T14606] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2454'. [ 338.541581][T14610] netlink: 'syz.4.2456': attribute type 2 has an invalid length. [ 338.611413][T14610] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2456'. [ 338.886048][T14627] netlink: 'syz.3.2461': attribute type 2 has an invalid length. [ 338.894646][T14627] netlink: 'syz.3.2461': attribute type 2 has an invalid length. [ 338.904346][T14627] netlink: 'syz.3.2461': attribute type 24 has an invalid length. [ 347.892818][T14630] __nla_validate_parse: 2 callbacks suppressed [ 347.892841][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2464'. [ 347.945646][T14636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.970075][T14637] netlink: 'syz.0.2462': attribute type 5 has an invalid length. [ 347.980780][T14637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2462'. [ 348.013610][T14639] veth0: entered promiscuous mode [ 348.035192][T14638] netlink: 'syz.1.2463': attribute type 10 has an invalid length. [ 348.067852][T14643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2462'. [ 348.089813][T14644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2467'. [ 348.099821][T14646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2468'. [ 348.109777][T14635] veth0: left promiscuous mode [ 348.116331][T14638] veth1_macvtap: left promiscuous mode [ 348.806534][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'. [ 348.924541][T14682] netlink: 'syz.0.2480': attribute type 10 has an invalid length. [ 348.988719][T14684] netlink: 'syz.0.2480': attribute type 10 has an invalid length. [ 349.000695][T14684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2480'. [ 350.927837][T14705] netlink: 'syz.0.2487': attribute type 3 has an invalid length. [ 350.954537][T14705] netlink: 'syz.0.2487': attribute type 3 has an invalid length. [ 351.003317][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 351.019517][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2489'. [ 351.030527][T14712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2489'. [ 351.130202][T14719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.221150][T14721] veth0_to_bridge: entered promiscuous mode [ 351.248034][T14721] veth0_to_bridge: left promiscuous mode [ 351.396404][T14728] sock: sock_timestamping_bind_phc: sock not bind to device [ 351.646593][T14735] netlink: 'syz.4.2499': attribute type 1 has an invalid length. [ 351.790687][T14743] netlink: 'syz.0.2501': attribute type 1 has an invalid length. [ 352.147790][T14762] netlink: 'syz.1.2507': attribute type 7 has an invalid length. [ 352.196037][T14762] netlink: 'syz.1.2507': attribute type 8 has an invalid length. [ 352.371255][T14770] `: renamed from bond0 (while UP) [ 353.245152][T14783] __nla_validate_parse: 10 callbacks suppressed [ 353.245176][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 353.299516][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 353.474459][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2517'. [ 353.640069][T14793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2520'. [ 353.847005][T14808] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 353.908936][T14811] team0: Caught tx_queue_len zero misconfig [ 354.071992][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2528'. [ 354.270441][T14820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2527'. [ 354.352870][T14834] netlink: 'syz.0.2529': attribute type 11 has an invalid length. [ 354.379787][T14834] netlink: 'syz.0.2529': attribute type 11 has an invalid length. [ 354.399866][T14834] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2529'. [ 354.447817][T14837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2530'. [ 354.530239][T14840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2530'. [ 354.557931][T14840] nbd: device at index 64 is going down [ 354.851349][T14641] udevd[14641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 354.873859][T14729] udevd[14729]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 354.881786][T14854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2537'. [ 355.044303][T14864] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 355.045161][T14862] IPVS: stopping master sync thread 14864 ... [ 355.840211][T14902] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.188209][T14905] validate_nla: 2 callbacks suppressed [ 357.188229][T14905] netlink: 'syz.4.2547': attribute type 10 has an invalid length. [ 357.229801][T14905] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 357.254845][T14905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.428855][T14911] netlink: 'syz.1.2549': attribute type 11 has an invalid length. [ 357.452055][T14914] netlink: 'syz.0.2550': attribute type 83 has an invalid length. [ 357.497804][T14915] bond0: option ad_select: unable to set because the bond device is up [ 357.834968][T14936] team0: Device gtp0 is of different type [ 357.884035][T14940] IPVS: set_ctl: invalid protocol: 189 127.0.0.1:20002 [ 358.212272][T14953] netlink: 'syz.4.2562': attribute type 3 has an invalid length. [ 358.370993][T14959] netlink: 'syz.3.2564': attribute type 3 has an invalid length. [ 359.239232][T15011] tipc: Enabled bearer , priority 0 [ 359.250723][T15011] syzkaller0: entered promiscuous mode [ 359.256358][T15011] syzkaller0: entered allmulticast mode [ 359.273829][T15016] netlink: 'syz.1.2578': attribute type 15 has an invalid length. [ 359.282881][T15016] __nla_validate_parse: 6 callbacks suppressed [ 359.282900][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2578'. [ 359.362657][T15024] netlink: 'syz.1.2578': attribute type 15 has an invalid length. [ 359.399723][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2578'. [ 359.406923][ T6052] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 359.417292][T15016] netlink: 'syz.1.2578': attribute type 15 has an invalid length. [ 359.425128][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2578'. [ 359.435161][ T6052] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 359.449226][ T6052] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 359.459189][ T6052] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 359.480149][T15024] netlink: 'syz.1.2578': attribute type 15 has an invalid length. [ 359.491944][T15020] tipc: Resetting bearer [ 359.526181][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2578'. [ 359.579721][T15020] tipc: Disabling bearer [ 359.798068][T15043] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2586'. [ 359.798520][T15045] netlink: 'syz.3.2588': attribute type 1 has an invalid length. [ 359.812041][T15043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2586'. [ 359.825795][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2587'. [ 359.844718][T15045] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2588'. [ 359.964361][T15040] bond0: (slave bond_slave_1): Releasing backup interface [ 360.090407][T15060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2591'. [ 360.117535][T15060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2591'. [ 360.374873][T15074] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 360.822049][T15085] veth3: entered promiscuous mode [ 361.667807][T15140] 0ªî{X¹¦: renamed from gretap0 [ 361.699047][T15140] 0ªî{X¹¦: left promiscuous mode [ 361.704283][T15140] 0ªî{X¹¦: entered allmulticast mode [ 361.741066][T15140] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 361.791158][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.975566][ T6054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.037172][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.437405][ T5883] Bluetooth: hci0: command tx timeout [ 362.482775][T15176] syzkaller0: entered promiscuous mode [ 362.488607][T15176] syzkaller0: entered allmulticast mode [ 362.900200][T15204] validate_nla: 3 callbacks suppressed [ 362.900221][T15204] netlink: 'syz.0.2640': attribute type 33 has an invalid length. [ 363.054280][ T6054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.074447][ T6054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.170105][ T5983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.137531][T15270] __nla_validate_parse: 12 callbacks suppressed [ 366.137554][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2659'. [ 366.672081][T15288] nbd: must specify a device to reconfigure [ 366.680232][T15288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2662'. [ 366.977539][T15307] netlink: 'syz.2.2667': attribute type 1 has an invalid length. [ 367.087298][T15310] netlink: 'syz.4.2668': attribute type 1 has an invalid length. [ 367.157114][T15310] siw: device registration error -23 [ 367.215700][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2670'. [ 367.316973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.544306][T15333] netlink: 'syz.0.2675': attribute type 3 has an invalid length. [ 367.566481][T15333] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2675'. [ 367.602932][T15339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2676'. [ 368.493908][T15372] IPVS: length: 8 != 1152 [ 368.605919][T15370] IPVS: Error connecting to the multicast addr [ 369.191076][T15402] netlink: 'syz.0.2696': attribute type 4 has an invalid length. [ 369.210201][T15402] netlink: 'syz.0.2696': attribute type 4 has an invalid length. [ 369.240496][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2696'. [ 369.423960][T15411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.656151][T15424] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 369.701235][T15426] FAULT_INJECTION: forcing a failure. [ 369.701235][T15426] name failslab, interval 1, probability 0, space 0, times 0 [ 369.795784][T15426] CPU: 1 UID: 0 PID: 15426 Comm: syz.4.2704 Not tainted syzkaller #0 PREEMPT(full) [ 369.795813][T15426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 369.795825][T15426] Call Trace: [ 369.795834][T15426] [ 369.795843][T15426] dump_stack_lvl+0x189/0x250 [ 369.795874][T15426] ? __pfx____ratelimit+0x10/0x10 [ 369.795896][T15426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.795918][T15426] ? __pfx__printk+0x10/0x10 [ 369.795949][T15426] ? __lock_acquire+0xab9/0xd20 [ 369.795991][T15426] should_fail_ex+0x414/0x560 [ 369.796028][T15426] should_failslab+0xa8/0x100 [ 369.796061][T15426] kmem_cache_alloc_noprof+0x73/0x3c0 [ 369.796087][T15426] ? skb_clone+0x212/0x3a0 [ 369.796144][T15426] skb_clone+0x212/0x3a0 [ 369.796174][T15426] __netlink_deliver_tap+0x404/0x850 [ 369.796213][T15426] ? netlink_deliver_tap+0x2e/0x1b0 [ 369.796236][T15426] netlink_deliver_tap+0x19c/0x1b0 [ 369.796258][T15426] netlink_unicast+0x7fa/0x9e0 [ 369.796300][T15426] ? __pfx_netlink_unicast+0x10/0x10 [ 369.796333][T15426] ? netlink_sendmsg+0x642/0xb30 [ 369.796352][T15426] ? skb_put+0x11b/0x210 [ 369.796389][T15426] netlink_sendmsg+0x805/0xb30 [ 369.796423][T15426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.796450][T15426] ? aa_sock_msg_perm+0xf1/0x1d0 [ 369.796474][T15426] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 369.796497][T15426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.796522][T15426] __sock_sendmsg+0x21c/0x270 [ 369.796556][T15426] ____sys_sendmsg+0x505/0x830 [ 369.796588][T15426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.796625][T15426] ? import_iovec+0x74/0xa0 [ 369.796660][T15426] ___sys_sendmsg+0x21f/0x2a0 [ 369.796687][T15426] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.796757][T15426] ? __fget_files+0x2a/0x420 [ 369.796773][T15426] ? __fget_files+0x3a0/0x420 [ 369.796804][T15426] __x64_sys_sendmsg+0x19b/0x260 [ 369.796832][T15426] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.796870][T15426] ? __pfx_ksys_write+0x10/0x10 [ 369.796893][T15426] ? rcu_is_watching+0x15/0xb0 [ 369.796919][T15426] ? do_syscall_64+0xbe/0x3b0 [ 369.796946][T15426] do_syscall_64+0xfa/0x3b0 [ 369.796966][T15426] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.796987][T15426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.797007][T15426] ? clear_bhb_loop+0x60/0xb0 [ 369.797032][T15426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.797052][T15426] RIP: 0033:0x7f3560d8eba9 [ 369.797070][T15426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.797087][T15426] RSP: 002b:00007f3561c29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.797109][T15426] RAX: ffffffffffffffda RBX: 00007f3560fd5fa0 RCX: 00007f3560d8eba9 [ 369.797124][T15426] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 369.797137][T15426] RBP: 00007f3561c29090 R08: 0000000000000000 R09: 0000000000000000 [ 369.797150][T15426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.797162][T15426] R13: 00007f3560fd6038 R14: 00007f3560fd5fa0 R15: 00007fff2e7b8968 [ 369.797196][T15426] [ 370.477719][T15450] tc_dump_action: action bad kind [ 370.621530][T15460] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2715'. [ 371.788205][T15479] syzkaller1: entered promiscuous mode [ 371.793737][T15479] syzkaller1: entered allmulticast mode [ 371.982142][T15493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2727'. [ 372.328366][T15509] netlink: 'syz.4.2736': attribute type 2 has an invalid length. [ 372.521906][T15518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2739'. [ 372.606582][T15516] vlan3: entered promiscuous mode [ 372.643189][T15516] vlan3: entered allmulticast mode [ 372.653846][T15516] hsr_slave_1: entered allmulticast mode [ 372.944712][T15539] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2745'. [ 373.208499][T15545] veth0: renamed from veth1_vlan [ 373.244644][T15553] gre0: Caught tx_queue_len zero misconfig [ 373.359125][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 373.379045][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 373.681508][T15574] netlink: 'syz.2.2763': attribute type 1 has an invalid length. [ 373.706806][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2762'. [ 373.715906][T15577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2762'. [ 373.761498][T15574] 8021q: adding VLAN 0 to HW filter on device bond6 [ 373.895750][T15582] tipc: Enabled bearer , priority 0 [ 373.933894][T15582] tipc: Disabling bearer [ 374.528637][T15612] veth0: entered promiscuous mode [ 374.823877][T15620] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 374.851902][T15625] tipc: New replicast peer: 255.255.255.255 [ 374.896214][T15625] tipc: Enabled bearer , priority 10 [ 374.933078][T15632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2780'. [ 375.029634][T15638] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 375.186001][T15644] pim6reg: entered allmulticast mode [ 375.656562][T15671] FAULT_INJECTION: forcing a failure. [ 375.656562][T15671] name failslab, interval 1, probability 0, space 0, times 0 [ 375.714259][T15671] CPU: 1 UID: 0 PID: 15671 Comm: syz.0.2794 Not tainted syzkaller #0 PREEMPT(full) [ 375.714296][T15671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.714307][T15671] Call Trace: [ 375.714315][T15671] [ 375.714324][T15671] dump_stack_lvl+0x189/0x250 [ 375.714354][T15671] ? __pfx____ratelimit+0x10/0x10 [ 375.714374][T15671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.714397][T15671] ? __pfx__printk+0x10/0x10 [ 375.714432][T15671] ? __pfx___might_resched+0x10/0x10 [ 375.714450][T15671] ? fs_reclaim_acquire+0x7d/0x100 [ 375.714474][T15671] should_fail_ex+0x414/0x560 [ 375.714510][T15671] should_failslab+0xa8/0x100 [ 375.714542][T15671] __kmalloc_cache_noprof+0x70/0x3d0 [ 375.714570][T15671] ? nfnetlink_rcv+0xeff/0x2520 [ 375.714607][T15671] nfnetlink_rcv+0xeff/0x2520 [ 375.714678][T15671] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 375.714729][T15671] ? ref_tracker_free+0x63a/0x7d0 [ 375.714783][T15671] ? __netlink_deliver_tap+0x807/0x850 [ 375.714804][T15671] ? netlink_deliver_tap+0x2e/0x1b0 [ 375.714845][T15671] netlink_unicast+0x82f/0x9e0 [ 375.714886][T15671] ? __pfx_netlink_unicast+0x10/0x10 [ 375.714917][T15671] ? netlink_sendmsg+0x642/0xb30 [ 375.714936][T15671] ? skb_put+0x11b/0x210 [ 375.714962][T15671] netlink_sendmsg+0x805/0xb30 [ 375.714995][T15671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.715020][T15671] ? aa_sock_msg_perm+0xf1/0x1d0 [ 375.715043][T15671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.715074][T15671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.715097][T15671] __sock_sendmsg+0x21c/0x270 [ 375.715132][T15671] ____sys_sendmsg+0x505/0x830 [ 375.715165][T15671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.715203][T15671] ? import_iovec+0x74/0xa0 [ 375.715235][T15671] ___sys_sendmsg+0x21f/0x2a0 [ 375.715264][T15671] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.715340][T15671] ? __fget_files+0x2a/0x420 [ 375.715359][T15671] ? __fget_files+0x3a0/0x420 [ 375.715390][T15671] __x64_sys_sendmsg+0x19b/0x260 [ 375.715420][T15671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.715459][T15671] ? __pfx_ksys_write+0x10/0x10 [ 375.715483][T15671] ? rcu_is_watching+0x15/0xb0 [ 375.715510][T15671] ? do_syscall_64+0xbe/0x3b0 [ 375.715538][T15671] do_syscall_64+0xfa/0x3b0 [ 375.715558][T15671] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.715578][T15671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.715599][T15671] ? clear_bhb_loop+0x60/0xb0 [ 375.715624][T15671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.715644][T15671] RIP: 0033:0x7f3901f8eba9 [ 375.715663][T15671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.715680][T15671] RSP: 002b:00007f3902e96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.715703][T15671] RAX: ffffffffffffffda RBX: 00007f39021d5fa0 RCX: 00007f3901f8eba9 [ 375.715718][T15671] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 375.715731][T15671] RBP: 00007f3902e96090 R08: 0000000000000000 R09: 0000000000000000 [ 375.715744][T15671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.715756][T15671] R13: 00007f39021d6038 R14: 00007f39021d5fa0 R15: 00007ffd2efeda58 [ 375.715790][T15671] [ 376.030015][ T5983] tipc: Node number set to 2462625136 [ 376.196883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.387416][T15693] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2801'. [ 376.428960][T15693] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2801'. [ 376.473360][T15693] nbd: illegal input index -8454144 [ 376.521603][T15700] netlink: 'syz.0.2804': attribute type 2 has an invalid length. [ 376.551498][T15700] netlink: zone id is out of range [ 376.572253][T15700] netlink: zone id is out of range [ 376.597347][T15700] netlink: zone id is out of range [ 376.610035][T15700] netlink: zone id is out of range [ 376.620102][T15700] netlink: zone id is out of range [ 376.637867][T15700] netlink: zone id is out of range [ 376.653280][T15700] netlink: zone id is out of range [ 376.680184][T15700] netlink: zone id is out of range [ 376.685355][T15700] netlink: zone id is out of range [ 376.752687][T15707] netlink: 'syz.3.2807': attribute type 4 has an invalid length. [ 376.808946][T15707] netlink: 'syz.3.2807': attribute type 4 has an invalid length. [ 376.837383][T15709] FAULT_INJECTION: forcing a failure. [ 376.837383][T15709] name failslab, interval 1, probability 0, space 0, times 0 [ 376.866950][T15709] CPU: 0 UID: 0 PID: 15709 Comm: syz.4.2808 Not tainted syzkaller #0 PREEMPT(full) [ 376.866981][T15709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.866992][T15709] Call Trace: [ 376.867000][T15709] [ 376.867009][T15709] dump_stack_lvl+0x189/0x250 [ 376.867037][T15709] ? __pfx____ratelimit+0x10/0x10 [ 376.867058][T15709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.867082][T15709] ? __pfx__printk+0x10/0x10 [ 376.867115][T15709] ? __pfx___might_resched+0x10/0x10 [ 376.867132][T15709] ? fs_reclaim_acquire+0x7d/0x100 [ 376.867156][T15709] should_fail_ex+0x414/0x560 [ 376.867191][T15709] should_failslab+0xa8/0x100 [ 376.867226][T15709] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 376.867254][T15709] ? __pfx_nf_tables_abort+0x10/0x10 [ 376.867276][T15709] ? __alloc_skb+0x112/0x2d0 [ 376.867303][T15709] __alloc_skb+0x112/0x2d0 [ 376.867330][T15709] netlink_ack+0x146/0xa50 [ 376.867357][T15709] ? __kasan_kmalloc+0x93/0xb0 [ 376.867405][T15709] nfnetlink_rcv+0x2290/0x2520 [ 376.867472][T15709] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 376.867520][T15709] ? ref_tracker_free+0x63a/0x7d0 [ 376.867575][T15709] ? __netlink_deliver_tap+0x807/0x850 [ 376.867597][T15709] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.867640][T15709] netlink_unicast+0x82f/0x9e0 [ 376.867681][T15709] ? __pfx_netlink_unicast+0x10/0x10 [ 376.867713][T15709] ? netlink_sendmsg+0x642/0xb30 [ 376.867733][T15709] ? skb_put+0x11b/0x210 [ 376.867760][T15709] netlink_sendmsg+0x805/0xb30 [ 376.867793][T15709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.867819][T15709] ? aa_sock_msg_perm+0xf1/0x1d0 [ 376.867843][T15709] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.867865][T15709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.867889][T15709] __sock_sendmsg+0x21c/0x270 [ 376.867923][T15709] ____sys_sendmsg+0x505/0x830 [ 376.867956][T15709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.867993][T15709] ? import_iovec+0x74/0xa0 [ 376.868024][T15709] ___sys_sendmsg+0x21f/0x2a0 [ 376.868053][T15709] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.868121][T15709] ? __fget_files+0x2a/0x420 [ 376.868138][T15709] ? __fget_files+0x3a0/0x420 [ 376.868168][T15709] __x64_sys_sendmsg+0x19b/0x260 [ 376.868198][T15709] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.868235][T15709] ? __pfx_ksys_write+0x10/0x10 [ 376.868261][T15709] ? rcu_is_watching+0x15/0xb0 [ 376.868287][T15709] ? do_syscall_64+0xbe/0x3b0 [ 376.868315][T15709] do_syscall_64+0xfa/0x3b0 [ 376.868334][T15709] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.868354][T15709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.868382][T15709] ? clear_bhb_loop+0x60/0xb0 [ 376.868407][T15709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.868426][T15709] RIP: 0033:0x7f3560d8eba9 [ 376.868445][T15709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.868463][T15709] RSP: 002b:00007f3561c29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.868485][T15709] RAX: ffffffffffffffda RBX: 00007f3560fd5fa0 RCX: 00007f3560d8eba9 [ 376.868500][T15709] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 376.868512][T15709] RBP: 00007f3561c29090 R08: 0000000000000000 R09: 0000000000000000 [ 376.868525][T15709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.868538][T15709] R13: 00007f3560fd6038 R14: 00007f3560fd5fa0 R15: 00007fff2e7b8968 [ 376.868571][T15709] [ 377.405063][T15731] netlink: 'syz.4.2815': attribute type 4 has an invalid length. [ 377.524781][T15732] __nla_validate_parse: 1 callbacks suppressed [ 377.524801][T15732] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2815'. [ 377.854881][T15758] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2821'. [ 377.892849][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2822'. [ 377.922054][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2822'. [ 377.935517][T15758] ip6gre2: entered allmulticast mode [ 377.943960][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2823'. [ 377.949351][T15760] netlink: 'syz.1.2822': attribute type 6 has an invalid length. [ 377.983236][T15767] netlink: 'syz.1.2822': attribute type 12 has an invalid length. [ 378.472847][T15788] !€ÿ: renamed from bond_slave_0 [ 378.684933][T15797] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2834'. [ 378.808196][T15803] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2835'. [ 378.898862][T15801] netlink: 'syz.0.2836': attribute type 1 has an invalid length. [ 378.941936][T15801] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2836'. [ 379.559770][T15828] netlink: 212388 bytes leftover after parsing attributes in process `syz.2.2844'. [ 379.821486][T15837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2845'. [ 380.441201][T15866] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 380.774309][T15883] team0: Device wireguard0 is of different type [ 382.326613][T15965] net_ratelimit: 81 callbacks suppressed [ 382.326640][T15965] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 382.390671][T15965] pim6reg: entered allmulticast mode [ 382.433027][T15965] pim6reg: left allmulticast mode [ 382.633747][T15970] bond0: (slave bridge_slave_1): Releasing backup interface [ 382.698323][T15970] bond0: (slave geneve1): Releasing backup interface [ 382.751816][ T6057] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 382.788913][ T6057] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 382.865863][ T6057] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 382.885068][ T6057] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 383.137264][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.151969][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.161027][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.167274][T15987] netlink: 'syz.3.2899': attribute type 1 has an invalid length. [ 383.181733][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.191616][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.267577][ T5883] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.294288][ T5883] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.305616][ T5883] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.320550][ T5883] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.335015][ T5883] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.428832][T15997] __nla_validate_parse: 7 callbacks suppressed [ 383.428855][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'. [ 383.500985][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'. [ 383.563989][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2903'. [ 383.574791][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'. [ 383.600165][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2903'. [ 383.692677][T16001] bridge0: port 1(vlan0) entered blocking state [ 383.735864][T16001] bridge0: port 1(vlan0) entered disabled state [ 383.750414][T16001] vlan0: entered allmulticast mode [ 383.755587][T16001] bridge0: entered allmulticast mode [ 383.771848][T16001] vlan0: left allmulticast mode [ 383.783578][T16001] bridge0: left allmulticast mode [ 384.273647][T16030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2910'. [ 384.280273][T16026] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 384.362511][T16031] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2911'. [ 384.620820][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2915'. [ 385.158781][T15982] chnl_net:caif_netlink_parms(): no params data found [ 385.398133][ T5883] Bluetooth: hci2: command tx timeout [ 385.992912][T16108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2930'. [ 386.017840][T15982] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.026619][T15982] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.060135][T15982] bridge_slave_0: entered allmulticast mode [ 386.084620][T15982] bridge_slave_0: entered promiscuous mode [ 386.144615][T16111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2931'. [ 386.165418][T15982] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.173630][T15982] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.188047][T15982] bridge_slave_1: entered allmulticast mode [ 386.196357][T15982] bridge_slave_1: entered promiscuous mode [ 386.301647][T16118] netlink: 'syz.1.2933': attribute type 9 has an invalid length. [ 386.329758][T15982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.435066][T15982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.599343][T15982] team0: Port device team_slave_0 added [ 386.638726][T15982] team0: Port device team_slave_1 added [ 386.733687][T15982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.753864][T15982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.812253][T15982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.841313][T15982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.849786][T15982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.869282][T16137] netlink: 'syz.1.2939': attribute type 1 has an invalid length. [ 386.877405][T15982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.105740][T16137] 8021q: adding VLAN 0 to HW filter on device bond8 [ 387.360877][T15982] hsr_slave_0: entered promiscuous mode [ 387.373818][T15982] hsr_slave_1: entered promiscuous mode [ 387.391188][T16158] netlink: 'syz.0.2946': attribute type 7 has an invalid length. [ 387.487079][ T5883] Bluetooth: hci2: command 0x041b tx timeout [ 387.823362][T16182] netlink: 'syz.3.2953': attribute type 2 has an invalid length. [ 387.970181][T16191] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 388.273353][T15982] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.324957][T15982] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.337127][T16209] netlink: 'syz.1.2958': attribute type 72 has an invalid length. [ 388.420316][T16214] netlink: 'syz.0.2959': attribute type 5 has an invalid length. [ 388.444833][T16208] ipvlan1: entered promiscuous mode [ 388.451303][T16214] __nla_validate_parse: 78 callbacks suppressed [ 388.451324][T16214] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2959'. [ 388.794815][T15982] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.856946][T15982] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.089855][T15982] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.119536][T15982] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.242519][T15982] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.255868][T15982] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.272909][T16254] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 389.311147][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2966'. [ 389.453764][T16260] netlink: 'syz.2.2970': attribute type 72 has an invalid length. [ 389.465670][T16260] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2970'. [ 389.557322][ T5883] Bluetooth: hci2: command 0x041b tx timeout [ 389.566096][T15982] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 389.580600][T15982] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 389.606525][T15982] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 389.630978][T15982] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 389.801437][T16277] gre0: entered promiscuous mode [ 389.900539][T15982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.014789][T15982] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.069088][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.076463][ T6057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.160872][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.169043][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.459000][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2979'. [ 390.558879][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2979'. [ 390.803427][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2983'. [ 390.813612][T16313] netlink: 'syz.2.2982': attribute type 72 has an invalid length. [ 390.825844][T16313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2982'. [ 390.835846][T16312] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 390.849717][T16312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.000199][T15982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.120492][T16321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2985'. [ 391.146213][T16321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2985'. [ 391.637342][ T5883] Bluetooth: hci2: command 0x041b tx timeout [ 391.662794][ T30] audit: type=1800 audit(1758005672.166:3): pid=16349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2994" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=3126 res=0 errno=0 [ 391.756563][T16357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2996'. [ 392.175047][T15982] veth0_vlan: entered promiscuous mode [ 392.249534][T16379] IPVS: Error connecting to the multicast addr [ 392.273210][T15982] veth1_vlan: entered promiscuous mode [ 392.304325][T16385] IPVS: Error connecting to the multicast addr [ 392.351731][T15982] veth0_macvtap: entered promiscuous mode [ 392.381162][T15982] veth1_macvtap: entered promiscuous mode [ 392.442012][T15982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.537924][T15982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.591649][ T6044] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.627361][ T6044] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.678126][ T6044] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.690254][ T6044] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.836969][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.473953][ T6055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.510730][ T6055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.607904][T16416] __nla_validate_parse: 4 callbacks suppressed [ 393.607925][T16416] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3009'. [ 393.645350][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.682010][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.719563][ T5883] Bluetooth: hci2: command 0x041b tx timeout [ 393.736280][T16421] netlink: 'syz.3.3012': attribute type 1 has an invalid length. [ 393.806112][T16421] netlink: 'syz.3.3012': attribute type 2 has an invalid length. [ 393.849954][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3012'. [ 394.595356][T16457] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3022'. [ 394.896111][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3025'. [ 394.957587][T16467] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 394.980869][T16467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.254758][ T5873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.276984][ T5873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 395.286195][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 395.299811][ T5873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 395.308121][ T5873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 395.420432][T16473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3026'. [ 395.530665][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3029'. [ 395.740688][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3031'. [ 395.824034][T16493] netlink: 'syz.4.3032': attribute type 1 has an invalid length. [ 395.995303][T16493] bond1 (unregistering): Released all slaves [ 396.093373][T16500] ip6tnl1: entered promiscuous mode [ 396.099897][T16500] ip6tnl1: entered allmulticast mode [ 397.257030][T16469] chnl_net:caif_netlink_parms(): no params data found [ 397.302416][T16531] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3042'. [ 397.403477][ T5873] Bluetooth: hci4: command tx timeout [ 397.805827][T16549] netlink: 'syz.4.3047': attribute type 6 has an invalid length. [ 397.937594][T16469] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.944798][T16469] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.956484][T16469] bridge_slave_0: entered allmulticast mode [ 397.972171][T16469] bridge_slave_0: entered promiscuous mode [ 398.008323][T16469] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.030436][T16469] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.054218][T16469] bridge_slave_1: entered allmulticast mode [ 398.098914][T16469] bridge_slave_1: entered promiscuous mode [ 398.303157][T16469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.369981][T16469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.459781][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3054'. [ 398.499042][T16469] team0: Port device team_slave_0 added [ 398.521869][T16469] team0: Port device team_slave_1 added [ 398.719327][T16469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.728169][T16469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.798801][T16595] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 398.809843][T16469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.880512][T16600] xt_l2tp: wrong L2TP version: 0 [ 398.897580][T16600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3062'. [ 398.979755][T16469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.995027][T16469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.030294][T16469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.205654][T16614] netlink: zone id is out of range [ 399.218888][T16614] netlink: zone id is out of range [ 399.225108][T16614] netlink: zone id is out of range [ 399.275445][T16614] netlink: zone id is out of range [ 399.312579][T16614] netlink: zone id is out of range [ 399.333478][T16469] hsr_slave_0: entered promiscuous mode [ 399.349570][T16614] netlink: zone id is out of range [ 399.354744][T16614] netlink: zone id is out of range [ 399.368357][T16469] hsr_slave_1: entered promiscuous mode [ 399.375137][T16469] debugfs: 'hsr0' already exists in 'hsr' [ 399.382583][T16469] Cannot create hsr debugfs directory [ 399.397304][T16622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3068'. [ 399.408370][T16614] netlink: zone id is out of range [ 399.445885][T16623] netlink: 'syz.0.3070': attribute type 10 has an invalid length. [ 399.489176][ T5873] Bluetooth: hci4: command tx timeout [ 399.578427][T16623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.664115][T16635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3074'. [ 399.809084][T16638] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 399.827421][T16638] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 399.854043][T16643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3077'. [ 399.973069][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3077'. [ 400.190209][T16469] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.215857][T16469] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 400.234453][T16469] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.311158][T16469] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.334457][T16469] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 400.345079][T16469] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.376267][T16656] tipc: Enabling of bearer rejected, failed to enable media [ 400.414489][T16469] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.440721][T16469] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 400.451672][T16469] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.549215][T16469] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.572708][T16469] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 400.611721][T16469] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.084277][T16678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3083'. [ 401.180578][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3086'. [ 401.290768][T16681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3089'. [ 401.303568][T16469] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 401.336315][T16681] sch_tbf: burst 88 is lower than device netdevsim0 mtu (1514) ! [ 401.374196][T16681] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3089'. [ 401.383642][T16469] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 401.457658][T16469] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 401.515171][T16469] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 401.545215][T16696] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3093'. [ 401.564909][ T5873] Bluetooth: hci4: command tx timeout [ 401.570351][T16701] net_ratelimit: 63 callbacks suppressed [ 401.570372][T16701] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 401.704716][T16713] netlink: 'syz.3.3096': attribute type 1 has an invalid length. [ 401.898817][T16721] sctp: [Deprecated]: syz.0.3098 (pid 16721) Use of int in max_burst socket option. [ 401.898817][T16721] Use struct sctp_assoc_value instead [ 401.996578][T16469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.063310][T16469] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.135970][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.143257][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.148561][T16737] Bluetooth: MGMT ver 1.23 [ 402.161102][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.168376][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.556989][T16752] xt_l2tp: v2 tid > 0xffff: 1114244 [ 402.564653][T16752] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 402.574846][T16752] openvswitch: netlink: Message has 6332 unknown bytes. [ 402.874578][T16469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.064889][T16469] veth0_vlan: entered promiscuous mode [ 403.131302][T16469] veth1_vlan: entered promiscuous mode [ 403.224083][T16469] veth0_macvtap: entered promiscuous mode [ 403.239555][T16780] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 403.251460][T16778] IPVS: stopping master sync thread 16780 ... [ 403.264080][T16469] veth1_macvtap: entered promiscuous mode [ 403.350134][T16469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.412187][T16469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.472307][ T6053] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.504394][ T6053] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.550164][ T6053] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.580166][ T6053] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.639061][ T5883] Bluetooth: hci4: command tx timeout [ 403.835214][ T6053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.858053][ T6053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.942141][ T6051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.967150][ T6051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.196915][ T5883] Bluetooth: hci2: command 0x041b tx timeout [ 404.198838][ T5873] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 404.618046][T16831] __nla_validate_parse: 8 callbacks suppressed [ 404.618067][T16831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3129'. [ 404.695818][T16831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3129'. [ 404.743505][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3129'. [ 404.845219][T16838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3132'. [ 404.942973][T16840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3132'. [ 404.956873][T16845] netlink: 'syz.4.3134': attribute type 1 has an invalid length. [ 404.980647][T16845] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3134'. [ 404.984575][T16846] tipc: Started in network mode [ 405.017315][T16846] tipc: Node identity , cluster identity 4711 [ 405.034568][T16846] tipc: Failed to set node id, please configure manually [ 405.066982][T16846] tipc: Enabling of bearer rejected, failed to enable media [ 405.405303][ T5883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.419070][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.429741][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.442279][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.451916][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 405.490711][T16859] tipc: Enabling of bearer rejected, failed to enable media [ 405.730570][ T6054] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 405.772855][T16880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3140'. [ 405.800546][T16876] netlink: 'syz.4.3140': attribute type 2 has an invalid length. [ 405.881960][ T6054] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 406.022316][ T6054] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 406.160068][ T6054] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 406.239955][T16899] netlink: 'syz.1.3148': attribute type 1 has an invalid length. [ 406.337298][T16897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.575012][ T5883] Bluetooth: hci1: command tx timeout [ 407.817707][ T6054] dvmrp0 (unregistering): left allmulticast mode [ 408.326033][ T6054] bond0 (unregistering): Released all slaves [ 408.442773][ T6054] bond1 (unregistering): Released all slaves [ 408.456422][ T6054] bond2 (unregistering): Released all slaves [ 408.472677][ T6054] bond3 (unregistering): Released all slaves [ 408.486309][ T6054] bond4 (unregistering): Released all slaves [ 408.698117][T16954] tipc: Started in network mode [ 408.707012][T16954] tipc: Node identity 76ae21d6ff9e, cluster identity 4711 [ 408.757416][T16954] tipc: Enabled bearer , priority 0 [ 408.814850][T16857] chnl_net:caif_netlink_parms(): no params data found [ 408.858901][T16959] syzkaller0: entered promiscuous mode [ 408.864883][T16959] syzkaller0: entered allmulticast mode [ 408.900686][ T6054] tipc: Left network mode [ 408.932403][T16965] tipc: Enabling of bearer rejected, failed to enable media [ 408.944056][T16953] tipc: Resetting bearer [ 408.990675][T16953] tipc: Disabling bearer [ 409.204394][T16960] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2 [ 409.222414][T16960] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€ [ 409.640518][ T5883] Bluetooth: hci1: command tx timeout [ 409.954698][T16857] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.974048][T16857] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.990866][T16990] netlink: 'syz.2.3171': attribute type 27 has an invalid length. [ 410.009918][T16857] bridge_slave_0: entered allmulticast mode [ 410.023054][T16857] bridge_slave_0: entered promiscuous mode [ 410.067548][T16999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 410.121651][T16989] IPVS: ip_vs_edit_dest(): server weight less than zero [ 410.132464][T16857] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.142086][ T8549] IPVS: starting estimator thread 0... [ 410.144763][T16857] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.164846][T16857] bridge_slave_1: entered allmulticast mode [ 410.185138][T16857] bridge_slave_1: entered promiscuous mode [ 410.267025][T17002] IPVS: using max 25 ests per chain, 60000 per kthread [ 410.746021][T16857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.802362][T17023] netlink: 'syz.4.3178': attribute type 1 has an invalid length. [ 411.122775][T16857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.408084][T17045] netlink: 'syz.4.3183': attribute type 1 has an invalid length. [ 411.415898][T17045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3183'. [ 411.472247][T17050] netlink: 492 bytes leftover after parsing attributes in process `syz.1.3182'. [ 411.485570][T16857] team0: Port device team_slave_0 added [ 411.512733][T16857] team0: Port device team_slave_1 added [ 411.583068][ T6054] hsr_slave_0: left promiscuous mode [ 411.593904][ T6054] hsr_slave_1: left promiscuous mode [ 411.717226][ T5883] Bluetooth: hci1: command tx timeout [ 412.471598][ T61] smc: removing ib device syz2 [ 412.769117][ T6054] lo (unregistering): left allmulticast mode [ 413.276356][T17093] FAULT_INJECTION: forcing a failure. [ 413.276356][T17093] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 413.289929][T17093] CPU: 0 UID: 0 PID: 17093 Comm: syz.4.3195 Not tainted syzkaller #0 PREEMPT(full) [ 413.289957][T17093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 413.289969][T17093] Call Trace: [ 413.289977][T17093] [ 413.289986][T17093] dump_stack_lvl+0x189/0x250 [ 413.290034][T17093] ? __pfx____ratelimit+0x10/0x10 [ 413.290055][T17093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.290079][T17093] ? __pfx__printk+0x10/0x10 [ 413.290107][T17093] ? __might_fault+0xb0/0x130 [ 413.290156][T17093] should_fail_ex+0x414/0x560 [ 413.290192][T17093] _copy_from_user+0x2d/0xb0 [ 413.290219][T17093] ___sys_sendmsg+0x158/0x2a0 [ 413.290249][T17093] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.290319][T17093] ? __fget_files+0x2a/0x420 [ 413.290336][T17093] ? __fget_files+0x3a0/0x420 [ 413.290368][T17093] __x64_sys_sendmsg+0x19b/0x260 [ 413.290397][T17093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.290435][T17093] ? __pfx_ksys_write+0x10/0x10 [ 413.290459][T17093] ? rcu_is_watching+0x15/0xb0 [ 413.290487][T17093] ? do_syscall_64+0xbe/0x3b0 [ 413.290514][T17093] do_syscall_64+0xfa/0x3b0 [ 413.290534][T17093] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.290554][T17093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.290574][T17093] ? clear_bhb_loop+0x60/0xb0 [ 413.290599][T17093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.290618][T17093] RIP: 0033:0x7f67e5d8eba9 [ 413.290636][T17093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.290654][T17093] RSP: 002b:00007f67e6bfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.290685][T17093] RAX: ffffffffffffffda RBX: 00007f67e5fd5fa0 RCX: 00007f67e5d8eba9 [ 413.290700][T17093] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 413.290713][T17093] RBP: 00007f67e6bfe090 R08: 0000000000000000 R09: 0000000000000000 [ 413.290725][T17093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.290737][T17093] R13: 00007f67e5fd6038 R14: 00007f67e5fd5fa0 R15: 00007fff51273758 [ 413.290770][T17093] [ 413.604678][T17099] sctp: [Deprecated]: syz.4.3197 (pid 17099) Use of int in max_burst socket option deprecated. [ 413.604678][T17099] Use struct sctp_assoc_value instead [ 413.799865][ T5883] Bluetooth: hci1: command tx timeout [ 415.405432][T16857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.412872][T16857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.453522][T16857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.515950][T16857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.537346][T16857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.623020][T16857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.041613][T17127] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3204'. [ 416.149377][T16857] hsr_slave_0: entered promiscuous mode [ 416.158848][T16857] hsr_slave_1: entered promiscuous mode [ 416.165457][T16857] debugfs: 'hsr0' already exists in 'hsr' [ 416.237710][T16857] Cannot create hsr debugfs directory [ 416.605590][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3209'. [ 416.642424][T17147] netlink: 'syz.1.3210': attribute type 1 has an invalid length. [ 418.091084][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3223'. [ 418.400316][T17203] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 418.473886][T17205] veth0: entered promiscuous mode [ 418.535515][T17204] veth0: left promiscuous mode [ 418.661247][T17212] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 418.863865][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3228'. [ 418.927679][T17215] openvswitch: netlink: Message has -1 unknown bytes. [ 418.942638][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3228'. [ 418.969834][T16857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 419.010128][T16857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 419.034874][T16857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 419.043556][ T6054] IPVS: stop unused estimator thread 0... [ 419.069904][T16857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 419.185810][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3230'. [ 419.282936][T17227] sctp: [Deprecated]: syz.1.3230 (pid 17227) Use of int in maxseg socket option. [ 419.282936][T17227] Use struct sctp_assoc_value instead [ 419.365071][T16857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.384417][T17230] tipc: Enabling of bearer rejected, already enabled [ 419.415548][T16857] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.482106][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.489336][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.559302][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.566450][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.148018][T17259] xt_socket: unknown flags 0x50 [ 420.527099][T16857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.545564][T17281] netlink: 'syz.2.3242': attribute type 1 has an invalid length. [ 420.607723][T17287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3245'. [ 420.614271][T17282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.742788][T16857] veth0_vlan: entered promiscuous mode [ 420.786093][T16857] veth1_vlan: entered promiscuous mode [ 420.833640][T17294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3247'. [ 420.945808][T16857] veth0_macvtap: entered promiscuous mode [ 420.991471][T17302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3250'. [ 420.994740][T16857] veth1_macvtap: entered promiscuous mode [ 421.033482][T17305] FAULT_INJECTION: forcing a failure. [ 421.033482][T17305] name failslab, interval 1, probability 0, space 0, times 0 [ 421.049335][T17305] CPU: 1 UID: 0 PID: 17305 Comm: syz.0.3251 Not tainted syzkaller #0 PREEMPT(full) [ 421.049363][T17305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 421.049375][T17305] Call Trace: [ 421.049384][T17305] [ 421.049392][T17305] dump_stack_lvl+0x189/0x250 [ 421.049424][T17305] ? __pfx____ratelimit+0x10/0x10 [ 421.049447][T17305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.049472][T17305] ? __pfx__printk+0x10/0x10 [ 421.049507][T17305] ? __pfx___might_resched+0x10/0x10 [ 421.049526][T17305] ? fs_reclaim_acquire+0x7d/0x100 [ 421.049551][T17305] should_fail_ex+0x414/0x560 [ 421.049587][T17305] should_failslab+0xa8/0x100 [ 421.049619][T17305] __kmalloc_cache_noprof+0x70/0x3d0 [ 421.049646][T17305] ? nfnetlink_rcv+0xeff/0x2520 [ 421.049682][T17305] nfnetlink_rcv+0xeff/0x2520 [ 421.049750][T17305] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 421.049799][T17305] ? ref_tracker_free+0x63a/0x7d0 [ 421.049855][T17305] ? __netlink_deliver_tap+0x807/0x850 [ 421.049877][T17305] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.049920][T17305] netlink_unicast+0x82f/0x9e0 [ 421.049962][T17305] ? __pfx_netlink_unicast+0x10/0x10 [ 421.050004][T17305] ? netlink_sendmsg+0x642/0xb30 [ 421.050023][T17305] ? skb_put+0x11b/0x210 [ 421.050052][T17305] netlink_sendmsg+0x805/0xb30 [ 421.050087][T17305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.050113][T17305] ? aa_sock_msg_perm+0xf1/0x1d0 [ 421.050137][T17305] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 421.050160][T17305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.050183][T17305] __sock_sendmsg+0x21c/0x270 [ 421.050218][T17305] ____sys_sendmsg+0x505/0x830 [ 421.050251][T17305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.050289][T17305] ? import_iovec+0x74/0xa0 [ 421.050322][T17305] ___sys_sendmsg+0x21f/0x2a0 [ 421.050350][T17305] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.050422][T17305] ? __fget_files+0x2a/0x420 [ 421.050439][T17305] ? __fget_files+0x3a0/0x420 [ 421.050469][T17305] __x64_sys_sendmsg+0x19b/0x260 [ 421.050498][T17305] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.050537][T17305] ? __pfx_ksys_write+0x10/0x10 [ 421.050561][T17305] ? rcu_is_watching+0x15/0xb0 [ 421.050589][T17305] ? do_syscall_64+0xbe/0x3b0 [ 421.050617][T17305] do_syscall_64+0xfa/0x3b0 [ 421.050637][T17305] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.050658][T17305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.050686][T17305] ? clear_bhb_loop+0x60/0xb0 [ 421.050711][T17305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.050729][T17305] RIP: 0033:0x7f3901f8eba9 [ 421.050747][T17305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.050764][T17305] RSP: 002b:00007f3902e96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.050786][T17305] RAX: ffffffffffffffda RBX: 00007f39021d5fa0 RCX: 00007f3901f8eba9 [ 421.050801][T17305] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 421.050814][T17305] RBP: 00007f3902e96090 R08: 0000000000000000 R09: 0000000000000000 [ 421.050827][T17305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.050838][T17305] R13: 00007f39021d6038 R14: 00007f39021d5fa0 R15: 00007ffd2efeda58 [ 421.050874][T17305] [ 421.369166][T16857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.381774][T16857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.475966][ T6053] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.485376][ T6054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.504876][ T6054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.524764][T17308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3252'. [ 421.536598][ T6054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.541496][T17309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3252'. [ 421.688027][T17318] netlink: 'syz.2.3253': attribute type 21 has an invalid length. [ 421.742237][T17318] netlink: 'syz.2.3253': attribute type 6 has an invalid length. [ 421.792360][T17318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3253'. [ 421.905320][ T6053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.949341][ T6053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.075508][T17321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3254'. [ 422.116075][ T6052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.136183][ T6052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.347079][T17339] sctp: [Deprecated]: syz.2.3260 (pid 17339) Use of int in maxseg socket option. [ 422.347079][T17339] Use struct sctp_assoc_value instead [ 422.646612][T17354] netlink: 'syz.2.3265': attribute type 6 has an invalid length. [ 422.662817][T17354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3265'. [ 422.675824][T17351] tipc: Started in network mode [ 422.695828][T17351] tipc: Node identity 1e21a5ec2ecb, cluster identity 4711 [ 422.744040][T17351] tipc: Enabled bearer , priority 0 [ 422.798672][T17351] syzkaller0: MTU too low for tipc bearer [ 422.804478][T17351] tipc: Disabling bearer [ 423.006088][T17366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3269'. [ 423.456496][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 423.469884][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 423.492562][ T5867] syz_tun (unregistering): left promiscuous mode [ 423.503059][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 423.515816][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 423.540218][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 423.717469][ T6054] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.846886][T17404] netlink: 'syz.3.3280': attribute type 1 has an invalid length. [ 423.925834][T17405] bond1 (unregistering): Released all slaves [ 423.989958][ T6054] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.091573][ T6054] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.199797][T17418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3285'. [ 424.221967][T17418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3285'. [ 424.231161][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3285'. [ 424.245733][ T6054] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.542393][T17437] netlink: 'syz.4.3290': attribute type 21 has an invalid length. [ 424.607921][T17437] netlink: 'syz.4.3290': attribute type 6 has an invalid length. [ 424.615741][T17437] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3290'. [ 424.736510][T17450] FAULT_INJECTION: forcing a failure. [ 424.736510][T17450] name failslab, interval 1, probability 0, space 0, times 0 [ 424.766871][T17450] CPU: 0 UID: 0 PID: 17450 Comm: syz.3.3295 Not tainted syzkaller #0 PREEMPT(full) [ 424.766900][T17450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 424.766912][T17450] Call Trace: [ 424.766920][T17450] [ 424.766929][T17450] dump_stack_lvl+0x189/0x250 [ 424.766959][T17450] ? __pfx____ratelimit+0x10/0x10 [ 424.766980][T17450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.767004][T17450] ? __pfx__printk+0x10/0x10 [ 424.767028][T17450] ? netlink_unicast+0x82f/0x9e0 [ 424.767059][T17450] ? ___sys_sendmsg+0x21f/0x2a0 [ 424.767083][T17450] ? do_syscall_64+0xfa/0x3b0 [ 424.767119][T17450] should_fail_ex+0x414/0x560 [ 424.767155][T17450] should_failslab+0xa8/0x100 [ 424.767187][T17450] kmem_cache_alloc_noprof+0x73/0x3c0 [ 424.767213][T17450] ? skb_clone+0x212/0x3a0 [ 424.767245][T17450] skb_clone+0x212/0x3a0 [ 424.767276][T17450] __netlink_deliver_tap+0x404/0x850 [ 424.767313][T17450] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.767337][T17450] netlink_deliver_tap+0x19c/0x1b0 [ 424.767360][T17450] netlink_sendskb+0x68/0x140 [ 424.767392][T17450] netlink_unicast+0x397/0x9e0 [ 424.767420][T17450] ? __asan_memcpy+0x40/0x70 [ 424.767453][T17450] ? __pfx_netlink_unicast+0x10/0x10 [ 424.767496][T17450] nfnetlink_rcv+0x2290/0x2520 [ 424.767567][T17450] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 424.767618][T17450] ? ref_tracker_free+0x63a/0x7d0 [ 424.767674][T17450] ? __netlink_deliver_tap+0x807/0x850 [ 424.767696][T17450] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.767738][T17450] netlink_unicast+0x82f/0x9e0 [ 424.767789][T17450] ? __pfx_netlink_unicast+0x10/0x10 [ 424.767828][T17450] ? netlink_sendmsg+0x642/0xb30 [ 424.767847][T17450] ? skb_put+0x11b/0x210 [ 424.767875][T17450] netlink_sendmsg+0x805/0xb30 [ 424.767909][T17450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.767936][T17450] ? aa_sock_msg_perm+0xf1/0x1d0 [ 424.767959][T17450] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.767981][T17450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.768004][T17450] __sock_sendmsg+0x21c/0x270 [ 424.768038][T17450] ____sys_sendmsg+0x505/0x830 [ 424.768071][T17450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.768108][T17450] ? import_iovec+0x74/0xa0 [ 424.768140][T17450] ___sys_sendmsg+0x21f/0x2a0 [ 424.768169][T17450] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.768242][T17450] ? __fget_files+0x2a/0x420 [ 424.768259][T17450] ? __fget_files+0x3a0/0x420 [ 424.768291][T17450] __x64_sys_sendmsg+0x19b/0x260 [ 424.768319][T17450] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.768358][T17450] ? __pfx_ksys_write+0x10/0x10 [ 424.768382][T17450] ? rcu_is_watching+0x15/0xb0 [ 424.768409][T17450] ? do_syscall_64+0xbe/0x3b0 [ 424.768436][T17450] do_syscall_64+0xfa/0x3b0 [ 424.768456][T17450] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.768476][T17450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.768497][T17450] ? clear_bhb_loop+0x60/0xb0 [ 424.768522][T17450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.768542][T17450] RIP: 0033:0x7f2a6eb8eba9 [ 424.768562][T17450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.768579][T17450] RSP: 002b:00007f2a6f9be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.768601][T17450] RAX: ffffffffffffffda RBX: 00007f2a6edd5fa0 RCX: 00007f2a6eb8eba9 [ 424.768616][T17450] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 424.768628][T17450] RBP: 00007f2a6f9be090 R08: 0000000000000000 R09: 0000000000000000 [ 424.768640][T17450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.768652][T17450] R13: 00007f2a6edd6038 R14: 00007f2a6edd5fa0 R15: 00007ffc81b6a248 [ 424.768687][T17450] [ 425.370083][ T6054] ip6gretap0 (unregistering): left promiscuous mode [ 425.651497][ T5873] Bluetooth: hci0: command tx timeout [ 425.675182][ T6054] team0: Port device geneve0 removed [ 426.112287][ T6054] bond0 (unregistering): Released all slaves [ 426.119060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.131196][ T6054] bond1 (unregistering): Released all slaves [ 426.251916][ T6054] bond2 (unregistering): Released all slaves [ 426.369862][ T6054] bond3 (unregistering): Released all slaves [ 426.384284][ T6054] bond4 (unregistering): Released all slaves [ 426.400224][ T6054] bond5 (unregistering): Released all slaves [ 426.490601][T17452] veth2: entered promiscuous mode [ 426.581864][T17458] vlan2: entered promiscuous mode [ 426.587303][T17458] vlan2: entered allmulticast mode [ 426.592455][T17458] hsr_slave_1: entered allmulticast mode [ 426.930232][T17479] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 426.964560][T17380] chnl_net:caif_netlink_parms(): no params data found [ 426.991434][T17485] FAULT_INJECTION: forcing a failure. [ 426.991434][T17485] name failslab, interval 1, probability 0, space 0, times 0 [ 427.019893][T17485] CPU: 1 UID: 0 PID: 17485 Comm: syz.4.3306 Not tainted syzkaller #0 PREEMPT(full) [ 427.019920][T17485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 427.019932][T17485] Call Trace: [ 427.019939][T17485] [ 427.019948][T17485] dump_stack_lvl+0x189/0x250 [ 427.019987][T17485] ? __pfx____ratelimit+0x10/0x10 [ 427.020010][T17485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.020035][T17485] ? __pfx__printk+0x10/0x10 [ 427.020059][T17485] ? netlink_unicast+0x82f/0x9e0 [ 427.020091][T17485] ? ___sys_sendmsg+0x21f/0x2a0 [ 427.020114][T17485] ? do_syscall_64+0xfa/0x3b0 [ 427.020146][T17485] should_fail_ex+0x414/0x560 [ 427.020179][T17485] should_failslab+0xa8/0x100 [ 427.020208][T17485] kmem_cache_alloc_noprof+0x73/0x3c0 [ 427.020233][T17485] ? skb_clone+0x212/0x3a0 [ 427.020264][T17485] skb_clone+0x212/0x3a0 [ 427.020293][T17485] __netlink_deliver_tap+0x404/0x850 [ 427.020330][T17485] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.020352][T17485] netlink_deliver_tap+0x19c/0x1b0 [ 427.020374][T17485] netlink_sendskb+0x68/0x140 [ 427.020407][T17485] netlink_unicast+0x397/0x9e0 [ 427.020433][T17485] ? __asan_memcpy+0x40/0x70 [ 427.020466][T17485] ? __pfx_netlink_unicast+0x10/0x10 [ 427.020507][T17485] nfnetlink_rcv+0x2290/0x2520 [ 427.020573][T17485] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 427.020624][T17485] ? ref_tracker_free+0x63a/0x7d0 [ 427.020680][T17485] ? __netlink_deliver_tap+0x807/0x850 [ 427.020701][T17485] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.020743][T17485] netlink_unicast+0x82f/0x9e0 [ 427.020782][T17485] ? __pfx_netlink_unicast+0x10/0x10 [ 427.020815][T17485] ? netlink_sendmsg+0x642/0xb30 [ 427.020834][T17485] ? skb_put+0x11b/0x210 [ 427.020862][T17485] netlink_sendmsg+0x805/0xb30 [ 427.020892][T17485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.020919][T17485] ? aa_sock_msg_perm+0xf1/0x1d0 [ 427.020942][T17485] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.020963][T17485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.020995][T17485] __sock_sendmsg+0x21c/0x270 [ 427.021029][T17485] ____sys_sendmsg+0x505/0x830 [ 427.021062][T17485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.021099][T17485] ? import_iovec+0x74/0xa0 [ 427.021130][T17485] ___sys_sendmsg+0x21f/0x2a0 [ 427.021158][T17485] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.021231][T17485] ? __fget_files+0x2a/0x420 [ 427.021249][T17485] ? __fget_files+0x3a0/0x420 [ 427.021281][T17485] __x64_sys_sendmsg+0x19b/0x260 [ 427.021310][T17485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.021347][T17485] ? __pfx_ksys_write+0x10/0x10 [ 427.021371][T17485] ? rcu_is_watching+0x15/0xb0 [ 427.021400][T17485] ? do_syscall_64+0xbe/0x3b0 [ 427.021427][T17485] do_syscall_64+0xfa/0x3b0 [ 427.021447][T17485] ? lockdep_hardirqs_on+0x9c/0x150 [ 427.021467][T17485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.021487][T17485] ? clear_bhb_loop+0x60/0xb0 [ 427.021513][T17485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.021531][T17485] RIP: 0033:0x7f67e5d8eba9 [ 427.021550][T17485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.021567][T17485] RSP: 002b:00007f67e6bfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.021589][T17485] RAX: ffffffffffffffda RBX: 00007f67e5fd5fa0 RCX: 00007f67e5d8eba9 [ 427.021605][T17485] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 427.021617][T17485] RBP: 00007f67e6bfe090 R08: 0000000000000000 R09: 0000000000000000 [ 427.021629][T17485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 427.021641][T17485] R13: 00007f67e5fd6038 R14: 00007f67e5fd5fa0 R15: 00007fff51273758 [ 427.021676][T17485] [ 427.515615][T17498] netlink: 'syz.4.3311': attribute type 11 has an invalid length. [ 427.566043][T17499] geneve0: entered promiscuous mode [ 427.574257][T17499] __nla_validate_parse: 1 callbacks suppressed [ 427.574277][T17499] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3310'. [ 427.658301][T17498] bridge1: entered promiscuous mode [ 427.663765][T17498] bridge1: entered allmulticast mode [ 427.717781][ T5873] Bluetooth: hci0: command tx timeout [ 427.732983][T17504] vlan3: entered promiscuous mode [ 427.741713][T17504] hsr_slave_1: entered promiscuous mode [ 427.748626][T17504] vlan3: entered allmulticast mode [ 427.753785][T17504] hsr_slave_1: entered allmulticast mode [ 427.760976][T17380] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.769389][T17380] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.778255][T17380] bridge_slave_0: entered allmulticast mode [ 427.786917][T17380] bridge_slave_0: entered promiscuous mode [ 427.804996][T17506] ip6gre1: entered allmulticast mode [ 427.842208][T17380] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.851832][T17380] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.868437][T17380] bridge_slave_1: entered allmulticast mode [ 427.889516][T17380] bridge_slave_1: entered promiscuous mode [ 427.965418][T17509] netlink: 'syz.3.3314': attribute type 4 has an invalid length. [ 428.061491][T17380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.083039][T17380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.106454][T17521] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3317'. [ 428.189189][T17525] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 428.262883][T17380] team0: Port device team_slave_0 added [ 428.297143][T17528] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 428.328223][T17380] team0: Port device team_slave_1 added [ 428.471518][T17538] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3322'. [ 428.483528][ T6054] tipc: Disabling bearer [ 428.497713][ T6054] tipc: Left network mode [ 428.503328][T17539] FAULT_INJECTION: forcing a failure. [ 428.503328][T17539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.520794][T17380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.522339][T17539] CPU: 0 UID: 0 PID: 17539 Comm: syz.2.3323 Not tainted syzkaller #0 PREEMPT(full) [ 428.522364][T17539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 428.522374][T17539] Call Trace: [ 428.522381][T17539] [ 428.522389][T17539] dump_stack_lvl+0x189/0x250 [ 428.522416][T17539] ? __pfx____ratelimit+0x10/0x10 [ 428.522436][T17539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.522457][T17539] ? __pfx__printk+0x10/0x10 [ 428.522482][T17539] ? __might_fault+0xb0/0x130 [ 428.522519][T17539] should_fail_ex+0x414/0x560 [ 428.522550][T17539] _copy_from_user+0x2d/0xb0 [ 428.522575][T17539] ___sys_sendmsg+0x158/0x2a0 [ 428.522602][T17539] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.522662][T17539] ? __fget_files+0x2a/0x420 [ 428.522677][T17539] ? __fget_files+0x3a0/0x420 [ 428.522704][T17539] __x64_sys_sendmsg+0x19b/0x260 [ 428.522730][T17539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.522763][T17539] ? __pfx_ksys_write+0x10/0x10 [ 428.522784][T17539] ? rcu_is_watching+0x15/0xb0 [ 428.522808][T17539] ? do_syscall_64+0xbe/0x3b0 [ 428.522833][T17539] do_syscall_64+0xfa/0x3b0 [ 428.522850][T17539] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.522868][T17539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.522885][T17539] ? clear_bhb_loop+0x60/0xb0 [ 428.522907][T17539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.522924][T17539] RIP: 0033:0x7fab4438eba9 [ 428.522941][T17539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.522956][T17539] RSP: 002b:00007fab451f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.522985][T17539] RAX: ffffffffffffffda RBX: 00007fab445d5fa0 RCX: 00007fab4438eba9 [ 428.522998][T17539] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 428.523010][T17539] RBP: 00007fab451f9090 R08: 0000000000000000 R09: 0000000000000000 [ 428.523021][T17539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.523031][T17539] R13: 00007fab445d6038 R14: 00007fab445d5fa0 R15: 00007fff9e6b1c28 [ 428.523062][T17539] [ 428.580858][T17545] netlink: 'syz.1.3325': attribute type 1 has an invalid length. [ 428.599975][T17380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.783214][T17380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.919867][T17380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.958435][T17380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.022054][T17380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.365145][T17380] hsr_slave_0: entered promiscuous mode [ 429.383378][T17380] hsr_slave_1: entered promiscuous mode [ 429.407835][T17380] debugfs: 'hsr0' already exists in 'hsr' [ 429.416349][T17380] Cannot create hsr debugfs directory [ 429.477615][T17585] FAULT_INJECTION: forcing a failure. [ 429.477615][T17585] name failslab, interval 1, probability 0, space 0, times 0 [ 429.527983][T17585] CPU: 1 UID: 0 PID: 17585 Comm: syz.4.3336 Not tainted syzkaller #0 PREEMPT(full) [ 429.528013][T17585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 429.528025][T17585] Call Trace: [ 429.528034][T17585] [ 429.528043][T17585] dump_stack_lvl+0x189/0x250 [ 429.528074][T17585] ? __pfx____ratelimit+0x10/0x10 [ 429.528095][T17585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.528118][T17585] ? __pfx__printk+0x10/0x10 [ 429.528153][T17585] ? __pfx___might_resched+0x10/0x10 [ 429.528178][T17585] should_fail_ex+0x414/0x560 [ 429.528214][T17585] should_failslab+0xa8/0x100 [ 429.528245][T17585] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 429.528274][T17585] ? __alloc_skb+0x112/0x2d0 [ 429.528300][T17585] __alloc_skb+0x112/0x2d0 [ 429.528328][T17585] netlink_sendmsg+0x5c6/0xb30 [ 429.528370][T17585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.528398][T17585] ? aa_sock_msg_perm+0xf1/0x1d0 [ 429.528422][T17585] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.528444][T17585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.528475][T17585] __sock_sendmsg+0x21c/0x270 [ 429.528510][T17585] ____sys_sendmsg+0x505/0x830 [ 429.528543][T17585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.528580][T17585] ? import_iovec+0x74/0xa0 [ 429.528613][T17585] ___sys_sendmsg+0x21f/0x2a0 [ 429.528642][T17585] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.528711][T17585] ? __fget_files+0x2a/0x420 [ 429.528729][T17585] ? __fget_files+0x3a0/0x420 [ 429.528761][T17585] __x64_sys_sendmsg+0x19b/0x260 [ 429.528791][T17585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.528835][T17585] ? __pfx_ksys_write+0x10/0x10 [ 429.528859][T17585] ? rcu_is_watching+0x15/0xb0 [ 429.528886][T17585] ? do_syscall_64+0xbe/0x3b0 [ 429.528914][T17585] do_syscall_64+0xfa/0x3b0 [ 429.528935][T17585] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.528955][T17585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.528983][T17585] ? clear_bhb_loop+0x60/0xb0 [ 429.529008][T17585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.529028][T17585] RIP: 0033:0x7f67e5d8eba9 [ 429.529046][T17585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.529063][T17585] RSP: 002b:00007f67e6bfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.529085][T17585] RAX: ffffffffffffffda RBX: 00007f67e5fd5fa0 RCX: 00007f67e5d8eba9 [ 429.529100][T17585] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 429.529122][T17585] RBP: 00007f67e6bfe090 R08: 0000000000000000 R09: 0000000000000000 [ 429.529135][T17585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.529147][T17585] R13: 00007f67e5fd6038 R14: 00007f67e5fd5fa0 R15: 00007fff51273758 [ 429.529182][T17585] [ 429.819481][ T5873] Bluetooth: hci0: command tx timeout [ 430.587654][T17619] netlink: 'syz.1.3347': attribute type 29 has an invalid length. [ 430.595643][T17619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3347'. [ 430.683863][ T6054] hsr_slave_0: left promiscuous mode [ 430.694418][ T6054] hsr_slave_1: left promiscuous mode [ 430.728005][ T6054] veth1_vlan: left promiscuous mode [ 430.742401][ T6054] veth0_vlan: left promiscuous mode [ 431.013930][ T6054] pim6reg (unregistering): left allmulticast mode [ 431.877982][ T5873] Bluetooth: hci0: command tx timeout [ 432.376324][T17648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3356'. [ 432.388806][T17648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3356'. [ 432.403830][T17648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3356'. [ 432.415190][T17648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3356'. [ 432.629561][ T6054] IPVS: stop unused estimator thread 0... [ 432.734901][T17656] FAULT_INJECTION: forcing a failure. [ 432.734901][T17656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.747661][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3363'. [ 432.777766][T17656] CPU: 1 UID: 0 PID: 17656 Comm: syz.1.3361 Not tainted syzkaller #0 PREEMPT(full) [ 432.777795][T17656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.777807][T17656] Call Trace: [ 432.777816][T17656] [ 432.777824][T17656] dump_stack_lvl+0x189/0x250 [ 432.777854][T17656] ? __pfx____ratelimit+0x10/0x10 [ 432.777875][T17656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.777898][T17656] ? __pfx__printk+0x10/0x10 [ 432.777926][T17656] ? __might_fault+0xb0/0x130 [ 432.777967][T17656] should_fail_ex+0x414/0x560 [ 432.778011][T17656] _copy_from_iter+0x1de/0x1790 [ 432.778043][T17656] ? rcu_is_watching+0x15/0xb0 [ 432.778066][T17656] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 432.778096][T17656] ? __pfx__copy_from_iter+0x10/0x10 [ 432.778122][T17656] ? __build_skb_around+0x257/0x3e0 [ 432.778149][T17656] ? netlink_sendmsg+0x642/0xb30 [ 432.778169][T17656] ? skb_put+0x11b/0x210 [ 432.778196][T17656] netlink_sendmsg+0x6b2/0xb30 [ 432.778228][T17656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.778255][T17656] ? aa_sock_msg_perm+0xf1/0x1d0 [ 432.778278][T17656] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.778300][T17656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.778324][T17656] __sock_sendmsg+0x21c/0x270 [ 432.778357][T17656] ____sys_sendmsg+0x505/0x830 [ 432.778391][T17656] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.778427][T17656] ? import_iovec+0x74/0xa0 [ 432.778458][T17656] ___sys_sendmsg+0x21f/0x2a0 [ 432.778486][T17656] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.778554][T17656] ? __fget_files+0x2a/0x420 [ 432.778571][T17656] ? __fget_files+0x3a0/0x420 [ 432.778602][T17656] __x64_sys_sendmsg+0x19b/0x260 [ 432.778631][T17656] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.778668][T17656] ? __pfx_ksys_write+0x10/0x10 [ 432.778692][T17656] ? rcu_is_watching+0x15/0xb0 [ 432.778719][T17656] ? do_syscall_64+0xbe/0x3b0 [ 432.778744][T17656] do_syscall_64+0xfa/0x3b0 [ 432.778764][T17656] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.778784][T17656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.778803][T17656] ? clear_bhb_loop+0x60/0xb0 [ 432.778829][T17656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.778848][T17656] RIP: 0033:0x7f542a78eba9 [ 432.778866][T17656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.778883][T17656] RSP: 002b:00007f542b5a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.778905][T17656] RAX: ffffffffffffffda RBX: 00007f542a9d5fa0 RCX: 00007f542a78eba9 [ 432.778919][T17656] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 432.778931][T17656] RBP: 00007f542b5a3090 R08: 0000000000000000 R09: 0000000000000000 [ 432.778943][T17656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.778954][T17656] R13: 00007f542a9d6038 R14: 00007f542a9d5fa0 R15: 00007fff79c13488 [ 432.778995][T17656] [ 433.155952][T17658] ip6tnl0: Caught tx_queue_len zero misconfig [ 433.169531][T17665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3364'. [ 433.224146][T17670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3364'. [ 433.351361][T17675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.644314][T17380] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 433.721870][T17380] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 433.753095][T17380] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 433.766485][T17380] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 433.771271][T17691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.775333][T17701] rdma_op ffff88807f5aa9f0 conn xmit_rdma 0000000000000000 [ 433.789347][T17690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.849592][T17704] netlink: 'syz.4.3374': attribute type 10 has an invalid length. [ 434.050089][T17717] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3379'. [ 434.111971][T17719] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 434.314813][T17380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.545496][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3386'. [ 434.672216][T17735] tipc: Enabling of bearer rejected, failed to enable media [ 434.684678][T17742] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3387'. [ 434.730481][T17739] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 434.824461][T17380] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.848293][T17751] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 434.870683][ T6051] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.877949][ T6051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.971310][ T6051] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.978570][ T6051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.491372][T17780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3398'. [ 435.510855][T17782] netlink: 'syz.4.3396': attribute type 1 has an invalid length. [ 435.710372][T17793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3401'. [ 435.739306][T17795] FAULT_INJECTION: forcing a failure. [ 435.739306][T17795] name failslab, interval 1, probability 0, space 0, times 0 [ 435.763702][T17795] CPU: 0 UID: 0 PID: 17795 Comm: syz.3.3402 Not tainted syzkaller #0 PREEMPT(full) [ 435.763733][T17795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 435.763745][T17795] Call Trace: [ 435.763754][T17795] [ 435.763763][T17795] dump_stack_lvl+0x189/0x250 [ 435.763794][T17795] ? __pfx____ratelimit+0x10/0x10 [ 435.763816][T17795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.763841][T17795] ? __pfx__printk+0x10/0x10 [ 435.763873][T17795] ? __pfx___might_resched+0x10/0x10 [ 435.763893][T17795] ? fs_reclaim_acquire+0x7d/0x100 [ 435.763919][T17795] should_fail_ex+0x414/0x560 [ 435.763956][T17795] should_failslab+0xa8/0x100 [ 435.763988][T17795] __kmalloc_noprof+0xcb/0x4f0 [ 435.764014][T17795] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 435.764051][T17795] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 435.764090][T17795] genl_family_rcv_msg_doit+0xb8/0x300 [ 435.764127][T17795] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 435.764166][T17795] ? apparmor_capable+0x137/0x1b0 [ 435.764194][T17795] ? bpf_lsm_capable+0x9/0x20 [ 435.764220][T17795] ? security_capable+0x7e/0x2e0 [ 435.764260][T17795] genl_rcv_msg+0x60e/0x790 [ 435.764296][T17795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.764322][T17795] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 435.764348][T17795] ? __pfx_nl80211_set_station+0x10/0x10 [ 435.764375][T17795] ? __pfx_nl80211_post_doit+0x10/0x10 [ 435.764404][T17795] ? __asan_memcpy+0x40/0x70 [ 435.764428][T17795] ? __pfx_ref_tracker_free+0x10/0x10 [ 435.764458][T17795] netlink_rcv_skb+0x208/0x470 [ 435.764477][T17795] ? __lock_acquire+0xab9/0xd20 [ 435.764507][T17795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.764537][T17795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 435.764584][T17795] ? down_read+0x1ad/0x2e0 [ 435.764612][T17795] genl_rcv+0x28/0x40 [ 435.764637][T17795] netlink_unicast+0x82f/0x9e0 [ 435.764688][T17795] ? __pfx_netlink_unicast+0x10/0x10 [ 435.764721][T17795] ? netlink_sendmsg+0x642/0xb30 [ 435.764741][T17795] ? skb_put+0x11b/0x210 [ 435.764770][T17795] netlink_sendmsg+0x805/0xb30 [ 435.764805][T17795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.764832][T17795] ? aa_sock_msg_perm+0xf1/0x1d0 [ 435.764855][T17795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.764877][T17795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.764900][T17795] __sock_sendmsg+0x21c/0x270 [ 435.764936][T17795] ____sys_sendmsg+0x505/0x830 [ 435.764970][T17795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.765007][T17795] ? import_iovec+0x74/0xa0 [ 435.765040][T17795] ___sys_sendmsg+0x21f/0x2a0 [ 435.765070][T17795] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.765143][T17795] ? __fget_files+0x2a/0x420 [ 435.765161][T17795] ? __fget_files+0x3a0/0x420 [ 435.765192][T17795] __x64_sys_sendmsg+0x19b/0x260 [ 435.765222][T17795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.765261][T17795] ? __pfx_ksys_write+0x10/0x10 [ 435.765285][T17795] ? rcu_is_watching+0x15/0xb0 [ 435.765314][T17795] ? do_syscall_64+0xbe/0x3b0 [ 435.765341][T17795] do_syscall_64+0xfa/0x3b0 [ 435.765361][T17795] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.765382][T17795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.765403][T17795] ? clear_bhb_loop+0x60/0xb0 [ 435.765429][T17795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.765448][T17795] RIP: 0033:0x7f2a6eb8eba9 [ 435.765468][T17795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.765485][T17795] RSP: 002b:00007f2a6f9be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.765506][T17795] RAX: ffffffffffffffda RBX: 00007f2a6edd5fa0 RCX: 00007f2a6eb8eba9 [ 435.765522][T17795] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 435.765534][T17795] RBP: 00007f2a6f9be090 R08: 0000000000000000 R09: 0000000000000000 [ 435.765545][T17795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.765556][T17795] R13: 00007f2a6edd6038 R14: 00007f2a6edd5fa0 R15: 00007ffc81b6a248 [ 435.765590][T17795] [ 435.925582][T17380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.262647][T17803] vlan2: entered promiscuous mode [ 436.272745][T17803] vlan2: entered allmulticast mode [ 436.288806][T17803] hsr_slave_1: entered allmulticast mode [ 436.304622][T17806] netlink: 'syz.2.3406': attribute type 1 has an invalid length. [ 436.403365][T17813] sctp: [Deprecated]: syz.3.3408 (pid 17813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.403365][T17813] Use struct sctp_sack_info instead [ 436.456992][T17818] netlink: 'syz.3.3408': attribute type 83 has an invalid length. [ 436.519303][T17380] veth0_vlan: entered promiscuous mode [ 436.543102][T17380] veth1_vlan: entered promiscuous mode [ 436.563174][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3411'. [ 436.618082][T17825] netlink: 'syz.4.3411': attribute type 16 has an invalid length. [ 436.634874][T17825] netlink: 'syz.4.3411': attribute type 17 has an invalid length. [ 436.649749][T17380] veth0_macvtap: entered promiscuous mode [ 436.670088][T17380] veth1_macvtap: entered promiscuous mode [ 436.753731][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3415'. [ 436.805187][T17838] FAULT_INJECTION: forcing a failure. [ 436.805187][T17838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.828497][T17838] CPU: 1 UID: 0 PID: 17838 Comm: syz.2.3416 Not tainted syzkaller #0 PREEMPT(full) [ 436.828527][T17838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 436.828540][T17838] Call Trace: [ 436.828548][T17838] [ 436.828558][T17838] dump_stack_lvl+0x189/0x250 [ 436.828588][T17838] ? __pfx____ratelimit+0x10/0x10 [ 436.828610][T17838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.828634][T17838] ? __pfx__printk+0x10/0x10 [ 436.828661][T17838] ? __might_fault+0xb0/0x130 [ 436.828700][T17838] should_fail_ex+0x414/0x560 [ 436.828746][T17838] _copy_from_user+0x2d/0xb0 [ 436.828773][T17838] ___sys_sendmsg+0x158/0x2a0 [ 436.828803][T17838] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.828869][T17838] ? __fget_files+0x2a/0x420 [ 436.828885][T17838] ? __fget_files+0x3a0/0x420 [ 436.828913][T17838] __x64_sys_sendmsg+0x19b/0x260 [ 436.828943][T17838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.828976][T17838] ? __pfx_ksys_write+0x10/0x10 [ 436.829000][T17838] ? rcu_is_watching+0x15/0xb0 [ 436.829028][T17838] ? do_syscall_64+0xbe/0x3b0 [ 436.829053][T17838] do_syscall_64+0xfa/0x3b0 [ 436.829073][T17838] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.829093][T17838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.829113][T17838] ? clear_bhb_loop+0x60/0xb0 [ 436.829137][T17838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.829156][T17838] RIP: 0033:0x7fab4438eba9 [ 436.829175][T17838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.829193][T17838] RSP: 002b:00007fab451f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.829216][T17838] RAX: ffffffffffffffda RBX: 00007fab445d5fa0 RCX: 00007fab4438eba9 [ 436.829231][T17838] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 436.829243][T17838] RBP: 00007fab451f9090 R08: 0000000000000000 R09: 0000000000000000 [ 436.829255][T17838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.829267][T17838] R13: 00007fab445d6038 R14: 00007fab445d5fa0 R15: 00007fff9e6b1c28 [ 436.829301][T17838] [ 436.900784][T17825] veth2: left promiscuous mode [ 437.074047][T17825] vlan2: left promiscuous mode [ 437.081925][T17825] vlan2: left allmulticast mode [ 437.088283][T17825] hsr_slave_1: left allmulticast mode [ 437.144931][ T6054] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 437.176215][ T8549] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 437.186888][ T6054] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 437.310565][T17380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.361440][T17380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.423785][ T6055] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.461399][ T6055] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.525073][ T6055] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.567820][ T6055] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.782496][T17857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3421'. [ 437.822177][T17857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3421'. [ 437.882001][ T8549] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 437.939959][T17857] virtio_net virtio1 eth0: entered promiscuous mode [ 437.948770][T17857] ifb1: entered promiscuous mode [ 437.970269][T17857] debugfs: 'hsr0' already exists in 'hsr' [ 437.979339][T17857] Cannot create hsr debugfs directory [ 438.037630][ T5955] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 438.071214][T17868] veth0: entered promiscuous mode [ 438.112223][ T6052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.158746][ T6052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.216272][T17868] netlink: 'syz.1.3424': attribute type 1 has an invalid length. [ 438.266247][T17868] netlink: 16078 bytes leftover after parsing attributes in process `syz.1.3424'. [ 438.297458][T17869] netlink: 'syz.1.3424': attribute type 32 has an invalid length. [ 438.307838][ T6053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.341218][ T6053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.454901][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3428'. [ 438.491765][T17880] vlan5: entered allmulticast mode [ 438.498361][T17880] bond0: entered allmulticast mode [ 438.507303][T17880] bond_slave_0: entered allmulticast mode [ 438.533226][T17880] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 438.779081][T17867] veth0: left promiscuous mode [ 439.615485][T17935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3434'. [ 439.861562][T17939] netlink: 'syz.4.3436': attribute type 26 has an invalid length. [ 439.905357][T17939] openvswitch: netlink: Multiple metadata blocks provided [ 440.110029][T17949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3439'. [ 440.244830][T17956] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 440.272200][T17952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.312634][T17952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.358455][T17952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.385009][T17952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.423925][ T5883] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 440.433572][ T5883] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 440.446356][ T5883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 440.458431][ T5883] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 440.471755][ T5883] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 440.665861][T17973] netlink: zone id is out of range [ 440.703045][T17973] netlink: zone id is out of range [ 440.714631][T17973] netlink: zone id is out of range [ 440.725466][T17973] netlink: zone id is out of range [ 440.732564][T17973] netlink: zone id is out of range [ 440.738546][T17973] netlink: zone id is out of range [ 440.766798][T17973] netlink: zone id is out of range [ 440.784377][T17973] netlink: zone id is out of range [ 440.852062][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3447'. [ 440.912345][T17983] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3447'. [ 440.927532][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 440.959388][T17979] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3447'. [ 440.976477][T17982] tipc: Started in network mode [ 440.988760][T17982] tipc: Node identity 6e47504c23f, cluster identity 4711 [ 440.996130][T17982] tipc: Enabled bearer , priority 0 [ 441.052997][T17982] syzkaller0: entered promiscuous mode [ 441.093587][T17982] syzkaller0: entered allmulticast mode [ 441.241544][T17961] chnl_net:caif_netlink_parms(): no params data found [ 441.273215][T17992] tipc: Resetting bearer [ 441.470188][T17980] tipc: Resetting bearer [ 441.519175][T17980] tipc: Disabling bearer [ 441.792878][T17961] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.812483][T17961] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.828188][T17961] bridge_slave_0: entered allmulticast mode [ 441.836545][T17961] bridge_slave_0: entered promiscuous mode [ 441.846196][T17961] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.853638][T17961] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.861565][T17961] bridge_slave_1: entered allmulticast mode [ 441.870505][T17961] bridge_slave_1: entered promiscuous mode [ 442.050729][T17961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.095701][T17961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.430992][T18041] netlink: 'syz.1.3464': attribute type 1 has an invalid length. [ 442.520416][ T5883] Bluetooth: hci3: command tx timeout [ 442.693015][T18041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 442.732344][T18042] bond2: (slave gretap1): making interface the new active one [ 442.742060][T18042] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 442.766101][T17961] team0: Port device team_slave_0 added [ 442.805756][T17961] team0: Port device team_slave_1 added [ 443.001014][T18054] netlink: 'syz.1.3468': attribute type 1 has an invalid length. [ 443.013491][T18054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3468'. [ 443.023440][T17961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.031693][T17961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.148720][T17961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.155378][T18063] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3469'. [ 443.179335][T17961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.203074][T17961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.272872][T17961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.285183][T18064] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.3470'. [ 443.310986][T18064] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.3470'. [ 443.514854][T17961] hsr_slave_0: entered promiscuous mode [ 443.523341][T17961] hsr_slave_1: entered promiscuous mode [ 443.530985][T17961] debugfs: 'hsr0' already exists in 'hsr' [ 443.538065][T17961] Cannot create hsr debugfs directory [ 443.667629][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3477'. [ 443.678973][T18087] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3477'. [ 443.688353][T18087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3477'. [ 443.979126][T17961] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.009740][T17961] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.062528][T18109] sctp: [Deprecated]: syz.3.3482 (pid 18109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.062528][T18109] Use struct sctp_sack_info instead [ 444.082257][T18109] sctp: [Deprecated]: syz.3.3482 (pid 18109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.082257][T18109] Use struct sctp_sack_info instead [ 444.147071][T17961] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.160230][T17961] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.190174][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3483'. [ 444.272414][T17961] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.304022][T17961] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.410328][T17961] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.433404][T17961] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.608636][ T5883] Bluetooth: hci3: command tx timeout [ 444.719572][T17961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 444.763737][T17961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 444.808931][T17961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.842181][T17961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.850228][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3487'. [ 444.980744][T18125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3486'. [ 444.996230][T18132] netlink: 'syz.1.3488': attribute type 30 has an invalid length. [ 445.671229][T18155] sctp: [Deprecated]: syz.3.3493 (pid 18155) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.671229][T18155] Use struct sctp_sack_info instead [ 445.728635][T17961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.801061][T17961] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.839175][T17922] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.846398][T17922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.918648][T17922] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.925843][T17922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.049393][T18165] netlink: 'syz.3.3496': attribute type 1 has an invalid length. [ 446.058614][T18165] netlink: 'syz.3.3496': attribute type 2 has an invalid length. [ 446.067856][T18165] netlink: 'syz.3.3496': attribute type 1 has an invalid length. [ 446.075705][T18165] netlink: 'syz.3.3496': attribute type 2 has an invalid length. [ 446.098249][T18169] netlink: 'syz.4.3498': attribute type 1 has an invalid length. [ 446.237314][T18175] bond1: entered promiscuous mode [ 446.243027][T18175] bond1: entered allmulticast mode [ 446.257250][T18175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.362061][T18174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.373023][T18174] bond1: (slave bond2): making interface the new active one [ 446.381677][T18174] bond2: entered promiscuous mode [ 446.388011][T18174] bond2: entered allmulticast mode [ 446.397193][T18174] bond1: (slave bond2): Enslaving as an active interface with an up link [ 446.563701][T18195] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 446.619493][T18186] ipvlan0: entered promiscuous mode [ 446.678639][ T5883] Bluetooth: hci3: command tx timeout [ 447.142896][T17961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.275133][T18212] IPVS: persistence engine module ip_vs_pe_À not found [ 447.319370][T17961] veth0_vlan: entered promiscuous mode [ 447.352916][T17961] veth1_vlan: entered promiscuous mode [ 447.417604][T18223] netlink: 'syz.4.3508': attribute type 1 has an invalid length. [ 447.443377][T18225] FAULT_INJECTION: forcing a failure. [ 447.443377][T18225] name failslab, interval 1, probability 0, space 0, times 0 [ 447.464140][T17961] veth0_macvtap: entered promiscuous mode [ 447.475716][T17961] veth1_macvtap: entered promiscuous mode [ 447.482052][T18225] CPU: 1 UID: 0 PID: 18225 Comm: syz.1.3509 Not tainted syzkaller #0 PREEMPT(full) [ 447.482080][T18225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 447.482091][T18225] Call Trace: [ 447.482100][T18225] [ 447.482109][T18225] dump_stack_lvl+0x189/0x250 [ 447.482139][T18225] ? __pfx____ratelimit+0x10/0x10 [ 447.482161][T18225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.482185][T18225] ? __pfx__printk+0x10/0x10 [ 447.482208][T18225] ? genl_rcv+0x28/0x40 [ 447.482234][T18225] ? ____sys_sendmsg+0x505/0x830 [ 447.482258][T18225] ? __x64_sys_sendmsg+0x19b/0x260 [ 447.482296][T18225] should_fail_ex+0x414/0x560 [ 447.482332][T18225] should_failslab+0xa8/0x100 [ 447.482364][T18225] kmem_cache_alloc_noprof+0x73/0x3c0 [ 447.482390][T18225] ? skb_clone+0x212/0x3a0 [ 447.482421][T18225] skb_clone+0x212/0x3a0 [ 447.482451][T18225] __netlink_deliver_tap+0x404/0x850 [ 447.482488][T18225] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.482512][T18225] netlink_deliver_tap+0x19c/0x1b0 [ 447.482536][T18225] netlink_sendskb+0x68/0x140 [ 447.482570][T18225] netlink_unicast+0x397/0x9e0 [ 447.482607][T18225] ? __asan_memcpy+0x40/0x70 [ 447.482640][T18225] ? __pfx_netlink_unicast+0x10/0x10 [ 447.482684][T18225] netlink_rcv_skb+0x28c/0x470 [ 447.482703][T18225] ? __lock_acquire+0xab9/0xd20 [ 447.482732][T18225] ? __pfx_genl_rcv_msg+0x10/0x10 [ 447.482761][T18225] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 447.482807][T18225] ? down_read+0x1ad/0x2e0 [ 447.482834][T18225] genl_rcv+0x28/0x40 [ 447.482857][T18225] netlink_unicast+0x82f/0x9e0 [ 447.482899][T18225] ? __pfx_netlink_unicast+0x10/0x10 [ 447.482932][T18225] ? netlink_sendmsg+0x642/0xb30 [ 447.482952][T18225] ? skb_put+0x11b/0x210 [ 447.482980][T18225] netlink_sendmsg+0x805/0xb30 [ 447.483014][T18225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.483047][T18225] ? aa_sock_msg_perm+0xf1/0x1d0 [ 447.483071][T18225] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 447.483094][T18225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.483116][T18225] __sock_sendmsg+0x21c/0x270 [ 447.483150][T18225] ____sys_sendmsg+0x505/0x830 [ 447.483182][T18225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.483220][T18225] ? import_iovec+0x74/0xa0 [ 447.483252][T18225] ___sys_sendmsg+0x21f/0x2a0 [ 447.483281][T18225] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.483355][T18225] ? __fget_files+0x2a/0x420 [ 447.483372][T18225] ? __fget_files+0x3a0/0x420 [ 447.483404][T18225] __x64_sys_sendmsg+0x19b/0x260 [ 447.483435][T18225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.483474][T18225] ? __pfx_ksys_write+0x10/0x10 [ 447.483498][T18225] ? rcu_is_watching+0x15/0xb0 [ 447.483526][T18225] ? do_syscall_64+0xbe/0x3b0 [ 447.483555][T18225] do_syscall_64+0xfa/0x3b0 [ 447.483575][T18225] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.483603][T18225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.483624][T18225] ? clear_bhb_loop+0x60/0xb0 [ 447.483650][T18225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.483669][T18225] RIP: 0033:0x7f542a78eba9 [ 447.483689][T18225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.483706][T18225] RSP: 002b:00007f542b5a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.483729][T18225] RAX: ffffffffffffffda RBX: 00007f542a9d5fa0 RCX: 00007f542a78eba9 [ 447.483744][T18225] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 447.483757][T18225] RBP: 00007f542b5a3090 R08: 0000000000000000 R09: 0000000000000000 [ 447.483769][T18225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.483782][T18225] R13: 00007f542a9d6038 R14: 00007f542a9d5fa0 R15: 00007fff79c13488 [ 447.483818][T18225] [ 447.917206][T17961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.933925][T17961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.957165][ T6044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.972579][ T6044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.006502][ T6044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.059534][ T6044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.080096][T18230] __nla_validate_parse: 9 callbacks suppressed [ 448.080119][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3511'. [ 448.147426][T18231] netlink: 'syz.1.3512': attribute type 21 has an invalid length. [ 448.157309][T18231] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 448.174476][ T6044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.212715][ T6044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.321401][T17911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.322264][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3513'. [ 448.331877][T17911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.517226][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 448.541613][T18241] wg1: entered promiscuous mode [ 448.557128][T18241] wg1: entered allmulticast mode [ 448.757693][ T5883] Bluetooth: hci3: command tx timeout [ 448.820365][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3522'. [ 448.884946][T18260] FAULT_INJECTION: forcing a failure. [ 448.884946][T18260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.898775][T18260] CPU: 0 UID: 0 PID: 18260 Comm: syz.1.3522 Not tainted syzkaller #0 PREEMPT(full) [ 448.898804][T18260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 448.898817][T18260] Call Trace: [ 448.898825][T18260] [ 448.898833][T18260] dump_stack_lvl+0x189/0x250 [ 448.898864][T18260] ? __pfx____ratelimit+0x10/0x10 [ 448.898886][T18260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.898911][T18260] ? __pfx__printk+0x10/0x10 [ 448.898954][T18260] should_fail_ex+0x414/0x560 [ 448.898989][T18260] _copy_to_user+0x31/0xb0 [ 448.899018][T18260] simple_read_from_buffer+0xe1/0x170 [ 448.899051][T18260] proc_fail_nth_read+0x1b3/0x220 [ 448.899079][T18260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.899107][T18260] ? rw_verify_area+0x2a6/0x4d0 [ 448.899131][T18260] ? __lock_acquire+0xab9/0xd20 [ 448.899158][T18260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.899183][T18260] vfs_read+0x200/0xa30 [ 448.899208][T18260] ? fdget_pos+0x247/0x320 [ 448.899232][T18260] ? __pfx___mutex_lock+0x10/0x10 [ 448.899255][T18260] ? __pfx_vfs_read+0x10/0x10 [ 448.899285][T18260] ? __fget_files+0x2a/0x420 [ 448.899309][T18260] ? __fget_files+0x3a0/0x420 [ 448.899326][T18260] ? __fget_files+0x2a/0x420 [ 448.899356][T18260] ksys_read+0x145/0x250 [ 448.899386][T18260] ? __pfx_ksys_read+0x10/0x10 [ 448.899409][T18260] ? rcu_is_watching+0x15/0xb0 [ 448.899446][T18260] ? do_syscall_64+0xbe/0x3b0 [ 448.899475][T18260] do_syscall_64+0xfa/0x3b0 [ 448.899496][T18260] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.899516][T18260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.899536][T18260] ? clear_bhb_loop+0x60/0xb0 [ 448.899562][T18260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.899591][T18260] RIP: 0033:0x7f542a78d5bc [ 448.899611][T18260] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 448.899628][T18260] RSP: 002b:00007f542b5a3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 448.899650][T18260] RAX: ffffffffffffffda RBX: 00007f542a9d5fa0 RCX: 00007f542a78d5bc [ 448.899665][T18260] RDX: 000000000000000f RSI: 00007f542b5a30a0 RDI: 0000000000000004 [ 448.899677][T18260] RBP: 00007f542b5a3090 R08: 0000000000000000 R09: 0000000000000000 [ 448.899689][T18260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.899701][T18260] R13: 00007f542a9d6038 R14: 00007f542a9d5fa0 R15: 00007fff79c13488 [ 448.899742][T18260] [ 449.344727][T18277] delete_channel: no stack [ 449.362208][T18274] netlink: 'syz.3.3525': attribute type 5 has an invalid length. [ 449.645076][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3528'. [ 450.000080][T18301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3535'. [ 450.012888][T18303] netlink: 'syz.4.3536': attribute type 4 has an invalid length. [ 450.024084][T18303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3536'. [ 450.034541][T18303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3536'. [ 450.072551][T18305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3537'. [ 450.082257][T18305] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 450.238970][T18309] netlink: 'syz.1.3538': attribute type 83 has an invalid length. [ 450.250112][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3539'. [ 450.268226][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3539'. [ 450.418641][T18314] hsr_slave_0: left promiscuous mode [ 450.425435][T18314] hsr_slave_1: left promiscuous mode [ 450.995390][T18351] tipc: Enabled bearer , priority 0 [ 451.041676][T18351] syzkaller0: entered promiscuous mode [ 451.067788][T18351] syzkaller0: entered allmulticast mode [ 451.076019][T18356] netlink: 'syz.3.3556': attribute type 23 has an invalid length. [ 451.101650][T18351] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 451.199974][T18351] tipc: Resetting bearer [ 451.275709][T18368] tipc: Resetting bearer [ 451.429721][T18368] tipc: Disabling bearer [ 451.486178][T18379] !€ÿ: renamed from bond_slave_0 (while UP) [ 452.471341][ T6018] IPVS: starting estimator thread 0... [ 452.489120][T18435] net_ratelimit: 28 callbacks suppressed [ 452.489140][T18435] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 452.514916][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 452.525399][T18435] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 452.569829][T18443] nbd: must specify a size in bytes for the device [ 452.575504][T18442] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 452.609308][T18439] IPVS: using max 26 ests per chain, 62400 per kthread [ 452.854721][T18456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.846327][T18498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.911059][T18500] netlink: 'syz.1.3596': attribute type 7 has an invalid length. [ 455.934575][T18500] __nla_validate_parse: 49 callbacks suppressed [ 455.934593][T18500] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3596'. [ 456.224103][T18508] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3599'. [ 456.257792][T18508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3599'. [ 456.287806][T18508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3599'. [ 456.337034][T18512] netlink: 'syz.4.3601': attribute type 32 has an invalid length. [ 456.369520][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3601'. [ 456.717326][T18506] wg2: entered promiscuous mode [ 456.736259][T18506] wg2: entered allmulticast mode [ 456.766383][T18533] netlink: 'syz.1.3603': attribute type 58 has an invalid length. [ 456.787205][T18533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3603'. [ 456.800304][T18512] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 456.970046][T18537] vlan0: entered promiscuous mode [ 456.980512][T18537] vlan0: entered allmulticast mode [ 456.985684][T18537] hsr_slave_1: entered allmulticast mode [ 457.159789][T18541] ------------[ cut here ]------------ [ 457.166252][T18541] refcount_t: underflow; use-after-free. [ 457.175153][T18541] WARNING: CPU: 0 PID: 18541 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 457.185290][T18541] Modules linked in: [ 457.190802][T18541] CPU: 0 UID: 0 PID: 18541 Comm: syz.2.3608 Not tainted syzkaller #0 PREEMPT(full) [ 457.201000][T18541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.211844][T18541] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 457.219430][T18541] Code: 40 b7 e2 8b e8 47 f0 ba fc 90 0f 0b 90 90 eb d7 e8 db 54 f7 fc c6 05 e3 2d c5 0a 01 90 48 c7 c7 a0 b7 e2 8b e8 27 f0 ba fc 90 <0f> 0b 90 90 eb b7 e8 bb 54 f7 fc c6 05 c0 2d c5 0a 01 90 48 c7 c7 [ 457.239917][T18541] RSP: 0018:ffffc9000428f8d8 EFLAGS: 00010246 [ 457.246788][T18541] RAX: 528db4a972320200 RBX: 0000000000000003 RCX: ffff8880791d1e00 [ 457.255557][T18541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 457.268271][T18541] RBP: 0000000000000000 R08: ffffc9000428f607 R09: 1ffff92000851ec0 [ 457.276332][T18541] R10: dffffc0000000000 R11: fffff52000851ec1 R12: ffff8880328dc400 [ 457.285055][T18541] R13: ffff8881453b0c60 R14: ffff8881453b0c78 R15: dffffc0000000000 [ 457.293629][T18541] FS: 00007f1c5936a6c0(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 457.302724][T18541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.309384][T18541] CR2: 00007ffc81b69fc0 CR3: 000000003f862000 CR4: 00000000003526f0 [ 457.317494][T18541] Call Trace: [ 457.320815][T18541] [ 457.323861][T18541] klist_dec_and_del+0x3c7/0x3d0 [ 457.328934][T18541] klist_remove+0x1bd/0x340 [ 457.333474][T18541] ? __pfx_klist_children_put+0x10/0x10 [ 457.339139][T18541] ? __pfx_klist_remove+0x10/0x10 [ 457.344194][T18541] ? __pfx_kobject_move+0x10/0x10 [ 457.349306][T18541] ? do_raw_spin_unlock+0x122/0x240 [ 457.354546][T18541] ? get_device_parent+0x366/0x3a0 [ 457.359788][T18541] device_move+0x193/0x700 [ 457.364245][T18541] hci_conn_del_sysfs+0xb8/0x170 [ 457.370128][T18541] hci_conn_del+0xc33/0x11b0 [ 457.374758][T18541] hci_conn_hash_flush+0x191/0x230 [ 457.380784][T18541] hci_dev_close_sync+0xaef/0x1330 [ 457.385939][T18541] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 457.391713][T18541] ? do_raw_read_unlock+0x3d/0x80 [ 457.396920][T18541] hci_dev_close+0x108/0x200 [ 457.401538][T18541] sock_do_ioctl+0xdc/0x300 [ 457.406048][T18541] ? __pfx_sock_do_ioctl+0x10/0x10 [ 457.411212][T18541] ? __lock_acquire+0xab9/0xd20 [ 457.416106][T18541] sock_ioctl+0x576/0x790 [ 457.420546][T18541] ? __pfx_sock_ioctl+0x10/0x10 [ 457.425430][T18541] ? __fget_files+0x2a/0x420 [ 457.430109][T18541] ? __fget_files+0x3a0/0x420 [ 457.434806][T18541] ? __fget_files+0x2a/0x420 [ 457.439467][T18541] ? bpf_lsm_file_ioctl+0x9/0x20 [ 457.444436][T18541] ? __pfx_sock_ioctl+0x10/0x10 [ 457.449376][T18541] __se_sys_ioctl+0xfc/0x170 [ 457.454088][T18541] do_syscall_64+0xfa/0x3b0 [ 457.464618][T18541] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.470362][T18541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.476464][T18541] ? clear_bhb_loop+0x60/0xb0 [ 457.482059][T18541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.488844][T18541] RIP: 0033:0x7f1c5858eba9 [ 457.493297][T18541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.513178][T18541] RSP: 002b:00007f1c5936a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.521694][T18541] RAX: ffffffffffffffda RBX: 00007f1c587d5fa0 RCX: 00007f1c5858eba9 [ 457.529931][T18541] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000005 [ 457.538045][T18541] RBP: 00007f1c58611e19 R08: 0000000000000000 R09: 0000000000000000 [ 457.546038][T18541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.554089][T18541] R13: 00007f1c587d6038 R14: 00007f1c587d5fa0 R15: 00007ffc9d7a3fe8 [ 457.562380][T18541] [ 457.565424][T18541] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 457.572714][T18541] CPU: 0 UID: 0 PID: 18541 Comm: syz.2.3608 Not tainted syzkaller #0 PREEMPT(full) [ 457.582101][T18541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.592265][T18541] Call Trace: [ 457.595553][T18541] [ 457.598493][T18541] dump_stack_lvl+0x99/0x250 [ 457.603125][T18541] ? __asan_memcpy+0x40/0x70 [ 457.607759][T18541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.612982][T18541] ? __pfx__printk+0x10/0x10 [ 457.617607][T18541] vpanic+0x281/0x750 [ 457.621646][T18541] ? __pfx__printk+0x10/0x10 [ 457.626249][T18541] ? __pfx_vpanic+0x10/0x10 [ 457.630781][T18541] ? is_bpf_text_address+0x292/0x2b0 [ 457.636085][T18541] panic+0xb9/0xc0 [ 457.639815][T18541] ? __pfx_panic+0x10/0x10 [ 457.644266][T18541] __warn+0x31b/0x4b0 [ 457.648257][T18541] ? refcount_warn_saturate+0x11a/0x1d0 [ 457.653820][T18541] ? refcount_warn_saturate+0x11a/0x1d0 [ 457.659375][T18541] report_bug+0x2be/0x4f0 [ 457.663708][T18541] ? refcount_warn_saturate+0x11a/0x1d0 [ 457.669355][T18541] ? refcount_warn_saturate+0x11a/0x1d0 [ 457.674913][T18541] ? refcount_warn_saturate+0x11c/0x1d0 [ 457.680481][T18541] handle_bug+0x84/0x160 [ 457.684739][T18541] exc_invalid_op+0x1a/0x50 [ 457.689247][T18541] asm_exc_invalid_op+0x1a/0x20 [ 457.694102][T18541] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 457.700264][T18541] Code: 40 b7 e2 8b e8 47 f0 ba fc 90 0f 0b 90 90 eb d7 e8 db 54 f7 fc c6 05 e3 2d c5 0a 01 90 48 c7 c7 a0 b7 e2 8b e8 27 f0 ba fc 90 <0f> 0b 90 90 eb b7 e8 bb 54 f7 fc c6 05 c0 2d c5 0a 01 90 48 c7 c7 [ 457.719876][T18541] RSP: 0018:ffffc9000428f8d8 EFLAGS: 00010246 [ 457.725952][T18541] RAX: 528db4a972320200 RBX: 0000000000000003 RCX: ffff8880791d1e00 [ 457.733928][T18541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 457.741906][T18541] RBP: 0000000000000000 R08: ffffc9000428f607 R09: 1ffff92000851ec0 [ 457.749879][T18541] R10: dffffc0000000000 R11: fffff52000851ec1 R12: ffff8880328dc400 [ 457.757961][T18541] R13: ffff8881453b0c60 R14: ffff8881453b0c78 R15: dffffc0000000000 [ 457.765955][T18541] ? refcount_warn_saturate+0x119/0x1d0 [ 457.771524][T18541] klist_dec_and_del+0x3c7/0x3d0 [ 457.776482][T18541] klist_remove+0x1bd/0x340 [ 457.780994][T18541] ? __pfx_klist_children_put+0x10/0x10 [ 457.786561][T18541] ? __pfx_klist_remove+0x10/0x10 [ 457.791696][T18541] ? __pfx_kobject_move+0x10/0x10 [ 457.796727][T18541] ? do_raw_spin_unlock+0x122/0x240 [ 457.801944][T18541] ? get_device_parent+0x366/0x3a0 [ 457.807065][T18541] device_move+0x193/0x700 [ 457.811495][T18541] hci_conn_del_sysfs+0xb8/0x170 [ 457.816577][T18541] hci_conn_del+0xc33/0x11b0 [ 457.821207][T18541] hci_conn_hash_flush+0x191/0x230 [ 457.826362][T18541] hci_dev_close_sync+0xaef/0x1330 [ 457.831518][T18541] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 457.837251][T18541] ? do_raw_read_unlock+0x3d/0x80 [ 457.842295][T18541] hci_dev_close+0x108/0x200 [ 457.846897][T18541] sock_do_ioctl+0xdc/0x300 [ 457.851419][T18541] ? __pfx_sock_do_ioctl+0x10/0x10 [ 457.856539][T18541] ? __lock_acquire+0xab9/0xd20 [ 457.861415][T18541] sock_ioctl+0x576/0x790 [ 457.865756][T18541] ? __pfx_sock_ioctl+0x10/0x10 [ 457.870619][T18541] ? __fget_files+0x2a/0x420 [ 457.875206][T18541] ? __fget_files+0x3a0/0x420 [ 457.879882][T18541] ? __fget_files+0x2a/0x420 [ 457.884479][T18541] ? bpf_lsm_file_ioctl+0x9/0x20 [ 457.889426][T18541] ? __pfx_sock_ioctl+0x10/0x10 [ 457.894287][T18541] __se_sys_ioctl+0xfc/0x170 [ 457.898888][T18541] do_syscall_64+0xfa/0x3b0 [ 457.903397][T18541] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.908603][T18541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.914676][T18541] ? clear_bhb_loop+0x60/0xb0 [ 457.919444][T18541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.925340][T18541] RIP: 0033:0x7f1c5858eba9 [ 457.929768][T18541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.949390][T18541] RSP: 002b:00007f1c5936a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.957906][T18541] RAX: ffffffffffffffda RBX: 00007f1c587d5fa0 RCX: 00007f1c5858eba9 [ 457.965922][T18541] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000005 [ 457.974008][T18541] RBP: 00007f1c58611e19 R08: 0000000000000000 R09: 0000000000000000 [ 457.981999][T18541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.990068][T18541] R13: 00007f1c587d6038 R14: 00007f1c587d5fa0 R15: 00007ffc9d7a3fe8 [ 457.998067][T18541] [ 458.001368][T18541] Kernel Offset: disabled [ 458.005702][T18541] Rebooting in 86400 seconds..