last executing test programs: 4.186638372s ago: executing program 3 (id=7770): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="01002bbd7000000000000c0000000400018084000180140002007465616d5f736c6176655f30000000000800030003000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0800030000000000140002006d6163766c616e3100000000000000000800030000000000080003000000000014000200766972745f7769666930000000000000"], 0x9c}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept(r4, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write(r5, 0x0, 0x0) 4.009713578s ago: executing program 3 (id=7771): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 3.981292707s ago: executing program 4 (id=7773): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 3.853774855s ago: executing program 3 (id=7775): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000fffff00000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x2000}, 0x28) 3.730099334s ago: executing program 3 (id=7779): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) (async) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b) sendmsg$rds(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c800) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x400}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x400}) write$tun(0xffffffffffffffff, 0x0, 0xfdef) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x517ca000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000080)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$inet(r4, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="f1", 0x1}], 0x1}}], 0x1, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') 3.641158318s ago: executing program 4 (id=7781): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001080)=@newtfilter={0x2354, 0x2c, 0xd27, 0x70bd24, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2324, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}, @TCA_CGROUP_ACT={0x54, 0x1, [@m_mpls={0x50, 0x19, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x4de5a}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0x7baac}]}, {0xa, 0x6, "8b857977a315"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_CGROUP_ACT={0x22b8, 0x1, [@m_connmark={0x184, 0x1c, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x60000003, 0x101, 0x8}, 0xe4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x0, 0xfffffffa, 0x6}, 0x65}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0x5, 0xffffffffffffffff, 0x2, 0x8}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x4, 0x0, 0xf, 0xfffffffc}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x0, 0x5, 0x8}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0x0, 0x0, 0x7, 0x3}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2020ea6a, 0x8, 0x8}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0xffffffff, 0x0, 0xfffff6a7, 0x10000}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x2, 0x6, 0x5}, 0x29}}]}, {0x57, 0x6, "c5cceb35a7645888eb595840923c83f043ba3ebb658c3ff3adcffe49af2a9baa4287a81deec3a59ac529be4029c18db3d028009717080000ea90d01d65881e6f80fff4bacb04de962b9d1ed18847c341ec3dff"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x1050, 0x1, 0x0, 0x0, {{0xd}, {0x3, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9e81, 0x8c56, 0xffffffffffffffff, 0x7, 0x9}, 0xe}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x0, 0x3, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0xb}, @TCA_SAMPLE_RATE={0x0, 0x3, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x9}]}, {0x0, 0x6, "dd8eea39eafa5be52b93f8"}, {}, {0x0, 0x8, {0x9ad14bc8f7b551b9, 0x1}}}}, @m_sample={0x1050, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xe7f, 0xffffffff, 0x8, 0x0, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x2354}}, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt(r1, 0xc41, 0xdf, &(0x7f0000001100), 0x0) pipe(0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000580)=0x6) write(0xffffffffffffffff, &(0x7f00000005c0)="0a00dc99ea47", 0x6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r5, 0x0) unshare(0x22020600) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6(0xa, 0x3, 0x7) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) 3.212643225s ago: executing program 2 (id=7788): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x4}]}]}, 0x80}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x41, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000008020000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x4000, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x1020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 3.012369085s ago: executing program 2 (id=7790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x43, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000380), &(0x7f00000003c0)=""/247}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000046001400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="b8914b3f677210a5befd00000500", 0x0, 0x10012000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.059511477s ago: executing program 4 (id=7792): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r3, 0xe2dd266ab2404e65, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r5, 0x0, 0x8, &(0x7f0000001480)="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", 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r6) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r8, 0x0, 0x4008054) write$nci(r7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="51030410"], 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4014800}, 0x80) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r13, &(0x7f00000008c0)={&(0x7f0000000740), 0xc, &(0x7f0000000780)={&(0x7f0000000800)={0x5c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x43b5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x44cd}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r13) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r13, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, r14, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x3, 0x48}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "7e5f8d99193823be77ecebc6bc3f2703"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="e3657d2ac996"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}]}, 0x5c}}, 0x50) bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) 2.039436144s ago: executing program 2 (id=7793): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="c3d75f5d", @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000800004801300010062726f6164636173742d6c696e6b00002400078008000300000000000800030007000000080001000000000008000300050000002c000780080002000100000008000400000100000800030004000000080001001500000008000200030000006a00010073797a30000000000900010073797a3100000000"], 0x94}}, 0x0) 1.985626717s ago: executing program 0 (id=7794): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x1}, 0x3) write$bt_hci(r1, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0xa) 1.985370462s ago: executing program 3 (id=7795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001811005abeef4ba0d598", 0xd}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f", 0x19}], 0x3) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000400)={0xa, 0x4e21, 0x9, @empty}, 0x51) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES16=r3], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r8, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x85, 0x6, @broadcast}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000800)={0xa0000006}) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESHEX=r3, @ANYRES32=r1, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 1.819011007s ago: executing program 1 (id=7796): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="18030000f000000000000000ff00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b5020000140000008500000083000000bc0900000000000055090100240000009500000000002fa86e4e000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x1006, &(0x7f0000001b00)=""/4102, 0x40f00, 0x9, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x334d}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24008010}, 0x4000104) 1.782414368s ago: executing program 2 (id=7797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x3ffd, 0x25dfdbfe, {0x0, 0x0, 0xffff, 0x0, 0xc503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x300000}]}}}]}, 0x40}}, 0x7000000) 1.755306753s ago: executing program 0 (id=7798): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfff}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8044840}, 0x800) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000014c0)='\t', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0xa}}], 0x1, 0x4044805) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e24, 0x2, @mcast2, 0x6}, {0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0xffffffffffffffff, {[0xd0a, 0x3, 0x7ff, 0x1ff, 0xfff, 0x8, 0xffffffff, 0x1]}}, 0x5c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x24}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "7db644b7a2936577bbf8077ef1f3051148"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x120}}, 0x0) r4 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@hci, &(0x7f0000000180)=0x80, 0x80000) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000001c0)=0x1, &(0x7f0000000300)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) 1.738708871s ago: executing program 4 (id=7799): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000002000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x2000}, 0x28) 1.549566023s ago: executing program 1 (id=7800): r0 = socket(0x2b, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e21, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000004800010028bd7000ffdbdf250a001f00", @ANYRES32=0x0, @ANYBLOB="06000000080002000300000014000100ff010000000000000000000000000001"], 0x38}}, 0x88000) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x1f, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf7fffffc}, 0x94) r6 = socket$inet6(0xa, 0x5, 0x0) listen(r6, 0x10000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000008000200095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r10, r9}, 0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.544765046s ago: executing program 4 (id=7801): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) close(r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="10000000", @ANYRES16, @ANYBLOB="200027bd7000fcdbdf252100000044002d8005000400000000000500010004000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0xd, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r7, 0x111, 0x4, 0x0, 0x4) sendmsg$NFC_CMD_DEP_LINK_DOWN(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf250500000008000100", @ANYRES32=r12, @ANYBLOB="7a6f7b4a23b42365833032d25b84d15b377b8c429d3df77eb0613c6f1f0ad35987a487d458504e25bd425a963bc29703db9df4b22f1a3d20eaf339b5d85dd41defda69d9d530c5cd3b36f4d4b5969f38983b6093f7f913f3597f9b0d77c6601963e571f14b4f3eea5fffbe6efea56a55d88a5e3d7265d1b03aa7257f01628c25b4a3321d89744ce6676fc5d87c3533fe"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0xfffffffffffffe6d}, 0x15c29f6e5c45ea87) 1.544004228s ago: executing program 2 (id=7802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0xfffffffd, 0xfffffffd, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x2052}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) unshare(0x400) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc98, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xbc8, 0xffffffff, 0xffffffff, 0xbc8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcf8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r3, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r3, r3, r3, r3, 0xffffffffffffffff, r3], 0x0, 0x10, 0xfffffffe}, 0xc3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r8, 0x7, 0x9, &(0x7f0000000000)=""/112, &(0x7f0000000080)=0x70) setsockopt$RXRPC_SECURITY_KEYRING(r7, 0x110, 0x2, &(0x7f0000000500)='\x00\xe7(\xe0\xd5c\xd0a\x16\xca\x03$\x18i\x15\xc6\xf3Sf\x8dS8\xb4\"\xc5\xaecF\xa4!\t\x1fxd\xae\xb4\x90\xd3\xe6\xa2\xfbli\xd0\xa6H\xd6\x1dO\"\xbc\xda\x80\xbd\xa2\xdb\xff\x00\x00{\\\xd7\xbc*M\xd6\xe1\xdb\xe4\x00\x1a\xa2\x8a\x01\b\xc5\xe2+\xe2\x1e\xe9$d\xac[Z\x17\xb2\xab\x81\a\xbe\x17\x84\xfd\xadL7\xca\xe5\x8f\xb2\x9fv=L', 0xff09) syz_emit_ethernet(0x66, &(0x7f00000007c0)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "1cc825", 0x30, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}, @local, {[@dstopts={0x2c, 0x4, '\x00', [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r9, 0x25, 0x2, @void}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r11, r13, 0x25, 0x0, @val=@netkit={@void, @value=r11}}, 0x1c) 1.541033281s ago: executing program 0 (id=7803): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000046001400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="b8914b3f677210a5befd00000500", 0x0, 0x10012000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.403391963s ago: executing program 1 (id=7804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 1.100983917s ago: executing program 1 (id=7805): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)="00e9b72f", 0x4}], 0x1, &(0x7f0000000600)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x0, 0x4, 0x2e}}], 0x38, 0x800}], 0x1, 0x4008080) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) (async) unshare(0x22020600) (async) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) (async) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) setsockopt$ax25_int(r7, 0x101, 0x3, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$tun(r8, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 578.826007ms ago: executing program 0 (id=7806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="a800028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030006"], 0xc4}, 0x1, 0x0, 0x0, 0x44090}, 0x2404c080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x20) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000ec0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x3e}, 0x1, 0x7}, 0x48000) r4 = accept4(r3, &(0x7f0000000180)=@tipc=@id, &(0x7f00000003c0)=0x80, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000e80)={'ip6_vti0\x00', &(0x7f0000000e00)={'syztnl0\x00', r2, 0x4, 0x4, 0x1, 0x2, 0x4e, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7808, 0x8, 0xa, 0x6}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x10, 0x0, &(0x7f0000000040)="82b9f84733950d1d6fc704234c7eb3bb", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000926010a00000000000000000a0000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, 0x1}, 0xc) 578.418624ms ago: executing program 3 (id=7807): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000010000883e"], 0xfdef) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8106}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001900010000000000ffdbdf25e000000200000000000000000000000000000000000000000000000000f5000000000000000400000a00002087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040fbffffffffffffff000000000000000000100000000000000000000000000002000000000000000000080000b06b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000300000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000007c20665ba0621e00000000000007000000000000000000000000400000000000000200000b0200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffff000000100000000000000000000000000029225d09a0407a1e07ec"], 0xb8}}, 0x44) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0xffffffffffffffca, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00030000200000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000001e010100000000000000000000810100000000"], 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x32}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x4e26, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r10, 0xfffffffd) r11 = accept4(r10, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f0000001000), 0x581, 0x40000000, 0x0) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r12, 0x114, 0x8, &(0x7f00000004c0)=0x2, 0x4) setsockopt$RDS_FREE_MR(r12, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6d}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f00000002c0)={0x7, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) setsockopt$inet_sctp6_SCTP_MAXSEG(r11, 0x84, 0xd, &(0x7f00000000c0), 0x4) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xe8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x3}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}, [@lifetime_val={0x24, 0x9, {0x1, 0x44c4, 0x7, 0x6}}, @policy_type={0xa}]}, 0xe8}}, 0x10) 236.989912ms ago: executing program 0 (id=7808): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x1}, 0x3) write$bt_hci(r1, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0xa) 236.379492ms ago: executing program 2 (id=7809): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000700)=@ethtool_sset_info={0x37, 0xfc, 0xfffffffffffffffa}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000700)=@ethtool_sset_info={0x37, 0xfc, 0xfffffffffffffffa}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f0000003140)=""/4110, &(0x7f0000000000)=0x100e) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x8, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 234.177047ms ago: executing program 1 (id=7810): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0xf132, 0xffffffffffffffff, 0xa4fdf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000070000000000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000007a0000007600000000000000270000000000b6dd9500000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb75916fc7f88ebc92863f7341e8323af3bccd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x14, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000270000/0x2000)=nil, 0x2000, 0x200000d, 0x110, r0, 0x58d4c000) socketpair(0x1d, 0x3, 0x1, &(0x7f00000008c0)) 196.583453ms ago: executing program 4 (id=7811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02faffffff000000060000030000000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="40c20000000000001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB="080003"], 0x40}}, 0x0) close(0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c0002"], 0x24}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0100ffffffff000000000100000004000780"], 0x40}}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b00001400"], 0x6c}, 0x1, 0x0, 0x0, 0x8040040}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02faffffff000000060000030000000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="40c20000000000001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB="080003"], 0x40}}, 0x0) (async) close(0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c0002"], 0x24}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0100ffffffff000000000100000004000780"], 0x40}}, 0x20000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b00001400"], 0x6c}, 0x1, 0x0, 0x0, 0x8040040}, 0x0) (async) 64.086486ms ago: executing program 1 (id=7812): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000003000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x2000}, 0x28) 0s ago: executing program 0 (id=7813): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x3a, 0xca, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f0000000080)={'wg1\x00', @ifru_ivalue=0x3}}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) socket$netlink(0x10, 0x3, 0x0) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[], 0xa) kernel console output (not intermixed with test programs): 07.949056][T28625] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6169'. [ 808.003884][T28625] .`: renamed from bond0 (while UP) [ 808.067997][T28630] pim6reg: entered allmulticast mode [ 808.086978][T28632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6172'. [ 808.109041][T27952] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 808.124434][T28632] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6172'. [ 808.155929][T28630] pim6reg: left allmulticast mode [ 808.219828][T28632] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 808.297688][T28638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6173'. [ 808.418612][T28427] Set syz1 is full, maxelem 65536 reached [ 808.746466][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 808.849798][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 808.856097][ T1300] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 809.265803][T28689] IPv6: addrconf: prefix option has invalid lifetime [ 809.443898][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 809.455641][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 809.467272][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 809.477451][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 809.489131][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 809.618377][T28694] lo speed is unknown, defaulting to 1000 [ 809.801473][T15868] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 809.816475][T28711] lo speed is unknown, defaulting to 1000 [ 809.820308][T10062] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 809.836062][T10062] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 809.849962][T28716] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 809.902858][T28713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 809.978398][T28722] netlink: 'syz.3.6202': attribute type 64 has an invalid length. [ 810.208356][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.220431][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.259114][ T856] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 810.307775][T28731] netlink: 'syz.2.6206': attribute type 1 has an invalid length. [ 810.405429][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.434978][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.482254][T28694] chnl_net:caif_netlink_parms(): no params data found [ 810.590913][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.608094][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.656967][T28747] macvtap2: entered promiscuous mode [ 810.663012][T28747] macvtap2: entered allmulticast mode [ 810.668581][T28747] veth1_vlan: entered allmulticast mode [ 810.697087][T28747] macvtap3: entered promiscuous mode [ 810.702909][T28747] macvtap3: entered allmulticast mode [ 810.761672][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.774766][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.928543][T28694] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.947211][T28694] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.959613][T28694] bridge_slave_0: entered allmulticast mode [ 810.974825][T28694] bridge_slave_0: entered promiscuous mode [ 811.015777][T28694] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.025340][T28694] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.033409][T28694] bridge_slave_1: entered allmulticast mode [ 811.049049][T28694] bridge_slave_1: entered promiscuous mode [ 811.066919][ T1338] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 811.076190][ T1338] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 811.163196][T10062] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 811.175382][T10062] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 811.248111][T10060] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 811.268945][T10060] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 811.281688][T28694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.303160][T28694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.364206][T10060] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 811.373920][T10060] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20004 - 0 [ 811.410833][ T12] hsr0: left allmulticast mode [ 811.421187][ T12] hsr_slave_0: left allmulticast mode [ 811.426688][ T12] hsr_slave_1: left allmulticast mode [ 811.433024][ T12] bridge0: port 1(hsr0) entered disabled state [ 811.457175][ T12] erspan0: left allmulticast mode [ 811.466210][ T12] erspan0: left promiscuous mode [ 811.471912][ T12] bridge4: port 1(erspan0) entered disabled state [ 811.498308][ T12] dvmrp0: left allmulticast mode [ 811.559052][ T5839] Bluetooth: hci4: command tx timeout [ 811.752497][T28756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 812.274068][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 812.285376][ T12] bond0 (unregistering): Released all slaves [ 812.296564][ T12] bond1 (unregistering): Released all slaves [ 812.318623][ T12] bond2 (unregistering): Released all slaves [ 812.333660][ T12] bond3 (unregistering): Released all slaves [ 812.348548][ T12] bond4 (unregistering): Released all slaves [ 812.364385][ T12] bond5 (unregistering): Released all slaves [ 812.394183][ T12] bond6 (unregistering): Released all slaves [ 812.454780][T28785] syzkaller0: entered promiscuous mode [ 812.474367][T28785] syzkaller0: entered allmulticast mode [ 812.583758][T28694] team0: Port device team_slave_0 added [ 812.633252][ T12] hmac(sha224: left promiscuous mode [ 812.681761][T28694] team0: Port device team_slave_1 added [ 812.744512][T28805] netlink: 'syz.3.6223': attribute type 1 has an invalid length. [ 812.758391][ T12] tipc: Left network mode [ 812.843596][T28811] netlink: 'syz.1.6225': attribute type 6 has an invalid length. [ 812.874212][T28805] bond0: entered promiscuous mode [ 812.880087][T28805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.916851][T28810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.924502][T28810] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 812.963981][T28810] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 812.994993][T28810] bond0: (slave wireguard0): making interface the new active one [ 813.018148][T28810] wireguard0: entered promiscuous mode [ 813.062490][T28810] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 813.108971][T28694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.128966][T28694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.201975][T28694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.278830][T28811] lo speed is unknown, defaulting to 1000 [ 813.279512][T28827] __nla_validate_parse: 7 callbacks suppressed [ 813.279558][T28827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6226'. [ 813.337977][T28694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.366757][T28694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.420255][T28694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.638981][ T5839] Bluetooth: hci4: command tx timeout [ 813.706313][T28694] hsr_slave_0: entered promiscuous mode [ 813.718988][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 813.730403][T28694] hsr_slave_1: entered promiscuous mode [ 813.739406][T28694] debugfs: 'hsr0' already exists in 'hsr' [ 813.745205][T28694] Cannot create hsr debugfs directory [ 813.822542][T28848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6230'. [ 814.342026][T28867] netem: change failed [ 814.369210][T28865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 814.662209][T28875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6239'. [ 814.769478][ T12] hsr_slave_0: left promiscuous mode [ 814.775710][ T12] hsr_slave_1: left promiscuous mode [ 814.791613][ T12] batman_adv: batadv0: Removing interface: ipvlan3 [ 814.821125][ T12] veth0_macvtap: left promiscuous mode [ 814.827507][ T12] veth1_vlan: left promiscuous mode [ 814.836456][ T12] veth0_vlan: left promiscuous mode [ 815.108150][T28898] netlink: 'syz.1.6244': attribute type 7 has an invalid length. [ 815.406218][T28894] veth0_virt_wifi: entered allmulticast mode [ 815.451328][T28694] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.483161][T28694] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 815.592844][T28909] IPv6: addrconf: prefix option has invalid lifetime [ 815.705097][T28694] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.719197][ T5839] Bluetooth: hci4: command tx timeout [ 815.757559][T28694] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 815.880813][T28921] tc_dump_action: action bad kind [ 816.095067][T28694] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.119433][T28694] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 816.141365][T28944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6255'. [ 816.141365][T28945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6255'. [ 816.201006][T28923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6250'. [ 816.264447][T28944] vlan2: entered promiscuous mode [ 816.274773][T28949] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6256'. [ 816.288232][T28944] bridge0: entered promiscuous mode [ 816.325955][T28945] vlan2: entered promiscuous mode [ 816.355944][ T12] IPVS: stop unused estimator thread 0... [ 816.433178][T28694] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.447831][T28956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6257'. [ 816.467412][T28694] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 816.782278][T28970] netlink: 'syz.2.6260': attribute type 83 has an invalid length. [ 816.790898][T28970] netlink: 'syz.2.6260': attribute type 1 has an invalid length. [ 816.810918][T16182] IPVS: starting estimator thread 0... [ 816.909713][T28972] IPVS: using max 26 ests per chain, 62400 per kthread [ 817.125633][T28694] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 817.180948][T28694] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 817.199700][T28985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6265'. [ 817.234055][T28694] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 817.266235][T28694] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 817.596830][T28694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.802707][ T5839] Bluetooth: hci4: command tx timeout [ 817.920570][T28694] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.954643][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.961954][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.021024][T10060] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.028403][T10060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.514489][T29039] netlink: 'syz.2.6276': attribute type 5 has an invalid length. [ 818.532206][T29043] netlink: 308 bytes leftover after parsing attributes in process `syz.3.6277'. [ 818.555420][T29039] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6276'. [ 818.645598][T29047] batman_adv: batadv0: Adding interface: wlan1 [ 818.676022][T29047] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 818.896891][T28694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.911880][T29052] tun0: tun_chr_ioctl cmd 1074812118 [ 818.919894][T29052] tun0: tun_chr_ioctl cmd 1074033169 [ 819.075900][T28694] veth0_vlan: entered promiscuous mode [ 819.107507][T28694] veth1_vlan: entered promiscuous mode [ 819.267234][T28694] veth0_macvtap: entered promiscuous mode [ 819.306567][T28694] veth1_macvtap: entered promiscuous mode [ 819.387886][T28694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.433429][T28694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.471589][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.498176][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.552089][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.589240][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.638044][T29086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6287'. [ 819.667989][T29086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6287'. [ 819.724921][T29091] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6288'. [ 819.955714][T10060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.974617][T10060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.106210][T10062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.115782][T10062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.588922][T29126] netlink: 272 bytes leftover after parsing attributes in process `syz.4.6298'. [ 820.720581][T29130] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 820.812670][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 820.829451][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 820.839276][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 820.847587][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 820.859177][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 820.941896][T29137] Bluetooth: MGMT ver 1.23 [ 821.190008][T29137] syzkaller0: entered promiscuous mode [ 821.195994][T29137] syzkaller0: entered allmulticast mode [ 821.293814][T29138] lo speed is unknown, defaulting to 1000 [ 822.278951][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 822.567182][T29195] netlink: 272 bytes leftover after parsing attributes in process `syz.3.6309'. [ 822.814036][T29201] netlink: 'syz.3.6311': attribute type 1 has an invalid length. [ 822.924556][ T5839] Bluetooth: hci3: command tx timeout [ 823.994200][T29201] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 824.132285][T29212] netlink: 'syz.0.6314': attribute type 1 has an invalid length. [ 824.156381][T29212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6314'. [ 824.343303][T29220] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6315'. [ 824.481046][T29138] chnl_net:caif_netlink_parms(): no params data found [ 824.657883][T29231] netlink: 300 bytes leftover after parsing attributes in process `syz.0.6319'. [ 824.762250][T29233] veth1_to_bond: entered allmulticast mode [ 824.803402][T29233] veth1_to_bond: left allmulticast mode [ 824.810386][T29238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6321'. [ 824.833707][T29240] netlink: 'syz.0.6322': attribute type 1 has an invalid length. [ 824.864018][T29240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6322'. [ 824.917837][T10060] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.958921][T10060] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 824.973219][T29242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6323'. [ 824.994361][T29138] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.002151][ T5839] Bluetooth: hci3: command tx timeout [ 825.011269][T29138] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.018675][T29138] bridge_slave_0: entered allmulticast mode [ 825.028616][T29138] bridge_slave_0: entered promiscuous mode [ 825.049945][T29242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6323'. [ 825.085410][T10060] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.106569][T29138] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.120982][T29138] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.139111][T29138] bridge_slave_1: entered allmulticast mode [ 825.157677][T29138] bridge_slave_1: entered promiscuous mode [ 825.211573][T10060] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.262631][T10060] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.276885][T29253] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6327'. [ 825.286263][T10060] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.317323][T29138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.343649][T10060] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.363304][T10060] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 825.392613][T29138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.442407][T10060] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.452040][T10060] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 825.548296][T29262] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6329'. [ 825.669775][ T146] bond4 (unregistering): (slave vti0): Releasing backup interface [ 825.678182][ T146] vti0 (unregistering): left promiscuous mode [ 825.970668][T29276] netlink: 'syz.4.6333': attribute type 39 has an invalid length. [ 826.215203][ T146] bond0 (unregistering): left allmulticast mode [ 826.243453][ T146] bond0 (unregistering): Released all slaves [ 826.260125][ T146] bond1 (unregistering): Released all slaves [ 826.276664][ T146] bond2 (unregistering): Released all slaves [ 826.293892][ T146] bond3 (unregistering): Released all slaves [ 826.316091][ T146] bond4 (unregistering): Released all slaves [ 826.339034][ T146] bond5 (unregistering): Released all slaves [ 826.368490][ T146] bond6 (unregistering): Released all slaves [ 826.394385][ T146] bond7 (unregistering): Released all slaves [ 826.418643][ T146] bond8 (unregistering): Released all slaves [ 826.435244][ T146] bond9 (unregistering): Released all slaves [ 826.456892][ T146] bond10 (unregistering): Released all slaves [ 826.471735][ T146] bond11 (unregistering): Released all slaves [ 826.505421][T29138] team0: Port device team_slave_0 added [ 826.511278][T10060] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.526399][T10060] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20004 - 0 [ 826.685610][T29138] team0: Port device team_slave_1 added [ 826.742696][ T146] tipc: Disabling bearer [ 826.750997][ T146] tipc: Left network mode [ 826.767970][T29285] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 826.816052][T29138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.843702][T29138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.898613][T29138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.968019][T29292] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6339'. [ 827.086252][ T5839] Bluetooth: hci3: command tx timeout [ 827.259296][T29138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.266318][T29138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.353891][T29138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.383204][T29289] sch_fq: defrate 53322 ignored. [ 827.389295][T10062] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.409038][T10062] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.531850][T10062] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.549038][T10062] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.650785][T29314] sctp: [Deprecated]: syz.3.6340 (pid 29314) Use of int in maxseg socket option. [ 827.650785][T29314] Use struct sctp_assoc_value instead [ 827.773909][T29138] hsr_slave_0: entered promiscuous mode [ 827.800363][T29138] hsr_slave_1: entered promiscuous mode [ 827.824778][T29138] debugfs: 'hsr0' already exists in 'hsr' [ 827.841197][T29138] Cannot create hsr debugfs directory [ 828.140709][T29323] lo speed is unknown, defaulting to 1000 [ 828.454312][ T146] batman_adv: batadv0: Removing interface: wlan1 [ 828.626486][T29334] bridge1: entered promiscuous mode [ 828.725444][T29138] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.749255][T29138] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 828.951018][T29138] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.988932][T29138] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 829.101081][ T146] hsr_slave_0: left promiscuous mode [ 829.110320][ T146] hsr_slave_1: left promiscuous mode [ 829.137218][ T146] veth1_vlan: left allmulticast mode [ 829.159531][ T5839] Bluetooth: hci3: command tx timeout [ 829.721088][T29298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 829.782931][T29290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 829.823176][T29138] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.835177][T29138] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 829.968563][T29138] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.011244][T29138] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 830.363404][T29387] lo speed is unknown, defaulting to 1000 [ 830.464573][T29138] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 830.529706][T29138] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 830.566994][T29395] bridge4: entered promiscuous mode [ 830.575994][T29138] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 830.635438][T29138] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 830.665593][ T146] vlan3: left allmulticast mode [ 830.678211][ T146] .`: left allmulticast mode [ 830.702134][ T146] bond_slave_0: left allmulticast mode [ 830.707983][ T146] bond_slave_1: left allmulticast mode [ 830.714224][ T146] vlan3: left promiscuous mode [ 830.719794][ T146] .`: left promiscuous mode [ 830.724463][ T146] bond_slave_0: left promiscuous mode [ 830.730911][ T146] bond_slave_1: left promiscuous mode [ 830.737014][ T146] bridge0: port 3(vlan3) entered disabled state [ 830.746555][ T146] bridge_slave_1: left allmulticast mode [ 830.752399][ T146] bridge_slave_1: left promiscuous mode [ 830.760090][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.771983][T29405] __nla_validate_parse: 2 callbacks suppressed [ 830.772005][T29405] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6357'. [ 830.781448][ T146] bridge_slave_0: left allmulticast mode [ 830.794306][ T146] bridge_slave_0: left promiscuous mode [ 830.800747][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.029633][T29415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6357'. [ 831.049076][T29415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6357'. [ 831.629032][ T146] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.642254][ T146] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.651819][ T146] .` (unregistering): Released all slaves [ 831.669590][ T146] bond1 (unregistering): (slave batadv1): Releasing active interface [ 831.679843][ T146] bond1 (unregistering): Released all slaves [ 831.695486][ T146] bond2 (unregistering): Released all slaves [ 831.714291][ T146] bond0 (unregistering): Released all slaves [ 831.875164][ T146] !: left promiscuous mode [ 831.995206][ T146] tipc: Left network mode [ 832.127238][T29450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.146660][ T29] audit: type=1800 audit(1774496840.240:12): pid=29449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6363" name="blkio.bfq.time_recursive" dev="tmpfs" ino=704 res=0 errno=0 [ 832.288625][T29454] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 832.296606][T29454] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 832.383597][T29138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.423187][T29138] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.467016][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.474263][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.517580][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.524840][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.598185][T29463] veth0: entered promiscuous mode [ 832.604515][T29463] vlan2: entered promiscuous mode [ 832.645158][ T146] hsr_slave_0: left promiscuous mode [ 832.651795][ T146] hsr_slave_1: left promiscuous mode [ 832.658542][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.667810][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.964603][ T146] team_slave_1 (unregistering): left promiscuous mode [ 832.972859][ T146] team0 (unregistering): Port device team_slave_1 removed [ 832.987282][ T146] team_slave_0 (unregistering): left promiscuous mode [ 832.998619][ T146] team0 (unregistering): Port device team_slave_0 removed [ 833.194294][T29481] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6375'. [ 833.205424][T29481] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6375'. [ 833.377388][T29485] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6376'. [ 833.400651][T29485] tipc: Invalid UDP bearer configuration [ 833.400714][T29485] tipc: Enabling of bearer rejected, failed to enable media [ 833.480609][T29485] 8021q: adding VLAN 0 to HW filter on device bond2 [ 833.870202][T29499] bridge5: entered promiscuous mode [ 833.965179][ T146] IPVS: stop unused estimator thread 0... [ 833.981993][T29505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6383'. [ 833.993909][T29138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.094097][T29511] IPVS: set_ctl: invalid protocol: 40 172.20.20.187:20001 [ 834.113699][T29511] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6386'. [ 834.153277][T29138] veth0_vlan: entered promiscuous mode [ 834.191525][T29138] veth1_vlan: entered promiscuous mode [ 834.288479][T29138] veth0_macvtap: entered promiscuous mode [ 834.302715][T29138] veth1_macvtap: entered promiscuous mode [ 834.339810][T29138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.366759][T29138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.409459][ T77] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.439147][ T77] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.465772][ T77] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.482515][T29528] IPv6: addrconf: prefix option has invalid lifetime [ 834.520392][ T77] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.546902][T29529] vlan2: entered promiscuous mode [ 834.650315][T29532] bridge2: entered promiscuous mode [ 834.756679][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.790362][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.807088][T29541] netlink: 'syz.3.6397': attribute type 1 has an invalid length. [ 834.858007][T29541] 8021q: adding VLAN 0 to HW filter on device bond10 [ 834.876055][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.897017][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.908846][T29541] bond10: (slave gretap1): making interface the new active one [ 834.918081][T29541] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 834.981787][T29545] netlink: 'syz.4.6398': attribute type 2 has an invalid length. [ 835.013667][T29545] l24): entered promiscuous mode [ 835.221090][T29560] IPv6: addrconf: prefix option has invalid lifetime [ 835.619511][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 835.630205][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 835.640852][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 835.649084][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 835.659503][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 835.742492][T29575] lo speed is unknown, defaulting to 1000 [ 835.837538][T29580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6409'. [ 836.016697][T29575] chnl_net:caif_netlink_parms(): no params data found [ 836.217521][T29575] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.225417][T29575] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.235675][T29575] bridge_slave_0: entered allmulticast mode [ 836.243692][T29575] bridge_slave_0: entered promiscuous mode [ 836.253284][T29575] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.260973][T29575] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.268274][T29575] bridge_slave_1: entered allmulticast mode [ 836.276592][T29575] bridge_slave_1: entered promiscuous mode [ 836.317469][T29599] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6413'. [ 836.349094][T29599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6413'. [ 836.402993][T29575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.415494][T29601] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 836.447142][T29575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.616074][T29575] team0: Port device team_slave_0 added [ 836.623451][T29610] bond0: Caught tx_queue_len zero misconfig [ 836.639851][T29610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6417'. [ 836.661590][T29610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6417'. [ 836.673146][T29575] team0: Port device team_slave_1 added [ 836.760738][T29575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.776121][T29575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.828056][T29575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.891919][T29575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.904482][T29575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.958786][T29575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.490566][T29634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6423'. [ 837.501879][T29634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6423'. [ 837.553839][T29575] hsr_slave_0: entered promiscuous mode [ 837.567323][T29575] hsr_slave_1: entered promiscuous mode [ 837.577363][T29575] debugfs: 'hsr0' already exists in 'hsr' [ 837.583959][T29575] Cannot create hsr debugfs directory [ 837.719705][ T5839] Bluetooth: hci0: command tx timeout [ 838.238603][T29675] IPv6: addrconf: prefix option has invalid lifetime [ 838.306457][T29679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6437'. [ 838.323328][T29679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6437'. [ 838.882619][T29698] lo speed is unknown, defaulting to 1000 [ 838.942628][T29716] netlink: 'syz.0.6445': attribute type 10 has an invalid length. [ 838.964870][T29716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.976098][T29716] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 839.270014][T29727] IPv6: addrconf: prefix option has invalid lifetime [ 839.372461][T29731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6450'. [ 839.799864][ T5839] Bluetooth: hci0: command tx timeout [ 841.695960][T29700] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 841.708296][T29575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 841.778596][T29575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 841.862254][T29575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 841.879730][ T5839] Bluetooth: hci0: command tx timeout [ 841.890464][T29771] netlink: 'syz.0.6462': attribute type 30 has an invalid length. [ 841.896521][T29575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 841.918148][T29772] FAULT_INJECTION: forcing a failure. [ 841.918148][T29772] name failslab, interval 1, probability 0, space 0, times 0 [ 841.932379][T29767] __nla_validate_parse: 3 callbacks suppressed [ 841.932404][T29767] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6461'. [ 841.942526][T29773] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6461'. [ 841.972730][T29772] CPU: 1 UID: 0 PID: 29772 Comm: syz.4.6463 Not tainted syzkaller #0 PREEMPT(full) [ 841.972767][T29772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 841.972782][T29772] Call Trace: [ 841.972791][T29772] [ 841.972801][T29772] dump_stack_lvl+0xe8/0x150 [ 841.972841][T29772] should_fail_ex+0x412/0x560 [ 841.972879][T29772] should_failslab+0xa8/0x100 [ 841.972912][T29772] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 841.972938][T29772] ? __alloc_skb+0x186/0x7d0 [ 841.972963][T29772] ? __alloc_skb+0x1d0/0x7d0 [ 841.972984][T29772] ? __local_bh_enable_ip+0xd0/0x130 [ 841.973020][T29772] __alloc_skb+0x1d0/0x7d0 [ 841.973044][T29772] ? ima_match_policy+0x112/0x21e0 [ 841.973160][T29772] alloc_skb_with_frags+0xca/0x890 [ 841.973215][T29772] sock_alloc_send_pskb+0x878/0x990 [ 841.973266][T29772] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 841.973306][T29772] ? __pfx_process_measurement+0x10/0x10 [ 841.973337][T29772] l2cap_sock_alloc_skb_cb+0xef/0x490 [ 841.973422][T29772] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 841.973459][T29772] l2cap_chan_send+0x1e8/0x25a0 [ 841.973513][T29772] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 841.973539][T29772] ? lockdep_hardirqs_on+0x7a/0x110 [ 841.973565][T29772] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 841.973591][T29772] ? bt_sock_wait_ready+0x4c3/0x5d0 [ 841.973740][T29772] ? l2cap_sock_sendmsg+0x327/0x4e0 [ 841.973783][T29772] ? __pfx_l2cap_chan_send+0x10/0x10 [ 841.973817][T29772] ? l2cap_sock_sendmsg+0x2d1/0x4e0 [ 841.973852][T29772] ? l2cap_sock_sendmsg+0x2d1/0x4e0 [ 841.973886][T29772] ? __local_bh_enable_ip+0xd0/0x130 [ 841.973920][T29772] l2cap_sock_sendmsg+0x33d/0x4e0 [ 841.973958][T29772] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 841.973997][T29772] ? aa_sock_msg_perm+0xf1/0x1b0 [ 841.974031][T29772] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 841.974059][T29772] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 841.974092][T29772] sock_write_iter+0x49b/0x4f0 [ 841.974126][T29772] ? __pfx_sock_write_iter+0x10/0x10 [ 841.974189][T29772] do_iter_readv_writev+0x619/0x8c0 [ 841.974221][T29772] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 841.974253][T29772] ? bpf_lsm_file_permission+0x9/0x20 [ 841.974280][T29772] ? security_file_permission+0x75/0x260 [ 841.974311][T29772] ? rw_verify_area+0x255/0x4d0 [ 841.974339][T29772] vfs_writev+0x33c/0x990 [ 841.974379][T29772] ? __pfx_vfs_writev+0x10/0x10 [ 841.974424][T29772] ? __fget_files+0x2a/0x420 [ 841.974462][T29772] ? __fget_files+0x3a0/0x420 [ 841.974494][T29772] ? __fget_files+0x2a/0x420 [ 841.974536][T29772] do_writev+0x154/0x2e0 [ 841.974569][T29772] ? __pfx_do_writev+0x10/0x10 [ 841.974612][T29772] do_syscall_64+0x14d/0xf80 [ 841.974637][T29772] ? trace_irq_disable+0x3b/0x150 [ 841.974669][T29772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.974693][T29772] ? clear_bhb_loop+0x40/0x90 [ 841.974721][T29772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.974744][T29772] RIP: 0033:0x7fbe11f9c799 [ 841.974767][T29772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.974786][T29772] RSP: 002b:00007fbe12e30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 841.974810][T29772] RAX: ffffffffffffffda RBX: 00007fbe12215fa0 RCX: 00007fbe11f9c799 [ 841.974826][T29772] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000004 [ 841.974840][T29772] RBP: 00007fbe12e30090 R08: 0000000000000000 R09: 0000000000000000 [ 841.974854][T29772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.974867][T29772] R13: 00007fbe12216038 R14: 00007fbe12215fa0 R15: 00007ffdb4abf4a8 [ 841.974900][T29772] [ 842.334112][T29767] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6461'. [ 842.417943][T29767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.461453][T29767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.494368][T29767] bond0 (unregistering): Released all slaves [ 842.521563][T29773] lo: Caught tx_queue_len zero misconfig [ 842.743166][T29795] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 842.930603][T29575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.960529][T29803] netlink: 'syz.2.6473': attribute type 22 has an invalid length. [ 842.968986][T29803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6473'. [ 843.023241][T29803] netlink: 'syz.2.6473': attribute type 22 has an invalid length. [ 843.039703][T29803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6473'. [ 843.045579][ T146] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.070738][ T146] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.095793][ T146] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.106983][ T146] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.142046][T29575] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.197941][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.205334][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.258277][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.265535][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.388130][T29812] veth0: entered promiscuous mode [ 843.395829][T29812] vlan2: entered promiscuous mode [ 843.433807][T29815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6479'. [ 843.443383][T29815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6479'. [ 843.656575][T29832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6483'. [ 843.683081][T29832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6483'. [ 843.842680][T29841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6485'. [ 843.959424][ T5839] Bluetooth: hci0: command tx timeout [ 844.052121][T29575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.124089][T29852] netlink: 'syz.2.6488': attribute type 2 has an invalid length. [ 844.147620][T29575] veth0_vlan: entered promiscuous mode [ 844.153380][T29852] netlink: 'syz.2.6488': attribute type 11 has an invalid length. [ 844.178123][T29575] veth1_vlan: entered promiscuous mode [ 844.241651][T29575] veth0_macvtap: entered promiscuous mode [ 844.255584][T29575] veth1_macvtap: entered promiscuous mode [ 844.290377][T29575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.310091][T29575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.352895][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.363525][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.389208][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.415668][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.544408][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.563093][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.649860][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.668089][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.750831][T29881] x_tables: duplicate underflow at hook 1 [ 845.113824][T29899] netlink: 'syz.4.6499': attribute type 1 has an invalid length. [ 845.130544][T29899] sctp: [Deprecated]: syz.4.6499 (pid 29899) Use of int in max_burst socket option deprecated. [ 845.130544][T29899] Use struct sctp_assoc_value instead [ 845.194201][T29902] netlink: 'syz.1.6500': attribute type 3 has an invalid length. [ 845.554897][ T146] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.579930][ T146] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.599716][ T146] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.625445][ T146] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.790423][T29932] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003 [ 845.804009][T29934] IPv6: addrconf: prefix option has invalid lifetime [ 845.834377][T29932] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 845.849609][T29932] netlink: 'syz.1.6514': attribute type 27 has an invalid length. [ 846.012734][T29932] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.020676][T29932] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.225653][T29932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.264039][T29932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.352753][T29932] veth0_virt_wifi: left allmulticast mode [ 846.732273][ T146] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 846.760594][ T146] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.782753][ T146] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 846.792951][ T146] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.002487][ T146] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.021411][ T146] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.031088][ T146] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.043825][ T146] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.233020][T30005] __nla_validate_parse: 10 callbacks suppressed [ 847.233043][T30005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6525'. [ 847.322956][T30007] syzkaller0: entered promiscuous mode [ 847.345388][T30007] syzkaller0: entered allmulticast mode [ 847.352016][T30011] IPv6: NLM_F_REPLACE set, but no existing node found! [ 847.478438][T30009] veth0: entered promiscuous mode [ 847.487505][T30009] vlan2: entered promiscuous mode [ 847.514346][T30014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6528'. [ 847.835908][T30033] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6531'. [ 847.876569][T30032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 847.913291][T30032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6533'. [ 848.287364][T30059] netlink: 'syz.0.6539': attribute type 2 has an invalid length. [ 848.309861][T30059] netlink: 'syz.0.6539': attribute type 2 has an invalid length. [ 848.467700][T30070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6541'. [ 848.664701][T30070] bond1: entered promiscuous mode [ 848.710838][T30070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 848.821917][T30066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 848.860833][T30066] bond2: entered promiscuous mode [ 848.867118][T30093] netlink: 264 bytes leftover after parsing attributes in process `syz.1.6549'. [ 848.889721][T30066] bond1: (slave bond2): Enslaving as an active interface with an up link [ 849.187844][T30108] IPv6: addrconf: prefix option has invalid lifetime [ 849.233160][T30110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6554'. [ 849.272807][ T5839] block nbd1: Receive control failed (result -1) [ 849.364359][T30113] sch_fq: defrate 4294967293 ignored. [ 849.435191][T30113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6557'. [ 849.452653][T30119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6558'. [ 849.485526][T30113] netlink: 99 bytes leftover after parsing attributes in process `syz.2.6557'. [ 849.841678][T30133] netlink: 'syz.1.6560': attribute type 30 has an invalid length. [ 849.859828][T30129] batadv0: entered promiscuous mode [ 849.865829][T30129] vlan2: entered promiscuous mode [ 849.931206][T30131] team0: No ports can be present during mode change [ 850.267099][T30155] IPv6: addrconf: prefix option has invalid lifetime [ 850.949539][T30187] netlink: 'syz.4.6578': attribute type 1 has an invalid length. [ 851.110181][T30192] lo speed is unknown, defaulting to 1000 [ 851.405157][T30193] netlink: 'syz.4.6578': attribute type 39 has an invalid length. [ 852.110134][T30213] IPv6: addrconf: prefix option has invalid lifetime [ 852.526207][T30235] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 852.592570][T30232] dummy0: entered promiscuous mode [ 852.600093][T30231] dummy0: left promiscuous mode [ 852.977074][T30249] __nla_validate_parse: 8 callbacks suppressed [ 852.977099][T30249] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6596'. [ 853.006837][T30253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6598'. [ 853.056658][T30257] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6599'. [ 853.059578][T30249] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 853.180198][T30259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6600'. [ 853.349651][T30267] x_tables: duplicate underflow at hook 3 [ 853.657965][T30284] netlink: 'syz.4.6609': attribute type 1 has an invalid length. [ 854.012974][T30307] netlink: 'syz.3.6618': attribute type 9 has an invalid length. [ 854.021661][T30307] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.6618'. [ 854.154498][T30317] netlink: 'syz.2.6620': attribute type 3 has an invalid length. [ 854.170563][T30317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6620'. [ 854.179757][T30317] netlink: 'syz.2.6620': attribute type 3 has an invalid length. [ 854.187740][T30317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6620'. [ 854.308457][T30325] netlink: 'syz.2.6620': attribute type 2 has an invalid length. [ 854.581389][T30343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6630'. [ 854.591744][T30343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6630'. [ 854.602279][T30344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6630'. [ 854.622799][T30343] tipc: Started in network mode [ 854.627928][T30343] tipc: Node identity 5e3c444f1483, cluster identity 4711 [ 854.640036][T30343] tipc: Enabled bearer , priority 0 [ 854.677237][T30343] syzkaller0: entered promiscuous mode [ 854.686961][T30343] syzkaller0: entered allmulticast mode [ 854.720823][T30343] tipc: Resetting bearer [ 854.758861][T30353] IPv6: addrconf: prefix option has invalid lifetime [ 854.809952][T30344] tipc: Resetting bearer [ 854.863582][T30344] tipc: Disabling bearer [ 855.176168][T30373] lo speed is unknown, defaulting to 1000 [ 855.235056][T30377] netlink: 'syz.4.6642': attribute type 4 has an invalid length. [ 858.076142][T30437] IPv6: addrconf: prefix option has invalid lifetime [ 858.188586][T30432] __nla_validate_parse: 7 callbacks suppressed [ 858.188611][T30432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6658'. [ 858.307757][T30447] netlink: 'syz.3.6662': attribute type 5 has an invalid length. [ 858.351230][T30442] lo speed is unknown, defaulting to 1000 [ 858.366246][T30447] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 858.432405][T30447] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 858.467518][T30447] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 858.495928][T30447] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 858.533666][T30447] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 858.543656][T30447] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 858.564630][T30447] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 858.576383][T30447] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 858.586349][T30447] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 858.596718][T30454] syzkaller0: entered promiscuous mode [ 858.602682][T30454] syzkaller0: entered allmulticast mode [ 858.603489][T30447] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 858.808555][T30463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6667'. [ 858.818482][T30463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6667'. [ 858.872081][T30468] netlink: 'syz.3.6668': attribute type 3 has an invalid length. [ 858.880123][T30468] netlink: 'syz.3.6668': attribute type 1 has an invalid length. [ 858.887893][T30468] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.6668'. [ 860.922142][T30480] veth0: entered promiscuous mode [ 860.927430][T30480] vlan2: entered promiscuous mode [ 861.202386][T30502] netlink: 276 bytes leftover after parsing attributes in process `syz.0.6679'. [ 861.214527][T30504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6680'. [ 861.334685][T30509] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 861.385115][T30511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6681'. [ 861.395730][T30511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6681'. [ 861.707650][T30524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6685'. [ 861.730520][T30523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.922259][T30545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6690'. [ 862.124372][T30550] bond0: entered allmulticast mode [ 862.152999][T30550] netlink: 'syz.1.6692': attribute type 4 has an invalid length. [ 862.798099][T30579] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 862.820562][T30579] team0 (unregistering): Port device team_slave_0 removed [ 862.833925][T30579] team0 (unregistering): Failed to send options change via netlink (err -105) [ 862.847364][T30579] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 862.859312][T30579] team0 (unregistering): Port device team_slave_1 removed [ 863.081799][T30596] tunl0: Caught tx_queue_len zero misconfig [ 864.092004][T30638] __nla_validate_parse: 5 callbacks suppressed [ 864.092028][T30638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6712'. [ 864.113920][T30638] netlink: 'syz.0.6712': attribute type 30 has an invalid length. [ 864.171510][T30644] netlink: 'syz.0.6712': attribute type 3 has an invalid length. [ 864.184793][T30644] netlink: 'syz.0.6712': attribute type 1 has an invalid length. [ 864.196609][T30644] netlink: 212 bytes leftover after parsing attributes in process `syz.0.6712'. [ 864.206574][T30644] NCSI netlink: No device for ifindex 813332851 [ 864.232456][T30650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6716'. [ 864.243370][T30646] netlink: 'syz.1.6714': attribute type 3 has an invalid length. [ 864.252369][ T146] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.269373][T30638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6712'. [ 864.279027][ T146] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.299016][T30638] netlink: 'syz.0.6712': attribute type 30 has an invalid length. [ 864.308969][ T146] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.329322][ T146] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.694344][T30663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6718'. [ 864.825503][T30663] macvtap0: entered promiscuous mode [ 864.859335][T30663] virtio_net virtio1 eth0: entered promiscuous mode [ 864.889545][T30663] macvtap0: entered allmulticast mode [ 864.895131][T30663] virtio_net virtio1 eth0: entered allmulticast mode [ 865.598705][T30663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6718'. [ 865.702411][T30663] virtio_net virtio1 eth0: left allmulticast mode [ 865.719697][T30663] virtio_net virtio1 eth0: left promiscuous mode [ 865.833793][T30710] bond1: option lacp_rate: invalid value (128) [ 865.878326][T30710] bond1 (unregistering): Released all slaves [ 866.145043][T30729] FAULT_INJECTION: forcing a failure. [ 866.145043][T30729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 866.257073][T30729] CPU: 1 UID: 0 PID: 30729 Comm: syz.3.6736 Not tainted syzkaller #0 PREEMPT(full) [ 866.257106][T30729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 866.257121][T30729] Call Trace: [ 866.257130][T30729] [ 866.257141][T30729] dump_stack_lvl+0xe8/0x150 [ 866.257181][T30729] should_fail_ex+0x412/0x560 [ 866.257221][T30729] _copy_to_user+0x31/0xb0 [ 866.257249][T30729] simple_read_from_buffer+0xe1/0x170 [ 866.257288][T30729] proc_fail_nth_read+0x1bb/0x230 [ 866.257329][T30729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 866.257367][T30729] ? rw_verify_area+0x2a6/0x4d0 [ 866.257393][T30729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 866.257428][T30729] vfs_read+0x20c/0xa70 [ 866.257451][T30729] ? fdget_pos+0x246/0x320 [ 866.257485][T30729] ? __pfx___mutex_lock+0x10/0x10 [ 866.257515][T30729] ? __pfx_vfs_read+0x10/0x10 [ 866.257547][T30729] ? __fget_files+0x2a/0x420 [ 866.257586][T30729] ? __fget_files+0x3a0/0x420 [ 866.257618][T30729] ? __fget_files+0x2a/0x420 [ 866.257661][T30729] ksys_read+0x150/0x270 [ 866.257688][T30729] ? __pfx_ksys_read+0x10/0x10 [ 866.257727][T30729] do_syscall_64+0x14d/0xf80 [ 866.257753][T30729] ? trace_irq_disable+0x3b/0x150 [ 866.257785][T30729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.257809][T30729] ? clear_bhb_loop+0x40/0x90 [ 866.257837][T30729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.257860][T30729] RIP: 0033:0x7fb18c35cfce [ 866.257882][T30729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 866.257901][T30729] RSP: 002b:00007fb18a5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 866.257925][T30729] RAX: ffffffffffffffda RBX: 00007fb18a5f66c0 RCX: 00007fb18c35cfce [ 866.257941][T30729] RDX: 000000000000000f RSI: 00007fb18a5f60a0 RDI: 0000000000000004 [ 866.257955][T30729] RBP: 00007fb18a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 866.257969][T30729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.257981][T30729] R13: 00007fb18c616038 R14: 00007fb18c615fa0 R15: 00007ffe5db36f48 [ 866.258018][T30729] [ 866.537985][T30738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.740641][T30755] blkio.reset_stats is deprecated [ 866.771706][T30743] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 866.807879][T30755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6742'. [ 867.054500][T30770] lo speed is unknown, defaulting to 1000 [ 867.249127][T30783] Cannot find set identified by id 65535 to match [ 867.269471][T30781] lo speed is unknown, defaulting to 1000 [ 867.511726][T30792] netlink: 'syz.1.6751': attribute type 1 has an invalid length. [ 867.697660][T30792] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 867.772255][T30801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6753'. [ 868.050735][T30818] netlink: 'syz.4.6756': attribute type 11 has an invalid length. [ 868.058642][T30818] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.6756'. [ 868.334657][T30837] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6759'. [ 868.691391][T30840] ip6erspan0: entered allmulticast mode [ 868.697428][T30850] netlink: 'syz.2.6764': attribute type 12 has an invalid length. [ 868.729574][T30850] netlink: 'syz.2.6764': attribute type 12 has an invalid length. [ 868.746607][T30850] netlink: 'syz.2.6764': attribute type 12 has an invalid length. [ 868.777911][T30850] netlink: 'syz.2.6764': attribute type 12 has an invalid length. [ 869.089961][ T134] wlan0: Trigger new scan to find an IBSS to join [ 869.407396][T30888] __nla_validate_parse: 4 callbacks suppressed [ 869.407420][T30888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6775'. [ 869.534191][T30904] validate_nla: 61 callbacks suppressed [ 869.534214][T30904] netlink: 'syz.4.6779': attribute type 10 has an invalid length. [ 869.633331][T30904] team0: Port device dummy0 added [ 869.923288][T30920] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6783'. [ 869.971504][T30920] netlink: 'syz.2.6783': attribute type 1 has an invalid length. [ 870.004166][T30920] netlink: 'syz.2.6783': attribute type 7 has an invalid length. [ 870.045753][T30920] netlink: 'syz.2.6783': attribute type 8 has an invalid length. [ 870.079242][T30920] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6783'. [ 870.096508][T30920] NCSI netlink: No device for ifindex 1073545264 [ 870.213584][T30927] netlink: 'syz.1.6784': attribute type 1 has an invalid length. [ 870.275560][T30927] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6784'. [ 870.302682][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 870.316741][ T1300] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 870.768157][T30945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 870.948200][T30955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6791'. [ 871.041237][T30937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6786'. [ 871.133548][T30965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6795'. [ 871.142702][T30965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6795'. [ 871.245827][T30970] netlink: 'syz.3.6797': attribute type 21 has an invalid length. [ 871.272258][T30970] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6797'. [ 871.309568][T30973] netlink: 'syz.0.6798': attribute type 15 has an invalid length. [ 871.339762][T30970] netlink: 'syz.3.6797': attribute type 4 has an invalid length. [ 871.349201][T30970] netlink: 'syz.3.6797': attribute type 3 has an invalid length. [ 871.365614][T30970] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6797'. [ 871.554332][T30987] syzkaller1: entered promiscuous mode [ 871.582676][T30987] syzkaller1: entered allmulticast mode [ 871.916039][T31014] netlink: 'syz.3.6812': attribute type 13 has an invalid length. [ 871.925375][T31008] lo speed is unknown, defaulting to 1000 [ 871.971265][T31015] vlan2: entered promiscuous mode [ 871.976531][T31015] syz_tun: entered promiscuous mode [ 872.038593][T31017] : renamed from veth0_to_bond (while UP) [ 872.345370][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.359071][T30929] Bluetooth: hci2: command 0x0406 tx timeout [ 872.367814][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.376075][T31031] openvswitch: netlink: Flow key attr not present in new flow. [ 872.603582][T31046] IPv6: addrconf: prefix option has invalid lifetime [ 873.424618][T31080] x_tables: duplicate underflow at hook 3 [ 874.038475][T15868] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 874.481618][T31106] vlan2: entered promiscuous mode [ 874.571891][T31111] netlink: 'syz.3.6842': attribute type 13 has an invalid length. [ 874.617689][T31111] netlink: 'syz.3.6842': attribute type 13 has an invalid length. [ 875.541106][T31131] __nla_validate_parse: 13 callbacks suppressed [ 875.541131][T31131] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6849'. [ 875.730920][T31129] syzkaller0: entered promiscuous mode [ 875.736609][T31129] syzkaller0: entered allmulticast mode [ 875.900699][T31140] netlink: 'syz.0.6851': attribute type 1 has an invalid length. [ 877.991653][T31151] netlink: 'syz.1.6854': attribute type 10 has an invalid length. [ 879.067024][T31140] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 879.067651][T31139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6852'. [ 879.088078][T31139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6852'. [ 879.463932][T31176] tc_dump_action: action bad kind [ 879.472270][T31176] netlink: 19612 bytes leftover after parsing attributes in process `syz.1.6861'. [ 879.482435][T31176] openvswitch: netlink: Flow key attr not present in new flow. [ 879.570556][T31180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6862'. [ 879.796426][T31201] sctp: [Deprecated]: syz.4.6867 (pid 31201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 879.796426][T31201] Use struct sctp_sack_info instead [ 879.927441][T31209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6868'. [ 879.994241][T31209] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6868'. [ 880.033873][T31205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6868'. [ 880.074891][T31205] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6868'. [ 880.140737][T31218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6871'. [ 880.157675][T31220] netlink: 'syz.2.6873': attribute type 29 has an invalid length. [ 880.219603][T31220] netlink: 'syz.2.6873': attribute type 29 has an invalid length. [ 880.407945][T31241] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20003 [ 880.526856][T31247] openvswitch: netlink: Flow actions attr not present in new flow. [ 880.633793][T31252] netlink: 'syz.1.6881': attribute type 10 has an invalid length. [ 880.729992][T31258] bridge1: entered promiscuous mode [ 880.942474][T31270] lo speed is unknown, defaulting to 1000 [ 881.434564][T31303] __nla_validate_parse: 2 callbacks suppressed [ 881.434587][T31303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6899'. [ 881.472389][T31303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6899'. [ 881.512188][T31306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6900'. [ 881.527617][T31306] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 881.778437][T31314] netlink: 21 bytes leftover after parsing attributes in process `syz.2.6901'. [ 882.067795][T31326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6906'. [ 882.140975][T31326] ip6gre1: entered promiscuous mode [ 882.146434][T31326] ip6gre1: entered allmulticast mode [ 883.087346][T31367] lo speed is unknown, defaulting to 1000 [ 883.222385][T31372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.239785][T31372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.268449][T31372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.288796][T31372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.092618][T31391] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.100352][T31391] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.637565][T31391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 884.790754][T31391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.923100][T31367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 884.941565][T31287] Set syz1 is full, maxelem 65536 reached [ 884.993409][T31370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 885.027826][T10062] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.058584][T10062] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.084011][T10062] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.112009][T10062] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.151140][T10062] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.181039][T10062] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.198988][T31412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6927'. [ 885.216119][T31405] vlan2: entered promiscuous mode [ 885.334875][T10062] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.357395][T10062] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.398141][T31416] vlan2: entered promiscuous mode [ 885.431185][T31423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6930'. [ 885.442235][T31423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6930'. [ 885.504181][T31428] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 885.700735][T31433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6932'. [ 885.731494][T31440] netlink: 'syz.3.6935': attribute type 3 has an invalid length. [ 885.788899][T31433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6932'. [ 885.821340][T31437] netlink: 'syz.0.6934': attribute type 8 has an invalid length. [ 885.878856][T31441] lo speed is unknown, defaulting to 1000 [ 886.495115][T31468] __nla_validate_parse: 4 callbacks suppressed [ 886.495135][T31468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6941'. [ 886.514242][T31468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6941'. [ 886.563174][T31465] bond1: option mode: invalid value (254) [ 886.585550][T31465] bond1 (unregistering): Released all slaves [ 886.637079][T31477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6944'. [ 886.649398][T31477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6944'. [ 886.689373][T31475] team0: Port device veth5 added [ 886.859894][T31483] bridge0: port 3(vlan2) entered blocking state [ 886.866441][T31483] bridge0: port 3(vlan2) entered disabled state [ 886.884892][T31483] vlan2: entered allmulticast mode [ 886.890495][T31483] bond0: entered allmulticast mode [ 886.895701][T31483] bond_slave_0: entered allmulticast mode [ 886.908246][T31483] bond_slave_1: entered allmulticast mode [ 886.919479][T31483] vlan2: entered promiscuous mode [ 886.924623][T31483] bond0: entered promiscuous mode [ 886.930156][T31483] bond_slave_0: entered promiscuous mode [ 886.989065][T31483] bond_slave_1: entered promiscuous mode [ 887.132914][T31494] netlink: 'syz.1.6951': attribute type 12 has an invalid length. [ 887.234706][T31499] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6952'. [ 887.509068][T31511] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6957'. [ 887.572921][T31513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6958'. [ 887.610363][T31513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6958'. [ 887.832778][T31518] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 887.871114][T31518] bond1 (unregistering): Released all slaves [ 887.967189][T31523] bridge0: port 4(syz_tun) entered blocking state [ 887.975610][T31523] bridge0: port 4(syz_tun) entered disabled state [ 888.003344][T31523] syz_tun: entered allmulticast mode [ 888.023373][T31523] syz_tun: entered promiscuous mode [ 888.125901][T31531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6964'. [ 888.203346][T31533] netlink: 'syz.0.6963': attribute type 4 has an invalid length. [ 888.241526][T31530] netlink: 'syz.0.6963': attribute type 4 has an invalid length. [ 888.475415][T31545] xt_CT: You must specify a L4 protocol and not use inversions on it [ 888.613233][T31547] netlink: 'syz.3.6968': attribute type 1 has an invalid length. [ 888.638853][T31547] nbd: couldn't find device at index 16056340 [ 888.663547][T31553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6971'. [ 888.873147][T31562] netlink: 'syz.0.6974': attribute type 10 has an invalid length. [ 888.942674][T31562] team0: Failed to send options change via netlink (err -105) [ 888.969021][T31563] netlink: 'syz.0.6974': attribute type 10 has an invalid length. [ 888.980641][T31562] team0: Port device dummy0 added [ 889.008599][T31563] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 889.060642][T31563] team0: Failed to send options change via netlink (err -105) [ 889.090102][T31563] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 889.119359][T31563] team0: Port device dummy0 removed [ 889.137378][T31563] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 889.359586][T31580] IPv6: addrconf: prefix option has invalid lifetime [ 889.376988][T31582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 889.388014][T31582] netlink: 'syz.0.6982': attribute type 2 has an invalid length. [ 889.449171][T31582] !: entered promiscuous mode [ 889.455507][T31584] netlink: 'syz.0.6982': attribute type 2 has an invalid length. [ 889.775551][T31601] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 889.802579][T31601] bond3 (unregistering): Released all slaves [ 889.890719][T31607] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 889.968960][T31616] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 890.008011][T31618] IPv6: addrconf: prefix option has invalid lifetime [ 890.812950][T31657] syzkaller0: entered promiscuous mode [ 890.836083][T31657] syzkaller0: entered allmulticast mode [ 891.476103][T31700] IPv6: addrconf: prefix option has invalid lifetime [ 891.874680][T31709] __nla_validate_parse: 7 callbacks suppressed [ 891.874701][T31709] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7023'. [ 893.158937][T31707] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7023'. [ 893.167993][T31707] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 893.204615][T31708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7023'. [ 893.505110][T31737] IPv6: addrconf: prefix option has invalid lifetime [ 893.541447][T31740] validate_nla: 2 callbacks suppressed [ 893.541467][T31740] netlink: 'syz.3.7033': attribute type 25 has an invalid length. [ 893.558948][T31740] netlink: 'syz.3.7033': attribute type 3 has an invalid length. [ 893.567437][T31740] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7033'. [ 893.671039][T31740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7033'. [ 893.880189][T31752] sctp: [Deprecated]: syz.2.7037 (pid 31752) Use of int in max_burst socket option deprecated. [ 893.880189][T31752] Use struct sctp_assoc_value instead [ 894.030665][ T856] IPVS: starting estimator thread 0... [ 894.058410][T31755] IPVS: ip_vs_edit_dest(): server weight less than zero [ 894.142743][T31756] IPVS: using max 27 ests per chain, 64800 per kthread [ 894.226917][T31759] "syz.4.7039" (31759) uses obsolete ecb(arc4) skcipher [ 894.383910][T31772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7043'. [ 894.530125][T31783] tipc: Enabled bearer , priority 0 [ 894.539270][T31783] syzkaller0: entered allmulticast mode [ 894.621829][T31783] tipc: Resetting bearer [ 894.959760][T31788] tipc: Resetting bearer [ 895.530429][T31788] tipc: Disabling bearer [ 896.110442][T31837] netlink: 'syz.0.7065': attribute type 1 has an invalid length. [ 896.118259][T31837] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7065'. [ 896.154754][T31839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7066'. [ 896.243090][T31821] netlink: 'syz.3.7059': attribute type 2 has an invalid length. [ 896.253433][T31821] netlink: 'syz.3.7059': attribute type 2 has an invalid length. [ 896.405939][T31853] siw: device registration error -23 [ 896.737709][T31866] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7073'. [ 896.747586][T31866] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7073'. [ 899.094077][T31911] netlink: 'syz.0.7086': attribute type 5 has an invalid length. [ 899.609996][T31859] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 901.136288][T31980] delete_channel: no stack [ 901.224529][T31991] tls_set_device_offload: netdev not found [ 901.264358][T31991] xt_hashlimit: invalid rate [ 902.186435][T32012] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7120'. [ 902.237956][T32012] bond0: (slave dummy0): Releasing backup interface [ 902.274620][T32019] netlink: 'syz.3.7124': attribute type 10 has an invalid length. [ 902.290964][T32011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7121'. [ 902.326252][T32020] netlink: 'syz.3.7124': attribute type 10 has an invalid length. [ 902.362742][T32011] vlan0: entered promiscuous mode [ 902.367858][T32011] virtio_net virtio1 eth0: entered promiscuous mode [ 902.466384][T32019] team0: Port device dummy0 added [ 902.477406][T32020] team0: Port device dummy0 removed [ 902.486671][T32020] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 902.515591][T32015] lo speed is unknown, defaulting to 1000 [ 902.539747][T32026] syzkaller0: entered promiscuous mode [ 902.545286][T32026] syzkaller0: entered allmulticast mode [ 903.505871][T32069] FAULT_INJECTION: forcing a failure. [ 903.505871][T32069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 903.530729][T32069] CPU: 1 UID: 0 PID: 32069 Comm: syz.0.7139 Not tainted syzkaller #0 PREEMPT(full) [ 903.530759][T32069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 903.530772][T32069] Call Trace: [ 903.530782][T32069] [ 903.530791][T32069] dump_stack_lvl+0xe8/0x150 [ 903.530838][T32069] should_fail_ex+0x412/0x560 [ 903.530874][T32069] prepare_alloc_pages+0x22a/0x650 [ 903.530910][T32069] __alloc_frozen_pages_noprof+0x12f/0x380 [ 903.530942][T32069] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 903.531016][T32069] ? __pfx_policy_nodemask+0x10/0x10 [ 903.531043][T32069] ? trace_kmalloc+0x2a/0x110 [ 903.531070][T32069] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 903.531099][T32069] alloc_pages_mpol+0x232/0x4a0 [ 903.531131][T32069] alloc_pages_noprof+0xa8/0x190 [ 903.531162][T32069] alloc_skb_with_frags+0x233/0x890 [ 903.531203][T32069] sock_alloc_send_pskb+0x878/0x990 [ 903.531251][T32069] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 903.531297][T32069] tun_get_user+0x92d/0x3dd0 [ 903.531419][T32069] ? aa_file_perm+0x192/0x15e0 [ 903.531444][T32069] ? aa_file_perm+0x50e/0x15e0 [ 903.531464][T32069] ? __pfx_tun_get_user+0x10/0x10 [ 903.531485][T32069] ? aa_file_perm+0x192/0x15e0 [ 903.531511][T32069] ? __lock_acquire+0x6b5/0x2cf0 [ 903.531550][T32069] ? ref_tracker_alloc+0x35c/0x4c0 [ 903.531585][T32069] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 903.531622][T32069] ? tun_get+0x1c/0x2f0 [ 903.531650][T32069] ? tun_get+0x1c/0x2f0 [ 903.531672][T32069] ? tun_get+0x1c/0x2f0 [ 903.531699][T32069] tun_chr_write_iter+0x113/0x200 [ 903.531725][T32069] vfs_write+0x61d/0xb90 [ 903.531758][T32069] ? __pfx_vfs_write+0x10/0x10 [ 903.531792][T32069] ? __fget_files+0x2a/0x420 [ 903.531840][T32069] ksys_write+0x150/0x270 [ 903.531867][T32069] ? __pfx_ksys_write+0x10/0x10 [ 903.531902][T32069] do_syscall_64+0x14d/0xf80 [ 903.531929][T32069] ? trace_irq_disable+0x3b/0x150 [ 903.531961][T32069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.531984][T32069] ? clear_bhb_loop+0x40/0x90 [ 903.532011][T32069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.532033][T32069] RIP: 0033:0x7f3a4695cfce [ 903.532056][T32069] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 903.532076][T32069] RSP: 002b:00007f3a47901fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 903.532100][T32069] RAX: ffffffffffffffda RBX: 00007f3a479026c0 RCX: 00007f3a4695cfce [ 903.532116][T32069] RDX: 0000000000001293 RSI: 0000200000002640 RDI: 00000000000000c8 [ 903.532130][T32069] RBP: 00007f3a47902090 R08: 0000000000000000 R09: 0000000000000000 [ 903.532143][T32069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.532156][T32069] R13: 00007f3a46c16128 R14: 00007f3a46c16090 R15: 00007fff96990908 [ 903.532189][T32069] [ 904.521426][T32098] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 904.551336][T32098] syzkaller0: entered promiscuous mode [ 904.563599][T32098] syzkaller0: entered allmulticast mode [ 904.684295][T32100] lo speed is unknown, defaulting to 1000 [ 904.763391][T32112] FAULT_INJECTION: forcing a failure. [ 904.763391][T32112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.776909][T32112] CPU: 1 UID: 0 PID: 32112 Comm: syz.3.7154 Not tainted syzkaller #0 PREEMPT(full) [ 904.776939][T32112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 904.776953][T32112] Call Trace: [ 904.776964][T32112] [ 904.776974][T32112] dump_stack_lvl+0xe8/0x150 [ 904.777010][T32112] should_fail_ex+0x412/0x560 [ 904.777048][T32112] _copy_from_iter+0x1d3/0x1670 [ 904.777086][T32112] ? rep_movs_alternative+0x4a/0x90 [ 904.777127][T32112] ? __pfx__copy_from_iter+0x10/0x10 [ 904.777157][T32112] ? sock_alloc_send_pskb+0x896/0x990 [ 904.777193][T32112] ? __pfx__copy_from_iter+0x10/0x10 [ 904.777230][T32112] ? page_copy_sane+0x4e/0x270 [ 904.777264][T32112] copy_page_from_iter+0xdd/0x170 [ 904.777291][T32112] skb_copy_datagram_from_iter+0x306/0x710 [ 904.777439][T32112] tun_get_user+0xc38/0x3dd0 [ 904.777498][T32112] ? aa_file_perm+0x192/0x15e0 [ 904.777525][T32112] ? aa_file_perm+0x50e/0x15e0 [ 904.777546][T32112] ? __pfx_tun_get_user+0x10/0x10 [ 904.777567][T32112] ? aa_file_perm+0x192/0x15e0 [ 904.777594][T32112] ? __lock_acquire+0x6b5/0x2cf0 [ 904.777633][T32112] ? ref_tracker_alloc+0x35c/0x4c0 [ 904.777669][T32112] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 904.777707][T32112] ? tun_get+0x1c/0x2f0 [ 904.777736][T32112] ? tun_get+0x1c/0x2f0 [ 904.777762][T32112] ? tun_get+0x1c/0x2f0 [ 904.777790][T32112] tun_chr_write_iter+0x113/0x200 [ 904.777816][T32112] vfs_write+0x61d/0xb90 [ 904.777851][T32112] ? __pfx_vfs_write+0x10/0x10 [ 904.777886][T32112] ? __fget_files+0x2a/0x420 [ 904.777927][T32112] ksys_write+0x150/0x270 [ 904.777953][T32112] ? __pfx_ksys_write+0x10/0x10 [ 904.777990][T32112] do_syscall_64+0x14d/0xf80 [ 904.778015][T32112] ? trace_irq_disable+0x3b/0x150 [ 904.778046][T32112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.778069][T32112] ? clear_bhb_loop+0x40/0x90 [ 904.778096][T32112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.778119][T32112] RIP: 0033:0x7fb18c35cfce [ 904.778140][T32112] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 904.778181][T32112] RSP: 002b:00007fb18a5d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 904.778206][T32112] RAX: ffffffffffffffda RBX: 00007fb18a5d56c0 RCX: 00007fb18c35cfce [ 904.778222][T32112] RDX: 0000000000001293 RSI: 0000200000002640 RDI: 00000000000000c8 [ 904.778237][T32112] RBP: 00007fb18a5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 904.778250][T32112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.778262][T32112] R13: 00007fb18c616128 R14: 00007fb18c616090 R15: 00007ffe5db36f48 [ 904.778296][T32112] [ 905.673267][T32123] netlink: 'syz.4.7159': attribute type 10 has an invalid length. [ 905.723554][T32123] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7159'. [ 905.819992][T32131] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.7163'. [ 905.848151][T32132] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.7163'. [ 905.873334][T32129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7162'. [ 906.034253][T32146] FAULT_INJECTION: forcing a failure. [ 906.034253][T32146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.050652][T32146] CPU: 0 UID: 0 PID: 32146 Comm: syz.4.7167 Not tainted syzkaller #0 PREEMPT(full) [ 906.050690][T32146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 906.050703][T32146] Call Trace: [ 906.050712][T32146] [ 906.050721][T32146] dump_stack_lvl+0xe8/0x150 [ 906.050758][T32146] should_fail_ex+0x412/0x560 [ 906.050796][T32146] _copy_from_iter+0x1d3/0x1670 [ 906.050832][T32146] ? rep_movs_alternative+0x4a/0x90 [ 906.050874][T32146] ? __pfx__copy_from_iter+0x10/0x10 [ 906.050905][T32146] ? sock_alloc_send_pskb+0x896/0x990 [ 906.050942][T32146] ? __pfx__copy_from_iter+0x10/0x10 [ 906.050980][T32146] ? page_copy_sane+0x4e/0x270 [ 906.051015][T32146] copy_page_from_iter+0xdd/0x170 [ 906.051042][T32146] skb_copy_datagram_from_iter+0x306/0x710 [ 906.051086][T32146] tun_get_user+0xc38/0x3dd0 [ 906.051124][T32146] ? aa_file_perm+0x192/0x15e0 [ 906.051151][T32146] ? aa_file_perm+0x50e/0x15e0 [ 906.051172][T32146] ? __pfx_tun_get_user+0x10/0x10 [ 906.051194][T32146] ? aa_file_perm+0x192/0x15e0 [ 906.051221][T32146] ? __lock_acquire+0x6b5/0x2cf0 [ 906.051262][T32146] ? ref_tracker_alloc+0x35c/0x4c0 [ 906.051298][T32146] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 906.051337][T32146] ? tun_get+0x1c/0x2f0 [ 906.051365][T32146] ? tun_get+0x1c/0x2f0 [ 906.051388][T32146] ? tun_get+0x1c/0x2f0 [ 906.051414][T32146] tun_chr_write_iter+0x113/0x200 [ 906.051442][T32146] vfs_write+0x61d/0xb90 [ 906.051477][T32146] ? __pfx_vfs_write+0x10/0x10 [ 906.051510][T32146] ? __fget_files+0x2a/0x420 [ 906.051570][T32146] ksys_write+0x150/0x270 [ 906.051597][T32146] ? __pfx_ksys_write+0x10/0x10 [ 906.051632][T32146] do_syscall_64+0x14d/0xf80 [ 906.051658][T32146] ? trace_irq_disable+0x3b/0x150 [ 906.051758][T32146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.051781][T32146] ? clear_bhb_loop+0x40/0x90 [ 906.051810][T32146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.051832][T32146] RIP: 0033:0x7fbe11f5cfce [ 906.051854][T32146] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 906.051875][T32146] RSP: 002b:00007fbe12e2ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 906.051899][T32146] RAX: ffffffffffffffda RBX: 00007fbe12e306c0 RCX: 00007fbe11f5cfce [ 906.051916][T32146] RDX: 0000000000001293 RSI: 0000200000002640 RDI: 00000000000000c8 [ 906.051931][T32146] RBP: 00007fbe12e30090 R08: 0000000000000000 R09: 0000000000000000 [ 906.051945][T32146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.051958][T32146] R13: 00007fbe12216038 R14: 00007fbe12215fa0 R15: 00007ffdb4abf4a8 [ 906.051993][T32146] [ 906.668128][T32163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7173'. [ 906.749652][T32167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7174'. [ 906.768096][T32167] netlink: 'syz.1.7174': attribute type 32 has an invalid length. [ 906.898916][T32170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 907.067245][T32179] netlink: 280 bytes leftover after parsing attributes in process `syz.4.7177'. [ 907.378960][T32181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 907.532808][T32197] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 908.016260][T32232] sctp: [Deprecated]: syz.1.7194 (pid 32232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 908.016260][T32232] Use struct sctp_sack_info instead [ 908.402277][T32255] pim6reg1: entered promiscuous mode [ 908.407651][T32255] pim6reg1: entered allmulticast mode [ 908.433795][T32260] FAULT_INJECTION: forcing a failure. [ 908.433795][T32260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.457850][T32260] CPU: 1 UID: 0 PID: 32260 Comm: syz.4.7203 Not tainted syzkaller #0 PREEMPT(full) [ 908.457883][T32260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 908.457898][T32260] Call Trace: [ 908.457907][T32260] [ 908.457918][T32260] dump_stack_lvl+0xe8/0x150 [ 908.457956][T32260] should_fail_ex+0x412/0x560 [ 908.457994][T32260] _copy_from_user+0x2d/0xb0 [ 908.458022][T32260] kstrtouint_from_user+0xd6/0x180 [ 908.458058][T32260] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 908.458111][T32260] proc_fail_nth_write+0x8e/0x210 [ 908.458144][T32260] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 908.458184][T32260] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 908.458219][T32260] vfs_write+0x29a/0xb90 [ 908.458255][T32260] ? __pfx_vfs_write+0x10/0x10 [ 908.458282][T32260] ? __fget_files+0x2a/0x420 [ 908.458320][T32260] ? __fget_files+0x3a0/0x420 [ 908.458352][T32260] ? __fget_files+0x2a/0x420 [ 908.458394][T32260] ksys_write+0x150/0x270 [ 908.458423][T32260] ? __pfx_ksys_write+0x10/0x10 [ 908.458462][T32260] do_syscall_64+0x14d/0xf80 [ 908.458490][T32260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.458514][T32260] ? clear_bhb_loop+0x40/0x90 [ 908.458551][T32260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.458574][T32260] RIP: 0033:0x7fbe11f5cfce [ 908.458597][T32260] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 908.458617][T32260] RSP: 002b:00007fbe12e2ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 908.458641][T32260] RAX: ffffffffffffffda RBX: 00007fbe12e306c0 RCX: 00007fbe11f5cfce [ 908.458658][T32260] RDX: 0000000000000001 RSI: 00007fbe12e300a0 RDI: 0000000000000008 [ 908.458672][T32260] RBP: 00007fbe12e30090 R08: 0000000000000000 R09: 0000000000000000 [ 908.458688][T32260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.458700][T32260] R13: 00007fbe12216038 R14: 00007fbe12215fa0 R15: 00007ffdb4abf4a8 [ 908.458734][T32260] [ 908.779703][T32268] netlink: 'syz.0.7209': attribute type 1 has an invalid length. [ 908.787687][T32268] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7209'. [ 908.888132][T32274] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 908.918111][T32281] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7211'. [ 908.962955][T32268] lo speed is unknown, defaulting to 1000 [ 909.208472][T32295] netlink: 'syz.3.7215': attribute type 2 has an invalid length. [ 909.237734][T32297] netlink: 'syz.2.7213': attribute type 1 has an invalid length. [ 909.854961][T32338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 910.064817][T32348] x_tables: duplicate underflow at hook 3 [ 910.966068][T32410] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7246'. [ 911.008801][T32410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7246'. [ 911.057595][T32405] lo speed is unknown, defaulting to 1000 [ 911.325356][T32417] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7251'. [ 911.355756][T32416] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7251'. [ 911.466891][T32429] IPv6: addrconf: prefix option has invalid lifetime [ 911.543649][T32433] rdma_op ffff88808010b9f0 conn xmit_rdma 0000000000000000 [ 911.574784][T32433] netlink: 'syz.1.7256': attribute type 2 has an invalid length. [ 911.928931][T32452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7264'. [ 911.938053][T32452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7264'. [ 911.974862][T32454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7263'. [ 912.005362][T32454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7263'. [ 912.366354][T32474] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20003 [ 912.442943][T32480] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 912.642984][T32490] netlink: 'syz.4.7275': attribute type 22 has an invalid length. [ 912.691418][T32492] netlink: 'syz.4.7275': attribute type 22 has an invalid length. [ 912.858521][T32502] bridge6: entered promiscuous mode [ 913.532585][T32540] bridge3: entered promiscuous mode [ 913.956619][T32556] netlink: 'syz.4.7293': attribute type 1 has an invalid length. [ 913.982671][T32561] netlink: 'syz.1.7294': attribute type 21 has an invalid length. [ 914.002023][T32556] bond4: entered promiscuous mode [ 914.015432][T32556] 8021q: adding VLAN 0 to HW filter on device bond4 [ 914.030090][T32562] ipvlan2: entered allmulticast mode [ 914.046487][T32562] bond4: entered allmulticast mode [ 914.159323][T32562] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 914.225594][T32556] bond4: (slave bridge7): making interface the new active one [ 914.268861][T32556] bridge7: entered promiscuous mode [ 914.274602][T32556] bridge7: entered allmulticast mode [ 914.282914][T32556] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 914.623715][T32569] bond5: option primary_reselect: invalid value (4) [ 914.666348][T32569] bond5 (unregistering): Released all slaves [ 915.023006][T32585] __nla_validate_parse: 8 callbacks suppressed [ 915.023039][T32585] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7299'. [ 915.041247][T32582] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7299'. [ 915.106912][T32585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7299'. [ 915.162217][T32593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7300'. [ 915.176128][T32590] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7302'. [ 915.471561][T32607] lo speed is unknown, defaulting to 1000 [ 915.789336][T32615] bridge1: entered promiscuous mode [ 915.802683][T32602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7307'. [ 916.949088][T32642] lo speed is unknown, defaulting to 1000 [ 917.111599][T32663] IPv6: addrconf: prefix option has invalid lifetime [ 917.282815][T32665] Timeout policy `syz0' can only be used by L3 protocol number 17613 [ 917.502769][T32665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.524199][T32642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7317'. [ 918.159650][T32703] IPv6: addrconf: prefix option has invalid lifetime [ 918.856669][T32728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7340'. [ 918.968659][T32732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7341'. [ 919.002686][T32732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7341'. [ 919.094351][T32712] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 919.372779][T32746] IPv6: addrconf: prefix option has invalid lifetime [ 919.657370][T32755] lo speed is unknown, defaulting to 1000 [ 919.789359][T32751] lo speed is unknown, defaulting to 1000 [ 920.451497][ T332] bridge5: entered promiscuous mode [ 920.515310][ T337] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 920.531155][ T329] lo speed is unknown, defaulting to 1000 [ 920.531676][ T335] syzkaller1: tun_chr_ioctl cmd 21731 [ 920.977844][ T362] tc_dump_action: action bad kind [ 921.619715][ T393] __nla_validate_parse: 4 callbacks suppressed [ 921.619738][ T393] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7380'. [ 921.636864][ T395] sock: sock_timestamping_bind_phc: sock not bind to device [ 921.680932][ T393] bond0: (slave dummy0): Releasing backup interface [ 921.864263][ T406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7383'. [ 922.091737][ T415] vlan2: entered allmulticast mode [ 922.096967][ T415] macvtap0: entered allmulticast mode [ 922.118928][ T415] veth0_macvtap: entered allmulticast mode [ 922.250459][ T423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7389'. [ 922.483391][ T429] ip6gre1: entered promiscuous mode [ 922.499229][ T429] ip6gre1: entered allmulticast mode [ 922.534453][T10060] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 922.544753][T10060] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 922.559012][T14715] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 922.706654][ T445] netlink: 'syz.2.7395': attribute type 2 has an invalid length. [ 922.747185][ T441] lo speed is unknown, defaulting to 1000 [ 922.761388][ T445] netlink: 'syz.2.7395': attribute type 9 has an invalid length. [ 922.781793][ T445] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7395'. [ 922.967684][ T457] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7399'. [ 922.981671][ T457] netlink: ct family unspecified [ 923.049248][T16180] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 923.065019][ T457] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.7399'. [ 923.571940][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 923.579679][T16180] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 923.660605][ T485] netlink: 'syz.3.7408': attribute type 3 has an invalid length. [ 923.668592][ T485] netlink: 'syz.3.7408': attribute type 2 has an invalid length. [ 923.678874][ T485] netlink: 'syz.3.7408': attribute type 2 has an invalid length. [ 923.967550][ T491] veth7: entered promiscuous mode [ 924.362605][ T510] lo speed is unknown, defaulting to 1000 [ 924.603141][ T524] SET target dimension over the limit! [ 924.632923][ T524] netlink: 'syz.0.7419': attribute type 83 has an invalid length. [ 924.729798][ T529] team0: No ports can be present during mode change [ 924.841477][ T536] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7423'. [ 924.893367][ T540] netlink: 'syz.0.7423': attribute type 5 has an invalid length. [ 924.926965][ T541] ip6gre2: entered promiscuous mode [ 924.938855][ T541] ip6gre2: entered allmulticast mode [ 925.228574][ T563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7427'. [ 925.592587][ T577] bridge4: entered promiscuous mode [ 925.707073][ T582] team0: No ports can be present during mode change [ 925.746165][ T583] netlink: 204 bytes leftover after parsing attributes in process `syz.1.7435'. [ 925.764387][ T583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7435'. [ 925.807377][ T583] tipc: Started in network mode [ 925.832830][ T583] tipc: Node identity 080211000001, cluster identity 4711 [ 925.855611][ T583] tipc: Enabled bearer , priority 0 [ 925.881630][ T589] mac80211_hwsim hwsim69 syzkaller0: entered promiscuous mode [ 925.908838][ T589] mac80211_hwsim hwsim69 syzkaller0: entered allmulticast mode [ 925.923718][ T589] tipc: Resetting bearer [ 926.011564][ T595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 926.035882][ T589] xt_hashlimit: overflow, try lower: 241/0 [ 926.068485][ T583] tipc: Resetting bearer [ 926.093358][ T595] bond1: (slave ip6gretap1): making interface the new active one [ 926.102810][ T595] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 926.161156][ T595] netlink: 'syz.0.7440': attribute type 2 has an invalid length. [ 926.171859][ T595] netlink: 'syz.0.7440': attribute type 2 has an invalid length. [ 926.296906][ T604] syzkaller1: entered promiscuous mode [ 926.306846][ T604] syzkaller1: entered allmulticast mode [ 926.361328][ T609] rdma_op ffff88807997f1f0 conn xmit_rdma 0000000000000000 [ 926.531775][ T620] team0: No ports can be present during mode change [ 926.676393][ T628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 926.908915][T29964] tipc: Node number set to 134418688 [ 927.009089][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 927.851748][ T678] __nla_validate_parse: 2 callbacks suppressed [ 927.851778][ T678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7467'. [ 927.980326][ T678] team0: Port device team_slave_0 removed [ 928.175773][ T694] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7472'. [ 928.185725][ T694] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7472'. [ 928.201918][ T694] xt_bpf: check failed: parse error [ 928.296886][ T700] FAULT_INJECTION: forcing a failure. [ 928.296886][ T700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.351025][ T700] CPU: 0 UID: 0 PID: 700 Comm: syz.1.7474 Not tainted syzkaller #0 PREEMPT(full) [ 928.351056][ T700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 928.351071][ T700] Call Trace: [ 928.351080][ T700] [ 928.351092][ T700] dump_stack_lvl+0xe8/0x150 [ 928.351132][ T700] should_fail_ex+0x412/0x560 [ 928.351173][ T700] _copy_from_iter+0x1d3/0x1670 [ 928.351221][ T700] ? __pfx__copy_from_iter+0x10/0x10 [ 928.351259][ T700] ? __kasan_kmalloc+0x93/0xb0 [ 928.351295][ T700] ? __kmalloc_cache_noprof+0x31c/0x660 [ 928.351324][ T700] ? __raw_spin_lock_init+0x45/0x100 [ 928.351352][ T700] bcm_rx_setup+0x868/0x1f20 [ 928.351486][ T700] ? do_raw_spin_lock+0x12b/0x2f0 [ 928.351512][ T700] ? __pfx_bcm_rx_setup+0x10/0x10 [ 928.351539][ T700] ? bcm_sendmsg+0x210/0x6c0 [ 928.351563][ T700] ? __local_bh_enable_ip+0xd0/0x130 [ 928.351605][ T700] bcm_sendmsg+0x267/0x6c0 [ 928.351634][ T700] ? __pfx_bcm_sendmsg+0x10/0x10 [ 928.351663][ T700] ? aa_sock_msg_perm+0xf1/0x1b0 [ 928.351700][ T700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 928.351731][ T700] ____sys_sendmsg+0x972/0x9f0 [ 928.351772][ T700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 928.351810][ T700] ? import_iovec+0x73/0xa0 [ 928.351840][ T700] ___sys_sendmsg+0x2a5/0x360 [ 928.351876][ T700] ? __pfx____sys_sendmsg+0x10/0x10 [ 928.351943][ T700] ? __fget_files+0x2a/0x420 [ 928.351977][ T700] ? __fget_files+0x3a0/0x420 [ 928.352021][ T700] __x64_sys_sendmsg+0x1bd/0x2a0 [ 928.352058][ T700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 928.352098][ T702] nbd: must specify a size in bytes for the device [ 928.352096][ T700] ? __pfx_ksys_write+0x10/0x10 [ 928.352134][ T700] do_syscall_64+0x14d/0xf80 [ 928.352263][ T700] ? trace_irq_disable+0x3b/0x150 [ 928.352379][ T700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.352447][ T700] ? clear_bhb_loop+0x40/0x90 [ 928.352527][ T700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.352601][ T700] RIP: 0033:0x7f8be679c799 [ 928.352657][ T700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.352708][ T700] RSP: 002b:00007f8be76b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.352779][ T700] RAX: ffffffffffffffda RBX: 00007f8be6a15fa0 RCX: 00007f8be679c799 [ 928.352821][ T700] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 928.352855][ T700] RBP: 00007f8be76b0090 R08: 0000000000000000 R09: 0000000000000000 [ 928.352888][ T700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.352927][ T700] R13: 00007f8be6a16038 R14: 00007f8be6a15fa0 R15: 00007ffc422a3ef8 [ 928.353012][ T700] [ 928.708837][ T708] netlink: 'syz.1.7476': attribute type 10 has an invalid length. [ 928.742382][ T708] team0: Port device dummy0 added [ 928.933297][ T716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7477'. [ 929.139511][ T719] netlink: 'syz.2.7480': attribute type 1 has an invalid length. [ 929.180849][ T719] bond3: entered promiscuous mode [ 929.186421][ T719] 8021q: adding VLAN 0 to HW filter on device bond3 [ 929.221855][ T719] vlan4: entered allmulticast mode [ 929.227220][ T719] bond3: entered allmulticast mode [ 929.304210][ T719] bond3: (slave bridge3): making interface the new active one [ 929.322406][ T719] bridge3: entered promiscuous mode [ 929.328022][ T719] bridge3: entered allmulticast mode [ 929.337637][ T719] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 929.401626][ T731] FAULT_INJECTION: forcing a failure. [ 929.401626][ T731] name failslab, interval 1, probability 0, space 0, times 0 [ 929.422720][ T731] CPU: 0 UID: 0 PID: 731 Comm: syz.2.7486 Not tainted syzkaller #0 PREEMPT(full) [ 929.422752][ T731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 929.422766][ T731] Call Trace: [ 929.422776][ T731] [ 929.422787][ T731] dump_stack_lvl+0xe8/0x150 [ 929.422826][ T731] should_fail_ex+0x412/0x560 [ 929.422866][ T731] should_failslab+0xa8/0x100 [ 929.422895][ T731] ? can_rx_register+0x16d/0x790 [ 929.422928][ T731] kmem_cache_alloc_noprof+0x87/0x650 [ 929.422951][ T731] ? dev_get_by_index+0x22/0x2e0 [ 929.422993][ T731] can_rx_register+0x16d/0x790 [ 929.423023][ T731] ? dev_get_by_index+0x22/0x2e0 [ 929.423053][ T731] ? dev_get_by_index+0x22/0x2e0 [ 929.423082][ T731] ? __pfx_bcm_rx_handler+0x10/0x10 [ 929.423119][ T731] bcm_rx_setup+0x14c7/0x1f20 [ 929.423163][ T731] ? do_raw_spin_lock+0x12b/0x2f0 [ 929.423191][ T731] ? __pfx_bcm_rx_setup+0x10/0x10 [ 929.423220][ T731] ? bcm_sendmsg+0x210/0x6c0 [ 929.423246][ T731] ? __local_bh_enable_ip+0xd0/0x130 [ 929.423282][ T731] bcm_sendmsg+0x267/0x6c0 [ 929.423312][ T731] ? __pfx_bcm_sendmsg+0x10/0x10 [ 929.423343][ T731] ? aa_sock_msg_perm+0xf1/0x1b0 [ 929.423379][ T731] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 929.423410][ T731] ____sys_sendmsg+0x972/0x9f0 [ 929.423449][ T731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 929.423487][ T731] ? import_iovec+0x73/0xa0 [ 929.423517][ T731] ___sys_sendmsg+0x2a5/0x360 [ 929.423553][ T731] ? __pfx____sys_sendmsg+0x10/0x10 [ 929.423621][ T731] ? __fget_files+0x2a/0x420 [ 929.423654][ T731] ? __fget_files+0x3a0/0x420 [ 929.423702][ T731] __x64_sys_sendmsg+0x1bd/0x2a0 [ 929.423735][ T731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 929.423775][ T731] ? __pfx_ksys_write+0x10/0x10 [ 929.423814][ T731] do_syscall_64+0x14d/0xf80 [ 929.423841][ T731] ? trace_irq_disable+0x3b/0x150 [ 929.423873][ T731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.423897][ T731] ? clear_bhb_loop+0x40/0x90 [ 929.423926][ T731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.423949][ T731] RIP: 0033:0x7f1a31d9c799 [ 929.423970][ T731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.423989][ T731] RSP: 002b:00007f1a32c44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.424013][ T731] RAX: ffffffffffffffda RBX: 00007f1a32015fa0 RCX: 00007f1a31d9c799 [ 929.424029][ T731] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 929.424043][ T731] RBP: 00007f1a32c44090 R08: 0000000000000000 R09: 0000000000000000 [ 929.424057][ T731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.424070][ T731] R13: 00007f1a32016038 R14: 00007f1a32015fa0 R15: 00007ffe5f358cb8 [ 929.424112][ T731] [ 930.062876][ T740] tipc: Failed to remove unknown binding: 66,0,0/0:4057206839/4057206841 [ 930.136823][ T740] tipc: Failed to remove unknown binding: 66,0,0/0:4057206839/4057206840 [ 930.167908][ T740] tipc: Failed to remove unknown binding: 66,0,0/0:4057206839/4057206841 [ 930.191076][ T740] tipc: Failed to remove unknown binding: 66,0,0/0:4057206839/4057206840 [ 930.234285][ T751] block nbd4: NBD_DISCONNECT [ 930.299829][ T752] netlink: 'syz.3.7491': attribute type 1 has an invalid length. [ 930.430973][ T752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 930.466656][ T754] bond1: (slave geneve2): making interface the new active one [ 930.476727][ T754] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 930.493131][ T77] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 930.504682][ T77] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 930.515860][ T77] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 930.553757][ T77] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 930.879876][ T773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7498'. [ 930.889496][ T773] 8021q: VLANs not supported on vxcan0 [ 931.031248][ T771] lo speed is unknown, defaulting to 1000 [ 931.263370][ T782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7502'. [ 931.555740][ T793] netlink: 'syz.4.7504': attribute type 2 has an invalid length. [ 931.564092][ T793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7504'. [ 931.585932][ T796] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 931.595824][ T796] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 931.615096][ T797] siw: device registration error -23 [ 931.679482][ T801] IPv6: addrconf: prefix option has invalid lifetime [ 931.727141][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 931.733531][ T1300] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 931.921479][ T810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7509'. [ 931.936826][ T777] netlink: 'syz.2.7499': attribute type 2 has an invalid length. [ 931.955158][ T777] netlink: 'syz.2.7499': attribute type 8 has an invalid length. [ 931.956177][ T810] openvswitch: netlink: Invalid VLAN frame [ 931.983837][ T777] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7499'. [ 931.993185][ T810] xt_hashlimit: size too large, truncated to 1048576 [ 932.029458][ T812] TC_ACT_REPEAT abuse ? [ 932.047943][ T813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7509'. [ 932.656252][ T830] syzkaller0: entered promiscuous mode [ 932.679479][ T830] syzkaller0: entered allmulticast mode [ 932.863710][ T845] team0: No ports can be present during mode change [ 933.035999][ T848] __nla_validate_parse: 3 callbacks suppressed [ 933.036022][ T848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7521'. [ 933.217035][ T858] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7525'. [ 933.253460][ T858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7525'. [ 933.279322][ T858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7525'. [ 933.303358][ T858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7525'. [ 933.349015][ T858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7525'. [ 933.363961][ T858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7525'. [ 933.374014][ T858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7525'. [ 933.383725][ T858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7525'. [ 933.394929][ T858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7525'. [ 934.026987][ T885] team0: No ports can be present during mode change [ 934.476303][ T908] wg1: entered promiscuous mode [ 934.481856][ T908] wg1: entered allmulticast mode [ 934.537313][ T906] debugfs: 'netdev:syzkaller0' already exists in 'phy70' [ 934.903175][ T929] syzkaller0: entered promiscuous mode [ 934.909082][ T929] syzkaller0: entered allmulticast mode [ 935.293710][ T906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 935.300294][ T906] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 935.406820][ T906] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 935.420438][ T906] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 935.591362][ T906] tipc: Resetting bearer [ 935.779439][ T906] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 935.788324][ T906] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 935.925509][ T906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 935.935146][ T906] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 936.198904][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 936.853859][ T993] netlink: 'syz.1.7567': attribute type 61 has an invalid length. [ 937.199595][T15868] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 938.277685][ T1060] __nla_validate_parse: 72 callbacks suppressed [ 938.277707][ T1060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7587'. [ 939.372084][ T1107] netlink: 1355 bytes leftover after parsing attributes in process `syz.1.7602'. [ 939.684165][ T1123] netlink: 'syz.3.7606': attribute type 13 has an invalid length. [ 939.692383][ T1123] netlink: 'syz.3.7606': attribute type 17 has an invalid length. [ 939.823097][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.830820][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.226022][ T1123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.255834][ T1123] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.284616][ T1123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 940.306366][T10060] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.325736][T10060] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.336590][T10060] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 940.348211][T10060] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.382530][T10060] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.396421][T10060] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 940.407626][T10060] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.417019][T10060] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.427711][T10060] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 940.437240][T10060] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.446657][T10060] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.457886][T10060] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 940.566779][ T1154] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 940.586381][ T1154] bond1: (slave lo): Enslaving as an active interface with an up link [ 940.596117][ T1154] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 940.618352][ T1157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7618'. [ 940.672725][ T1157] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 940.699315][ T1157] bridge5: entered allmulticast mode [ 941.747613][ T1195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7627'. [ 941.974956][ T1195] nbd: socks must be embedded in a SOCK_ITEM attr [ 942.027644][ T1201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7627'. [ 942.097682][ T1201] nbd: device at index 64 is going down [ 942.313705][ T1205] lo speed is unknown, defaulting to 1000 [ 942.504509][T32609] udevd[32609]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 943.072110][ T1242] syzkaller0: entered promiscuous mode [ 943.077865][ T1242] syzkaller0: entered allmulticast mode [ 943.200696][ T1246] geneve2: entered promiscuous mode [ 943.218821][ T1246] geneve2: entered allmulticast mode [ 943.322785][ T1254] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7644'. [ 943.383995][ T1254] siw: device registration error -23 [ 943.519241][ T1254] siw: device registration error -23 [ 943.665461][ T1263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7646'. [ 943.677813][ T1250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7643'. [ 943.713962][ T1263] openvswitch: netlink: Flow key attr not present in new flow. [ 943.729910][ T1262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7646'. [ 943.744114][ T1256] netlink: 216 bytes leftover after parsing attributes in process `syz.3.7643'. [ 943.754224][ T1256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7643'. [ 943.764091][ T1256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7643'. [ 943.779029][ T1262] openvswitch: netlink: Flow key attr not present in new flow. [ 944.056348][ T1280] sctp: [Deprecated]: syz.1.7650 (pid 1280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 944.056348][ T1280] Use struct sctp_sack_info instead [ 944.529024][ T1256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 944.549992][ T12] bond0: (slave bond_slave_0): interface is now down [ 944.559882][ T1258] bond0: option arp_validate: invalid value (55553) [ 944.566612][ T12] bond0: (slave bond_slave_1): interface is now down [ 944.590958][ T49] bond0: (slave bond_slave_0): interface is now down [ 944.597732][ T49] bond0: (slave bond_slave_1): interface is now down [ 944.654688][ T49] bond0: now running without any active interface! [ 944.803988][ T1288] team0: No ports can be present during mode change [ 944.900226][ T1291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7653'. [ 944.941496][ T1291] netlink: 'syz.4.7653': attribute type 25 has an invalid length. [ 944.949810][ T1291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7653'. [ 944.967447][ T146] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 944.967675][ T1291] netlink: 'syz.4.7653': attribute type 25 has an invalid length. [ 944.985700][ T146] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.024606][ T146] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.051854][ T146] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.072692][ T1291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7653'. [ 945.151356][ T1309] lo speed is unknown, defaulting to 1000 [ 945.314149][ T1321] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 945.937878][ T1333] netlink: 'syz.1.7664': attribute type 1 has an invalid length. [ 946.171293][ T1344] syzkaller0: entered promiscuous mode [ 946.179659][ T1344] syzkaller0: entered allmulticast mode [ 946.195255][ T1343] lo speed is unknown, defaulting to 1000 [ 946.926296][ T1379] lo speed is unknown, defaulting to 1000 [ 947.728061][ T1394] Bluetooth: MGMT ver 1.23 [ 948.966221][ T1430] tun0: tun_chr_ioctl cmd 1074025675 [ 948.978524][ T1430] tun0: persist enabled [ 948.987664][ T1430] tun0: tun_chr_ioctl cmd 1074025675 [ 949.005553][ T1430] tun0: persist enabled [ 949.016010][ T1430] tun0: tun_chr_ioctl cmd 1074025673 [ 949.497963][ T1446] netlink: 'syz.4.7698': attribute type 16 has an invalid length. [ 949.506267][ T1446] __nla_validate_parse: 3 callbacks suppressed [ 949.506287][ T1446] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7698'. [ 949.816386][ T1454] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.824210][ T1454] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.012856][ T1469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7706'. [ 950.030681][ T1469] netlink: 'syz.1.7706': attribute type 2 has an invalid length. [ 950.407873][ T1454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.427410][ T1454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.545398][ T1454] veth0_macvtap: left allmulticast mode [ 950.630358][ T1487] netlink: 'syz.4.7709': attribute type 39 has an invalid length. [ 950.804626][ T1454] bridge1: left promiscuous mode [ 950.823746][ T1454] ip6erspan0: left allmulticast mode [ 950.834205][ T1454] bridge3: left promiscuous mode [ 950.847957][ T1454] bridge5: left promiscuous mode [ 950.856266][ T1454] veth7: left promiscuous mode [ 950.885610][ T1486] IPv6: sit1: Disabled Multicast RS [ 950.902521][T10060] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.928920][T10060] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.981947][T10060] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.999213][T10060] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.016121][T10060] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.038052][T10060] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.086326][T10060] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.108183][T10060] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.189377][ T1502] xt_nfacct: accounting object `syz0' does not exist [ 951.395262][ T1522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7718'. [ 951.466887][ T1521] lo speed is unknown, defaulting to 1000 [ 951.636479][ T1529] tipc: Invalid UDP bearer configuration [ 951.636536][ T1529] tipc: Enabling of bearer rejected, failed to enable media [ 951.918570][ T1533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7724'. [ 952.483609][ T1565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7730'. [ 952.669389][ T1570] netlink: 'syz.0.7731': attribute type 21 has an invalid length. [ 952.677317][ T1570] IPv6: NLM_F_CREATE should be specified when creating new route [ 952.737245][ T1570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 952.744631][ T1570] IPv6: NLM_F_CREATE should be set when creating new route [ 952.751955][ T1570] IPv6: NLM_F_CREATE should be set when creating new route [ 952.759254][ T1570] IPv6: NLM_F_CREATE should be set when creating new route [ 952.777804][ T1578] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.7733'. [ 953.075070][ T1584] bond5: option min_links: invalid value (18446744073709551612) [ 953.095985][ T1584] bond5: option min_links: allowed values 0 - 2147483647 [ 953.107031][ T1584] bond5 (unregistering): Released all slaves [ 953.117088][ T1597] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 953.136337][ T1599] netlink: 'syz.2.7739': attribute type 3 has an invalid length. [ 953.232205][ T1588] lo speed is unknown, defaulting to 1000 [ 953.301688][ T1603] netlink: 'syz.4.7744': attribute type 1 has an invalid length. [ 953.309956][ T1603] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7744'. [ 953.320127][ T1603] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7744'. [ 953.330259][ T1603] netlink: 'syz.4.7744': attribute type 1 has an invalid length. [ 953.338124][ T1603] netlink: 634 bytes leftover after parsing attributes in process `syz.4.7744'. [ 953.672919][ T1620] bond2: option all_slaves_active: invalid value (13) [ 953.715080][ T1620] bond2 (unregistering): Released all slaves [ 953.794271][ T1627] netlink: 'syz.0.7746': attribute type 1 has an invalid length. [ 953.996757][ T1640] bridge2: entered promiscuous mode [ 954.178648][ T1652] vlan1: entered promiscuous mode [ 954.809544][ T1679] bridge6: entered promiscuous mode [ 955.635044][ T1736] lo speed is unknown, defaulting to 1000 [ 955.694013][ T1743] netlink: 'syz.4.7781': attribute type 1 has an invalid length. [ 955.736770][ T1754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7783'. [ 955.772066][ T1743] bond5: entered promiscuous mode [ 955.777717][ T1743] 8021q: adding VLAN 0 to HW filter on device bond5 [ 955.830732][ T1755] 8021q: adding VLAN 0 to HW filter on device bond5 [ 955.838123][ T1755] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 955.853281][ T1755] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 955.868319][ T1755] bond5: (slave wireguard0): making interface the new active one [ 955.881637][ T1755] wireguard0: entered promiscuous mode [ 955.889272][ T1755] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 955.904169][ T1754] vlan2: entered promiscuous mode [ 955.911295][ T1754] bridge0: entered promiscuous mode [ 956.089616][ T1771] netlink: 'syz.2.7788': attribute type 3 has an invalid length. [ 956.123644][ T1771] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 956.175180][ T1767] netlink: 'syz.0.7787': attribute type 11 has an invalid length. [ 956.187875][ T1767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7787'. [ 956.475566][ T1767] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 956.660701][ T1783] netlink: 'syz.0.7791': attribute type 1 has an invalid length. [ 957.610392][ T1810] bridge4: entered promiscuous mode [ 957.827712][ T1824] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 957.852165][ T1827] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7801'. [ 958.616231][ T1818] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7801'. [ 958.706217][ T1841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7806'. [ 958.715419][ T1841] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7806'. [ 958.891431][ T1850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7807'. [ 958.922831][ T1841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7806'. [ 959.062830][ T1843] sctp: [Deprecated]: syz.3.7807 (pid 1843) Use of int in maxseg socket option. [ 959.062830][ T1843] Use struct sctp_assoc_value instead [ 959.214815][ T1857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7811'. [ 959.293659][ T1857] ------------[ cut here ]------------ [ 959.300389][ T1857] !rwb [ 959.300434][ T1857] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#0: syz.4.7811/1857 [ 959.313977][ T1857] Modules linked in: [ 959.318301][ T1857] CPU: 0 UID: 0 PID: 1857 Comm: syz.4.7811 Not tainted syzkaller #0 PREEMPT(full) [ 959.327921][ T1857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 959.338119][ T1857] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 959.344499][ T1857] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 6d 2a 25 fd eb 18 e8 66 2a 25 fd eb 0d e8 5f 2a 25 fd 4c 89 ff e8 d7 51 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 959.364274][ T1857] RSP: 0018:ffffc90005646e30 EFLAGS: 00010282 [ 959.370462][ T1857] RAX: 46999b77d3549100 RBX: 1ffff11009d7f384 RCX: 0000000000000046 [ 959.378497][ T1857] RDX: 0000000000000006 RSI: ffffffff8df23ae1 RDI: ffffffff8c27c180 [ 959.386695][ T1857] RBP: dffffc0000000000 R08: ffffffff90114ab7 R09: 1ffffffff2022956 [ 959.394848][ T1857] R10: dffffc0000000000 R11: fffffbfff2022957 R12: ffff88804ebf9c20 [ 959.402934][ T1857] R13: 0000000000000000 R14: ffff888053955000 R15: ffff88804ebf9c00 [ 959.411019][ T1857] FS: 00007fbe12e306c0(0000) GS:ffff88812545f000(0000) knlGS:0000000000000000 [ 959.420074][ T1857] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.426713][ T1857] CR2: 00007f1a31fe92f8 CR3: 00000000a7b34000 CR4: 00000000003526f0 [ 959.434807][ T1857] Call Trace: [ 959.438130][ T1857] [ 959.441264][ T1857] blk_register_queue+0x382/0x430 [ 959.446514][ T1857] __add_disk+0x677/0xd50 [ 959.451109][ T1857] ? down_read+0x272/0x2e0 [ 959.455596][ T1857] add_disk_fwnode+0xfb/0x480 [ 959.460641][ T1857] nbd_dev_add+0x72c/0xb50 [ 959.465207][ T1857] ? __pfx_nbd_dev_add+0x10/0x10 [ 959.470295][ T1857] ? bpf_lsm_capable+0x9/0x20 [ 959.475037][ T1857] ? security_capable+0x7e/0x2c0 [ 959.480089][ T1857] ? radix_tree_lookup+0x25c/0x290 [ 959.485323][ T1857] nbd_genl_connect+0x962/0x1cf0 [ 959.490366][ T1857] ? __pfx___nla_validate_parse+0x10/0x10 [ 959.496154][ T1857] ? __pfx_nbd_genl_connect+0x10/0x10 [ 959.501623][ T1857] ? rcu_is_watching+0x15/0xb0 [ 959.506449][ T1857] ? trace_kmalloc+0x2a/0x110 [ 959.511360][ T1857] ? __nla_parse+0x40/0x60 [ 959.515830][ T1857] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 959.522261][ T1857] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 959.528661][ T1857] genl_family_rcv_msg_doit+0x22a/0x330 [ 959.534415][ T1857] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 959.540634][ T1857] ? __lock_acquire+0x6b5/0x2cf0 [ 959.545651][ T1857] genl_rcv_msg+0x61c/0x7a0 [ 959.550292][ T1857] ? __pfx_genl_rcv_msg+0x10/0x10 [ 959.555389][ T1857] ? __pfx_nbd_genl_connect+0x10/0x10 [ 959.561024][ T1857] ? __lock_acquire+0x6b5/0x2cf0 [ 959.566057][ T1857] netlink_rcv_skb+0x232/0x4b0 [ 959.570976][ T1857] ? __pfx_genl_rcv_msg+0x10/0x10 [ 959.576065][ T1857] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 959.581864][ T1857] ? down_read+0x272/0x2e0 [ 959.586361][ T1857] ? genl_rcv+0xd/0x40 [ 959.590535][ T1857] genl_rcv+0x28/0x40 [ 959.594585][ T1857] netlink_unicast+0x80f/0x9b0 [ 959.599559][ T1857] ? __pfx_netlink_unicast+0x10/0x10 [ 959.604923][ T1857] ? netlink_sendmsg+0x650/0xb40 [ 959.609968][ T1857] ? skb_put+0x11b/0x210 [ 959.614278][ T1857] netlink_sendmsg+0x813/0xb40 [ 959.619215][ T1857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 959.624574][ T1857] ? aa_sock_msg_perm+0xf1/0x1b0 [ 959.629634][ T1857] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 959.634984][ T1857] ____sys_sendmsg+0x972/0x9f0 [ 959.639863][ T1857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 959.645225][ T1857] ? import_iovec+0x73/0xa0 [ 959.650098][ T1857] ___sys_sendmsg+0x2a5/0x360 [ 959.654959][ T1857] ? __pfx____sys_sendmsg+0x10/0x10 [ 959.660279][ T1857] ? futex_wake+0x4ac/0x580 [ 959.664892][ T1857] ? __fget_files+0x2a/0x420 [ 959.669612][ T1857] ? __fget_files+0x3a0/0x420 [ 959.674378][ T1857] __x64_sys_sendmsg+0x1bd/0x2a0 [ 959.679477][ T1857] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 959.685012][ T1857] ? rcu_is_watching+0x15/0xb0 [ 959.689913][ T1857] do_syscall_64+0x14d/0xf80 [ 959.694572][ T1857] ? trace_irq_disable+0x3b/0x150 [ 959.699721][ T1857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.705854][ T1857] ? clear_bhb_loop+0x40/0x90 [ 959.710680][ T1857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.716652][ T1857] RIP: 0033:0x7fbe11f9c799 [ 959.721239][ T1857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.740967][ T1857] RSP: 002b:00007fbe12e30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 959.749499][ T1857] RAX: ffffffffffffffda RBX: 00007fbe12215fa0 RCX: 00007fbe11f9c799 [ 959.757525][ T1857] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 959.765711][ T1857] RBP: 00007fbe12032c99 R08: 0000000000000000 R09: 0000000000000000 [ 959.773936][ T1857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.782058][ T1857] R13: 00007fbe12216038 R14: 00007fbe12215fa0 R15: 00007ffdb4abf4a8 [ 959.790171][ T1857] [ 959.793252][ T1857] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 959.800564][ T1857] CPU: 0 UID: 0 PID: 1857 Comm: syz.4.7811 Not tainted syzkaller #0 PREEMPT(full) [ 959.809901][ T1857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 959.820000][ T1857] Call Trace: [ 959.823300][ T1857] [ 959.826252][ T1857] vpanic+0x56c/0xa60 [ 959.830304][ T1857] ? __pfx__printk+0x10/0x10 [ 959.834920][ T1857] ? __pfx_vpanic+0x10/0x10 [ 959.839457][ T1857] ? is_bpf_text_address+0x292/0x2b0 [ 959.844765][ T1857] ? is_bpf_text_address+0x26/0x2b0 [ 959.849994][ T1857] panic+0xc5/0xd0 [ 959.853747][ T1857] ? __pfx_panic+0x10/0x10 [ 959.858207][ T1857] __warn+0x315/0x4f0 [ 959.862222][ T1857] ? wbt_init_enable_default+0x18a/0x220 [ 959.868071][ T1857] ? wbt_init_enable_default+0x18a/0x220 [ 959.873736][ T1857] __report_bug+0x29a/0x540 [ 959.878342][ T1857] ? netlink_rcv_skb+0x232/0x4b0 [ 959.883302][ T1857] ? genl_rcv+0x28/0x40 [ 959.887571][ T1857] ? netlink_unicast+0x80f/0x9b0 [ 959.892549][ T1857] ? wbt_init_enable_default+0x18a/0x220 [ 959.898212][ T1857] ? __pfx___report_bug+0x10/0x10 [ 959.903276][ T1857] ? wbt_init_enable_default+0x18a/0x220 [ 959.908938][ T1857] report_bug+0x16a/0x220 [ 959.913299][ T1857] ? wbt_init_enable_default+0x18a/0x220 [ 959.918955][ T1857] ? wbt_init_enable_default+0x18c/0x220 [ 959.924620][ T1857] handle_bug+0x9c/0x200 [ 959.928897][ T1857] exc_invalid_op+0x1a/0x50 [ 959.933449][ T1857] asm_exc_invalid_op+0x1a/0x20 [ 959.938325][ T1857] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 959.944593][ T1857] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 6d 2a 25 fd eb 18 e8 66 2a 25 fd eb 0d e8 5f 2a 25 fd 4c 89 ff e8 d7 51 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 959.964227][ T1857] RSP: 0018:ffffc90005646e30 EFLAGS: 00010282 [ 959.970326][ T1857] RAX: 46999b77d3549100 RBX: 1ffff11009d7f384 RCX: 0000000000000046 [ 959.978319][ T1857] RDX: 0000000000000006 RSI: ffffffff8df23ae1 RDI: ffffffff8c27c180 [ 959.986321][ T1857] RBP: dffffc0000000000 R08: ffffffff90114ab7 R09: 1ffffffff2022956 [ 959.994316][ T1857] R10: dffffc0000000000 R11: fffffbfff2022957 R12: ffff88804ebf9c20 [ 960.002306][ T1857] R13: 0000000000000000 R14: ffff888053955000 R15: ffff88804ebf9c00 [ 960.010339][ T1857] blk_register_queue+0x382/0x430 [ 960.015408][ T1857] __add_disk+0x677/0xd50 [ 960.019788][ T1857] ? down_read+0x272/0x2e0 [ 960.024326][ T1857] add_disk_fwnode+0xfb/0x480 [ 960.029046][ T1857] nbd_dev_add+0x72c/0xb50 [ 960.033495][ T1857] ? __pfx_nbd_dev_add+0x10/0x10 [ 960.038499][ T1857] ? bpf_lsm_capable+0x9/0x20 [ 960.043236][ T1857] ? security_capable+0x7e/0x2c0 [ 960.048240][ T1857] ? radix_tree_lookup+0x25c/0x290 [ 960.053407][ T1857] nbd_genl_connect+0x962/0x1cf0 [ 960.058388][ T1857] ? __pfx___nla_validate_parse+0x10/0x10 [ 960.064143][ T1857] ? __pfx_nbd_genl_connect+0x10/0x10 [ 960.069548][ T1857] ? rcu_is_watching+0x15/0xb0 [ 960.074341][ T1857] ? trace_kmalloc+0x2a/0x110 [ 960.079160][ T1857] ? __nla_parse+0x40/0x60 [ 960.083608][ T1857] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 960.090055][ T1857] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 960.096504][ T1857] genl_family_rcv_msg_doit+0x22a/0x330 [ 960.102091][ T1857] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 960.108199][ T1857] ? __lock_acquire+0x6b5/0x2cf0 [ 960.113167][ T1857] genl_rcv_msg+0x61c/0x7a0 [ 960.117714][ T1857] ? __pfx_genl_rcv_msg+0x10/0x10 [ 960.122778][ T1857] ? __pfx_nbd_genl_connect+0x10/0x10 [ 960.128173][ T1857] ? __lock_acquire+0x6b5/0x2cf0 [ 960.133151][ T1857] netlink_rcv_skb+0x232/0x4b0 [ 960.137939][ T1857] ? __pfx_genl_rcv_msg+0x10/0x10 [ 960.142994][ T1857] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 960.148349][ T1857] ? down_read+0x272/0x2e0 [ 960.152800][ T1857] ? genl_rcv+0xd/0x40 [ 960.156904][ T1857] genl_rcv+0x28/0x40 [ 960.160917][ T1857] netlink_unicast+0x80f/0x9b0 [ 960.165755][ T1857] ? __pfx_netlink_unicast+0x10/0x10 [ 960.171078][ T1857] ? netlink_sendmsg+0x650/0xb40 [ 960.176040][ T1857] ? skb_put+0x11b/0x210 [ 960.180314][ T1857] netlink_sendmsg+0x813/0xb40 [ 960.185109][ T1857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 960.190429][ T1857] ? aa_sock_msg_perm+0xf1/0x1b0 [ 960.195399][ T1857] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 960.200732][ T1857] ____sys_sendmsg+0x972/0x9f0 [ 960.205533][ T1857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 960.210852][ T1857] ? import_iovec+0x73/0xa0 [ 960.215393][ T1857] ___sys_sendmsg+0x2a5/0x360 [ 960.220104][ T1857] ? __pfx____sys_sendmsg+0x10/0x10 [ 960.225336][ T1857] ? futex_wake+0x4ac/0x580 [ 960.229899][ T1857] ? __fget_files+0x2a/0x420 [ 960.234521][ T1857] ? __fget_files+0x3a0/0x420 [ 960.239236][ T1857] __x64_sys_sendmsg+0x1bd/0x2a0 [ 960.244208][ T1857] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 960.249702][ T1857] ? rcu_is_watching+0x15/0xb0 [ 960.254512][ T1857] do_syscall_64+0x14d/0xf80 [ 960.259131][ T1857] ? trace_irq_disable+0x3b/0x150 [ 960.264190][ T1857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.270282][ T1857] ? clear_bhb_loop+0x40/0x90 [ 960.274986][ T1857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.280900][ T1857] RIP: 0033:0x7fbe11f9c799 [ 960.285344][ T1857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.304989][ T1857] RSP: 002b:00007fbe12e30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 960.313428][ T1857] RAX: ffffffffffffffda RBX: 00007fbe12215fa0 RCX: 00007fbe11f9c799 [ 960.321419][ T1857] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 960.329411][ T1857] RBP: 00007fbe12032c99 R08: 0000000000000000 R09: 0000000000000000 [ 960.337404][ T1857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.345390][ T1857] R13: 00007fbe12216038 R14: 00007fbe12215fa0 R15: 00007ffdb4abf4a8 [ 960.353403][ T1857] [ 960.357076][ T1857] Kernel Offset: disabled [ 960.361422][ T1857] Rebooting in 86400 seconds..