last executing test programs: 2.91078081s ago: executing program 2 (id=4648): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'gre0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x40, 0x8, 0x6, 0xb9d2, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x64, 0x0, 0xf2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x20, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2, 0x0, 0x8}, 0xfe1b) unshare(0xc000400) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000001540)=ANY=[@ANYRESHEX=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xebb0}, 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000a40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000001040)=ANY=[@ANYBLOB="b8030000", @ANYRES16=r3, @ANYBLOB="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"], 0x3b8}, 0x1, 0x0, 0x0, 0x1}, 0xc005) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000640)="020000000980ffffd2c960d88cf6b2852cb97e80cae297cf524a1896665c8a20ad6b3692ad9eec8a63d84015d62b1fd0bce5f25fd94c894c2d132df937a1d9f6f3c3bf27a2b218b1c38783432395c7773c54fa11307ba3de164fadc6453586afd8b0676f33045b76c2baf42cfaf11b87dce3a4eecefddd1747cb44e4955f8506fba58323ead022714a3542fa639a99bd30be19da7f35c6d2d1f498e072544ee47834a62159b1bcd9d0459ca82829ced4afafb0edcc56a94ac40b31b4266b3afc88ad787027ead0409ff42e", 0xcb) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={r5}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000005000000000080000000"], 0x26}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 2.728428196s ago: executing program 3 (id=4650): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x2b, 0x80801, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c00000039000100faff0700ffdadf25010000000800ec00", @ANYRES32=r2, @ANYBLOB="86abe2ea94bab27b36af43f4d8a807f022727c82a55473772cb69a9c83205e6cff26fdd32fa70ec3cb6361852e918024c877c792790a7b6045e3a22ba2d0"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0xe0}], 0x18}, 0x44) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8d, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x48051}, 0x40040c4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8d", 0x1a}, {&(0x7f0000000480)="d91197e00f747fc820d9e533b12152b68ad35d567ae53cdee5f5a8747909c8e0f1d6c55d04", 0x25}], 0x2) recvmmsg$unix(r4, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/127, 0x7f}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2}}], 0x1, 0x40002100, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r9 = socket(0x18, 0x5, 0x0) getpeername$netrom(r9, 0x0, &(0x7f0000000080)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x2}) ioctl$TUNSETPERSIST(r10, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r10, 0x400454cb, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRESHEX, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40002}, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x58, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.2709864s ago: executing program 3 (id=4654): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="480000002e0001c6000000000000050004001980340011802e30cf"], 0x48}], 0x1, 0x0, 0x0, 0x84}, 0x300) 1.984781949s ago: executing program 3 (id=4658): socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100003788075095111ae02d77fa4059c9866fdeb3b409848dd3c465c84e70246280c82580e8f899c9787565d8c946c228e9d9bc913f869b67769f8e2cab3825da59dda76a43520a762bf75a51577cf9b82d4a8343eb5576695c09311f3399c4f71ab3e5c75d501f5771", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xb, 0x0, &(0x7f0000000200)="df33c90000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) unshare(0x20010380) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async, rerun: 32) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc1, 0xfff, 0x5, 0x1d], 0x40, 0x0, 0x0}, &(0x7f0000000240)=0x108) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000400)={0x0, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}}}, 0x88) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20000060) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x74, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x8, 0x1, 0x99ad}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc44}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) (rerun: 64) 1.872430441s ago: executing program 2 (id=4659): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, 0x0, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc8001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000002040)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d00200800e911ff20010000000000000000000060000000ff0200000000000000000000000000014f194e2000e990"], 0x123) 1.872170512s ago: executing program 0 (id=4660): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.729285004s ago: executing program 0 (id=4662): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01040000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100ffff08000b40000000000900010073797a300000000008000a"], 0xa4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.524279326s ago: executing program 2 (id=4663): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x13}]}}}], 0x18}}], 0x2, 0x2000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000008000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000001000)={{0x0, 0x1, 0x6, 0x5, 0x7fffffffffffffff, 0x9, 0x7, 0x7, 0x3, 0xb67, 0x7, 0x7, 0x6, 0x8000000000000001, 0x2}}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000002000)={{r7, 0x2, 0x1, 0x7, 0x5, 0x7, 0x2, 0x9, 0x5, 0x1, 0x200, 0x5, 0xfffffffffffffeff, 0x618, 0xfffffffffffffffe}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000049d0000000000000feffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x11}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0xb4, 0x3, 0x2, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x7800, 0xf, 0x1000}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r2, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000840)=[0x0], &(0x7f0000000940)=[0x0], 0x0, 0xa7, &(0x7f0000000980)=[{}, {}], 0x10, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r10, 0xffffffffffffff25) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendfile(r12, r12, &(0x7f0000000040)=0x8000000000000000, 0x9) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000003000)=@newqdisc={0x370, 0x24, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xffe0}, {0xfff3, 0x10}, {0x1, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x780b}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x8, 0x1, 0x7d13, 0x1, 0x5, 0x1ff, 0x4}}, {0xc, 0x2, [0x3, 0x64, 0x9b65, 0x8]}}, {{0x1c, 0x1, {0xf4, 0x8, 0x8, 0x0, 0x1, 0x7ff, 0x9, 0x7}}, {0x12, 0x2, [0x8001, 0x1, 0xdd80, 0x7, 0x0, 0x2, 0x80]}}, {{0x1c, 0x1, {0x6, 0x40, 0x40, 0x3, 0x2, 0x40000, 0x312, 0x8}}, {0x14, 0x2, [0x8, 0x800, 0x3, 0x2, 0x7, 0x9, 0x829, 0x8]}}, {{0x1c, 0x1, {0x21, 0xbd, 0xe7ee, 0x65257a2d, 0x1, 0x6, 0x9, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x12, 0x8, 0x1200, 0x3, 0x1, 0x2, 0x9, 0x4}}, {0xc, 0x2, [0xed26, 0x7, 0x2, 0x0]}}, {{0x1c, 0x1, {0x80, 0x7, 0x6, 0x3, 0x1, 0x8, 0x2, 0x5}}, {0xe, 0x2, [0x2, 0x9, 0x8, 0x7, 0x9]}}, {{0x1c, 0x1, {0xc, 0xff, 0x6, 0x0, 0x2, 0x3, 0xffffffff, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x2, 0x2, 0x4803, 0x8, 0x2, 0x80, 0x1, 0x4}}, {0xc, 0x2, [0x8, 0xcfeb, 0x5, 0x401]}}, {{0x1c, 0x1, {0x0, 0x7, 0xffff, 0x2, 0x3, 0x4, 0x7, 0x1}}, {0x6, 0x2, [0xd]}}, {{0x1c, 0x1, {0xb, 0x1, 0x800, 0x4, 0x2, 0x5, 0x3, 0x1}}, {0x6, 0x2, [0x4]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_tbf={{0x8}, {0x10, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x3dd3ed460529051e}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1000}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x2, 0x3ff, 0xc9e3, 0x2, 0xb, 0x8, 0x6}}, {0x10, 0x2, [0x9, 0x9, 0x601a, 0x1, 0xfc00, 0x4]}}, {{0x1c, 0x1, {0xe, 0xc, 0x4, 0x27, 0x0, 0x6, 0x5, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0xf, 0x7, 0x6, 0x6, 0x1, 0x1, 0x90, 0x5}}, {0xe, 0x2, [0x0, 0x6, 0x9, 0x9edf, 0x7fff]}}, {{0x1c, 0x1, {0x7, 0x2, 0x3, 0x5, 0x0, 0xc, 0x9, 0x1}}, {0x6, 0x2, [0x1c00]}}, {{0x1c, 0x1, {0x1, 0x77, 0xd, 0x7, 0x2, 0xfffff000, 0x2, 0x7}}, {0x12, 0x2, [0x6, 0x9, 0x10, 0x9, 0x1ff, 0x1, 0x6]}}, {{0x1c, 0x1, {0x4, 0xff, 0xfffe, 0x1, 0x0, 0x5, 0x80000001}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x6, 0x9, 0x2, 0x1, 0x5, 0x1, 0x5}}, {0xe, 0x2, [0x6, 0x6, 0x7fff, 0x7ca, 0xfffe]}}, {{0x1c, 0x1, {0x7, 0x8e, 0x8001, 0x1, 0x1, 0x10, 0x5, 0x6}}, {0x10, 0x2, [0x4, 0xff, 0x5, 0x7, 0x4, 0x0]}}, {{0x1c, 0x1, {0x7, 0x98, 0x10, 0xf, 0x0, 0xf, 0x8, 0x4}}, {0xc, 0x2, [0x4, 0x4, 0x6, 0x7ff]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0x7, 0x81}}]}, 0x370}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x510c3f31, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0xc, 0x1, 0xb, 0xffffffffffffffe0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x2, 0x2, 0xb, 0x20}, @call={0x85, 0x0, 0x0, 0x10}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}, @map_val={0x18, 0xa, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x100}, @map_fd={0x18, 0x2, 0x1, 0x0, r8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xd0, &(0x7f0000000300)=""/208, 0x40f00, 0x20, '\x00', r9, 0x17, r11, 0x8, &(0x7f0000000540)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x26df7, r12, 0x0, &(0x7f0000000640)=[r13], 0x0, 0x10, 0xa1}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b000003"], 0x0) 1.523757812s ago: executing program 0 (id=4665): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) nanosleep(&(0x7f00000001c0)={0x77359400}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x1, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='GPL\x00', 0xfffffff7, 0xe0, &(0x7f0000000400)=""/224, 0x40f00, 0x4, '\x00', r3, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x7, &(0x7f0000000140)=[r4], &(0x7f0000000300)=[{0x1, 0x5, 0x6, 0x9}, {0x2, 0x2, 0x2, 0x1}, {0x3, 0x5, 0x2, 0x8}, {0x0, 0x5, 0xf, 0xa}, {0x0, 0x1, 0x10, 0x8}, {0x0, 0x3, 0xe, 0xa}, {0x1, 0x1, 0x8, 0xc}], 0x10, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=@ipmr_newroute={0x2c, 0x18, 0x100, 0x70bd2b, 0x25dfdbfe, {0x80, 0x0, 0x20, 0x3, 0x2, 0x0, 0xff, 0x7, 0x2a00}, [@RTA_FLOW={0x8, 0xb, 0x6}, @RTA_MARK={0x8, 0x10, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44044}, 0x44000) 1.395485803s ago: executing program 2 (id=4666): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016", 0x36, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 1.373126426s ago: executing program 1 (id=4667): r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r0, 0xff, 0x22, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001e008d2af6000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x4044) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x1, @remote}, 0xa}}, 0x26) close(0x3) r5 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71185d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x20, 0x40044}}], 0x1, 0x4) r12 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004300)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc, &(0x7f0000003dc0)=[{&(0x7f0000000200)={0xdc, 0x40, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@generic="b4f8655dfc7cf29a81e76c65f27a640d2470a5f7419c8ec1b73c63e591140bf55a17b868a1883dac79c168a111999bf5f3fea5b13451608d48a937fb5ed5972a21c3acb8974b3c34ee7bd888b101693d688c82d8aafc02d75a0d0c0ba202ea017a1773a6afc4e7d32ae69b4c8cef0b3d4946dbf150f1c6807927df56cbb1867980df991dbaae8ea03987743f4a4dd572ce4d75af48cdc88cd9a52f25cc51bab76b261081ea71d431d7defee6680cd674833090c5e857be5914661cf7dc275c03b176a30b154a2edf627ca4"]}, 0xdc}, {0x0}, {&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001600df250c005180040036800400e2800000000000000000"], 0x1c}, {&(0x7f0000001a80)={0x120, 0x16, 0x4, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0xd9, 0x0, 0x0, @fd}, @typed={0x8, 0x77, 0x0, 0x0, @fd}, @nested={0x100, 0xbe, 0x0, 0x1, [@generic, @generic="9a4002f259fa8503297ec48ad1d662cc809010ffe1caabaeccf86f6ad90f32cdec42b79a885054f093ac56093a8939f12fca0c4e35dec740f85ea7b1fa743d6bb75655eeb47b7f694c0b6ac8be85ac65173b48aec4ad4a44edba4f857a4f2f0a389cb183d8ff5ebccddf63f7a9aebb9085f01e47d7c145c34e484669599b9744119b9118267c8a26fdf4bf411d5e7dbce6f690ae02d95b6bf8ff8397603f0cdf78f9f41380cdb0680d599c1314fa8a89595512fa0be6f06e2a969d879cfc5e586607e1512404bb47e688bcb07141d55a9f29b6d8dd99b2b42ff42727af661efd72708a8c06a7321f34929e707d6f8d8cb77c4c1538ec8caf", @nested={0x4, 0xcb}]}]}, 0x120}, {&(0x7f0000001cc0)={0x878, 0x3e, 0x4, 0x70bd28, 0x25dfdbfb, "", [@generic="bce2dc1d7c4b4591c622da85ce2760582253d5dc97a414d30d4de27c4b24472f8659108675d188d517c8ede4b1fda1b3c042e205c3d43c9e606d9f49a03f52bed2fdb581b209da1e0110a030c4fef8d85eb7c3dac88e97", @typed={0x8, 0xf7, 0x0, 0x0, @u32=0x3}, @nested={0x807, 0xea, 0x0, 0x1, [@generic="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", @nested={0x4, 0x13d}]}, @generic]}, 0x878}, {&(0x7f00000004c0)={0x178, 0x2f, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@generic="537e21f92df7638a146a4eba977465128c1c3d403ea42d931cc2769b4ff4bf1eb859789c43c3d8dbef51a089576037f545aafe64a62f7b2b061c1e75cbd56fa0cf9069024d778bbf543244e896358fec937f5f374c1dae509dd10fecc7097affb487bde20e8767b189debfda53feab0648bc7baf5b2f86204594499a70f0d7248398ff20ea353ddf884aa3ea538cf4212a5d24c235c0516d5acd0b86c5b0565e608696003eb4ff49d3f2f6ca47b8589fa2e3c012f3633fe79cc2ecb6df0db5b0d1a685b80ec685d347787f9a47fc7a238b093250b26a6c25aa", @generic="7aa3c4d4f672b503bf502729", @generic="6e87885f6ca7b7797c056012d07bb909498cdd60a48b1415bb6e7aaef3717ca6c7ab921967e4326a431688c22ec5c19c84dbb437ba9a6f9409b0cc6eda3feedd4fb72ebc5d847df978a2207699ca0105f78cd3785d5fd97c5262b8e39a4d13a43bf40471b6", @typed={0xc, 0xa2, 0x0, 0x0, @u64=0x7fffffff}, @typed={0xe, 0x2, 0x0, 0x0, @str='syzkaller\x00'}]}, 0x178}], 0x6, &(0x7f00000008c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r12}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118, 0x8010}, 0x20000000) r13 = getpid() r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r14, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$netlink(r7, &(0x7f00000003c0)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB="100000002000000126bd7000fbdbdf25f7e1be9a22c5958adf2a57e0ed0737e994d3d81bf66f2d6b262042d203831c464f4a3206772f03d387593f674710f126ce586ba19f358944749caf17e605f5d759473c21defc607c8000f4bb734c6295de34fec9fea697c608fea7782bffe8f28dfb1927f9c8897521fbfdeeab5416168c83865eebbac54adb5e5674d12f6b50"], 0x10}, {&(0x7f0000000600)={0x1dc, 0x33, 0x4, 0x70bd26, 0x25dfdbfc, "", [@generic="7fbd62e7f50c414dbc0e2655bc22beacd24131177e7374f507c2e978894995447a5b8cdb83462ce7f7f3a280c158d3bf15bdeab3fd7375027cd0d849e8687a318b422498d152d903ede343de76006b524fcb857735395694d4c4ec1778d2b1d54e3cc248076d94abfa8dd57069d3f3eb4eb820fd3c2e58bf7ca2f788e5e4f6801dd4462a4a66aa849b6df9f3821abf74aafede475dd828423f8a088a25aad2efb945ca11b939b813e22d878605924dfd020deaec44ec3e93c13ffb6251b42ac9e8260791b8df4e73", @typed={0x44, 0x135, 0x0, 0x0, @binary="3c7905fb6e32b2f4f6eb3dcc05b0063da2c00995578c7ee0ce8b272059e521612c6bca5e47bc95cd3630534416c1559573a9a8575e3d5dfe62e0fa1712f930d5"}, @generic="5189bcdb4e5b32", @generic="e04bd5faa163eceb9512ef4b54595aa4f73fb634a295929a489e4bd9a219690c1e027eabb7f1d737c39992432e8541e88802a003ec45f1352314008779895557c34b734bec4b9e77c8f56ec0237526d5213ca520f53d53894193d5bb0b947170a5bf3460bcfac4a7f4a7df7556e27a93737f2dbda499e702501c8d57bb6bf7a77b1bd76ae8de3e8b9e8390f926ab37d1262c76cda66333a31f527282029d6559a5d6a171ccf8ef4e202a8aa9e6273d14007d76796a7874", @generic]}, 0x1dc}, {&(0x7f0000000240)={0x18, 0x1a, 0x20, 0x70bd26, 0x25dfdbfb, "", [@typed={0x8, 0x9f, 0x0, 0x0, @u32=0x8001}]}, 0x18}, {&(0x7f0000007d40)={0x308, 0x2b, 0x100, 0x70bd29, 0x25dfdbfc, "", [@generic="2a67b0e3e05e9b91fdaab65fd8765a855b1b4ae124c58a86502b86792208354a4b497b6eaa2d36a91a0e80459fd7ddd819e4e2af825f9b9489a85e5f24c5dee30a759c774f026c8cb1705bb91a093e92238980d9d2d05f7bb5df09d73901ad3cf0a3a1be3da6559e6fa461af1b46511d7f396020d3831506f53658b746f2e3eac879f584733e1fe5ce84cf5fc6a9b39de54354cd0d0496afdb5d2bc79fac141bfa8fbd2785a7a86f5564785dbd07a117dae538a7d0d65b3fe1e53c0ac479ff58f528c874ba20bdf9b37eca0df8f82f0e33492c713912d97ea83af4825272145cd3425a34d038be", @generic="bcbf75690883ca5da59e5b0061bebff1da28672847f69d68d735eb7c07de0b3a4d5d71c1124bcc5747726c2fa60d56f7a8f5cc5b6e1cbfe6ffef599bacd349c52052c91abb266df7f58869050e9bb02632152ebdc673f8a480edefade566b49798717715187a3a2b42038dda229c1098b464ca1c965e6e3fdf0b912f64f9249cabbf9e6dbc6b7b25fd33c0727d60ed55f96966c78f483e8d21759f1205f60715658a0d58ed8fbc0445eab61a876603d5f31b00", @nested={0xb0, 0x144, 0x0, 0x1, [@generic="be1f9a92392aeb787dd00b37d1639c5998dc2f21f69e6adab4f9986ac9a747a0cefd2fdec199ec336d8967d8f0257131ae67e8dfe3cf14ef45a3ee7a8c9374991d81b72997ce0a5c940d5a9627a03a01d631c92accfcd4973a20a9a21d4db108a2c5b1114152b05e1c6897e7a946769def0ef31ba5dec01bf7cc605dd62ec75d54113bb58dfe7e18d8720e41fc71731b5260bc851ccdfa0654b6ba22afac6fe08a4c1113d59af03e751e9f83"]}, @nested={0x4, 0xeb}, @nested={0x4, 0xf2}, @generic="dfbdc8f1c50634486dea80abbc5a61fb6b8d447a9bb283792221651668e9476e68a1b873a01c704119ea7058abf7dea7ea8c7a47326c909c140f402aaa5f0b313198085f88ed896d82a1450c00a0345410d2798e", @generic="473e120034ef1da3cf265102d28289a5630ad5a203326213722da106f4422f0340e8f835ce9f9c8bdac8b11384f9f5d41971aeffc27e76794bdf43ba817328599e7b736d75d22fa414a0a640d64419"]}, 0x308}, {&(0x7f0000006c00)={0x1140, 0x1e, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x10b4, 0x14, 0x0, 0x1, [@generic="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", @generic="f6f50490573df6169144af46e09c55c06d54da3640bfaa63197c529dd5a07074eec5ee6441e26a1e0a72635e6748457a9bfb61ad60e657360bc73810662602a9b393898150f3f5156d50793f016b7a8b8230e5b154d2057b5b5d5a6e56fa9361fde6489134827468f186a1d5aab97f9a6ca0c96e52b9c2f812f1ba8cd1689dfb47ab21de723fee5ad7e35c75ccc4803e46e450f9228c1aca2e3aa335f60e13db3eea06ec8dd03128c720c52e", @nested={0x4, 0x6a}]}, @generic="64ddd2387907934872aeee1a58a7b35355ab51f72c0e7c21e40c481fbcad711dfcf3bbcc05a9305e40075472e426c7cb2b0a8984234504a7a66f342ed5545eb3a255948612ba6f69f1df29fe4830e271d671c6cfd8cfb5adb052d4bb1e8a3d13161d8e9e0f095a4ae046f6cdcf5fe021ed23fb0d24a436", @typed={0x4, 0xd2}]}, 0x1140}, {&(0x7f0000001400)={0x3bc, 0x2e, 0x604, 0x70bd26, 0x25dfdbfc, "", [@nested={0x299, 0xb4, 0x0, 0x1, [@generic="d737594a1176c59a8efadd3d626921969205efc77265cf8e8e7a208a8c77eced13bb0795e4acfed04d58e37e6be267fc40a5586d2a04795cde973ab7482f306e1c81d6c923a6773c6c091b3d13d5cd863256151d484f1b9ae81d9befe089c69d1c5dcfaca3f892c5518fdf7dfecbc8c33f80135e96d2e9e6d862504b140e5a3382a3dd534d4d854f03487c56c5b5441fa91399250195af756776c47e6b5705766100ce7509dfcacf2f5861097e22c85cb07b2ae9ab5f4081f77972eceafc857266e3ddf6a746b14b37", @nested={0x4, 0x98}, @typed={0x8, 0xe6, 0x0, 0x0, @u32=0x20b}, @nested={0x4, 0x13a}, @nested={0x1b9, 0xe0, 0x0, 0x1, [@nested={0xc1, 0x132, 0x0, 0x1, [@typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@local}, @generic="18cdb9a753dcbd037dadd389d7487899427ed724fe88541973d0f6661d4947d585d78fa9088b2ecf74d6c2196b575766dc2419ae1a250de23694b90b0aef5ffdb65f3daa9633a0dc8ba7d8d56c197e8706c12cb2c6965d79d01af528f5927b3265543c4d0296ba37e49a073100b6face1a846f9d308785e1082d2e536f764e3cdea204c96aff636bd5044931b8e7f8df31ac800e9402887caa8e1226778ceae729fb0c83b4ed404497"]}, @nested={0x4, 0xab}, @generic="0ac20111cf2f84bac4d8839357075f4aea246de17aa22b520afd4167e94edaadb27bca4ebb5a936be91dd2408f5d6af7201dbf95979aa44f459e15007b310b0dfe0408365dcfd7ba964565a4a0568d7a5bc1ac985df4924943963015662ff015c8275cd60bfd1f8256912fe3092898ec734abf24e4c0079a1b11ecc043792ceae39a1e25abd83b4ce7979e9fc1ac7cf39fe4fd199407ef8ae47e5827f70eaf7543f6b8b4369eaa4b88fbba9322c99bbc3c7bbb63d1813491b6b49e53931c64", @generic="549c0b416d89bd071eb0d6e453ce548d4b48f6c463902c51b88c", @typed={0x8, 0x9c, 0x0, 0x0, @fd=r15}, @typed={0xc, 0x133, 0x0, 0x0, @u64=0x5}]}]}, @generic="6fd6ab141063d29b7fc66f83cc283663e6aa0b2272ee94282be9f95ae3ad191b45ca52a2a0114566ed007a2d110b818126dc3412e6d9775c1597a82835f883981949583bb9d3b30d0e74e92d1435c2206731745dc5b42761c098ee2ea2249e3cb05edf48f7b6e5ffafc64f292e5f840dfae92c6e37c4579cc9f4b26444301ef23f2e44357eab4b8b4b7377a347c6d61e1aeb32f7fba00348f8afa297e87f192f82798d", @generic="108dc2a6f81d728367f8ffcf03090629c23d2e98cba1ae", @nested={0x42, 0xbe, 0x0, 0x1, [@nested={0x4, 0x39}, @generic="cc55e1cec1b23797af6c699775556591521011d15a73", @typed={0x8, 0x58, 0x0, 0x0, @pid}, @typed={0xc, 0x7f, 0x0, 0x0, @u64=0x8}, @typed={0xc, 0xe7, 0x0, 0x0, @u64=0xc}, @nested={0x4, 0x123}]}, @typed={0x8, 0x111, 0x0, 0x0, @fd}, @typed={0x8, 0x11c, 0x0, 0x0, @fd=r7}]}, 0x3bc}, {&(0x7f00000023c0)={0x1028, 0x28, 0x400, 0x70bd26, 0x2, "", [@typed={0x8, 0x150, 0x0, 0x0, @pid}, @typed={0x8, 0x6d, 0x0, 0x0, @fd=r8}, @typed={0x8, 0xb, 0x0, 0x0, @fd=r7}, @generic="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"]}, 0x1028}], 0x7, &(0x7f00000034c0)=[@rights={{0x24, 0x1, 0x1, [r8, r2, r7, r2, r5]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0x0, r12}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0xf8, 0x10}, 0x4000000) write$cgroup_pid(r1, &(0x7f0000000040)=r13, 0x12) 1.151816071s ago: executing program 1 (id=4668): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x5, 0x0, @void}, 0x10) close(0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r3, 0x4) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x0, 0x190, 0xffffffff, 0x0, 0x238, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0x0, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0xd}, @remote, @port=0x4e24, @port=0x4e20}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x40) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) r7 = accept4(r0, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getlink={0x3c, 0x12, 0x1, 0x70bd25, 0x0, {0x7}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}, @IFLA_MTU={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000080a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8400}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) ioctl$sock_netdev_private(r4, 0x89f1, &(0x7f0000000740)="92cd59e0121252d3129ec81ab88e176f688e375679419ba796adbf299fe7266e431df138ea456f761f00102f12061ea8db567415788c96d99322ec4ca8d0f2c5df072b64b904bd75f41f96472e9a72801a") sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000180)="98ac3c6741a40ce1997f49fba70d946a07f2178b8bc77dc9339505c7", 0x1c}, {&(0x7f0000000140)="f3e41672c645e11018dc0400000000000000a4c47b311e714b5aab5a85ab5f", 0x1f}, {&(0x7f00000002c0)="390ea240d45db5fcbed46fe54ba61b38faa36d565c3ed3685df9f01173ce90c93393750e9e37617c255ddb6d56", 0x2d}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r7, @ANYRESOCT=r0, @ANYRES8, @ANYRESOCT=r7, @ANYBLOB="ac74988afcd5468a94b83e78259e55bc442422fe431e941b3e5d17cea63c63c8498a3297dca222416dc4a9befc006878e6d332d82d55babf4a5bd76e19a46e53f0b85d58884a7daa0172346e9bc02ea0b521087d7bc3447bba10454821b795b68b953254f29259108165408f47f4540950c5884207f502021b40cf", @ANYRES64=r4], 0x3aa0}, 0x1, 0x0, 0x0, 0x40}, 0x24004015) 1.15150369s ago: executing program 4 (id=4669): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000ff0200000000000000000000000000014e200000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010029bd700000000000e0000002000000000000000000000000000000000000000000000000000d000000000002ff0000000a0010"], 0xb8}}, 0x10000000) 1.150762775s ago: executing program 2 (id=4670): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7f, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x20000092, '\x00'/12}, {0x5, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000002000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 981.382081ms ago: executing program 2 (id=4671): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1) socket$inet6_icmp(0xa, 0x2, 0x3a) 980.606807ms ago: executing program 4 (id=4672): nanosleep(0x0, &(0x7f0000000000)) 740.567121ms ago: executing program 3 (id=4673): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400080008"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 740.345386ms ago: executing program 4 (id=4674): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 689.732602ms ago: executing program 1 (id=4675): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="1800070000000000000000000100010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000089000000bf0900000000000055090100800400009500000000000000b7080000000000007b8af8ff00000000b7080000090080007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b70200000100000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x28}, 0x94) 595.300872ms ago: executing program 1 (id=4676): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x3, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="85000000ae00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x10, 0x9}, 0x94) 529.013682ms ago: executing program 0 (id=4677): r0 = socket$kcm(0xa, 0x922000000001, 0x11) shutdown(r0, 0x1) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x800, @local, 0x0, 0xfffffffe}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="f4040900062b02000000000000000000dcff850100000001000000f4b6d285eb7672caa6fc907b14a3", 0x29}], 0x1}, 0x81) socket$kcm(0xa, 0x922000000001, 0x11) (async) shutdown(r0, 0x1) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x800, @local, 0x0, 0xfffffffe}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="f4040900062b02000000000000000000dcff850100000001000000f4b6d285eb7672caa6fc907b14a3", 0x29}], 0x1}, 0x81) (async) 516.658876ms ago: executing program 3 (id=4678): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_PORT_SELF={0x4}]}, 0x38}, 0x1, 0x1f, 0x0, 0x4000850}, 0x60000090) 456.502927ms ago: executing program 4 (id=4679): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = socket(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xa, 0x148, 0x240, 0x10, 0x498, 0x2a8, 0x2a8, 0x498, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @multicast1, 0x0, 0x0, 'wg0\x00', 'rose0\x00'}, 0x0, 0x220, 0x240, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x400, 0x0, 0x44, 0x81, 0x4, 0xff, 0xfffffaf9, 0x2, 0x20, 0x8}, {0x9}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x3ff}, {0x1000000}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x8000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x590) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @remote, 0x0, 0xffffff00, 0x3, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x9, 0x2, 0x81, 0xfffc, 0xbd, 0x5, 'veth0_vlan\x00', 'caif0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x401}}}, {{@arp={@remote, @multicast2, 0x0, 0xffffff00, 0xf, 0x1, {@mac=@multicast, {[0x7f, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x6, 0x53, 0x1ff, 0x0, 0x7, 'team_slave_0\x00', 'wg2\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="58538100", @multicast2, @multicast1, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @unspec=@NFQUEUE2={0x0, 'NFQUEUE\x00', 0x2, {0x7, 0x5, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x198d888f69bc8790) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000100)={0x5, @remote}) sendmmsg$inet(r2, &(0x7f0000000340)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="c685e3edc50741e5", 0xfffffe91}], 0x1}}], 0x2, 0x4000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x1, 0x10001, 0x21, @private2, @loopback, 0x80, 0x1, 0x7fffffff, 0x7}}) connect$packet(r0, &(0x7f0000000540)={0x11, 0xd, r4, 0x1, 0x8, 0x6, @broadcast}, 0x14) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 433.082898ms ago: executing program 1 (id=4680): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000040)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) 346.768654ms ago: executing program 4 (id=4681): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x4000000}}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4) 272.255906ms ago: executing program 3 (id=4682): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x10) r1 = socket$caif_stream(0x25, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000), 0x24}], 0x1}}], 0x2, 0x4000800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x505, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x28b}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r5 = socket$inet(0xa, 0x801, 0x0) sendmsg$sock(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x4f, 0x1}}], 0x18}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r9, 0x0) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0xc, 0xc, 0x0, 0x81}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000040)={0x3, 'caif0\x00', {0x2}, 0x7}) bind$inet(r8, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) 271.611913ms ago: executing program 0 (id=4683): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000ff0200000000000000000000000000014e200000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010029bd700000000000e0000002000000000000000000000000000000000000000000000000000d000000000000000d00000a0010"], 0xb8}}, 0x10000000) 107.063817ms ago: executing program 1 (id=4684): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 78.546176ms ago: executing program 4 (id=4685): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000086b90000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000100007041af64090aac40d6600000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)='\v\t', 0x2, 0x4000000, 0x0, 0x0) 0s ago: executing program 0 (id=4686): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000100)) bind$bt_l2cap(r0, &(0x7f0000019080)={0x1f, 0x54, @any, 0x0, 0x1}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000092200000825bd7000fddbdfe2360014010700000200000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000280)=0x1, 0x4) kernel console output (not intermixed with test programs): er2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.672313][T16857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.744956][T16857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.775187][T16857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.801544][T16966] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3080'. [ 390.832084][T16857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.125123][T16969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.174593][ T1162] hsr_slave_0: left promiscuous mode [ 391.196460][ T1162] hsr_slave_1: left promiscuous mode [ 391.202867][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.218904][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.255244][ T1162] pimreg3 (unregistering): left allmulticast mode [ 391.714208][T16983] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 391.996822][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 392.073829][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 392.508487][ T5839] Bluetooth: hci2: command tx timeout [ 392.559126][ T1162] team0 (unregistering): Port device dummy0 removed [ 392.621622][T16857] hsr_slave_0: entered promiscuous mode [ 392.628987][T16857] hsr_slave_1: entered promiscuous mode [ 392.635572][T16857] debugfs: 'hsr0' already exists in 'hsr' [ 392.641754][T16857] Cannot create hsr debugfs directory [ 392.722656][T16981] lo speed is unknown, defaulting to 1000 [ 392.765961][T16987] netlink: 'syz.4.3086': attribute type 10 has an invalid length. [ 392.846763][T16989] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3087'. [ 392.863481][T16987] bond0: (slave dummy0): Releasing backup interface [ 392.888216][T16987] team0: Port device dummy0 added [ 393.131819][T16993] No such timeout policy "syz1" [ 393.950567][T17008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3094'. [ 394.027542][T17010] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3094'. [ 394.293740][T16857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 394.333843][T16857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 394.384425][T16857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 394.409708][T16857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 394.460615][T17016] openvswitch: netlink: IP tunnel dst address not specified [ 394.725147][T16857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.796873][T16857] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.845595][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.853058][ T6301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.873384][T17031] Cannot find set identified by id 0 to match [ 394.910476][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.917763][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.984081][T17033] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3101'. [ 395.006795][T17033] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3101'. [ 395.242974][T17042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3104'. [ 395.345059][T17047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3106'. [ 395.675334][T17062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3111'. [ 395.739856][T17067] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3111'. [ 395.881135][T16857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.988801][T16857] veth0_vlan: entered promiscuous mode [ 396.004943][T16857] veth1_vlan: entered promiscuous mode [ 396.072934][T16857] veth0_macvtap: entered promiscuous mode [ 396.112237][T17072] netlink: 'syz.1.3112': attribute type 33 has an invalid length. [ 396.123375][T16857] veth1_macvtap: entered promiscuous mode [ 396.129893][T17072] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3112'. [ 396.194754][T16857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.211955][T17072] lo speed is unknown, defaulting to 1000 [ 396.234281][T16857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.297712][T11480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.312375][T11480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.344177][T11480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.354298][T17084] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3115'. [ 396.373276][T11480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.570012][T17089] xt_hashlimit: max too large, truncated to 1048576 [ 396.601331][T17089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.615472][T17087] 8021q: VLANs not supported on caif0 [ 396.777873][T11893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.793065][T11893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.895416][T11480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.935840][T11480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.401045][T17114] netlink: 'syz.0.3124': attribute type 10 has an invalid length. [ 397.423005][T17114] team0: Port device dummy0 added [ 397.564040][T17121] netlink: 'syz.0.3126': attribute type 23 has an invalid length. [ 397.806964][T17123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3127'. [ 397.879746][T17123] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3127'. [ 398.484831][T17134] vlan0: entered promiscuous mode [ 398.780669][T17146] x_tables: unsorted underflow at hook 2 [ 398.793063][T17146] dummy0: mtu less than device minimum [ 398.846697][T17144] block nbd2: server does not support multiple connections per device. [ 398.867888][T17144] block nbd2: shutting down sockets [ 398.975801][T17150] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 398.988851][T17150] erspan1: entered allmulticast mode [ 399.022571][T17158] netlink: 'syz.4.3140': attribute type 10 has an invalid length. [ 400.105488][T17207] lo speed is unknown, defaulting to 1000 [ 400.355518][T17218] lo speed is unknown, defaulting to 1000 [ 400.434315][T17221] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 400.928493][T17246] __nla_validate_parse: 6 callbacks suppressed [ 400.928514][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3164'. [ 400.945843][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3164'. [ 401.044880][T17235] syzkaller0: entered promiscuous mode [ 401.051016][T17235] syzkaller0: entered allmulticast mode [ 401.762912][T17260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3167'. [ 401.818543][T17262] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3167'. [ 403.324323][T17252] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3165'. [ 403.732284][T17277] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3173'. [ 403.839032][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 403.848680][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 403.859062][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 403.879240][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 403.887833][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 404.142069][T17281] lo speed is unknown, defaulting to 1000 [ 404.782439][T17281] chnl_net:caif_netlink_parms(): no params data found [ 404.898383][T17308] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3179'. [ 405.154278][T17281] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.183162][T17281] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.193068][T17281] bridge_slave_0: entered allmulticast mode [ 405.208376][T17281] bridge_slave_0: entered promiscuous mode [ 405.221084][T17319] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 405.265179][T17281] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.276610][T17281] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.293256][T17281] bridge_slave_1: entered allmulticast mode [ 405.313772][T17281] bridge_slave_1: entered promiscuous mode [ 405.380507][T17281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.419680][T17281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.495480][T17281] team0: Port device team_slave_0 added [ 405.512993][T17335] netlink: 'syz.1.3188': attribute type 23 has an invalid length. [ 405.515462][T17281] team0: Port device team_slave_1 added [ 405.582888][T17339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3186'. [ 405.611095][T17281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.630730][T17281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.658940][T17281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.674365][T17281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.682267][T17281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.710676][T17281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.799342][T17281] hsr_slave_0: entered promiscuous mode [ 405.806774][T17281] hsr_slave_1: entered promiscuous mode [ 405.813353][T17281] debugfs: 'hsr0' already exists in 'hsr' [ 405.820184][T17281] Cannot create hsr debugfs directory [ 405.856197][ T5839] Bluetooth: hci2: command tx timeout [ 405.937262][ T5839] Bluetooth: hci0: command tx timeout [ 406.109840][T17357] netlink: 'syz.1.3193': attribute type 1 has an invalid length. [ 406.212618][T17357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.294743][T17361] bond2: (slave syz_tun): making interface the new active one [ 406.323299][T17361] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 406.382374][T17363] lo speed is unknown, defaulting to 1000 [ 406.807614][T17281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 406.823160][T17281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 406.844695][T17281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 406.873529][T17281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.948283][T17389] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 406.990630][T17389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3204'. [ 407.038761][T17399] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3205'. [ 407.259935][T17402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3206'. [ 407.468524][T17281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.495652][T17413] xt_hashlimit: Unknown mode mask 1000000, kernel too old? [ 407.541482][T17281] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.567736][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.575250][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.608377][T17417] 8021q: VLANs not supported on caif0 [ 407.631906][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.639264][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.716788][T17421] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 407.740768][T17421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3215'. [ 407.885760][T17426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3217'. [ 408.026551][T17426] lo speed is unknown, defaulting to 1000 [ 408.032197][ T5839] Bluetooth: hci0: command tx timeout [ 408.234416][T17436] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3220'. [ 408.288654][T17281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.341426][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3222'. [ 408.431340][T17445] netlink: 'syz.3.3224': attribute type 1 has an invalid length. [ 408.457331][T17445] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3224'. [ 408.468084][T17447] netlink: 'syz.1.3223': attribute type 10 has an invalid length. [ 408.534293][T17447] team0: Port device dummy0 added [ 408.692201][T17452] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 408.729457][T17452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3226'. [ 408.821662][ T25] block nbd3: Possible stuck request ffff888025ae8000: control (read@0,1024B). Runtime 90 seconds [ 408.833503][ T25] block nbd3: Possible stuck request ffff888025ae8200: control (read@1024,1024B). Runtime 90 seconds [ 408.844996][ T25] block nbd3: Possible stuck request ffff888025ae8400: control (read@2048,1024B). Runtime 90 seconds [ 408.859533][ T25] block nbd3: Possible stuck request ffff888025ae8600: control (read@3072,1024B). Runtime 90 seconds [ 408.877556][T17281] veth0_vlan: entered promiscuous mode [ 408.954540][T17281] veth1_vlan: entered promiscuous mode [ 408.965634][T17464] syzkaller0: entered promiscuous mode [ 408.985545][T17464] syzkaller0: entered allmulticast mode [ 409.025507][T17464] tipc: Enabled bearer , priority 0 [ 409.055096][T17461] tipc: Resetting bearer [ 409.105892][T17461] tipc: Disabling bearer [ 409.122930][T17468] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3234'. [ 409.178115][T17281] veth0_macvtap: entered promiscuous mode [ 409.203152][T17281] veth1_macvtap: entered promiscuous mode [ 409.264804][T17281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.306693][T17474] tipc: Cannot configure node identity twice [ 409.327229][T17281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.373552][ T4233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.394712][ T4233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.434333][ T4233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.450493][ T4233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.478867][T17485] IPv6: addrconf: prefix option has invalid lifetime [ 409.487936][T17475] lo speed is unknown, defaulting to 1000 [ 409.508384][T17480] pim6reg1: entered promiscuous mode [ 409.530484][T17480] pim6reg1: entered allmulticast mode [ 409.650132][T17489] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 409.718674][T17493] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 410.034095][T17507] xt_hashlimit: Unknown mode mask 3000000, kernel too old? [ 410.045974][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.064832][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.106210][ T5839] Bluetooth: hci0: command tx timeout [ 410.412203][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.443242][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.474483][T17525] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 410.906591][T17535] tipc: Started in network mode [ 410.920001][T17535] tipc: Node identity a6e54ac6985c, cluster identity 4711 [ 410.929662][T17535] tipc: Enabled bearer , priority 0 [ 410.962412][T17535] syzkaller0: entered promiscuous mode [ 410.974884][T17535] syzkaller0: entered allmulticast mode [ 411.151057][T17535] tipc: Resetting bearer [ 411.222487][T17552] netlink: 'syz.4.3262': attribute type 23 has an invalid length. [ 411.267785][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 411.282264][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 411.292635][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 411.301460][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.309600][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 411.360292][T17550] syzkaller0: entered promiscuous mode [ 411.365840][T17550] syzkaller0: entered allmulticast mode [ 411.448454][T17553] lo speed is unknown, defaulting to 1000 [ 411.490674][T17558] netlink: 'syz.1.3264': attribute type 23 has an invalid length. [ 411.742234][T17565] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 411.793421][T17567] Cannot find add_set index 2 as target [ 411.911940][T17553] chnl_net:caif_netlink_parms(): no params data found [ 412.134564][ T5951] tipc: Node number set to 1052330694 [ 412.178005][ T5839] Bluetooth: hci0: command tx timeout [ 412.963321][T17594] netlink: 'syz.1.3274': attribute type 1 has an invalid length. [ 413.084504][T17586] __nla_validate_parse: 8 callbacks suppressed [ 413.084525][T17586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3272'. [ 413.140208][T17594] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 413.214487][T17600] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3276'. [ 413.234109][T17553] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.249941][T17553] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.261840][T17553] bridge_slave_0: entered allmulticast mode [ 413.271104][T17553] bridge_slave_0: entered promiscuous mode [ 413.281063][T17553] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.291717][T17553] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.307687][T17553] bridge_slave_1: entered allmulticast mode [ 413.316033][T17553] bridge_slave_1: entered promiscuous mode [ 413.324862][T17603] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 413.368867][T17603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3277'. [ 413.387108][ T5839] Bluetooth: hci3: command tx timeout [ 413.451103][T17553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.471566][T17553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.539904][T17553] team0: Port device team_slave_0 added [ 413.557209][T17553] team0: Port device team_slave_1 added [ 413.633066][T17553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.644605][T17553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.673240][T17553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.686612][T17553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.693880][T17553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.737256][T17553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.766654][T17617] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3282'. [ 413.809497][T17617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.906217][T17625] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3286'. [ 413.992977][T17553] hsr_slave_0: entered promiscuous mode [ 414.001838][T17553] hsr_slave_1: entered promiscuous mode [ 414.010926][T17553] debugfs: 'hsr0' already exists in 'hsr' [ 414.021741][T17553] Cannot create hsr debugfs directory [ 414.195737][T17636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3291'. [ 414.278904][T17639] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 414.295795][T17636] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3291'. [ 414.363931][T17632] bond1: entered promiscuous mode [ 414.370540][T17632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.378945][T17643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3290'. [ 414.537439][T17553] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.584517][T17553] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.590849][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3294'. [ 414.618213][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'. [ 414.738926][T17553] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.766047][T17553] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.877459][T17553] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.920400][T17553] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.104662][T17666] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.145896][T17553] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.176310][T17553] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.265902][T17666] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.293243][T17674] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 415.443869][T17666] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.456262][ T5839] Bluetooth: hci3: command tx timeout [ 415.665637][T17679] netlink: 'syz.1.3303': attribute type 4 has an invalid length. [ 415.674513][T17679] netlink: 'syz.1.3303': attribute type 2 has an invalid length. [ 415.804677][T17666] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.972736][T17553] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 416.009337][T17553] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 416.078224][ T5967] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.097031][T17553] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 416.134117][ T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.149182][T17553] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 416.171754][T17697] vlan2: entered promiscuous mode [ 416.180160][T17697] bridge0: entered promiscuous mode [ 416.225419][T16691] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.285118][T16691] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.305674][T17699] netlink: 'syz.4.3305': attribute type 1 has an invalid length. [ 416.316701][T17694] lo speed is unknown, defaulting to 1000 [ 416.458568][T17711] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 416.521869][T17699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 416.529152][ T37] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 416.537391][T17713] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 416.676852][T11480] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 416.802514][T17553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.826719][T17553] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.842587][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.849873][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.939004][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.946310][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.974699][T17727] 8021q: VLANs not supported on caif0 [ 417.139340][T17736] netlink: 'syz.2.3321': attribute type 10 has an invalid length. [ 417.148545][T17738] xt_hashlimit: max too large, truncated to 1048576 [ 417.186480][T17738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 417.209924][T17739] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.324595][T17739] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.351111][T17746] delete_channel: no stack [ 417.355873][T17746] delete_channel: no stack [ 417.372777][T17742] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 417.392699][T17744] vlan0: entered promiscuous mode [ 417.399146][T17744] vlan0: entered allmulticast mode [ 417.406885][T17744] veth0_vlan: entered allmulticast mode [ 417.439675][T17739] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.537358][ T5839] Bluetooth: hci3: command tx timeout [ 417.587549][T17739] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.640867][T17750] syzkaller0: entered promiscuous mode [ 417.660257][T17750] syzkaller0: entered allmulticast mode [ 417.974230][T17553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.081390][T17553] veth0_vlan: entered promiscuous mode [ 418.097132][T17771] netlink: 'syz.4.3335': attribute type 1 has an invalid length. [ 418.126917][T17773] netlink: 'syz.1.3336': attribute type 3 has an invalid length. [ 418.141779][T17771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 418.152019][T17553] veth1_vlan: entered promiscuous mode [ 418.169982][T17775] netlink: 'syz.1.3336': attribute type 3 has an invalid length. [ 418.191648][T17553] veth0_macvtap: entered promiscuous mode [ 418.264574][T17553] veth1_macvtap: entered promiscuous mode [ 418.282508][T17777] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 418.304399][T17777] __nla_validate_parse: 13 callbacks suppressed [ 418.304421][T17777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3337'. [ 418.325965][T17553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.352559][T17553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.392176][ T6095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.413169][ T6095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.454015][ T6095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.468907][ T6095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.478814][T17767] netlink: 'syz.2.3332': attribute type 1 has an invalid length. [ 418.486934][T17767] netlink: 'syz.2.3332': attribute type 4 has an invalid length. [ 418.499958][T17767] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3332'. [ 418.606325][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.618854][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.685774][ T6404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.698190][ T6404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.868304][T17792] netlink: 'syz.3.3260': attribute type 10 has an invalid length. [ 418.899812][T17792] team0: Failed to send options change via netlink (err -105) [ 418.904557][T17795] xt_hashlimit: Unknown mode mask 40000000, kernel too old? [ 418.916495][T17792] team0: Port device dummy0 added [ 419.093464][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3347'. [ 419.140826][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3349'. [ 419.187278][T17804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.203858][T17809] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3347'. [ 419.213715][T17809] FAULT_INJECTION: forcing a failure. [ 419.213715][T17809] name failslab, interval 1, probability 0, space 0, times 0 [ 419.232813][T17809] CPU: 1 UID: 0 PID: 17809 Comm: syz.3.3347 Not tainted syzkaller #0 PREEMPT(full) [ 419.232842][T17809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.232855][T17809] Call Trace: [ 419.232864][T17809] [ 419.232873][T17809] dump_stack_lvl+0xe8/0x150 [ 419.232908][T17809] should_fail_ex+0x414/0x560 [ 419.232949][T17809] should_failslab+0xa8/0x100 [ 419.232978][T17809] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 419.233015][T17809] ? __alloc_skb+0x1d5/0x720 [ 419.233039][T17809] ? __local_bh_enable_ip+0xd0/0x130 [ 419.233063][T17809] ? __alloc_skb+0x190/0x720 [ 419.233089][T17809] __alloc_skb+0x1d5/0x720 [ 419.233112][T17809] ? __local_bh_enable_ip+0xd0/0x130 [ 419.233141][T17809] batadv_netlink_set_mesh+0xbca/0x1110 [ 419.233169][T17809] genl_family_rcv_msg_doit+0x215/0x300 [ 419.233204][T17809] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 419.233245][T17809] ? bpf_lsm_capable+0x9/0x20 [ 419.233270][T17809] ? security_capable+0x7e/0x2e0 [ 419.233304][T17809] genl_rcv_msg+0x60e/0x790 [ 419.233336][T17809] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.233357][T17809] ? __pfx_batadv_pre_doit+0x10/0x10 [ 419.233375][T17809] ? __pfx_batadv_netlink_set_mesh+0x10/0x10 [ 419.233395][T17809] ? __pfx_batadv_post_doit+0x10/0x10 [ 419.233416][T17809] ? __asan_memcpy+0x40/0x70 [ 419.233434][T17809] ? __pfx_ref_tracker_free+0x10/0x10 [ 419.233465][T17809] netlink_rcv_skb+0x208/0x470 [ 419.233497][T17809] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.233522][T17809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.233549][T17809] ? genl_rcv+0x19/0x40 [ 419.233584][T17809] ? down_read+0x274/0x2e0 [ 419.233610][T17809] ? genl_rcv+0xd/0x40 [ 419.233631][T17809] genl_rcv+0x28/0x40 [ 419.233658][T17809] netlink_unicast+0x82f/0x9e0 [ 419.233692][T17809] ? __pfx_netlink_unicast+0x10/0x10 [ 419.233718][T17809] ? netlink_sendmsg+0x642/0xb30 [ 419.233744][T17809] ? skb_put+0x11b/0x210 [ 419.233770][T17809] netlink_sendmsg+0x805/0xb30 [ 419.233806][T17809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.233837][T17809] ? aa_sock_msg_perm+0xf1/0x1b0 [ 419.233864][T17809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.233881][T17809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.233911][T17809] __sock_sendmsg+0x21c/0x270 [ 419.233943][T17809] ____sys_sendmsg+0x505/0x820 [ 419.233973][T17809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.234006][T17809] ? import_iovec+0x74/0xa0 [ 419.234032][T17809] ___sys_sendmsg+0x21f/0x2a0 [ 419.234059][T17809] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.234128][T17809] ? __fget_files+0x2a/0x420 [ 419.234151][T17809] ? __fget_files+0x3a0/0x420 [ 419.234184][T17809] __x64_sys_sendmsg+0x19b/0x260 [ 419.234212][T17809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.234246][T17809] ? __pfx_ksys_write+0x10/0x10 [ 419.234275][T17809] do_syscall_64+0xec/0xf80 [ 419.234298][T17809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.234315][T17809] ? trace_irq_disable+0x37/0x100 [ 419.234339][T17809] ? clear_bhb_loop+0x60/0xb0 [ 419.234362][T17809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.234380][T17809] RIP: 0033:0x7f9b6cf8f749 [ 419.234396][T17809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.234413][T17809] RSP: 002b:00007f9b6de91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.234433][T17809] RAX: ffffffffffffffda RBX: 00007f9b6d1e6090 RCX: 00007f9b6cf8f749 [ 419.234447][T17809] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000005 [ 419.234459][T17809] RBP: 00007f9b6de91090 R08: 0000000000000000 R09: 0000000000000000 [ 419.234470][T17809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.234481][T17809] R13: 00007f9b6d1e6128 R14: 00007f9b6d1e6090 R15: 00007fffaba4ae88 [ 419.234513][T17809] [ 419.235762][T17812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3348'. [ 419.410001][T17808] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 419.617322][ T5839] Bluetooth: hci3: command tx timeout [ 419.657231][T17807] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.779817][T17804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.801869][T17815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3350'. [ 419.832148][T17807] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.905514][T17815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.939158][T17807] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.962419][T17816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3350'. [ 420.031223][T17815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.070926][T17807] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.165849][T17815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.242083][ T6024] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.251819][T17820] lo speed is unknown, defaulting to 1000 [ 420.287963][T17815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.314166][ T7113] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.340438][T17818] tipc: Enabling of bearer rejected, failed to enable media [ 420.373707][T17804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.411740][ T5967] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.448902][ T3064] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.530958][ T4177] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.744186][ T5967] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.811732][T17833] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3357'. [ 420.838709][T17804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.859599][T17833] netlink: 'syz.2.3357': attribute type 10 has an invalid length. [ 420.884416][T17833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3357'. [ 421.000990][ T7113] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.039311][ T7113] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.189080][ T6301] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.189517][T17839] netlink: 'syz.4.3359': attribute type 10 has an invalid length. [ 421.217802][T17839] batadv0: entered promiscuous mode [ 421.223499][T17839] batadv0: entered allmulticast mode [ 421.230267][T17839] bridge0: port 3(batadv0) entered blocking state [ 421.237578][T17839] bridge0: port 3(batadv0) entered disabled state [ 421.251202][T17839] bridge0: port 3(batadv0) entered blocking state [ 421.258174][T17839] bridge0: port 3(batadv0) entered forwarding state [ 421.274171][T11893] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.340645][ T4177] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.412717][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.441745][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.478437][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.552573][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.587700][ T6024] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.627150][T11893] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 421.636968][T11893] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 421.801248][T17863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.862965][T17863] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 421.898535][T17872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.981777][T17875] netlink: 'syz.3.3373': attribute type 10 has an invalid length. [ 422.019480][T17875] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 422.050026][T17875] team0: Port device dummy0 removed [ 422.075442][T17875] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 422.522910][T17892] netlink: 'syz.3.3379': attribute type 2 has an invalid length. [ 422.967939][T17904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.152127][T17904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.274418][T17904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.368932][T17928] __nla_validate_parse: 6 callbacks suppressed [ 423.368952][T17928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3395'. [ 423.400819][T17904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.633809][T16691] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.683405][ T4177] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.708615][ T4177] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.733760][ T4177] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.962189][T17948] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3404'. [ 424.088823][T17948] tipc: Started in network mode [ 424.094012][T17948] tipc: Node identity , cluster identity 4711 [ 424.102873][T17948] tipc: Failed to obtain node identity [ 424.109014][T17948] tipc: Enabling of bearer rejected, failed to enable media [ 424.510933][T17978] netlink: 'syz.2.3416': attribute type 10 has an invalid length. [ 424.529708][T17978] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 425.598909][T18018] Bluetooth: MGMT ver 1.23 [ 426.038583][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3437'. [ 426.587845][T18059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3445'. [ 426.620140][T18059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3445'. [ 426.913173][T18075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3451'. [ 427.050823][T18078] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3452'. [ 427.196711][T18083] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 427.495241][T18082] lo speed is unknown, defaulting to 1000 [ 427.583494][T18087] FAULT_INJECTION: forcing a failure. [ 427.583494][T18087] name failslab, interval 1, probability 0, space 0, times 0 [ 427.660059][T18091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3457'. [ 427.694194][T18087] CPU: 1 UID: 0 PID: 18087 Comm: syz.0.3455 Not tainted syzkaller #0 PREEMPT(full) [ 427.694227][T18087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 427.694240][T18087] Call Trace: [ 427.694249][T18087] [ 427.694258][T18087] dump_stack_lvl+0xe8/0x150 [ 427.694293][T18087] should_fail_ex+0x414/0x560 [ 427.694335][T18087] should_failslab+0xa8/0x100 [ 427.694363][T18087] __kmalloc_noprof+0xdf/0x800 [ 427.694386][T18087] ? tomoyo_encode2+0x27f/0x530 [ 427.694413][T18087] ? tomoyo_check_unix_address+0x15a/0x7b0 [ 427.694448][T18087] tomoyo_encode2+0x27f/0x530 [ 427.694485][T18087] tomoyo_check_unix_address+0x3c3/0x7b0 [ 427.694523][T18087] ? tomoyo_check_unix_address+0x15a/0x7b0 [ 427.694553][T18087] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 427.694594][T18087] ? __might_fault+0xb0/0x130 [ 427.694628][T18087] ? __might_fault+0xb0/0x130 [ 427.694666][T18087] tomoyo_socket_connect_permission+0x1b2/0x290 [ 427.694708][T18087] security_socket_connect+0xc8/0x2b0 [ 427.694744][T18087] __sys_connect+0x231/0x440 [ 427.694768][T18087] ? __fget_files+0x3a0/0x420 [ 427.694797][T18087] ? __pfx___sys_connect+0x10/0x10 [ 427.694835][T18087] ? __pfx_ksys_write+0x10/0x10 [ 427.694871][T18087] __x64_sys_connect+0x7a/0x90 [ 427.694897][T18087] do_syscall_64+0xec/0xf80 [ 427.694925][T18087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.694951][T18087] ? trace_irq_disable+0x37/0x100 [ 427.694980][T18087] ? clear_bhb_loop+0x60/0xb0 [ 427.695006][T18087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.695027][T18087] RIP: 0033:0x7f41a738f749 [ 427.695045][T18087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.695065][T18087] RSP: 002b:00007f41a82e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 427.695087][T18087] RAX: ffffffffffffffda RBX: 00007f41a75e5fa0 RCX: 00007f41a738f749 [ 427.695104][T18087] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000003 [ 427.695117][T18087] RBP: 00007f41a82e6090 R08: 0000000000000000 R09: 0000000000000000 [ 427.695130][T18087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.695143][T18087] R13: 00007f41a75e6038 R14: 00007f41a75e5fa0 R15: 00007ffdb479f658 [ 427.695180][T18087] [ 428.030226][T18091] bond1 (unregistering): Released all slaves [ 428.172530][T18097] tipc: Enabling of bearer rejected, failed to enable media [ 428.188543][T18105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3459'. [ 428.213023][T18105] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3459'. [ 428.445618][T18111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3461'. [ 428.792143][T15612] udevd[15612]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 428.887554][T18134] netlink: 'syz.0.3468': attribute type 1 has an invalid length. [ 428.907176][T18135] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3470'. [ 428.935049][T18135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3470'. [ 428.959207][T18135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3470'. [ 429.027347][T18134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.036898][T18141] bond1: (slave syz_tun): Releasing backup interface [ 429.103318][T18141] bond2: (slave syz_tun): making interface the new active one [ 429.123625][T18145] ieee802154 phy0 wpan0: encryption failed: -22 [ 429.131669][T18141] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 429.153424][T18147] bond0: (slave bond_slave_1): Releasing backup interface [ 429.188228][T18148] syzkaller0: entered promiscuous mode [ 429.193922][T18148] syzkaller0: entered allmulticast mode [ 429.557611][T18161] netlink: 'syz.3.3476': attribute type 58 has an invalid length. [ 429.565883][T18161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3476'. [ 429.898542][T18168] 8021q: VLANs not supported on caif0 [ 430.006553][T18167] syzkaller0: entered promiscuous mode [ 430.012099][T18167] syzkaller0: entered allmulticast mode [ 430.133547][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3481'. [ 430.464872][T18187] netlink: 'syz.2.3482': attribute type 1 has an invalid length. [ 430.487009][T18187] netlink: 'syz.2.3482': attribute type 2 has an invalid length. [ 430.545802][T18189] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3484'. [ 430.627169][T18192] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 430.814938][T18205] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 430.881826][T18202] lo speed is unknown, defaulting to 1000 [ 431.361405][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3497'. [ 431.371862][T18230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3497'. [ 431.396217][T18230] netlink: 'syz.2.3497': attribute type 19 has an invalid length. [ 431.417906][T18230] netlink: 'syz.2.3497': attribute type 20 has an invalid length. [ 431.430570][T18236] netlink: 'syz.3.3496': attribute type 12 has an invalid length. [ 431.604073][T18243] lo speed is unknown, defaulting to 1000 [ 431.702961][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3503'. [ 431.928823][T18257] lo speed is unknown, defaulting to 1000 [ 432.305851][T18266] lo speed is unknown, defaulting to 1000 [ 432.775377][T18285] netlink: 'syz.1.3514': attribute type 1 has an invalid length. [ 432.842123][T18285] bond3: entered promiscuous mode [ 432.874574][T18285] 8021q: adding VLAN 0 to HW filter on device bond3 [ 432.988428][T18291] netlink: 'syz.3.3517': attribute type 10 has an invalid length. [ 433.467842][T18312] lo speed is unknown, defaulting to 1000 [ 433.707834][T18328] __nla_validate_parse: 3 callbacks suppressed [ 433.707858][T18328] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3526'. [ 434.050200][T18348] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3533'. [ 434.082468][T18345] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3531'. [ 434.099762][T18349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3530'. [ 434.116344][T18348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3533'. [ 434.146836][T18348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3533'. [ 434.163751][T18346] lo speed is unknown, defaulting to 1000 [ 434.449195][T18361] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.457453][T18361] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.543388][T18364] netlink: 'syz.1.3536': attribute type 11 has an invalid length. [ 435.179011][T18378] Cannot find add_set index 2 as target [ 435.242085][T18380] netlink: 'syz.3.3545': attribute type 1 has an invalid length. [ 435.257568][T18370] block nbd4: server does not support multiple connections per device. [ 435.266583][T18370] block nbd4: shutting down sockets [ 435.371690][T18384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3546'. [ 435.406589][T18380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.489336][T18390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3548'. [ 435.560576][T18384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.705247][T18389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.752511][T18389] bond2: (slave bond0): Enslaving as an active interface with an up link [ 436.335548][T18394] bond2 (unregistering): (slave bond0): Releasing backup interface [ 436.361904][T18394] bond2 (unregistering): Released all slaves [ 436.669529][T18417] netlink: 'syz.2.3557': attribute type 10 has an invalid length. [ 436.754996][T18417] bond0: (slave dummy0): Releasing backup interface [ 436.778157][T18417] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 436.809874][T18417] team0: Failed to send options change via netlink (err -105) [ 436.842007][T18417] team0: Port device dummy0 added [ 437.050889][T18437] netlink: 'syz.2.3565': attribute type 30 has an invalid length. [ 437.063435][T18437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3565'. [ 437.182601][T18437] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 437.204641][T18447] netlink: 'syz.0.3568': attribute type 10 has an invalid length. [ 437.214857][T18437] bond2 (unregistering): Released all slaves [ 437.399699][T18451] 8021q: VLANs not supported on caif0 [ 437.437906][T18455] syzkaller0: entered promiscuous mode [ 437.444806][T18455] syzkaller0: entered allmulticast mode [ 437.485258][T18459] Cannot find add_set index 2 as target [ 437.659415][T18464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3575'. [ 437.718112][T18462] lo speed is unknown, defaulting to 1000 [ 438.479795][T18497] Bluetooth: MGMT ver 1.23 [ 438.750303][T18507] bridge0: port 3(batadv0) entered disabled state [ 438.757074][T18507] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.764786][T18507] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.803483][T18511] __nla_validate_parse: 2 callbacks suppressed [ 438.803504][T18511] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.3594'. [ 438.910674][ T25] block nbd3: Possible stuck request ffff888025ae8000: control (read@0,1024B). Runtime 120 seconds [ 438.921647][ T25] block nbd3: Possible stuck request ffff888025ae8200: control (read@1024,1024B). Runtime 120 seconds [ 438.932726][ T25] block nbd3: Possible stuck request ffff888025ae8400: control (read@2048,1024B). Runtime 120 seconds [ 438.944364][ T25] block nbd3: Possible stuck request ffff888025ae8600: control (read@3072,1024B). Runtime 120 seconds [ 439.046013][T18519] bridge1: entered promiscuous mode [ 439.069227][T18519] bridge1: entered allmulticast mode [ 439.080881][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3597'. [ 439.081116][T18519] team0: Port device bridge1 added [ 439.113051][T18525] bridge0: port 3(team0) entered blocking state [ 439.155371][T18525] bridge0: port 3(team0) entered disabled state [ 439.195553][T18525] team0: entered allmulticast mode [ 439.201767][T18525] team_slave_0: entered allmulticast mode [ 439.210908][T18525] team_slave_1: entered allmulticast mode [ 439.242334][T18525] team0: entered promiscuous mode [ 439.248065][T18525] team_slave_0: entered promiscuous mode [ 439.266633][T18525] team_slave_1: entered promiscuous mode [ 439.275216][T18525] bridge0: port 3(team0) entered blocking state [ 439.282242][T18525] bridge0: port 3(team0) entered forwarding state [ 439.341152][T18530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3601'. [ 439.429626][T18537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3604'. [ 439.521932][T18542] netlink: 'syz.4.3607': attribute type 10 has an invalid length. [ 439.548945][T18542] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 439.565771][T18542] team0: Port device dummy0 removed [ 439.584626][T18542] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 439.629142][T18547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3608'. [ 439.655438][T18545] team0: Device gtp0 is of different type [ 439.658418][T18552] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3606'. [ 439.795893][T18547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 439.862453][T18555] bond2: (slave syz_tun): Releasing active interface [ 439.920837][T18555] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 440.456950][T18594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3614'. [ 440.550007][T18594] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.576658][ T5839] Bluetooth: hci0: command tx timeout [ 440.659844][T18599] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3614'. [ 440.682899][T18601] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3617'. [ 440.704932][T18594] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.757670][T18594] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.828242][T18594] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.045584][T18098] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.111006][T18098] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.159251][T18098] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.215112][ T6404] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.277444][T18611] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3621'. [ 441.554459][T18628] FAULT_INJECTION: forcing a failure. [ 441.554459][T18628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.569357][T18628] CPU: 0 UID: 0 PID: 18628 Comm: syz.1.3629 Not tainted syzkaller #0 PREEMPT(full) [ 441.569388][T18628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 441.569402][T18628] Call Trace: [ 441.569410][T18628] [ 441.569420][T18628] dump_stack_lvl+0xe8/0x150 [ 441.569454][T18628] should_fail_ex+0x414/0x560 [ 441.569494][T18628] _copy_from_user+0x2d/0xb0 [ 441.569523][T18628] ___sys_sendmsg+0x158/0x2a0 [ 441.569555][T18628] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.569622][T18628] ? __fget_files+0x2a/0x420 [ 441.569649][T18628] ? __fget_files+0x3a0/0x420 [ 441.569685][T18628] __x64_sys_sendmsg+0x19b/0x260 [ 441.569716][T18628] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.569753][T18628] ? __pfx_ksys_write+0x10/0x10 [ 441.569783][T18628] do_syscall_64+0xec/0xf80 [ 441.569809][T18628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.569828][T18628] ? trace_irq_disable+0x37/0x100 [ 441.569862][T18628] ? clear_bhb_loop+0x60/0xb0 [ 441.569887][T18628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.569915][T18628] RIP: 0033:0x7eff1738f749 [ 441.569934][T18628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.569953][T18628] RSP: 002b:00007eff181c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.569976][T18628] RAX: ffffffffffffffda RBX: 00007eff175e5fa0 RCX: 00007eff1738f749 [ 441.569991][T18628] RDX: 0000000060000090 RSI: 0000200000000100 RDI: 0000000000000003 [ 441.570005][T18628] RBP: 00007eff181c0090 R08: 0000000000000000 R09: 0000000000000000 [ 441.570018][T18628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.570030][T18628] R13: 00007eff175e6038 R14: 00007eff175e5fa0 R15: 00007ffd7544d048 [ 441.570065][T18628] [ 441.570655][T18629] netlink: 'syz.0.3628': attribute type 2 has an invalid length. [ 441.778769][T18629] : entered promiscuous mode [ 441.800220][T18629] netlink: 'syz.0.3628': attribute type 6 has an invalid length. [ 441.914874][T18635] netlink: 'syz.3.3630': attribute type 11 has an invalid length. [ 441.928544][T18634] tipc: Enabling of bearer rejected, already enabled [ 442.077515][T18641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.102162][T18640] netlink: 'syz.0.3634': attribute type 10 has an invalid length. [ 442.590419][T18657] netlink: 'syz.0.3641': attribute type 10 has an invalid length. [ 442.620095][T18657] team0: Port device dummy0 removed [ 442.664245][T18657] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 444.196967][T18705] dvmrp0: entered allmulticast mode [ 444.299321][T18701] __nla_validate_parse: 7 callbacks suppressed [ 444.299343][T18701] netlink: 1656 bytes leftover after parsing attributes in process `syz.3.3658'. [ 444.488385][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3662'. [ 444.704199][T18706] pim6reg1: entered promiscuous mode [ 444.709799][T18706] pim6reg1: entered allmulticast mode [ 444.823105][T18700] delete_channel: no stack [ 444.865111][T18743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'. [ 444.909917][T18745] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3668'. [ 444.921567][T18745] netlink: 170 bytes leftover after parsing attributes in process `syz.0.3668'. [ 445.014928][T18748] syzkaller0: entered promiscuous mode [ 445.020800][T18748] syzkaller0: entered allmulticast mode [ 445.047915][T18748] tipc: Started in network mode [ 445.052927][T18748] tipc: Node identity a6e71d1c18ff, cluster identity 4711 [ 445.061305][T18748] tipc: Enabled bearer , priority 0 [ 445.070467][T18747] tipc: Resetting bearer [ 445.089415][T18747] tipc: Disabling bearer [ 445.264563][T18754] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 445.275494][T18754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3672'. [ 445.293956][T18756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3673'. [ 445.311898][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.311999][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.420139][T18761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3675'. [ 445.437021][T18761] vlan2: entered promiscuous mode [ 445.733024][T18771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3679'. [ 446.220012][T18786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3686'. [ 446.323968][T18792] lo speed is unknown, defaulting to 1000 [ 446.601803][T18801] dvmrp0: left allmulticast mode [ 447.016774][T18828] Cannot find add_set index 2 as target [ 447.073426][T18830] 8021q: VLANs not supported on caif0 [ 447.301561][T18843] tipc: Enabled bearer , priority 0 [ 447.389854][T18843] syzkaller0: entered promiscuous mode [ 447.395623][T18843] syzkaller0: entered allmulticast mode [ 447.413026][T18843] tipc: Resetting bearer [ 448.175110][T18871] lo speed is unknown, defaulting to 1000 [ 448.210700][T18870] lo speed is unknown, defaulting to 1000 [ 448.231803][T18842] tipc: Resetting bearer [ 448.367851][T18888] netlink: 'syz.2.3723': attribute type 10 has an invalid length. [ 448.480156][T18896] FAULT_INJECTION: forcing a failure. [ 448.480156][T18896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.493771][T18896] CPU: 1 UID: 0 PID: 18896 Comm: syz.4.3726 Not tainted syzkaller #0 PREEMPT(full) [ 448.493800][T18896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 448.493812][T18896] Call Trace: [ 448.493821][T18896] [ 448.493829][T18896] dump_stack_lvl+0xe8/0x150 [ 448.493860][T18896] should_fail_ex+0x414/0x560 [ 448.493896][T18896] _copy_from_user+0x2d/0xb0 [ 448.493921][T18896] ___sys_sendmsg+0x158/0x2a0 [ 448.493948][T18896] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.494007][T18896] ? __fget_files+0x2a/0x420 [ 448.494030][T18896] ? __fget_files+0x3a0/0x420 [ 448.494065][T18896] __x64_sys_sendmsg+0x19b/0x260 [ 448.494092][T18896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.494126][T18896] ? __pfx_ksys_write+0x10/0x10 [ 448.494155][T18896] do_syscall_64+0xec/0xf80 [ 448.494179][T18896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.494196][T18896] ? trace_irq_disable+0x37/0x100 [ 448.494220][T18896] ? clear_bhb_loop+0x60/0xb0 [ 448.494243][T18896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.494261][T18896] RIP: 0033:0x7f5a1a58f749 [ 448.494288][T18896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.494305][T18896] RSP: 002b:00007f5a1b3d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.494326][T18896] RAX: ffffffffffffffda RBX: 00007f5a1a7e5fa0 RCX: 00007f5a1a58f749 [ 448.494339][T18896] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 448.494351][T18896] RBP: 00007f5a1b3d4090 R08: 0000000000000000 R09: 0000000000000000 [ 448.494363][T18896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.494373][T18896] R13: 00007f5a1a7e6038 R14: 00007f5a1a7e5fa0 R15: 00007fff6c8dc178 [ 448.494405][T18896] [ 450.510646][T18842] tipc: Disabling bearer [ 450.555309][ T5890] tipc: Node number set to 3189251356 [ 450.765999][T18917] netlink: 'syz.4.3730': attribute type 10 has an invalid length. [ 450.885403][T18924] __nla_validate_parse: 10 callbacks suppressed [ 450.885425][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3728'. [ 450.926886][T18924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3728'. [ 450.945436][T18924] netlink: 'syz.2.3728': attribute type 19 has an invalid length. [ 450.953712][T18924] netlink: 'syz.2.3728': attribute type 20 has an invalid length. [ 451.290182][T18939] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3737'. [ 451.375306][T18944] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3739'. [ 451.411742][T18945] netlink: 'syz.1.3736': attribute type 12 has an invalid length. [ 451.610071][T18945] lo speed is unknown, defaulting to 1000 [ 451.727079][T18954] netlink: 'syz.0.3741': attribute type 1 has an invalid length. [ 451.832049][T18956] netlink: 'syz.4.3742': attribute type 1 has an invalid length. [ 451.868953][T18956] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3742'. [ 451.978053][T18954] 8021q: adding VLAN 0 to HW filter on device bond4 [ 452.065207][T18963] bond3: (slave syz_tun): Releasing backup interface [ 452.123639][T18963] bond4: (slave syz_tun): making interface the new active one [ 452.150572][T18963] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 452.160676][T18973] netlink: 'syz.4.3746': attribute type 1 has an invalid length. [ 452.200509][T18958] lo speed is unknown, defaulting to 1000 [ 452.422964][T18979] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3749'. [ 452.495142][T18982] IPVS: Scheduler module ip_vs_sip not found [ 452.842960][T19004] syzkaller0: entered promiscuous mode [ 452.848690][T19004] syzkaller0: entered allmulticast mode [ 452.876658][T18998] 0: reclassify loop, rule prio 0, protocol 800 [ 452.994054][T19008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3759'. [ 453.182839][T19017] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3762'. [ 453.745856][T19030] lo speed is unknown, defaulting to 1000 [ 454.222475][T19048] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3771'. [ 454.272406][T19048] bridge0: port 3(team0) entered disabled state [ 454.279261][T19048] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.286708][T19048] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.330897][T19048] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3771'. [ 454.618938][T19059] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 454.923201][T19076] netlink: 'syz.0.3783': attribute type 10 has an invalid length. [ 454.943285][T19076] bond0: (slave dummy0): Releasing backup interface [ 454.973806][T19076] team0: Port device dummy0 added [ 455.328895][T19092] netlink: 'syz.0.3789': attribute type 10 has an invalid length. [ 456.100275][T19135] __nla_validate_parse: 2 callbacks suppressed [ 456.100295][T19135] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3800'. [ 456.473061][T19148] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3803'. [ 456.487201][T19148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3803'. [ 456.528331][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3802'. [ 456.789647][T19158] netlink: 'syz.4.3806': attribute type 46 has an invalid length. [ 457.045013][T19175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3813'. [ 457.099654][T19179] netlink: 'syz.0.3814': attribute type 1 has an invalid length. [ 457.165610][T19179] 8021q: adding VLAN 0 to HW filter on device bond5 [ 457.233780][T19179] bond4: (slave syz_tun): Releasing active interface [ 457.242191][T19182] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3816'. [ 457.307711][T19179] bond5: (slave syz_tun): making interface the new active one [ 457.328231][T19195] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14 [ 457.346563][T19179] bond5: (slave syz_tun): Enslaving as an active interface with an up link [ 457.385104][T19194] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3818'. [ 457.450570][T19194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.568942][T19185] lo speed is unknown, defaulting to 1000 [ 457.784049][T19210] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 457.807479][T19210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3822'. [ 457.838660][T19211] netlink: 'syz.2.3821': attribute type 11 has an invalid length. [ 458.055065][T19219] netlink: 'syz.3.3826': attribute type 2 has an invalid length. [ 458.134956][T19219] netlink: 'syz.3.3826': attribute type 2 has an invalid length. [ 458.481251][T19225] xt_hashlimit: max too large, truncated to 1048576 [ 458.515697][T19225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 458.583758][T19228] netlink: 'syz.3.3830': attribute type 10 has an invalid length. [ 458.873889][T19241] 8021q: VLANs not supported on caif0 [ 458.940369][T19246] siw: device registration error -23 [ 459.168993][T19264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3844'. [ 459.213214][T19264] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.294427][T19268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3844'. [ 459.307071][T19264] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.321633][T19272] netlink: 'syz.1.3847': attribute type 10 has an invalid length. [ 459.356363][T19273] tipc: Enabling of bearer rejected, failed to enable media [ 459.396827][T19264] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.423647][T19275] netlink: 'syz.4.3848': attribute type 1 has an invalid length. [ 459.470091][T19275] 8021q: adding VLAN 0 to HW filter on device bond5 [ 459.497781][T19279] bond5: (slave ip6gretap2): making interface the new active one [ 459.507450][T19279] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 459.523130][T19264] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.561328][T19275] veth5: entered promiscuous mode [ 459.574579][T19275] bond5: (slave veth5): Enslaving as an active interface with a down link [ 459.602671][T19275] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 459.663519][T19281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.679173][T19279] tipc: Enabling of bearer rejected, failed to enable media [ 459.759609][ T1162] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.783085][ T1162] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.820226][ T1162] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.848731][ T1162] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.889566][T19285] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 460.072907][T19298] netlink: 'syz.2.3854': attribute type 11 has an invalid length. [ 460.403914][T19301] delete_channel: no stack [ 460.683351][T19321] mac80211_hwsim hwsim86 wlan0: entered promiscuous mode [ 460.908895][T19330] vlan2: entered promiscuous mode [ 460.925128][T19330] bridge0: entered promiscuous mode [ 461.281431][T19347] netlink: 'syz.4.3871': attribute type 10 has an invalid length. [ 461.313873][T19346] __nla_validate_parse: 3 callbacks suppressed [ 461.313895][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3870'. [ 461.345101][T19342] lo speed is unknown, defaulting to 1000 [ 461.664304][T19365] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 461.794084][T19370] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3877'. [ 461.888126][T19368] lo speed is unknown, defaulting to 1000 [ 462.231371][T19389] Cannot find add_set index 2 as target [ 462.252638][T19385] xt_connbytes: Forcing CT accounting to be enabled [ 462.491913][T19396] lo speed is unknown, defaulting to 1000 [ 462.550553][T19394] lo speed is unknown, defaulting to 1000 [ 462.658554][T19402] netlink: 'syz.1.3891': attribute type 1 has an invalid length. [ 462.765797][T19411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3892'. [ 462.872193][T19402] 8021q: adding VLAN 0 to HW filter on device bond4 [ 462.910860][T19407] bond2: (slave syz_tun): Releasing active interface [ 462.932731][T19407] bond4: (slave syz_tun): making interface the new active one [ 462.943438][T19407] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 463.005846][T19411] chnl_net:caif_netlink_parms(): no params data found [ 463.261733][T19415] bond6: option arp_validate: invalid value (18446744073491447809) [ 463.276924][T19415] bond6 (unregistering): Released all slaves [ 463.319240][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3895'. [ 463.348896][T19428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3895'. [ 463.359582][T19428] netlink: 'syz.1.3895': attribute type 19 has an invalid length. [ 463.369418][T19428] netlink: 'syz.1.3895': attribute type 20 has an invalid length. [ 463.417309][ T6024] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 463.439902][ T6024] bond0: (slave dummy0): link status definitely down, disabling slave [ 463.571630][T19437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3897'. [ 463.652910][T19437] vlan2: entered promiscuous mode [ 464.188568][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3906'. [ 464.257119][T19469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3908'. [ 464.320929][T19471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3909'. [ 464.441952][T19475] lo speed is unknown, defaulting to 1000 [ 465.325176][T19503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3920'. [ 465.386757][T19507] netlink: 'syz.0.3923': attribute type 1 has an invalid length. [ 465.464143][T19512] netlink: 'syz.4.3925': attribute type 23 has an invalid length. [ 465.515780][T19507] 8021q: adding VLAN 0 to HW filter on device bond6 [ 465.544314][T19513] bond5: (slave syz_tun): Releasing active interface [ 465.584118][T19513] bond6: (slave syz_tun): making interface the new active one [ 465.593717][T19513] bond6: (slave syz_tun): Enslaving as an active interface with an up link [ 465.748863][T19517] hsr_slave_1 (unregistering): left promiscuous mode [ 466.155216][T19531] lo speed is unknown, defaulting to 1000 [ 466.284824][T19537] lo speed is unknown, defaulting to 1000 [ 466.761093][T19577] __nla_validate_parse: 4 callbacks suppressed [ 466.761116][T19577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3947'. [ 466.884159][T19580] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3949'. [ 466.951304][T19585] syzkaller0: entered promiscuous mode [ 466.963819][T19585] syzkaller0: entered allmulticast mode [ 467.028540][T19585] tipc: Started in network mode [ 467.039699][T19585] tipc: Node identity 8ed835bd3888, cluster identity 4711 [ 467.055652][T19585] tipc: Enabled bearer , priority 0 [ 467.079996][T19590] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3952'. [ 467.097318][T19584] tipc: Resetting bearer [ 467.151946][T19584] tipc: Disabling bearer [ 467.178601][T19595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3954'. [ 467.205545][T19591] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 467.230023][T19589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3953'. [ 467.294723][T19593] ipvlan2: entered promiscuous mode [ 467.479521][T19610] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3958'. [ 467.516831][T19613] netlink: 'syz.4.3960': attribute type 10 has an invalid length. [ 467.745052][T19613] bond0: (slave dummy0): Releasing backup interface [ 467.761877][T19613] team0: Port device dummy0 added [ 467.875498][T19609] lo speed is unknown, defaulting to 1000 [ 467.899951][T19629] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3965'. [ 468.830793][T19641] lo speed is unknown, defaulting to 1000 [ 468.994253][ T25] block nbd3: Possible stuck request ffff888025ae8000: control (read@0,1024B). Runtime 150 seconds [ 469.007343][ T25] block nbd3: Possible stuck request ffff888025ae8200: control (read@1024,1024B). Runtime 150 seconds [ 469.018407][T19664] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3972'. [ 469.028905][ T25] block nbd3: Possible stuck request ffff888025ae8400: control (read@2048,1024B). Runtime 150 seconds [ 469.040547][ T25] block nbd3: Possible stuck request ffff888025ae8600: control (read@3072,1024B). Runtime 150 seconds [ 469.298755][T19676] netlink: 'syz.4.3975': attribute type 1 has an invalid length. [ 469.326571][T19676] netlink: 'syz.4.3975': attribute type 1 has an invalid length. [ 469.448440][T19679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3978'. [ 469.507396][T19686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3979'. [ 469.624334][T19694] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.632155][T19694] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.641996][T19686] netlink: 'syz.1.3979': attribute type 10 has an invalid length. [ 469.715493][T19686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.763968][T19686] team0: Port device bond0 added [ 469.783400][T19678] lo speed is unknown, defaulting to 1000 [ 469.889480][T19703] netlink: 'syz.2.3984': attribute type 10 has an invalid length. [ 469.927255][T19703] team0: Port device dummy0 removed [ 469.938324][T19706] IPv6: addrconf: prefix option has invalid lifetime [ 469.949275][T19703] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 470.536854][T19727] netlink: 'syz.2.3992': attribute type 6 has an invalid length. [ 470.687160][T19731] xt_hashlimit: max too large, truncated to 1048576 [ 470.724728][T19731] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.812859][T19735] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.921081][T19735] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.044967][T19754] netlink: 'syz.1.3999': attribute type 13 has an invalid length. [ 471.062396][T19735] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.087650][T19749] lo speed is unknown, defaulting to 1000 [ 471.134313][T19754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.252234][T19735] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.307308][T19764] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 471.332948][T19761] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.441003][T19761] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.615625][T19774] FAULT_INJECTION: forcing a failure. [ 471.615625][T19774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.643460][ T4233] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.672663][T19761] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.690701][T19774] CPU: 0 UID: 0 PID: 19774 Comm: syz.0.4007 Not tainted syzkaller #0 PREEMPT(full) [ 471.690736][T19774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.690750][T19774] Call Trace: [ 471.690759][T19774] [ 471.690769][T19774] dump_stack_lvl+0xe8/0x150 [ 471.690804][T19774] should_fail_ex+0x414/0x560 [ 471.690844][T19774] _copy_to_user+0x31/0xb0 [ 471.690874][T19774] simple_read_from_buffer+0xe1/0x170 [ 471.690906][T19774] proc_fail_nth_read+0x1b3/0x220 [ 471.690933][T19774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 471.690959][T19774] ? rw_verify_area+0x2a6/0x4d0 [ 471.690992][T19774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 471.691016][T19774] vfs_read+0x200/0xa30 [ 471.691046][T19774] ? __pfx_vfs_read+0x10/0x10 [ 471.691070][T19774] ? udp_lib_setsockopt+0x1d8/0x970 [ 471.691097][T19774] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 471.691132][T19774] ksys_read+0x145/0x250 [ 471.691155][T19774] ? __pfx_ksys_read+0x10/0x10 [ 471.691188][T19774] do_syscall_64+0xec/0xf80 [ 471.691222][T19774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.691242][T19774] ? trace_irq_disable+0x37/0x100 [ 471.691270][T19774] ? clear_bhb_loop+0x60/0xb0 [ 471.691296][T19774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.691317][T19774] RIP: 0033:0x7f41a738e15c [ 471.691336][T19774] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 471.691361][T19774] RSP: 002b:00007f41a82e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 471.691383][T19774] RAX: ffffffffffffffda RBX: 00007f41a75e5fa0 RCX: 00007f41a738e15c [ 471.691399][T19774] RDX: 000000000000000f RSI: 00007f41a82e60a0 RDI: 0000000000000005 [ 471.691412][T19774] RBP: 00007f41a82e6090 R08: 0000000000000000 R09: 0000000000000000 [ 471.691426][T19774] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 471.691439][T19774] R13: 00007f41a75e6038 R14: 00007f41a75e5fa0 R15: 00007ffdb479f658 [ 471.691475][T19774] [ 471.960140][ T4233] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.984683][T19110] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.013215][T19780] __nla_validate_parse: 8 callbacks suppressed [ 472.013234][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4009'. [ 472.033090][T19761] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.106050][T19120] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.147781][T19778] lo speed is unknown, defaulting to 1000 [ 472.267186][T19790] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4013'. [ 472.327324][T19110] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.368126][ T1084] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.400224][ T6301] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.511772][T19792] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4014'. [ 472.536379][ T6301] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.698290][T19807] xt_hashlimit: max too large, truncated to 1048576 [ 472.705208][T19807] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 472.840764][T19813] netlink: 'syz.0.4022': attribute type 1 has an invalid length. [ 472.852136][T19813] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4022'. [ 472.910784][T19814] nbd: nbd1 already in use [ 472.915649][T19814] block nbd1: NBD_DISCONNECT [ 472.920744][T19814] block nbd1: Send disconnect failed -107 [ 473.042395][T19816] lo speed is unknown, defaulting to 1000 [ 473.120852][T19825] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 473.133616][T19821] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15 [ 473.144599][T19823] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4025'. [ 473.267180][T19833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.315935][T19833] FAULT_INJECTION: forcing a failure. [ 473.315935][T19833] name failslab, interval 1, probability 0, space 0, times 0 [ 473.357301][T19837] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 473.366914][T19833] CPU: 0 UID: 0 PID: 19833 Comm: syz.1.4029 Not tainted syzkaller #0 PREEMPT(full) [ 473.366944][T19833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 473.366958][T19833] Call Trace: [ 473.366966][T19833] [ 473.366976][T19833] dump_stack_lvl+0xe8/0x150 [ 473.367009][T19833] should_fail_ex+0x414/0x560 [ 473.367051][T19833] should_failslab+0xa8/0x100 [ 473.367080][T19833] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 473.367115][T19833] ? __alloc_skb+0x190/0x720 [ 473.367138][T19833] ? __alloc_skb+0x1d5/0x720 [ 473.367159][T19833] ? __local_bh_enable_ip+0xd0/0x130 [ 473.367183][T19833] ? __alloc_skb+0x190/0x720 [ 473.367209][T19833] __alloc_skb+0x1d5/0x720 [ 473.367239][T19833] netlink_ack+0x146/0xa50 [ 473.367267][T19833] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 473.367292][T19833] ? ref_tracker_free+0x63a/0x7d0 [ 473.367315][T19833] ? __asan_memcpy+0x40/0x70 [ 473.367333][T19833] ? __pfx_ref_tracker_free+0x10/0x10 [ 473.367368][T19833] netlink_rcv_skb+0x28c/0x470 [ 473.367400][T19833] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 473.367428][T19833] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.367471][T19833] ? netlink_deliver_tap+0x2e/0x1b0 [ 473.367511][T19833] netlink_unicast+0x82f/0x9e0 [ 473.367549][T19833] ? __pfx_netlink_unicast+0x10/0x10 [ 473.367579][T19833] ? netlink_sendmsg+0x642/0xb30 [ 473.367608][T19833] ? skb_put+0x11b/0x210 [ 473.367637][T19833] netlink_sendmsg+0x805/0xb30 [ 473.367680][T19833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.367716][T19833] ? aa_sock_msg_perm+0xf1/0x1b0 [ 473.367747][T19833] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.367774][T19833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.367807][T19833] __sock_sendmsg+0x21c/0x270 [ 473.367844][T19833] ____sys_sendmsg+0x505/0x820 [ 473.367882][T19833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.367919][T19833] ? import_iovec+0x74/0xa0 [ 473.367950][T19833] ___sys_sendmsg+0x21f/0x2a0 [ 473.367981][T19833] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.368048][T19833] ? __fget_files+0x2a/0x420 [ 473.368075][T19833] ? __fget_files+0x3a0/0x420 [ 473.368114][T19833] __x64_sys_sendmsg+0x19b/0x260 [ 473.368146][T19833] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.368185][T19833] ? __pfx_ksys_write+0x10/0x10 [ 473.368218][T19833] do_syscall_64+0xec/0xf80 [ 473.368245][T19833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.368265][T19833] ? trace_irq_disable+0x37/0x100 [ 473.368293][T19833] ? clear_bhb_loop+0x60/0xb0 [ 473.368319][T19833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.368339][T19833] RIP: 0033:0x7eff1738f749 [ 473.368358][T19833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.368377][T19833] RSP: 002b:00007eff181c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.368400][T19833] RAX: ffffffffffffffda RBX: 00007eff175e5fa0 RCX: 00007eff1738f749 [ 473.368416][T19833] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 473.368430][T19833] RBP: 00007eff181c0090 R08: 0000000000000000 R09: 0000000000000000 [ 473.368444][T19833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 473.368457][T19833] R13: 00007eff175e6038 R14: 00007eff175e5fa0 R15: 00007ffd7544d048 [ 473.368494][T19833] [ 473.739622][T19844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4031'. [ 474.019588][T19853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4037'. [ 474.070999][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4037'. [ 474.127030][T19856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4037'. [ 474.255693][T19864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4040'. [ 474.314847][T19864] vlan2: entered promiscuous mode [ 474.332417][T19864] bridge0: entered promiscuous mode [ 474.409436][T19859] syzkaller0: entered promiscuous mode [ 474.427231][T19859] syzkaller0: entered allmulticast mode [ 474.565118][T19873] netlink: 'syz.4.4043': attribute type 10 has an invalid length. [ 474.574923][T19875] macvtap1: entered promiscuous mode [ 474.586601][T19875] macvtap1: entered allmulticast mode [ 474.596765][T19875] ip6gretap0: entered promiscuous mode [ 474.603570][T19875] ip6gretap0: entered allmulticast mode [ 474.614545][T19875] team0: Device macvtap1 failed to register rx_handler [ 474.623773][T19875] ip6gretap0: left allmulticast mode [ 474.629706][T19875] ip6gretap0: left promiscuous mode [ 474.669352][T19873] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 474.680756][T19873] team0: Port device dummy0 removed [ 474.695204][T19873] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 474.875182][T19889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.095288][T19900] tipc: Enabled bearer , priority 0 [ 475.160675][T19897] tipc: Disabling bearer [ 475.273813][T19904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 475.384892][T19910] bond2: (slave ip6gretap1): making interface the new active one [ 475.399703][T19910] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 475.481502][T19914] geneve1: entered promiscuous mode [ 476.030831][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 476.038083][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 476.234875][T19924] xt_hashlimit: max too large, truncated to 1048576 [ 476.251686][T19924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 476.559423][T19942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.579845][T19943] netlink: 'syz.1.4063': attribute type 9 has an invalid length. [ 476.857392][T19958] lo speed is unknown, defaulting to 1000 [ 477.003378][T19964] syz.4.4071 uses old SIOCAX25GETINFO [ 477.043253][T19962] bond2: option mode: unable to set because the bond device has slaves [ 477.083201][T19964] lo speed is unknown, defaulting to 1000 [ 477.359124][T19970] __nla_validate_parse: 10 callbacks suppressed [ 477.359146][T19970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4072'. [ 477.384556][T19970] vlan2: entered promiscuous mode [ 477.471544][T19973] veth0: entered promiscuous mode [ 477.589200][T19977] IPv6: addrconf: prefix option has invalid lifetime [ 477.643990][T19972] veth0: left promiscuous mode [ 477.833843][T19984] netlink: 'syz.1.4078': attribute type 10 has an invalid length. [ 477.952665][T19994] pimreg: entered allmulticast mode [ 478.001994][T19987] pimreg: left allmulticast mode [ 478.102735][T20001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4085'. [ 478.124104][T19996] ip6tnl0: Caught tx_queue_len zero misconfig [ 478.142038][T20001] team0: left allmulticast mode [ 478.157170][T20001] team_slave_0: left allmulticast mode [ 478.183362][T20001] team_slave_1: left allmulticast mode [ 478.192094][T20001] team0: left promiscuous mode [ 478.206511][T20001] team_slave_0: left promiscuous mode [ 478.216442][T20001] team_slave_1: left promiscuous mode [ 478.233443][T20001] bridge0: port 3(team0) entered disabled state [ 478.317083][T20001] bridge_slave_1: left allmulticast mode [ 478.336280][T20001] bridge_slave_1: left promiscuous mode [ 478.346724][T20001] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.367977][T20001] bridge_slave_0: left allmulticast mode [ 478.373698][T20001] bridge_slave_0: left promiscuous mode [ 478.400165][T20001] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.460373][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4088'. [ 478.505870][T19993] lo speed is unknown, defaulting to 1000 [ 478.577864][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 478.645462][T20018] Cannot find add_set index 2 as target [ 478.690291][T20019] netlink: 'syz.0.4089': attribute type 10 has an invalid length. [ 478.768399][T20019] team0: Port device dummy0 removed [ 478.780716][T20019] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 479.211153][T20042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4097'. [ 479.225734][T20038] lo speed is unknown, defaulting to 1000 [ 479.290953][T20046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4098'. [ 480.527037][T20064] syzkaller1: entered promiscuous mode [ 480.546836][T20064] syzkaller1: entered allmulticast mode [ 480.767217][T20086] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4110'. [ 480.833488][T20089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4111'. [ 481.051817][T20094] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4112'. [ 481.065817][T20094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.262228][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4114'. [ 481.423119][T20110] lo speed is unknown, defaulting to 1000 [ 481.442318][T20105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4116'. [ 481.521688][T20116] xt_hashlimit: max too large, truncated to 1048576 [ 481.538448][T20116] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 481.622181][T20105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.667009][T20115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.674396][T20115] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 481.688687][T20115] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 481.737833][T20121] "syz.4.4121" (20121) uses obsolete ecb(arc4) skcipher [ 482.195593][T20150] syzkaller0: entered promiscuous mode [ 482.211062][T20150] syzkaller0: entered allmulticast mode [ 482.257541][T20150] 0: reclassify loop, rule prio 0, protocol 800 [ 482.295799][T20152] netlink: 'syz.1.4132': attribute type 1 has an invalid length. [ 482.614842][T20170] netlink: 'syz.1.4135': attribute type 1 has an invalid length. [ 482.702269][T20170] 8021q: adding VLAN 0 to HW filter on device bond5 [ 482.860930][T20178] bond4: (slave syz_tun): Releasing active interface [ 482.924717][T20178] bond5: (slave syz_tun): making interface the new active one [ 482.975651][T20178] bond5: (slave syz_tun): Enslaving as an active interface with an up link [ 483.269034][T20198] __nla_validate_parse: 3 callbacks suppressed [ 483.269057][T20198] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4144'. [ 483.428810][T20205] netlink: 'syz.4.4146': attribute type 10 has an invalid length. [ 483.471469][T20212] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4149'. [ 483.496590][T20213] netlink: 'syz.4.4146': attribute type 10 has an invalid length. [ 483.537552][T20216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4150'. [ 483.564761][T20205] bond0: (slave dummy0): Releasing backup interface [ 483.643645][T20205] team0: Port device dummy0 added [ 483.863895][T20233] netlink: 628 bytes leftover after parsing attributes in process `syz.1.4158'. [ 483.868619][T20229] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 483.905755][T20233] openvswitch: netlink: Flow key attr not present in new flow. [ 483.937824][T20233] ipt_rpfilter: unknown options [ 484.128083][T20249] lo: Caught tx_queue_len zero misconfig [ 484.134001][T20249] netlink: 280 bytes leftover after parsing attributes in process `syz.1.4164'. [ 484.257223][T20252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4165'. [ 484.599227][ T5829] IPVS: starting estimator thread 0... [ 484.700007][T20266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4171'. [ 484.716237][T20264] IPVS: using max 29 ests per chain, 69600 per kthread [ 484.770182][T20266] vlan2: entered promiscuous mode [ 484.788133][T20266] bridge0: entered promiscuous mode [ 485.079149][T20283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4177'. [ 485.208368][T20290] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4179'. [ 485.219110][T20290] netlink: 'syz.1.4179': attribute type 10 has an invalid length. [ 485.499720][T20302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4184'. [ 485.528989][T20302] netlink: 'syz.3.4184': attribute type 5 has an invalid length. [ 485.538553][T20302] netlink: 'syz.3.4184': attribute type 8 has an invalid length. [ 485.555691][T20302] geneve2: entered promiscuous mode [ 485.608858][T20302] geneve2: entered allmulticast mode [ 485.623420][ T3490] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 485.635428][ T3490] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 485.644417][ T3490] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 485.688705][ T3490] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 485.760110][T20311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.908873][T20319] netlink: 'syz.3.4190': attribute type 1 has an invalid length. [ 485.970563][T20319] 8021q: adding VLAN 0 to HW filter on device bond3 [ 486.028353][T20328] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 4, id = 0 [ 486.097260][T20333] lo speed is unknown, defaulting to 1000 [ 486.289558][T20332] lo speed is unknown, defaulting to 1000 [ 486.582675][T20356] netlink: 'syz.0.4200': attribute type 10 has an invalid length. [ 486.719697][T20356] bond0: (slave dummy0): Releasing backup interface [ 486.764017][T20356] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 486.774092][T20356] team0: Failed to send options change via netlink (err -105) [ 486.783503][T20356] team0: Port device dummy0 added [ 487.149349][T20368] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.214636][T20368] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.371282][T20368] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.444660][T20384] netem: change failed [ 487.519101][T20368] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.598078][T20397] netlink: 'syz.3.4216': attribute type 11 has an invalid length. [ 487.705587][T20400] netlink: 'syz.1.4217': attribute type 11 has an invalid length. [ 487.713837][T20401] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16 [ 487.885865][T20394] lo speed is unknown, defaulting to 1000 [ 487.939120][ T1162] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.040565][T19115] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.079273][T20413] macsec0: entered promiscuous mode [ 488.084706][T20413] macsec0: entered allmulticast mode [ 488.133187][T20417] netlink: 'syz.3.4223': attribute type 28 has an invalid length. [ 488.147314][T19115] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.217382][T19117] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.420425][T20426] bond2: option mode: unable to set because the bond device has slaves [ 488.515097][T20431] netlink: 'syz.1.4228': attribute type 11 has an invalid length. [ 488.555938][T20425] bond2: option mode: unable to set because the bond device has slaves [ 488.604467][T20436] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 488.786520][T20438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.921188][T20454] __nla_validate_parse: 7 callbacks suppressed [ 488.921210][T20454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4237'. [ 488.982976][T20456] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4236'. [ 489.144089][T20462] netlink: 'syz.0.4239': attribute type 1 has an invalid length. [ 489.233561][T20462] 8021q: adding VLAN 0 to HW filter on device bond7 [ 489.242874][T20466] bond6: (slave syz_tun): Releasing active interface [ 489.281741][T20469] x_tables: duplicate underflow at hook 2 [ 489.289425][T20466] bond7: (slave syz_tun): making interface the new active one [ 489.302995][T20466] bond7: (slave syz_tun): Enslaving as an active interface with an up link [ 489.382904][T20473] netlink: 'syz.2.4243': attribute type 11 has an invalid length. [ 489.472295][T20475] netlink: 'syz.3.4244': attribute type 10 has an invalid length. [ 489.491404][T20477] tipc: Started in network mode [ 489.496799][T20477] tipc: Node identity 2001, cluster identity 4711 [ 489.503429][T20477] tipc: Enabling of bearer rejected, failed to enable media [ 489.515229][T20475] bond0: (slave dummy0): Releasing backup interface [ 489.538367][T20475] team0: Port device dummy0 added [ 489.555872][T20475] netlink: 'syz.3.4244': attribute type 10 has an invalid length. [ 489.588610][T20475] team0: Port device dummy0 removed [ 489.608151][T20475] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 489.618750][T20479] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 489.849215][T20493] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4252'. [ 489.864392][T20493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.037777][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4256'. [ 490.112067][T20504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4257'. [ 490.221766][T20510] netlink: 'syz.0.4260': attribute type 1 has an invalid length. [ 490.291257][T20510] 8021q: adding VLAN 0 to HW filter on device bond8 [ 490.329846][T20514] bond7: (slave syz_tun): Releasing active interface [ 490.373017][T20514] bond8: (slave syz_tun): making interface the new active one [ 490.383615][T20514] bond8: (slave syz_tun): Enslaving as an active interface with an up link [ 490.441497][T20523] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4265'. [ 490.682038][T20534] pim6reg1: entered promiscuous mode [ 490.688727][T20534] pim6reg1: entered allmulticast mode [ 490.703536][T20535] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 490.777864][T20542] netlink: 'syz.2.4273': attribute type 12 has an invalid length. [ 491.047067][T20547] netlink: 'syz.2.4275': attribute type 1 has an invalid length. [ 491.074881][T20559] Cannot find add_set index 2 as target [ 491.082556][T20533] delete_channel: no stack [ 491.088804][T20556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.275011][T20567] xt_hashlimit: max too large, truncated to 1048576 [ 491.295846][T20567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.537506][T20581] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4289'. [ 491.720629][T20590] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4292'. [ 491.732318][T20590] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 491.756442][T20590] openvswitch: netlink: Message has 75 unknown bytes. [ 491.914687][T20598] bond8: (slave syz_tun): Releasing active interface [ 492.072050][T20612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4300'. [ 492.120253][T20615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4301'. [ 492.654536][T20637] Cannot find set identified by id 0 to match [ 492.730561][T20640] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 492.822960][T20644] lo speed is unknown, defaulting to 1000 [ 492.950692][T20647] lo speed is unknown, defaulting to 1000 [ 493.153310][T20650] lo speed is unknown, defaulting to 1000 [ 493.957517][T20682] validate_nla: 3 callbacks suppressed [ 493.957540][T20682] netlink: 'syz.1.4323': attribute type 1 has an invalid length. [ 494.014492][T20684] __nla_validate_parse: 8 callbacks suppressed [ 494.014518][T20684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4324'. [ 494.075623][T20688] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4325'. [ 494.130436][T20690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4324'. [ 494.148557][T20692] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4325'. [ 494.181102][T20682] 8021q: adding VLAN 0 to HW filter on device bond6 [ 494.195328][T20685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.281138][T20684] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.363941][T20684] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 494.464683][T20687] 8021q: adding VLAN 0 to HW filter on device bond6 [ 494.474051][T20687] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 494.485508][T20687] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 494.531763][T20689] bond6: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 494.583271][T20684] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.598798][T20684] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 494.691882][T20684] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.725082][T20684] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 494.977011][T20701] lo speed is unknown, defaulting to 1000 [ 495.073962][T20684] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.090023][T20684] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 495.200724][T20709] 8021q: VLANs not supported on caif0 [ 495.361426][T19120] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 495.371526][T19120] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 495.395681][ T6301] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 495.411805][ T6301] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 495.453631][T20718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4334'. [ 495.598737][T20720] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 495.630486][T20729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4336'. [ 495.644137][T20724] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 495.658190][T20720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4335'. [ 495.709032][T19120] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 495.728964][T19120] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 495.829326][T20732] openvswitch: netlink: IP tunnel dst address not specified [ 495.864490][T20732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4338'. [ 495.893180][T19120] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 495.906657][T19120] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 495.921920][T20737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4340'. [ 496.028941][T20741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4339'. [ 496.130914][T20750] netlink: 'syz.3.4343': attribute type 11 has an invalid length. [ 496.547175][T20761] netlink: 'syz.4.4348': attribute type 19 has an invalid length. [ 496.572838][T20761] netlink: 'syz.4.4348': attribute type 20 has an invalid length. [ 497.040674][T20783] netlink: 'syz.3.4356': attribute type 11 has an invalid length. [ 497.075795][T20789] syzkaller0: entered promiscuous mode [ 497.090099][T20789] syzkaller0: entered allmulticast mode [ 497.119175][T20789] tipc: Enabled bearer , priority 0 [ 497.158483][T20788] lo speed is unknown, defaulting to 1000 [ 497.211166][T20786] tipc: Resetting bearer [ 497.295273][T20786] tipc: Disabling bearer [ 498.527422][T20828] netlink: 'syz.1.4368': attribute type 10 has an invalid length. [ 498.553775][T20828] netlink: 'syz.1.4368': attribute type 10 has an invalid length. [ 498.575623][T20828] team0: Port device dummy0 removed [ 498.595556][T20828] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 498.961010][T20836] netlink: 'syz.4.4371': attribute type 11 has an invalid length. [ 499.058226][ T25] block nbd3: Possible stuck request ffff888025ae8000: control (read@0,1024B). Runtime 180 seconds [ 499.069236][ T25] block nbd3: Possible stuck request ffff888025ae8200: control (read@1024,1024B). Runtime 180 seconds [ 499.080404][ T25] block nbd3: Possible stuck request ffff888025ae8400: control (read@2048,1024B). Runtime 180 seconds [ 499.091571][ T25] block nbd3: Possible stuck request ffff888025ae8600: control (read@3072,1024B). Runtime 180 seconds [ 499.871597][T20856] netlink: 'syz.0.4379': attribute type 11 has an invalid length. [ 500.056637][T20858] __nla_validate_parse: 7 callbacks suppressed [ 500.056660][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4380'. [ 500.075529][T20858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4380'. [ 500.110128][T20858] netlink: 'syz.1.4380': attribute type 14 has an invalid length. [ 500.244940][T20866] pim6reg: entered allmulticast mode [ 500.378181][T20864] pim6reg: left allmulticast mode [ 500.414242][T20872] netlink: 'syz.1.4383': attribute type 11 has an invalid length. [ 500.649906][T20875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4384'. [ 500.989454][T20883] : renamed from bond_slave_0 (while UP) [ 501.053615][T20888] netlink: 'syz.1.4389': attribute type 23 has an invalid length. [ 501.203847][T20890] syzkaller0: entered promiscuous mode [ 501.235453][T20890] syzkaller0: entered allmulticast mode [ 501.297047][T20890] 0: reclassify loop, rule prio 0, protocol 800 [ 501.918316][T20901] netlink: 'syz.3.4394': attribute type 11 has an invalid length. [ 502.056771][T20904] sctp: [Deprecated]: syz.0.4397 (pid 20904) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.056771][T20904] Use struct sctp_sack_info instead [ 502.276680][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4401'. [ 502.323496][T20915] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.383877][T20909] lo speed is unknown, defaulting to 1000 [ 502.438845][T20919] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4401'. [ 502.449509][T20915] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.617632][T20915] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.833835][T20915] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.390706][ T60] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.411958][T19107] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.521348][T19107] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.543059][T19107] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.658832][T20940] netlink: 'syz.1.4409': attribute type 11 has an invalid length. [ 503.697230][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 503.703432][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 503.722921][T20944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4408'. [ 503.755367][T20943] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4410'. [ 503.925196][T20950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4413'. [ 503.977144][T20950] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.045645][T20953] lo speed is unknown, defaulting to 1000 [ 504.095076][T20950] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.221448][T20950] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.445249][T20793] Set syz1 is full, maxelem 65536 reached [ 505.517864][T20961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.580953][T20961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.250778][T20970] netlink: 'syz.2.4420': attribute type 16 has an invalid length. [ 506.266337][T20952] lo speed is unknown, defaulting to 1000 [ 506.304387][T20985] syzkaller0: entered promiscuous mode [ 506.326853][T20985] syzkaller0: entered allmulticast mode [ 506.351848][T19119] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.352375][T20999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4422'. [ 506.381727][T20999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4422'. [ 506.535850][T20950] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.559804][T21010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4424'. [ 506.571604][T21010] netlink: 'syz.2.4424': attribute type 1 has an invalid length. [ 506.687480][T21013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4424'. [ 506.697972][T19119] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.707333][T19119] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.733942][T20999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4422'. [ 506.758379][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.764766][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.781479][T19119] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.791703][T21013] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 506.806326][T20999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4422'. [ 506.842218][T19119] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.881409][T19119] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.017468][T19119] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.044741][T21020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4427'. [ 507.054241][T19119] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.074101][T21020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4427'. [ 507.085089][T21020] netlink: 'syz.0.4427': attribute type 19 has an invalid length. [ 507.093530][T21020] netlink: 'syz.0.4427': attribute type 20 has an invalid length. [ 507.135534][T19119] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.164930][T19119] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.194697][T19119] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.205414][T19119] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.430018][T21033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4431'. [ 507.808158][T21047] netlink: 'syz.0.4434': attribute type 11 has an invalid length. [ 507.830014][T21051] raw_sendmsg: syz.3.4436 forgot to set AF_INET. Fix it! [ 508.254575][T21073] lo speed is unknown, defaulting to 1000 [ 508.614790][T21083] lo speed is unknown, defaulting to 1000 [ 508.827324][T21093] netlink: 'syz.0.4448': attribute type 11 has an invalid length. [ 508.887764][T21096] syzkaller0: entered promiscuous mode [ 508.903633][T21096] syzkaller0: entered allmulticast mode [ 508.932809][T21096] 0: reclassify loop, rule prio 0, protocol 800 [ 508.974008][T21100] lo speed is unknown, defaulting to 1000 [ 509.187378][T21107] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 509.329944][T21112] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4456'. [ 509.757710][T21137] netlink: 'syz.3.4464': attribute type 10 has an invalid length. [ 509.858239][T21136] lo speed is unknown, defaulting to 1000 [ 510.190590][T21152] netlink: 'syz.1.4470': attribute type 1 has an invalid length. [ 510.299688][T21152] 8021q: adding VLAN 0 to HW filter on device bond7 [ 510.718722][T12827] bond5: (slave syz_tun): link status definitely down, disabling slave [ 510.731611][T12827] bond5: now running without any active interface! [ 510.780365][T21168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.197368][T21189] netlink: 'syz.2.4482': attribute type 1 has an invalid length. [ 511.221649][T21175] syzkaller0: entered promiscuous mode [ 511.228727][T21175] syzkaller0: entered allmulticast mode [ 511.253707][T21186] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 511.264896][T21184] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 511.596567][T21207] __nla_validate_parse: 8 callbacks suppressed [ 511.596590][T21207] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4490'. [ 511.615815][T21207] netlink: 'syz.3.4490': attribute type 10 has an invalid length. [ 511.623992][T21207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4490'. [ 511.699245][T21216] netlink: 'syz.0.4492': attribute type 23 has an invalid length. [ 511.818779][T21170] delete_channel: no stack [ 511.828241][T21221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4491'. [ 511.837432][T21221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4491'. [ 511.846669][T21221] netlink: 'syz.1.4491': attribute type 19 has an invalid length. [ 511.862717][T21221] netlink: 'syz.1.4491': attribute type 20 has an invalid length. [ 514.211742][T21235] netlink: 'syz.4.4498': attribute type 1 has an invalid length. [ 514.286418][T21235] 8021q: adding VLAN 0 to HW filter on device bond6 [ 514.337226][T21240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4500'. [ 514.401594][T21241] bond6: (slave syz_tun): making interface the new active one [ 514.410819][T21241] bond6: (slave syz_tun): Enslaving as an active interface with an up link [ 514.537224][T21252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4501'. [ 514.563522][T21252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4501'. [ 514.591981][T21252] netlink: 'syz.2.4501': attribute type 19 has an invalid length. [ 514.613986][T21252] netlink: 'syz.2.4501': attribute type 20 has an invalid length. [ 514.652655][T21261] 8021q: VLANs not supported on caif0 [ 514.660273][T21261] tunl0: Caught tx_queue_len zero misconfig [ 514.968573][T21282] macsec0: entered allmulticast mode [ 514.974124][T21282] veth1_macvtap: entered allmulticast mode [ 515.727380][T21300] lo speed is unknown, defaulting to 1000 [ 515.848556][T21305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4523'. [ 515.890249][T21305] syz_tun: entered promiscuous mode [ 515.917187][T21305] syz_tun: refused to change device tx_queue_len [ 515.987673][T12827] bond6: (slave syz_tun): link status definitely down, disabling slave [ 516.002601][T21313] netlink: 'syz.3.4527': attribute type 10 has an invalid length. [ 516.025890][T12827] bond6: now running without any active interface! [ 516.094156][T21317] Cannot find add_set index 2 as target [ 516.185740][T21322] veth0_to_bridge: entered promiscuous mode [ 516.198900][T21318] veth0_to_bridge: left promiscuous mode [ 516.257213][T21325] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4530'. [ 516.400467][T21330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4532'. [ 516.554471][T21337] netlink: 'syz.0.4535': attribute type 1 has an invalid length. [ 516.554522][T21340] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.563258][T21337] netlink: 'syz.0.4535': attribute type 2 has an invalid length. [ 516.615406][T21337] __nla_validate_parse: 2 callbacks suppressed [ 516.615430][T21337] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4535'. [ 516.633665][T21337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4535'. [ 516.729507][T21340] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.809726][T21340] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.869749][T21357] netlink: 'syz.1.4541': attribute type 1 has an invalid length. [ 516.883293][T21358] netlink: 'syz.1.4541': attribute type 1 has an invalid length. [ 516.894552][T21340] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.083190][T18232] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.129856][T12827] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.170400][T19107] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.215183][T19107] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.244779][T21339] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.348881][T21339] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.431811][T21339] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.460633][T21376] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input17 [ 517.531060][T21375] lo speed is unknown, defaulting to 1000 [ 517.541674][T21339] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.785342][T21381] lo speed is unknown, defaulting to 1000 [ 518.363944][T21393] netlink: 'syz.1.4552': attribute type 13 has an invalid length. [ 518.382380][T21393] netlink: 'syz.1.4552': attribute type 17 has an invalid length. [ 518.650721][T21393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.102638][T21413] netlink: 'syz.1.4558': attribute type 9 has an invalid length. [ 519.257480][T12827] bond5: (slave syz_tun): link status definitely up, 10000 Mbps full duplex [ 519.309167][T12827] bond5: (slave syz_tun): making interface the new active one [ 519.365913][T12827] bond5: active interface up! [ 519.373972][T21420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4560'. [ 519.519529][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4562'. [ 519.534223][T21426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4562'. [ 519.544393][T21426] netlink: 'syz.2.4562': attribute type 19 has an invalid length. [ 519.574729][T21426] netlink: 'syz.2.4562': attribute type 20 has an invalid length. [ 519.603315][T21432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4563'. [ 520.135718][T21445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4568'. [ 520.203884][T21445] netlink: 'syz.0.4568': attribute type 1 has an invalid length. [ 520.216223][T21445] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4568'. [ 520.781214][T21478] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4578'. [ 520.911294][T21484] netlink: 'syz.0.4580': attribute type 10 has an invalid length. [ 521.175889][T21492] lo speed is unknown, defaulting to 1000 [ 521.257586][T21495] netlink: 'syz.0.4585': attribute type 10 has an invalid length. [ 521.471287][T21500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4587'. [ 521.623803][T19119] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.662109][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.705273][T21507] IPv6: sit1: Disabled Multicast RS [ 521.713319][T21507] sit1: entered promiscuous mode [ 521.718829][T21507] sit1: entered allmulticast mode [ 521.730639][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.768844][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.937209][T21514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4591'. [ 522.220729][T21530] netlink: 'syz.4.4596': attribute type 10 has an invalid length. [ 522.275507][T21532] netlink: 'syz.4.4596': attribute type 10 has an invalid length. [ 522.302520][T21532] team0: Port device dummy0 removed [ 522.332130][T21532] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 522.405309][ T5950] IPVS: starting estimator thread 0... [ 522.526304][T21537] IPVS: using max 28 ests per chain, 67200 per kthread [ 522.540234][T21541] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4599'. [ 522.605968][T21549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4602'. [ 522.688865][T21555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4602'. [ 522.707300][T21554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4603'. [ 522.719028][T21554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4603'. [ 522.732893][T21554] netlink: 'syz.0.4603': attribute type 5 has an invalid length. [ 522.743573][T21554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4603'. [ 522.777877][T21554] geneve2: entered promiscuous mode [ 522.783342][T21554] geneve2: entered allmulticast mode [ 522.793326][T19119] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 522.823901][T19119] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 522.850232][T19119] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 522.871787][T19119] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 523.037851][T21566] netlink: 'syz.3.4606': attribute type 21 has an invalid length. [ 523.048669][T21568] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001 [ 523.056268][T21566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4606'. [ 523.068138][T21566] netlink: 'syz.3.4606': attribute type 1 has an invalid length. [ 523.121338][T21570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.421367][T21583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4611'. [ 523.478779][T21583] vlan0: entered promiscuous mode [ 524.467591][T21628] netlink: 'syz.1.4623': attribute type 2 has an invalid length. [ 524.476900][T21628] tipc: Enabling of bearer rejected, already enabled [ 524.662691][T21637] pim6reg: entered allmulticast mode [ 524.897059][T21643] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4631'. [ 525.181908][T21655] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 525.460549][T21672] batadv0: entered promiscuous mode [ 525.518824][T21678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.720877][T21687] 8021q: VLANs not supported on caif0 [ 526.022562][T21697] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 526.045568][T21697] pim6reg0: persist disabled [ 526.686944][T21707] lo speed is unknown, defaulting to 1000 [ 527.088650][T21732] __nla_validate_parse: 2 callbacks suppressed [ 527.088674][T21732] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4663'. [ 527.274723][T21741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4667'. [ 527.523129][T21747] netlink: 'syz.1.4668': attribute type 10 has an invalid length. [ 527.534745][T21750] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4669'. [ 527.891439][T21762] netlink: 71 bytes leftover after parsing attributes in process `syz.3.4673'. [ 527.953029][T21761] 8021q: adding VLAN 0 to HW filter on device bond7 [ 528.119532][T21769] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 528.332107][T21784] xt_hashlimit: max too large, truncated to 1048576 [ 528.383603][T21784] xt_CT: You must specify a L4 protocol and not use inversions on it [ 528.429202][T21789] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4683'. [ 528.485796][T21791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4682'. Connection to 10.128.1.177 closed by remote host. [ 529.156640][ T25] block nbd3: Possible stuck request ffff888025ae8000: control (read@0,1024B). Runtime 210 seconds [ 529.167517][ T25] block nbd3: Possible stuck request ffff888025ae8200: control (read@1024,1024B). Runtime 210 seconds [ 529.179110][ T25] block nbd3: Possible stuck request ffff888025ae8400: control (read@2048,1024B). Runtime 210 seconds [ 529.191356][ T25] block nbd3: Possible stuck request ffff888025ae8600: control (read@3072,1024B). Runtime 210 seconds [ 529.296294][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 529.519527][T18867] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 529.532199][T18867] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 529.541463][T18867] CPU: 1 UID: 0 PID: 18867 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 529.551597][T18867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.561893][T18867] RIP: 0010:klist_del+0x49/0x110 [ 529.567477][T18867] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 57 d6 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b 57 d6 f6 4d 8b 7e 58 4c 89 f7 e8 5f 11 [ 529.589499][T18867] RSP: 0018:ffffc900036577a8 EFLAGS: 00010202 [ 529.596830][T18867] RAX: 000000000000000b RBX: ffff8880795ba860 RCX: ffff8880548f5b80 [ 529.610051][T18867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 529.619427][T18867] RBP: ffffc900036578d0 R08: ffff8880508660f3 R09: 1ffff1100a10cc1e [ 529.632752][T18867] R10: dffffc0000000000 R11: ffffed100a10cc1f R12: dffffc0000000000 [ 529.643479][T18867] R13: 1ffff1100f2b750c R14: 0000000000000000 R15: ffff8880566ae758 [ 529.656222][T18867] FS: 0000000000000000(0000) GS:ffff888125f1c000(0000) knlGS:0000000000000000 [ 529.670179][T18867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 529.678897][T18867] CR2: 000055a273fad5e0 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 529.687733][T18867] Call Trace: [ 529.691595][T18867] [ 529.695191][T18867] device_del+0x280/0x8e0 [ 529.700795][T18867] ? _raw_spin_unlock_irq+0x2e/0x50 [ 529.710126][T18867] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 529.717783][T18867] ? __pfx_device_del+0x10/0x10 [ 529.725629][T18867] ? netdev_unregister_kobject+0x344/0x450 [ 529.733751][T18867] unregister_netdevice_many_notify+0x1ddd/0x2340 [ 529.741207][T18867] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 529.752298][T18867] ? rtnl_net_dev_lock+0x36/0x2f0 [ 529.759166][T18867] ? rtnl_net_dev_lock+0x36/0x2f0 [ 529.765327][T18867] unregister_netdev+0x157/0x1f0 [ 529.772053][T18867] ? __pfx_unregister_netdev+0x10/0x10 [ 529.779821][T18867] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 529.787584][T18867] bnep_session+0x29a5/0x2bd0 [ 529.793323][T18867] ? __lock_acquire+0x6b6/0x2cf0 [ 529.801344][T18867] ? __pfx_bnep_session+0x10/0x10 [ 529.807140][T18867] ? __pfx_woken_wake_function+0x10/0x10 [ 529.814012][T18867] ? __kthread_parkme+0x7b/0x200 [ 529.820869][T18867] ? __kthread_parkme+0x1a1/0x200 [ 529.826212][T18867] kthread+0x711/0x8a0 [ 529.833051][T18867] ? __pfx_bnep_session+0x10/0x10 [ 529.839885][T18867] ? __pfx_kthread+0x10/0x10 [ 529.847221][T18867] ? _raw_spin_unlock_irq+0x23/0x50 [ 529.854553][T18867] ? __pfx_kthread+0x10/0x10 [ 529.859934][T18867] ret_from_fork+0x510/0xa50 [ 529.866222][T18867] ? __pfx_ret_from_fork+0x10/0x10 [ 529.873039][T18867] ? __switch_to+0xc9e/0x1480 [ 529.878991][T18867] ? __pfx_kthread+0x10/0x10 [ 529.884699][T18867] ret_from_fork_asm+0x1a/0x30 [ 529.889973][T18867] [ 529.894409][T18867] Modules linked in: [ 529.900609][T18867] ---[ end trace 0000000000000000 ]--- [ 529.926245][T18867] RIP: 0010:klist_del+0x49/0x110 [ 529.934128][T18867] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 57 d6 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b 57 d6 f6 4d 8b 7e 58 4c 89 f7 e8 5f 11 [ 529.959217][T18867] RSP: 0018:ffffc900036577a8 EFLAGS: 00010202 [ 529.966383][T18867] RAX: 000000000000000b RBX: ffff8880795ba860 RCX: ffff8880548f5b80 [ 529.975282][T18867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 529.984812][T18867] RBP: ffffc900036578d0 R08: ffff8880508660f3 R09: 1ffff1100a10cc1e [ 529.993386][T18867] R10: dffffc0000000000 R11: ffffed100a10cc1f R12: dffffc0000000000 [ 530.001673][T18867] R13: 1ffff1100f2b750c R14: 0000000000000000 R15: ffff8880566ae758 [ 530.009988][T18867] FS: 0000000000000000(0000) GS:ffff888125f1c000(0000) knlGS:0000000000000000 [ 530.019373][T18867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.026009][T18867] CR2: 000055a273fad5e0 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 530.034336][T18867] Kernel panic - not syncing: Fatal exception [ 530.047050][T18867] Kernel Offset: disabled [ 530.051408][T18867] Rebooting in 86400 seconds..