last executing test programs: 59.373754804s ago: executing program 4 (id=7013): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) 59.335894844s ago: executing program 2 (id=7014): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f7", 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e0", 0x2}], 0x1}}], 0x2, 0x2090) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64=r2], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendto$inet(r0, &(0x7f0000000040)="c3297878fdebcc7d1f", 0xffffffffffffffc7, 0x1000803c, 0x0, 0x0) 58.917429233s ago: executing program 1 (id=7021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000140)="03be00fbb46ecedbe0090a43", 0xc}], 0x3) 58.412058593s ago: executing program 4 (id=7029): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x5, 0x4, 0xc}]}}}]}}]}, 0x5c}}, 0x110) 58.357658256s ago: executing program 2 (id=7031): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x1}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c8d0}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r3, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x4004) 55.706581979s ago: executing program 1 (id=7033): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 55.47211107s ago: executing program 3 (id=7036): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x8020) 55.418299045s ago: executing program 4 (id=7037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x24048845, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffa}, 0x1c) 55.351495051s ago: executing program 1 (id=7038): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 55.350423194s ago: executing program 2 (id=7039): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r3, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) 55.300691054s ago: executing program 3 (id=7040): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) 55.299699041s ago: executing program 4 (id=7041): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 55.159689618s ago: executing program 2 (id=7043): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f7", 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e0", 0x2}], 0x1}}], 0x2, 0x2090) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64=r2], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendto$inet(r0, &(0x7f0000000040)="c3297878fdebcc7d1f", 0xffffffffffffffc7, 0x1000803c, 0x0, 0x0) 55.152920112s ago: executing program 1 (id=7044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000140)="03be00fbb46ecedbe0090a43", 0xc}], 0x3) 55.087369192s ago: executing program 4 (id=7045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x2}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 54.296600011s ago: executing program 3 (id=7049): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x5, 0x4, 0xc}]}}}]}}]}, 0x5c}}, 0x110) 54.094365737s ago: executing program 2 (id=7050): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x1}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c8d0}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r3, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x4004) 48.204185928s ago: executing program 1 (id=7051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r2, &(0x7f0000000a80), 0x0}, 0x20) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r3, &(0x7f0000000340)=""/203, 0xcb, 0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x80, 0x80, 0x7fff, 0x5, {{0x6, 0x4, 0x3, 0x8, 0x18, 0x67, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @private=0xa010100, {[@noop]}}}}}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x1d, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @generic={0x65, 0xe, 0x8, 0x4, 0x2}, @ldst={0x1, 0x0, 0x6, 0x0, 0x4, 0x80, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x5c, &(0x7f0000000800)=""/92, 0x40f00, 0x59, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000009c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a00), &(0x7f0000000a40)=[{0x5, 0x1, 0xd, 0x4}, {0x3, 0x3, 0x8, 0x7}, {0x5, 0x4, 0x8, 0xb}], 0x10, 0xbb04}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r8, 0x58, &(0x7f0000000600)}, 0x10) 47.554959266s ago: executing program 0 (id=7054): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback={0x100000000000000}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x54}, 0x2, 0x34005, 0x0, 0x4004}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xd0, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:netlabel_mgmt_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2e}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:auditd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{0x1, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f00000015c0)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001700)={r4, 0x58, &(0x7f0000001680)}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001780), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x48, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0x2c, 0x16, 0x0, 0x1, [@typed={0x25, 0x1c, 0x0, 0x0, @binary="5b010e5ee7495023e607c1f498a459eab35703c8cbae71ad3a9a39b3d5defad754"}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r6) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r7, 0x211, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4885}, 0x40000) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001980), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, r8, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x16}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r9, 0x2000}, {r9, 0x8104}], 0x2, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000001900)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, r13, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, r13, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040010}, 0x15) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESDEC=r10, @ANYRESHEX], 0x24}}, 0xc010) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r10, @ANYBLOB="010026bd7000ffdbdf253000000008000300", @ANYRES32=r10], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 47.457935469s ago: executing program 3 (id=7055): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 47.268051987s ago: executing program 3 (id=7056): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000140)="03be00fbb46ecedbe0090a43dd5802f712a325c987d70c11", 0x18}], 0x3) 47.220623191s ago: executing program 0 (id=7057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000ffff000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 46.778857536s ago: executing program 0 (id=7058): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x38, 0x0, 0x0, 0xfb, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 46.770556883s ago: executing program 1 (id=7059): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x26, 0x800, 0x200) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000001001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 46.528453377s ago: executing program 0 (id=7060): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f7", 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e0", 0x2}], 0x1}}], 0x2, 0x2090) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64=r2], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendto$inet(r0, &(0x7f0000000040)="c3297878fdebcc7d1f", 0xffffffffffffffc7, 0x1000803c, 0x0, 0x0) 41.115485956s ago: executing program 4 (id=7061): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}, {&(0x7f0000001f80)=""/132, 0x94}], 0x2}, 0x4}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 41.110558564s ago: executing program 2 (id=7062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 40.976039995s ago: executing program 0 (id=7063): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x1, 0x24048845, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffa}, 0x1c) 40.888413002s ago: executing program 3 (id=7064): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r3, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) 37.938224449s ago: executing program 0 (id=7065): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x5, 0x4, 0xc}]}}}]}}]}, 0x5c}}, 0x110) 0s ago: executing program 32 (id=7059): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x26, 0x800, 0x200) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000001001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) kernel console output (not intermixed with test programs): fb64fe28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.100495][T20069] RAX: ffffffffffffffda RBX: 00007fb64f215fa0 RCX: 00007fb64ef9cdd9 [ 583.100509][T20069] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 583.100521][T20069] RBP: 00007fb64fe28090 R08: 0000000000000000 R09: 0000000000000000 [ 583.100532][T20069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.100543][T20069] R13: 00007fb64f216038 R14: 00007fb64f215fa0 R15: 00007ffd428336c8 [ 583.100574][T20069] [ 583.100852][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4406'. [ 583.525002][T20084] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 583.562334][T20087] rdma_op ffff88804d2551f0 conn xmit_rdma 0000000000000000 [ 583.814511][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4419'. [ 583.877215][T20102] IPVS: sh: FWM 3 0x00000003 - no destination available [ 583.967474][T20110] netlink: 'syz.3.4421': attribute type 2 has an invalid length. [ 583.996612][T20112] netlink: 'syz.1.4422': attribute type 1 has an invalid length. [ 584.085681][T20112] bond2: entered promiscuous mode [ 584.091170][T20112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 584.262667][T20112] bond2: (slave bridge4): making interface the new active one [ 584.296904][T20112] bridge4: entered promiscuous mode [ 584.322552][T20112] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 584.706976][T20142] dvmrp6: entered allmulticast mode [ 584.737303][T20143] __nla_validate_parse: 3 callbacks suppressed [ 584.737321][T20143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4432'. [ 584.885832][T20143] bond5: entered promiscuous mode [ 584.891618][T20143] 8021q: adding VLAN 0 to HW filter on device bond5 [ 584.929752][T20143] bond5 (unregistering): Released all slaves [ 584.982307][T20150] batadv0: entered promiscuous mode [ 584.995129][T20150] veth0_to_batadv: entered promiscuous mode [ 585.014031][T20150] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 585.043114][T20150] hsr1: Slave B (veth0_to_batadv) is not up; please bring it up to get a fully working HSR network [ 585.055392][T20150] hsr1: entered allmulticast mode [ 585.073172][T20150] batadv0: entered allmulticast mode [ 585.078512][T20150] veth0_to_batadv: entered allmulticast mode [ 585.226769][T20157] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4435'. [ 585.576474][T20166] syzkaller0: entered promiscuous mode [ 585.582269][T20166] syzkaller0: entered allmulticast mode [ 586.793835][T20197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4448'. [ 587.103825][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 588.475326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.726405][T20208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4453'. [ 588.749363][T20208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4453'. [ 588.990726][T20220] netlink: 'syz.3.4459': attribute type 16 has an invalid length. [ 589.000184][T20220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4459'. [ 589.117158][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4462'. [ 589.502389][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4472'. [ 589.698113][T20268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4479'. [ 589.784438][T20268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4479'. [ 589.805992][T20275] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 590.112703][T20293] netlink: 'syz.1.4487': attribute type 11 has an invalid length. [ 590.283950][T20300] netlink: 'syz.1.4491': attribute type 1 has an invalid length. [ 590.299165][T20301] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4490'. [ 590.342940][T20302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4490'. [ 590.420414][T20300] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 590.449613][T20300] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 590.679847][T20322] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4499'. [ 590.689388][T20322] tipc: Invalid UDP bearer configuration [ 590.689437][T20322] tipc: Enabling of bearer rejected, failed to enable media [ 590.757020][T20326] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4500'. [ 590.770764][T20327] netlink: 'syz.4.4501': attribute type 11 has an invalid length. [ 590.964712][T20343] FAULT_INJECTION: forcing a failure. [ 590.964712][T20343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.005832][T20343] CPU: 0 UID: 0 PID: 20343 Comm: syz.2.4505 Not tainted syzkaller #0 PREEMPT(full) [ 591.005858][T20343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.005869][T20343] Call Trace: [ 591.005876][T20343] [ 591.005884][T20343] dump_stack_lvl+0xe8/0x150 [ 591.005908][T20343] should_fail_ex+0x412/0x560 [ 591.005935][T20343] _copy_from_iter+0x1d3/0x1670 [ 591.005961][T20343] ? rcu_is_watching+0x15/0xb0 [ 591.005990][T20343] ? __pfx__copy_from_iter+0x10/0x10 [ 591.006019][T20343] ? netlink_sendmsg+0x650/0xb40 [ 591.006040][T20343] ? skb_put+0x11b/0x210 [ 591.006062][T20343] netlink_sendmsg+0x6c0/0xb40 [ 591.006094][T20343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.006119][T20343] ? aa_sock_msg_perm+0xf1/0x1b0 [ 591.006144][T20343] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 591.006171][T20343] ____sys_sendmsg+0x972/0x9f0 [ 591.006194][T20343] ? __might_fault+0xaf/0x130 [ 591.006223][T20343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.006253][T20343] ? import_iovec+0x73/0xa0 [ 591.006281][T20343] ___sys_sendmsg+0x2a5/0x360 [ 591.006302][T20343] ? __lock_acquire+0x6b5/0x2cf0 [ 591.006325][T20343] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.006375][T20343] ? __fget_files+0x2a/0x420 [ 591.006393][T20343] ? __fget_files+0x3a0/0x420 [ 591.006420][T20343] __x64_sys_sendmsg+0x1bd/0x2a0 [ 591.006444][T20343] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 591.006476][T20343] ? __pfx_ksys_write+0x10/0x10 [ 591.006517][T20343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.006536][T20343] do_syscall_64+0x15f/0xf80 [ 591.006556][T20343] ? trace_irq_disable+0x3b/0x140 [ 591.006581][T20343] ? clear_bhb_loop+0x40/0x90 [ 591.006602][T20343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.006618][T20343] RIP: 0033:0x7fbab3d9cdd9 [ 591.006635][T20343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.006651][T20343] RSP: 002b:00007fbab4bbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.006670][T20343] RAX: ffffffffffffffda RBX: 00007fbab4015fa0 RCX: 00007fbab3d9cdd9 [ 591.006683][T20343] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 591.006693][T20343] RBP: 00007fbab4bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 591.006703][T20343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.006714][T20343] R13: 00007fbab4016038 R14: 00007fbab4015fa0 R15: 00007ffed4caa948 [ 591.006726][T20345] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4507'. [ 591.006741][T20343] [ 591.068628][T20341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4506'. [ 591.256122][T20351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4508'. [ 591.410903][T20349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4508'. [ 591.545313][T20349] ip6gretap3: entered promiscuous mode [ 591.565350][T20349] ip6gretap3: entered allmulticast mode [ 591.595099][T20361] tipc: Started in network mode [ 591.608471][T20361] tipc: Node identity fa63ff05d14a, cluster identity 4711 [ 591.618849][T20361] tipc: Enabled bearer , priority 0 [ 591.631025][T20367] bond0: (slave bond_slave_1): Releasing backup interface [ 591.661738][T20357] tipc: Disabling bearer [ 591.739730][T20373] netlink: 'syz.4.4517': attribute type 8 has an invalid length. [ 591.762343][T20373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4517'. [ 591.811520][T20373] veth1_to_team: entered promiscuous mode [ 591.861121][T20373] veth1_to_team: left promiscuous mode [ 592.036923][T20391] xt_connbytes: Forcing CT accounting to be enabled [ 592.198483][T20389] bond2: left promiscuous mode [ 592.204090][T20389] bridge4: left promiscuous mode [ 592.227222][T20389] 8021q: adding VLAN 0 to HW filter on device bond3 [ 592.466918][ T3388] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 592.505748][T17950] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 592.515591][ T3388] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 592.599018][T20412] tipc: Enabled bearer , priority 0 [ 592.784290][T20415] team1: entered promiscuous mode [ 592.798097][T20415] team1: entered allmulticast mode [ 592.804198][T17948] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 592.818827][T20415] 8021q: adding VLAN 0 to HW filter on device team1 [ 592.839080][T20407] tipc: Disabling bearer [ 592.974752][T20416] team2: entered promiscuous mode [ 592.979924][T20416] team2: entered allmulticast mode [ 592.986571][T20437] sock: sock_timestamping_bind_phc: sock not bind to device [ 592.994434][T20416] 8021q: adding VLAN 0 to HW filter on device team2 [ 593.073469][T17950] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 593.348957][T20434] syzkaller1: entered promiscuous mode [ 593.385029][T20434] syzkaller1: entered allmulticast mode [ 593.421965][T20454] netlink: 'syz.0.4541': attribute type 1 has an invalid length. [ 593.538406][T20460] netlink: 'syz.0.4544': attribute type 11 has an invalid length. [ 593.629761][T20463] tipc: Enabled bearer , priority 0 [ 593.780938][T20463] syzkaller0: entered promiscuous mode [ 593.793643][T20463] syzkaller0: entered allmulticast mode [ 593.805755][T20463] tipc: Resetting bearer [ 593.826396][T20474] tipc: Enabled bearer , priority 0 [ 593.876675][T20469] tipc: Disabling bearer [ 594.056151][T20487] netlink: 'syz.3.4554': attribute type 1 has an invalid length. [ 594.171480][T20495] netlink: 'syz.3.4556': attribute type 11 has an invalid length. [ 594.280895][T20498] netlink: 'syz.1.4555': attribute type 1 has an invalid length. [ 594.311232][T20498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.351980][ T6802] tipc: Resetting bearer [ 594.392484][T20457] tipc: Resetting bearer [ 596.553208][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 597.018504][T20457] tipc: Disabling bearer [ 597.043830][ T5819] tipc: Node number set to 724172549 [ 597.050063][T20525] tipc: Enabled bearer , priority 0 [ 597.142343][T20521] tipc: Disabling bearer [ 597.276279][T20535] netlink: 'syz.4.4568': attribute type 11 has an invalid length. [ 597.696044][ T5819] IPVS: starting estimator thread 0... [ 597.802979][T20566] IPVS: using max 34 ests per chain, 81600 per kthread [ 598.021618][T20574] syzkaller0: entered promiscuous mode [ 598.028242][T20574] syzkaller0: entered allmulticast mode [ 598.036615][T20578] tipc: Enabled bearer , priority 0 [ 598.056651][T20577] tipc: Disabling bearer [ 598.422310][T20586] netlink: 'syz.1.4585': attribute type 11 has an invalid length. [ 598.681110][T20595] pim6reg1: entered promiscuous mode [ 598.701293][T20595] pim6reg1: entered allmulticast mode [ 598.854321][T20606] xfrm0: entered promiscuous mode [ 598.860832][T20604] __nla_validate_parse: 11 callbacks suppressed [ 598.860853][T20604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4591'. [ 598.885728][T20606] xfrm0: entered allmulticast mode [ 598.952571][T20610] tipc: Enabled bearer , priority 0 [ 598.983518][T20608] tipc: Disabling bearer [ 599.148149][T20616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4594'. [ 599.177632][T20616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4594'. [ 599.395909][T20630] netlink: 'syz.4.4598': attribute type 11 has an invalid length. [ 599.409615][T20631] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4600'. [ 599.871509][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4604'. [ 600.010647][T20650] FAULT_INJECTION: forcing a failure. [ 600.010647][T20650] name failslab, interval 1, probability 0, space 0, times 0 [ 600.033584][T20650] CPU: 0 UID: 0 PID: 20650 Comm: syz.4.4606 Not tainted syzkaller #0 PREEMPT(full) [ 600.033610][T20650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 600.033620][T20650] Call Trace: [ 600.033627][T20650] [ 600.033635][T20650] dump_stack_lvl+0xe8/0x150 [ 600.033662][T20650] should_fail_ex+0x412/0x560 [ 600.033691][T20650] should_failslab+0xa8/0x100 [ 600.033725][T20650] ? skb_clone+0x212/0x3a0 [ 600.033749][T20650] kmem_cache_alloc_noprof+0x87/0x650 [ 600.033777][T20650] skb_clone+0x212/0x3a0 [ 600.033803][T20650] __netlink_deliver_tap+0x404/0x850 [ 600.033838][T20650] ? netlink_deliver_tap+0x2e/0x1b0 [ 600.033865][T20650] netlink_deliver_tap+0x19c/0x1b0 [ 600.033889][T20650] netlink_sendskb+0x68/0x140 [ 600.033911][T20650] nlmsg_notify+0x12e/0x1a0 [ 600.033936][T20650] nf_tables_commit+0x924a/0xa7b0 [ 600.033995][T20650] ? __pfx_nf_tables_commit+0x10/0x10 [ 600.034024][T20650] ? __free_frozen_pages+0x749/0xd30 [ 600.034056][T20650] ? nf_tables_newrule+0x2590/0x28b0 [ 600.034098][T20650] ? __pfx_nf_tables_newrule+0x10/0x10 [ 600.034122][T20650] ? nfnl_pernet+0x23/0x240 [ 600.034165][T20650] nfnetlink_rcv+0x1c19/0x27b0 [ 600.034221][T20650] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 600.034258][T20650] ? ref_tracker_free+0x693/0x840 [ 600.034312][T20650] ? __netlink_deliver_tap+0x807/0x850 [ 600.034343][T20650] ? netlink_deliver_tap+0x2e/0x1b0 [ 600.034365][T20650] ? netlink_deliver_tap+0x2e/0x1b0 [ 600.034393][T20650] netlink_unicast+0x75c/0x8e0 [ 600.034425][T20650] netlink_sendmsg+0x813/0xb40 [ 600.034457][T20650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.034484][T20650] ? aa_sock_msg_perm+0xf1/0x1b0 [ 600.034510][T20650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 600.034538][T20650] ____sys_sendmsg+0x972/0x9f0 [ 600.034562][T20650] ? __might_fault+0xaf/0x130 [ 600.034592][T20650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.034624][T20650] ? import_iovec+0x73/0xa0 [ 600.034653][T20650] ___sys_sendmsg+0x2a5/0x360 [ 600.034675][T20650] ? __lock_acquire+0x6b5/0x2cf0 [ 600.034700][T20650] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.034766][T20650] ? __fget_files+0x2a/0x420 [ 600.034787][T20650] ? __fget_files+0x3a0/0x420 [ 600.034819][T20650] __x64_sys_sendmsg+0x1bd/0x2a0 [ 600.034845][T20650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 600.034879][T20650] ? __pfx_ksys_write+0x10/0x10 [ 600.034913][T20650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.034933][T20650] do_syscall_64+0x15f/0xf80 [ 600.034954][T20650] ? trace_irq_disable+0x3b/0x140 [ 600.034979][T20650] ? clear_bhb_loop+0x40/0x90 [ 600.035001][T20650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.035019][T20650] RIP: 0033:0x7f25f799cdd9 [ 600.035037][T20650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.035052][T20650] RSP: 002b:00007f25f8867028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.035071][T20650] RAX: ffffffffffffffda RBX: 00007f25f7c15fa0 RCX: 00007f25f799cdd9 [ 600.035085][T20650] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 600.035096][T20650] RBP: 00007f25f8867090 R08: 0000000000000000 R09: 0000000000000000 [ 600.035108][T20650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 600.035119][T20650] R13: 00007f25f7c16038 R14: 00007f25f7c15fa0 R15: 00007ffff6327148 [ 600.035150][T20650] [ 600.571109][T20655] tipc: Enabling of bearer rejected, failed to enable media [ 600.795962][ T30] audit: type=1804 audit(1777717729.960:5): pid=20664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4610" name="/newroot/336/cgroup.controllers" dev="tmpfs" ino=1725 res=1 errno=0 [ 600.846289][ T30] audit: type=1800 audit(1777717729.960:6): pid=20664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4610" name="cgroup.controllers" dev="tmpfs" ino=1725 res=0 errno=0 [ 600.898607][T20667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4611'. [ 600.900540][ T30] audit: type=1800 audit(1777717729.980:7): pid=20664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4610" name="cgroup.controllers" dev="tmpfs" ino=1725 res=0 errno=0 [ 601.146338][T20673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4615'. [ 601.201557][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4615'. [ 601.242425][T20679] netlink: 'syz.2.4612': attribute type 11 has an invalid length. [ 601.314917][T20681] netlink: 'syz.4.4616': attribute type 1 has an invalid length. [ 601.345343][T20681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.673899][T20696] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4621'. [ 601.703237][T20696] netlink: Unknown conntrack attr (0) [ 601.792985][T20702] tipc: Enabling of bearer rejected, failed to enable media [ 602.058235][T20713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.231126][T20717] netlink: 'syz.1.4627': attribute type 12 has an invalid length. [ 602.458225][T20732] openvswitch: netlink: Message has 496 unknown bytes. [ 602.480189][T20728] bridge6: entered promiscuous mode [ 602.485653][T20732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.566668][T20734] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 602.594362][T20734] pim6reg0: persist disabled [ 602.727967][T20739] syzkaller1: entered promiscuous mode [ 602.757250][T20739] syzkaller1: entered allmulticast mode [ 602.988236][T20751] tipc: Enabling of bearer rejected, failed to enable media [ 603.078829][T20756] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4637'. [ 603.118350][T20758] FAULT_INJECTION: forcing a failure. [ 603.118350][T20758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.162905][T20758] CPU: 1 UID: 0 PID: 20758 Comm: syz.3.4636 Not tainted syzkaller #0 PREEMPT(full) [ 603.162932][T20758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 603.162943][T20758] Call Trace: [ 603.162951][T20758] [ 603.162959][T20758] dump_stack_lvl+0xe8/0x150 [ 603.162985][T20758] should_fail_ex+0x412/0x560 [ 603.163013][T20758] _copy_from_iter+0x1d3/0x1670 [ 603.163040][T20758] ? rcu_is_watching+0x15/0xb0 [ 603.163068][T20758] ? __pfx__copy_from_iter+0x10/0x10 [ 603.163100][T20758] ? netlink_sendmsg+0x650/0xb40 [ 603.163122][T20758] ? skb_put+0x11b/0x210 [ 603.163147][T20758] netlink_sendmsg+0x6c0/0xb40 [ 603.163179][T20758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.163206][T20758] ? aa_sock_msg_perm+0xf1/0x1b0 [ 603.163231][T20758] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.163258][T20758] ____sys_sendmsg+0x972/0x9f0 [ 603.163291][T20758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.163324][T20758] ? import_iovec+0x73/0xa0 [ 603.163352][T20758] ___sys_sendmsg+0x2a5/0x360 [ 603.163373][T20758] ? __lock_acquire+0x6b5/0x2cf0 [ 603.163396][T20758] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.163451][T20758] ? __fget_files+0x2a/0x420 [ 603.163480][T20758] ? __fget_files+0x3a0/0x420 [ 603.163511][T20758] __x64_sys_sendmsg+0x1bd/0x2a0 [ 603.163536][T20758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.163572][T20758] ? __pfx_ksys_write+0x10/0x10 [ 603.163606][T20758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.163624][T20758] do_syscall_64+0x15f/0xf80 [ 603.163645][T20758] ? trace_irq_disable+0x3b/0x140 [ 603.163671][T20758] ? clear_bhb_loop+0x40/0x90 [ 603.163695][T20758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.163713][T20758] RIP: 0033:0x7fbe19d9cdd9 [ 603.163730][T20758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.163745][T20758] RSP: 002b:00007fbe1ac25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.163765][T20758] RAX: ffffffffffffffda RBX: 00007fbe1a015fa0 RCX: 00007fbe19d9cdd9 [ 603.163778][T20758] RDX: 0000000000008880 RSI: 0000200000000140 RDI: 0000000000000003 [ 603.163791][T20758] RBP: 00007fbe1ac25090 R08: 0000000000000000 R09: 0000000000000000 [ 603.163802][T20758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.163812][T20758] R13: 00007fbe1a016038 R14: 00007fbe1a015fa0 R15: 00007ffe3cc55788 [ 603.163843][T20758] [ 603.641937][T20768] FAULT_INJECTION: forcing a failure. [ 603.641937][T20768] name failslab, interval 1, probability 0, space 0, times 0 [ 603.662964][T20768] CPU: 1 UID: 0 PID: 20768 Comm: syz.0.4643 Not tainted syzkaller #0 PREEMPT(full) [ 603.662990][T20768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 603.663001][T20768] Call Trace: [ 603.663009][T20768] [ 603.663018][T20768] dump_stack_lvl+0xe8/0x150 [ 603.663044][T20768] should_fail_ex+0x412/0x560 [ 603.663071][T20768] should_failslab+0xa8/0x100 [ 603.663097][T20768] ? __nf_conntrack_alloc+0x81/0x3e0 [ 603.663116][T20768] kmem_cache_alloc_noprof+0x87/0x650 [ 603.663139][T20768] ? nf_ct_pernet+0x45/0x270 [ 603.663162][T20768] __nf_conntrack_alloc+0x81/0x3e0 [ 603.663184][T20768] ctnetlink_new_conntrack+0x5c8/0x22a0 [ 603.663217][T20768] ? rcu_is_watching+0x15/0xb0 [ 603.663238][T20768] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 603.663264][T20768] ? __mutex_lock+0x319/0x1550 [ 603.663287][T20768] ? __pfx___nla_validate_parse+0x10/0x10 [ 603.663316][T20768] ? __lock_acquire+0x6b5/0x2cf0 [ 603.663338][T20768] ? nfnetlink_rcv_msg+0xa71/0x12c0 [ 603.663379][T20768] nfnetlink_rcv_msg+0xc03/0x12c0 [ 603.663399][T20768] ? __lock_acquire+0x6b5/0x2cf0 [ 603.663417][T20768] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 603.663449][T20768] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 603.663494][T20768] ? __lock_acquire+0x6b5/0x2cf0 [ 603.663526][T20768] netlink_rcv_skb+0x232/0x4b0 [ 603.663549][T20768] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 603.663570][T20768] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 603.663602][T20768] ? bpf_lsm_capable+0x9/0x20 [ 603.663620][T20768] ? security_capable+0x7e/0x2c0 [ 603.663650][T20768] nfnetlink_rcv+0x2c0/0x27b0 [ 603.663674][T20768] ? kernel_text_address+0xa5/0xe0 [ 603.663708][T20768] ? __kernel_text_address+0xd/0x30 [ 603.663732][T20768] ? unwind_get_return_address+0x4d/0x90 [ 603.663754][T20768] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 603.663781][T20768] ? arch_stack_walk+0xfb/0x150 [ 603.663816][T20768] ? stack_trace_save+0xa9/0x100 [ 603.663844][T20768] ? __lock_acquire+0x6b5/0x2cf0 [ 603.663864][T20768] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 603.663890][T20768] ? kasan_save_track+0x4f/0x80 [ 603.663912][T20768] ? kasan_save_track+0x3e/0x80 [ 603.663934][T20768] ? __kasan_slab_alloc+0x6c/0x80 [ 603.663957][T20768] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 603.663978][T20768] ? __alloc_skb+0x27d/0x7d0 [ 603.663996][T20768] ? netlink_sendmsg+0x5d4/0xb40 [ 603.664026][T20768] ? __lock_acquire+0x6b5/0x2cf0 [ 603.664057][T20768] ? __netlink_lookup+0xc6/0x8b0 [ 603.664090][T20768] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.664113][T20768] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.664141][T20768] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.664163][T20768] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.664190][T20768] netlink_unicast+0x75c/0x8e0 [ 603.664221][T20768] netlink_sendmsg+0x813/0xb40 [ 603.664253][T20768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.664279][T20768] ? aa_sock_msg_perm+0xf1/0x1b0 [ 603.664304][T20768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.664331][T20768] ____sys_sendmsg+0x972/0x9f0 [ 603.664354][T20768] ? __might_fault+0xaf/0x130 [ 603.664383][T20768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.664416][T20768] ? import_iovec+0x73/0xa0 [ 603.664444][T20768] ___sys_sendmsg+0x2a5/0x360 [ 603.664466][T20768] ? __lock_acquire+0x6b5/0x2cf0 [ 603.664489][T20768] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.664547][T20768] ? __fget_files+0x2a/0x420 [ 603.664568][T20768] ? __fget_files+0x3a0/0x420 [ 603.664600][T20768] __x64_sys_sendmsg+0x1bd/0x2a0 [ 603.664625][T20768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.664659][T20768] ? __pfx_ksys_write+0x10/0x10 [ 603.664697][T20768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.664718][T20768] do_syscall_64+0x15f/0xf80 [ 603.664738][T20768] ? trace_irq_disable+0x3b/0x140 [ 603.664764][T20768] ? clear_bhb_loop+0x40/0x90 [ 603.664788][T20768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.664806][T20768] RIP: 0033:0x7fb64ef9cdd9 [ 603.664824][T20768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.664840][T20768] RSP: 002b:00007fb64fe28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.664859][T20768] RAX: ffffffffffffffda RBX: 00007fb64f215fa0 RCX: 00007fb64ef9cdd9 [ 603.664872][T20768] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 603.664884][T20768] RBP: 00007fb64fe28090 R08: 0000000000000000 R09: 0000000000000000 [ 603.664896][T20768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.664906][T20768] R13: 00007fb64f216038 R14: 00007fb64f215fa0 R15: 00007ffd428336c8 [ 603.664936][T20768] [ 604.154211][T20770] pim6reg1: entered promiscuous mode [ 604.172911][T20770] pim6reg1: entered allmulticast mode [ 604.732312][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4646'. [ 604.904038][T20806] tipc: Enabling of bearer rejected, failed to enable media [ 605.106491][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 605.401732][T20833] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4660'. [ 605.444299][T20833] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4660'. [ 605.572539][T20838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.821654][T20856] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4665'. [ 606.181163][T20871] pim6reg1: entered promiscuous mode [ 606.199656][T20871] pim6reg1: entered allmulticast mode [ 606.363856][T20877] tipc: Enabling of bearer rejected, failed to enable media [ 606.699782][T20894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 606.957366][T20906] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4682'. [ 606.968962][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4681'. [ 606.977272][T20906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4682'. [ 607.067088][T20906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4682'. [ 607.100023][T20906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4682'. [ 607.628667][T20941] netlink: 'syz.0.4689': attribute type 8 has an invalid length. [ 608.260900][T20964] sctp: [Deprecated]: syz.4.4698 (pid 20964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 608.260900][T20964] Use struct sctp_sack_info instead [ 608.539981][T20972] tipc: Enabled bearer , priority 0 [ 608.581066][T20972] syzkaller0: entered promiscuous mode [ 608.586637][T20972] syzkaller0: entered allmulticast mode [ 608.592918][T20972] tipc: Resetting bearer [ 608.603850][T20971] tipc: Resetting bearer [ 608.957692][T20983] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4706'. [ 608.967294][T20983] netlink: Unknown conntrack attr (0) [ 609.593061][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 609.600385][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 611.220232][T20971] tipc: Disabling bearer [ 611.393892][T20991] netlink: 'syz.3.4710': attribute type 1 has an invalid length. [ 611.439531][T20989] pim6reg1: entered promiscuous mode [ 611.459170][T20989] pim6reg1: entered allmulticast mode [ 611.551279][T20998] gre0: entered promiscuous mode [ 611.558849][T20998] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 611.641035][T21000] netlink: 'syz.1.4713': attribute type 5 has an invalid length. [ 612.070062][T21016] tipc: Enabled bearer , priority 0 [ 612.075024][T21025] __nla_validate_parse: 1 callbacks suppressed [ 612.075042][T21025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4723'. [ 612.161076][T21016] syzkaller0: entered promiscuous mode [ 612.166822][T21016] syzkaller0: entered allmulticast mode [ 612.174651][T21016] tipc: Resetting bearer [ 612.234776][T21029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 612.244014][T21013] tipc: Resetting bearer [ 612.659065][T21035] netlink: 'syz.3.4727': attribute type 1 has an invalid length. [ 612.667906][T21035] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4727'. [ 612.930256][T21043] netlink: 'syz.4.4729': attribute type 1 has an invalid length. [ 612.954310][T21038] netlink: 'syz.3.4728': attribute type 39 has an invalid length. [ 615.174145][T21013] tipc: Disabling bearer [ 615.186621][T21043] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 615.328793][T21046] ip6gretap1: entered promiscuous mode [ 615.362295][T21046] ip6gretap1: entered allmulticast mode [ 615.556796][T21061] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4736'. [ 615.617114][T21066] netlink: 'syz.4.4738': attribute type 1 has an invalid length. [ 615.625615][T21066] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4738'. [ 615.768332][T21070] bridge1: entered promiscuous mode [ 615.804209][T21074] tipc: Enabled bearer , priority 0 [ 615.932636][T21074] syzkaller0: entered promiscuous mode [ 615.950584][T21074] syzkaller0: entered allmulticast mode [ 615.976186][T21074] tipc: Resetting bearer [ 616.029134][T21071] tipc: Resetting bearer [ 616.251971][T21100] FAULT_INJECTION: forcing a failure. [ 616.251971][T21100] name failslab, interval 1, probability 0, space 0, times 0 [ 616.273482][T21100] CPU: 1 UID: 0 PID: 21100 Comm: syz.1.4750 Not tainted syzkaller #0 PREEMPT(full) [ 616.273507][T21100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 616.273518][T21100] Call Trace: [ 616.273525][T21100] [ 616.273532][T21100] dump_stack_lvl+0xe8/0x150 [ 616.273559][T21100] should_fail_ex+0x412/0x560 [ 616.273587][T21100] should_failslab+0xa8/0x100 [ 616.273626][T21100] __kmalloc_cache_noprof+0x88/0x660 [ 616.273650][T21100] ? sctp_v6_cmp_addr+0x15/0xd0 [ 616.273672][T21100] ? sctp_add_bind_addr+0x8c/0x370 [ 616.273698][T21100] sctp_add_bind_addr+0x8c/0x370 [ 616.273724][T21100] sctp_copy_local_addr_list+0x314/0x4f0 [ 616.273751][T21100] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 616.273773][T21100] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 616.273797][T21100] ? sctp_v6_is_any+0x64/0x80 [ 616.273822][T21100] ? sctp_copy_one_addr+0x93/0x360 [ 616.273846][T21100] sctp_bind_addr_copy+0xb3/0x3c0 [ 616.273869][T21100] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 616.273893][T21100] sctp_connect_new_asoc+0x2ff/0x6b0 [ 616.273923][T21100] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 616.273956][T21100] ? __local_bh_enable_ip+0xd0/0x130 [ 616.273974][T21100] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 616.273998][T21100] ? security_sctp_bind_connect+0x7e/0x2c0 [ 616.274021][T21100] sctp_sendmsg+0x1528/0x2c10 [ 616.274044][T21100] ? unwind_next_frame+0xa6/0x2550 [ 616.274082][T21100] ? __pfx_sctp_sendmsg+0x10/0x10 [ 616.274110][T21100] ? aa_sk_perm+0x6d5/0x900 [ 616.274140][T21100] ? __pfx_aa_sk_perm+0x10/0x10 [ 616.274166][T21100] ? sock_rps_record_flow+0x19/0x350 [ 616.274193][T21100] ? inet_sendmsg+0x2f4/0x370 [ 616.274222][T21100] ____sys_sendmsg+0x80a/0x9f0 [ 616.274255][T21100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.274292][T21100] ? import_iovec+0x73/0xa0 [ 616.274321][T21100] ___sys_sendmsg+0x2a5/0x360 [ 616.274342][T21100] ? __lock_acquire+0x6b5/0x2cf0 [ 616.274366][T21100] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.274423][T21100] ? __fget_files+0x2a/0x420 [ 616.274445][T21100] ? __fget_files+0x3a0/0x420 [ 616.274469][T21100] __x64_sys_sendmsg+0x1bd/0x2a0 [ 616.274488][T21100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 616.274514][T21100] ? __pfx_ksys_write+0x10/0x10 [ 616.274539][T21100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.274555][T21100] do_syscall_64+0x15f/0xf80 [ 616.274571][T21100] ? trace_irq_disable+0x3b/0x140 [ 616.274592][T21100] ? clear_bhb_loop+0x40/0x90 [ 616.274618][T21100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.274634][T21100] RIP: 0033:0x7f3b5679cdd9 [ 616.274650][T21100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.274664][T21100] RSP: 002b:00007f3b576dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.274681][T21100] RAX: ffffffffffffffda RBX: 00007f3b56a15fa0 RCX: 00007f3b5679cdd9 [ 616.274691][T21100] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000004 [ 616.274701][T21100] RBP: 00007f3b576dc090 R08: 0000000000000000 R09: 0000000000000000 [ 616.274710][T21100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 616.274718][T21100] R13: 00007f3b56a16038 R14: 00007f3b56a15fa0 R15: 00007ffe2c83d288 [ 616.274742][T21100] [ 617.087457][T21118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4756'. [ 617.109660][T21118] block nbd0: Unsupported socket: should be TCP or UNIX. [ 617.481438][T21123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4757'. [ 619.910773][T21071] tipc: Disabling bearer [ 619.921278][T21092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4747'. [ 620.073977][T21137] netlink: 'syz.3.4760': attribute type 1 has an invalid length. [ 620.135136][T21143] IPVS: length: 4096 != 8 [ 620.153849][T21149] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4764'. [ 620.255334][T21146] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 620.288835][T21146] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 620.325982][T21153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4765'. [ 620.356729][T21153] xt_TCPMSS: Only works on TCP SYN packets [ 620.429021][T21158] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 620.485334][T21162] netlink: zone id is out of range [ 620.503386][T21167] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4770'. [ 620.504180][T21162] netlink: zone id is out of range [ 620.531092][T21162] netlink: zone id is out of range [ 620.544410][T21162] netlink: zone id is out of range [ 620.555393][T21153] bridge_slave_1: left allmulticast mode [ 620.567127][T21162] netlink: zone id is out of range [ 620.568281][T21153] bridge_slave_1: left promiscuous mode [ 620.579511][T21162] netlink: zone id is out of range [ 620.591109][T21162] netlink: zone id is out of range [ 620.594626][T21153] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.615861][T21162] netlink: zone id is out of range [ 620.622124][T21164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4765'. [ 620.631658][T21162] netlink: zone id is out of range [ 620.741875][T21153] bridge_slave_0: left allmulticast mode [ 620.748252][T21153] bridge_slave_0: left promiscuous mode [ 620.754289][T21153] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.949773][T21177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4765'. [ 620.993678][T21179] tipc: Enabled bearer , priority 0 [ 621.123451][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 621.155431][T21179] syzkaller0: entered promiscuous mode [ 621.157086][T21187] netlink: 'syz.3.4774': attribute type 11 has an invalid length. [ 621.161099][T21179] syzkaller0: entered allmulticast mode [ 621.176083][T21179] tipc: Resetting bearer [ 621.210830][T21178] tipc: Resetting bearer [ 621.613553][T21201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4780'. [ 622.202964][T21217] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4786'. [ 624.375609][T21178] tipc: Disabling bearer [ 624.397593][T21218] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4786'. [ 625.160642][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.175977][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.218460][T21252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.486771][T21256] tipc: Enabled bearer , priority 0 [ 625.632263][T21256] syzkaller0: entered promiscuous mode [ 625.659374][T21256] syzkaller0: entered allmulticast mode [ 625.674943][T21256] tipc: Resetting bearer [ 625.703766][T21255] tipc: Resetting bearer [ 629.100894][T21255] tipc: Disabling bearer [ 629.112089][T21273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4805'. [ 629.121448][T21273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4805'. [ 629.320395][T21328] netlink: 'syz.4.4815': attribute type 1 has an invalid length. [ 629.343586][T21328] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4815'. [ 629.635525][T21346] netlink: 'syz.0.4824': attribute type 1 has an invalid length. [ 629.818780][T21358] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.4828'. [ 629.865531][T21350] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 629.906488][T21350] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 629.994706][T21366] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.4832'. [ 630.110238][T21364] bond4: Unable to set up delay as MII monitoring is disabled [ 630.122972][T21364] bond4 (unregistering): Released all slaves [ 630.767916][T21403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4845'. [ 630.819657][T21404] netlink: 608 bytes leftover after parsing attributes in process `syz.4.4845'. [ 630.843559][T21403] netlink: 'syz.4.4845': attribute type 1 has an invalid length. [ 630.861903][T21403] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4845'. [ 631.309305][T21422] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4850'. [ 631.361291][ T30] audit: type=1800 audit(1777717760.520:8): pid=21418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4849" name=FFFF dev="tmpfs" ino=1667 res=0 errno=0 [ 631.865396][T21446] netlink: 'syz.2.4858': attribute type 1 has an invalid length. [ 631.873670][T21445] IPVS: set_ctl: invalid protocol: 47 172.20.20.29:20002 [ 631.983839][T21453] netlink: 'syz.1.4861': attribute type 1 has an invalid length. [ 632.001950][T21453] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4861'. [ 632.050926][T21439] tap0: tun_chr_ioctl cmd 1074812118 [ 632.139909][T21449] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 632.170078][T21449] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 632.207097][T21455] ip6gretap1: entered promiscuous mode [ 632.217102][T21455] ip6gretap1: entered allmulticast mode [ 632.235361][T21455] bond1: (slave ip6gretap1): making interface the new active one [ 632.253401][T21455] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 633.355744][T21520] net_ratelimit: 16 callbacks suppressed [ 633.355762][T21520] netlink: Unknown conntrack attr (0) [ 633.470573][T21526] netlink: 'syz.3.4887': attribute type 11 has an invalid length. [ 634.184727][T21542] FAULT_INJECTION: forcing a failure. [ 634.184727][T21542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.220323][T21542] CPU: 0 UID: 0 PID: 21542 Comm: syz.4.4891 Not tainted syzkaller #0 PREEMPT(full) [ 634.220347][T21542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.220356][T21542] Call Trace: [ 634.220363][T21542] [ 634.220370][T21542] dump_stack_lvl+0xe8/0x150 [ 634.220393][T21542] should_fail_ex+0x412/0x560 [ 634.220415][T21542] _copy_from_user+0x2d/0xb0 [ 634.220435][T21542] ___sys_sendmsg+0x1c6/0x360 [ 634.220454][T21542] ? __lock_acquire+0x6b5/0x2cf0 [ 634.220471][T21542] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.220489][T21542] ? __lock_acquire+0x6b5/0x2cf0 [ 634.220512][T21542] ? kstrtouint+0x6e/0xe0 [ 634.220560][T21542] __sys_sendmmsg+0x27c/0x4e0 [ 634.220586][T21542] ? __pfx___sys_sendmmsg+0x10/0x10 [ 634.220604][T21542] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 634.220640][T21542] ? ksys_write+0x242/0x270 [ 634.220667][T21542] ? __pfx_ksys_write+0x10/0x10 [ 634.220694][T21542] __x64_sys_sendmmsg+0xa0/0xc0 [ 634.220716][T21542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.220734][T21542] do_syscall_64+0x15f/0xf80 [ 634.220753][T21542] ? trace_irq_disable+0x3b/0x140 [ 634.220778][T21542] ? clear_bhb_loop+0x40/0x90 [ 634.220799][T21542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.220815][T21542] RIP: 0033:0x7f25f799cdd9 [ 634.220833][T21542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.220847][T21542] RSP: 002b:00007f25f8867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 634.220865][T21542] RAX: ffffffffffffffda RBX: 00007f25f7c15fa0 RCX: 00007f25f799cdd9 [ 634.220879][T21542] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 634.220891][T21542] RBP: 00007f25f8867090 R08: 0000000000000000 R09: 0000000000000000 [ 634.220901][T21542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 634.220911][T21542] R13: 00007f25f7c16038 R14: 00007f25f7c15fa0 R15: 00007ffff6327148 [ 634.220937][T21542] [ 634.596546][T21551] __nla_validate_parse: 3 callbacks suppressed [ 634.596566][T21551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4895'. [ 634.614789][T21551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4895'. [ 635.270217][T21574] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4906'. [ 635.309132][T21574] netlink: Unknown conntrack attr (0) [ 636.125227][T21614] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4919'. [ 636.177483][T21612] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4917'. [ 636.191393][T21612] bond_slave_1: entered promiscuous mode [ 636.211207][T21612] bond_slave_1: entered allmulticast mode [ 636.307132][T21619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4921'. [ 636.309449][T21622] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 636.385592][T21622] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 636.667907][T21638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4925'. [ 636.874966][T21650] netlink: 'syz.1.4929': attribute type 8 has an invalid length. [ 636.895508][T21649] tipc: Enabling of bearer rejected, failed to enable media [ 636.910926][T21651] ip6t_srh: unknown srh match flags 4000 [ 637.099941][T21659] netlink: 'syz.1.4934': attribute type 8 has an invalid length. [ 637.122454][T21661] netlink: 'syz.2.4933': attribute type 7 has an invalid length. [ 637.168002][T21663] netlink: 'syz.3.4935': attribute type 1 has an invalid length. [ 637.284173][T21669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4939'. [ 637.316118][T21673] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4938'. [ 637.360922][T21663] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 637.377480][T21663] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 637.450339][T21680] FAULT_INJECTION: forcing a failure. [ 637.450339][T21680] name failslab, interval 1, probability 0, space 0, times 0 [ 637.463088][T21680] CPU: 1 UID: 0 PID: 21680 Comm: syz.0.4942 Not tainted syzkaller #0 PREEMPT(full) [ 637.463136][T21680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 637.463161][T21680] Call Trace: [ 637.463178][T21680] [ 637.463194][T21680] dump_stack_lvl+0xe8/0x150 [ 637.463223][T21680] should_fail_ex+0x412/0x560 [ 637.463251][T21680] should_failslab+0xa8/0x100 [ 637.463278][T21680] ? skb_clone+0x212/0x3a0 [ 637.463302][T21680] kmem_cache_alloc_noprof+0x87/0x650 [ 637.463326][T21680] ? __bpf_redirect+0x9b4/0x12a0 [ 637.463351][T21680] skb_clone+0x212/0x3a0 [ 637.463377][T21680] bpf_clone_redirect+0x16a/0x4b0 [ 637.463406][T21680] ? bpf_test_run+0x1d1/0x830 [ 637.463428][T21680] bpf_prog_170f4aa34f32f3f3+0x5f/0x68 [ 637.463447][T21680] ? fred_exc_machine_check+0x180/0x3d0 [ 637.463470][T21680] ? arch_stack_walk+0xfb/0x150 [ 637.463500][T21680] ? __pfx___schedule+0x10/0x10 [ 637.463521][T21680] ? lockdep_hardirqs_on+0x7a/0x110 [ 637.463542][T21680] ? irqentry_exit+0x218/0x730 [ 637.463570][T21680] ? preempt_schedule_thunk+0x16/0x30 [ 637.463597][T21680] ? preempt_schedule_common+0x82/0xd0 [ 637.463616][T21680] ? bpf_test_run+0x1d1/0x830 [ 637.463641][T21680] ? bpf_test_timer_continue+0x10c/0x320 [ 637.463667][T21680] bpf_test_run+0x354/0x830 [ 637.463711][T21680] ? __pfx_bpf_test_run+0x10/0x10 [ 637.463751][T21680] ? eth_type_trans+0x348/0x7e0 [ 637.463782][T21680] ? skb_dst_set+0x72/0x140 [ 637.463806][T21680] bpf_prog_test_run_skb+0xe2c/0x2260 [ 637.463850][T21680] ? __fget_files+0x3a0/0x420 [ 637.463876][T21680] ? __fget_files+0x2a/0x420 [ 637.463901][T21680] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 637.463925][T21680] bpf_prog_test_run+0x2c7/0x340 [ 637.463948][T21680] __sys_bpf+0x643/0x950 [ 637.463977][T21680] ? __pfx___sys_bpf+0x10/0x10 [ 637.464019][T21680] ? ksys_write+0x242/0x270 [ 637.464045][T21680] ? __pfx_ksys_write+0x10/0x10 [ 637.464075][T21680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.464095][T21680] __x64_sys_bpf+0x7c/0x90 [ 637.464120][T21680] do_syscall_64+0x15f/0xf80 [ 637.464140][T21680] ? trace_irq_disable+0x3b/0x140 [ 637.464166][T21680] ? clear_bhb_loop+0x40/0x90 [ 637.464189][T21680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.464207][T21680] RIP: 0033:0x7fb64ef9cdd9 [ 637.464226][T21680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.464241][T21680] RSP: 002b:00007fb64fe28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 637.464262][T21680] RAX: ffffffffffffffda RBX: 00007fb64f215fa0 RCX: 00007fb64ef9cdd9 [ 637.464275][T21680] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 637.464287][T21680] RBP: 00007fb64fe28090 R08: 0000000000000000 R09: 0000000000000000 [ 637.464299][T21680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 637.464310][T21680] R13: 00007fb64f216038 R14: 00007fb64f215fa0 R15: 00007ffd428336c8 [ 637.464341][T21680] [ 637.905697][T21685] tipc: Enabled bearer , priority 0 [ 637.913348][T21687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4944'. [ 637.952942][T21685] syzkaller0: entered promiscuous mode [ 637.958591][T21685] syzkaller0: entered allmulticast mode [ 637.965948][T21685] tipc: Resetting bearer [ 638.052849][T21696] vxcan0: tx address claim with different name [ 638.059991][T21684] tipc: Resetting bearer [ 639.663407][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.670688][ C0] bridge0: topology change detected, propagating [ 639.677724][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.684994][ C0] bridge0: topology change detected, propagating [ 641.110801][T21684] tipc: Disabling bearer [ 641.126740][T21709] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 641.313455][T21748] tun0: tun_chr_ioctl cmd 1074025673 [ 641.359118][T21745] tun0: tun_chr_ioctl cmd 1074025675 [ 641.380961][T21745] tun0: persist enabled [ 641.405918][T21745] tun0: tun_chr_ioctl cmd 1074025675 [ 641.428195][T21745] tun0: persist enabled [ 641.443048][T21748] tun0: tun_chr_ioctl cmd 1074025675 [ 641.453331][T21748] tun0: persist enabled [ 641.473867][T21745] tun0: tun_chr_ioctl cmd 1074025673 [ 641.881856][T21782] tipc: Enabled bearer , priority 0 [ 642.028944][T21782] syzkaller0: entered promiscuous mode [ 642.046915][T21782] syzkaller0: entered allmulticast mode [ 642.064350][T21782] tipc: Resetting bearer [ 642.186875][T21781] tipc: Resetting bearer [ 645.684923][T21781] tipc: Disabling bearer [ 645.851821][T21815] __nla_validate_parse: 2 callbacks suppressed [ 645.851840][T21815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4989'. [ 645.912335][ T6802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.931138][ T6802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.963884][ T6802] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.992595][ T6802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.108625][T21826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4990'. [ 646.204198][T21817] nbd2: detected capacity change from 0 to 63 [ 646.224281][T21822] block nbd2: NBD_DISCONNECT [ 646.262420][T21822] block nbd2: Disconnected due to user request. [ 646.270290][T21822] block nbd2: shutting down sockets [ 646.316677][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.326134][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 646.355126][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.364274][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 646.373028][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.382122][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 646.390027][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.399134][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 646.416139][T21813] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.486556][T21813] Buffer I/O error on dev nbd2, logical block 0, async page read [ 646.549373][T21813] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.590032][T21813] Buffer I/O error on dev nbd2, logical block 1, async page read [ 646.640849][T21813] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.680029][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4998'. [ 646.693430][T21813] Buffer I/O error on dev nbd2, logical block 2, async page read [ 646.725431][T21813] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.755595][T21813] Buffer I/O error on dev nbd2, logical block 3, async page read [ 646.782136][T21813] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.791868][T21848] pim6reg1: entered promiscuous mode [ 646.815018][T21848] pim6reg1: entered allmulticast mode [ 646.830696][T21813] Buffer I/O error on dev nbd2, logical block 0, async page read [ 646.856360][T21813] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.887575][T21813] Buffer I/O error on dev nbd2, logical block 1, async page read [ 646.942204][T21813] ldm_validate_partition_table(): Disk read failed. [ 646.958376][T21854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5000'. [ 646.987610][T21813] Dev nbd2: unable to read RDB block 0 [ 647.016068][T21813] nbd2: unable to read partition table [ 647.123573][T21813] ldm_validate_partition_table(): Disk read failed. [ 647.169212][T21813] Dev nbd2: unable to read RDB block 0 [ 647.210543][T21813] nbd2: unable to read partition table [ 647.347687][T21863] tipc: Enabled bearer , priority 0 [ 647.557982][T21865] syzkaller0: entered promiscuous mode [ 647.572969][T21865] syzkaller0: entered allmulticast mode [ 647.585349][T21865] tipc: Resetting bearer [ 647.653418][T21862] tipc: Resetting bearer [ 649.259272][T21877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.577554][T21862] tipc: Disabling bearer [ 651.589275][T21873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5004'. [ 651.598806][T21873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5004'. [ 651.608110][T21873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5004'. [ 651.618964][T21873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5004'. [ 651.826374][T21887] netlink: 'syz.1.5009': attribute type 11 has an invalid length. [ 651.858976][T21890] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5010'. [ 651.934174][T21895] pim6reg1: entered promiscuous mode [ 651.939810][T21895] pim6reg1: entered allmulticast mode [ 652.385022][T21910] netlink: 'syz.0.5017': attribute type 1 has an invalid length. [ 652.420445][T21910] bond5: entered promiscuous mode [ 652.426492][T21910] 8021q: adding VLAN 0 to HW filter on device bond5 [ 652.477987][T21910] 8021q: adding VLAN 0 to HW filter on device bond5 [ 652.485509][T21910] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 652.496044][T21910] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 652.510369][T21910] bond5: (slave vti0): making interface the new active one [ 652.519024][T21910] vti0: entered promiscuous mode [ 652.526420][T21910] bond5: (slave vti0): Enslaving as an active interface with an up link [ 652.584857][T21910] pim6reg1: entered promiscuous mode [ 652.590518][T21910] pim6reg1: entered allmulticast mode [ 652.824230][T21919] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5020'. [ 652.842882][T21919] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5020'. [ 652.847624][T21921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5021'. [ 652.895415][T21923] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5020'. [ 652.900624][T21921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5021'. [ 653.137986][T21933] FAULT_INJECTION: forcing a failure. [ 653.137986][T21933] name failslab, interval 1, probability 0, space 0, times 0 [ 653.150961][T21933] CPU: 1 UID: 0 PID: 21933 Comm: syz.1.5025 Not tainted syzkaller #0 PREEMPT(full) [ 653.150987][T21933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 653.150998][T21933] Call Trace: [ 653.151007][T21933] [ 653.151014][T21933] dump_stack_lvl+0xe8/0x150 [ 653.151041][T21933] should_fail_ex+0x412/0x560 [ 653.151070][T21933] should_failslab+0xa8/0x100 [ 653.151099][T21933] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 653.151126][T21933] ? nf_ct_ext_add+0x1b6/0x460 [ 653.151147][T21933] ? nf_ct_ext_add+0x1b6/0x460 [ 653.151167][T21933] krealloc_node_align_noprof+0x19a/0x390 [ 653.151200][T21933] nf_ct_ext_add+0x1b6/0x460 [ 653.151226][T21933] ctnetlink_new_conntrack+0x117d/0x22a0 [ 653.151258][T21933] ? ctnetlink_new_conntrack+0x726/0x22a0 [ 653.151285][T21933] ? rcu_is_watching+0x15/0xb0 [ 653.151309][T21933] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 653.151338][T21933] ? __mutex_lock+0x319/0x1550 [ 653.151360][T21933] ? __pfx___nla_validate_parse+0x10/0x10 [ 653.151388][T21933] ? unwind_next_frame+0xa6/0x2550 [ 653.151413][T21933] ? is_bpf_text_address+0x26/0x2b0 [ 653.151432][T21933] ? lock_acquire+0x106/0x350 [ 653.151451][T21933] ? nfnetlink_rcv_msg+0xa71/0x12c0 [ 653.151497][T21933] nfnetlink_rcv_msg+0xc03/0x12c0 [ 653.151517][T21933] ? unwind_get_return_address+0x4d/0x90 [ 653.151547][T21933] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 653.151586][T21933] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 653.151656][T21933] netlink_rcv_skb+0x232/0x4b0 [ 653.151681][T21933] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 653.151704][T21933] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 653.151738][T21933] ? bpf_lsm_capable+0x9/0x20 [ 653.151755][T21933] ? security_capable+0x7e/0x2c0 [ 653.151785][T21933] nfnetlink_rcv+0x2c0/0x27b0 [ 653.151815][T21933] ? __local_bh_enable_ip+0xd0/0x130 [ 653.151834][T21933] ? lockdep_hardirqs_on+0x7a/0x110 [ 653.151852][T21933] ? __dev_queue_xmit+0x2b6/0x3950 [ 653.151874][T21933] ? __local_bh_enable_ip+0xd0/0x130 [ 653.151896][T21933] ? __dev_queue_xmit+0x2b6/0x3950 [ 653.151920][T21933] ? __dev_queue_xmit+0x1fe5/0x3950 [ 653.151942][T21933] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 653.151972][T21933] ? __dev_queue_xmit+0x2b6/0x3950 [ 653.152000][T21933] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 653.152027][T21933] ? __pfx___dev_queue_xmit+0x10/0x10 [ 653.152060][T21933] ? ref_tracker_free+0x693/0x840 [ 653.152087][T21933] ? __pfx_ref_tracker_free+0x10/0x10 [ 653.152123][T21933] ? skb_clone+0x246/0x3a0 [ 653.152144][T21933] ? __netlink_deliver_tap+0x807/0x850 [ 653.152165][T21933] ? netlink_deliver_tap+0x2e/0x1b0 [ 653.152190][T21933] ? netlink_deliver_tap+0x2e/0x1b0 [ 653.152209][T21933] ? netlink_deliver_tap+0x2e/0x1b0 [ 653.152234][T21933] netlink_unicast+0x75c/0x8e0 [ 653.152263][T21933] netlink_sendmsg+0x813/0xb40 [ 653.152293][T21933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.152314][T21933] ? aa_sock_msg_perm+0xf1/0x1b0 [ 653.152338][T21933] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 653.152364][T21933] ____sys_sendmsg+0x972/0x9f0 [ 653.152387][T21933] ? __might_fault+0xaf/0x130 [ 653.152413][T21933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.152444][T21933] ? import_iovec+0x73/0xa0 [ 653.152472][T21933] ___sys_sendmsg+0x2a5/0x360 [ 653.152491][T21933] ? __lock_acquire+0x6b5/0x2cf0 [ 653.152511][T21933] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.152569][T21933] ? __fget_files+0x2a/0x420 [ 653.152588][T21933] ? __fget_files+0x3a0/0x420 [ 653.152617][T21933] __x64_sys_sendmsg+0x1bd/0x2a0 [ 653.152641][T21933] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 653.152673][T21933] ? __pfx_ksys_write+0x10/0x10 [ 653.152705][T21933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.152723][T21933] do_syscall_64+0x15f/0xf80 [ 653.152743][T21933] ? trace_irq_disable+0x3b/0x140 [ 653.152767][T21933] ? clear_bhb_loop+0x40/0x90 [ 653.152790][T21933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.152808][T21933] RIP: 0033:0x7f3b5679cdd9 [ 653.152826][T21933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.152842][T21933] RSP: 002b:00007f3b576dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.152862][T21933] RAX: ffffffffffffffda RBX: 00007f3b56a15fa0 RCX: 00007f3b5679cdd9 [ 653.152875][T21933] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 653.152888][T21933] RBP: 00007f3b576dc090 R08: 0000000000000000 R09: 0000000000000000 [ 653.152899][T21933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.152911][T21933] R13: 00007f3b56a16038 R14: 00007f3b56a15fa0 R15: 00007ffe2c83d288 [ 653.152943][T21933] [ 654.383391][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 654.419566][T21950] syzkaller0: entered promiscuous mode [ 654.445334][T21950] syzkaller0: entered allmulticast mode [ 657.849771][T21974] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 658.120065][T22018] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 658.625235][T22040] netlink: 'syz.0.5051': attribute type 10 has an invalid length. [ 659.895923][T22081] xt_hashlimit: size too large, truncated to 1048576 [ 660.145971][T22089] xt_NFQUEUE: number of total queues is 0 [ 660.344829][T22098] team0: Port device syz_tun added [ 660.461441][T22108] team0: Port device syz_tun removed [ 660.481009][T22108] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 660.536917][T22108] team0: No ports can be present during mode change [ 660.702413][T22123] __nla_validate_parse: 4 callbacks suppressed [ 660.702434][T22123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5087'. [ 661.089446][T22150] sctp: [Deprecated]: syz.4.5102 (pid 22150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 661.089446][T22150] Use struct sctp_sack_info instead [ 661.746665][T22188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5119'. [ 661.812624][T22188] bond2: entered promiscuous mode [ 661.827742][T22188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 661.869419][T22188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 661.883702][T22188] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 661.900912][T22188] bond2: (slave sit1): Error -95 calling set_mac_address [ 661.990739][T22200] xt_hashlimit: size too large, truncated to 1048576 [ 662.802263][T22226] bridge0: port 1(syz_tun) entered blocking state [ 662.811273][T22226] bridge0: port 1(syz_tun) entered disabled state [ 662.819711][T22226] syz_tun: entered allmulticast mode [ 662.827494][T22226] syz_tun: entered promiscuous mode [ 662.910304][T22236] xt_hashlimit: size too large, truncated to 1048576 [ 663.526451][T22270] bridge_slave_0: default FDB implementation only supports local addresses [ 663.659703][T22275] bond2: option lp_interval: invalid value (0) [ 663.696018][T22275] bond2: option lp_interval: allowed values 1 - 2147483647 [ 663.724555][T22275] bond2 (unregistering): Released all slaves [ 663.867047][T22289] xt_hashlimit: size too large, truncated to 1048576 [ 664.376199][T22268] tipc: Failed to remove unknown binding: 66,1,1/724172549:1612725199/1612725201 [ 664.386229][T22268] tipc: Failed to remove unknown binding: 66,1,1/724172549:1612725199/1612725201 [ 665.263549][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 665.350328][T22353] bond0: (slave bond_slave_0): Releasing backup interface [ 665.383531][T22353] bond0: (slave bond_slave_1): Releasing backup interface [ 665.401901][T22353] team_slave_0: left promiscuous mode [ 665.428455][T22353] team0: Port device team_slave_0 removed [ 665.445075][T22353] team_slave_1: left promiscuous mode [ 665.455767][T22353] team0: Port device team_slave_1 removed [ 665.462642][T22353] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 665.470773][T22353] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 665.482156][T22353] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 665.491553][T22353] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 665.501325][T22353] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 665.529980][T22356] team0: Mode changed to "loadbalance" [ 665.538178][T22362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5195'. [ 665.707573][T22372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5199'. [ 666.038382][T22393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5210'. [ 666.188525][T22398] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 666.213167][T22398] netlink: 'syz.1.5213': attribute type 1 has an invalid length. [ 666.247738][T22398] 8021q: adding VLAN 0 to HW filter on device bond4 [ 666.363487][T22398] bond4: (slave geneve2): making interface the new active one [ 666.375529][T22409] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5215'. [ 666.391341][T22398] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 666.734908][T22429] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5226'. [ 666.760065][T22429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5226'. [ 666.780402][T22429] bond0: entered promiscuous mode [ 666.786005][T22429] bond_slave_0: entered promiscuous mode [ 666.794806][T22429] bond_slave_1: entered promiscuous mode [ 666.802440][T22429] batadv_slave_0: entered promiscuous mode [ 666.811638][T22429] batadv_slave_0: left promiscuous mode [ 666.821148][T22429] bond0: left promiscuous mode [ 666.832399][T22429] bond_slave_0: left promiscuous mode [ 666.839361][T22429] bond_slave_1: left promiscuous mode [ 666.886355][T22432] syzkaller0: entered promiscuous mode [ 666.898442][T22432] syzkaller0: entered allmulticast mode [ 667.103562][T22448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5236'. [ 667.383541][T22459] IPv6: Can't replace route, no match found [ 668.246654][T22504] bridge_slave_0: left allmulticast mode [ 668.252334][T22504] bridge_slave_0: left promiscuous mode [ 668.290878][T22504] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.310526][T22504] bridge_slave_1: left allmulticast mode [ 668.344541][T22504] bridge_slave_1: left promiscuous mode [ 668.363708][T22504] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.414571][T22504] bond0: (slave bond_slave_0): Releasing backup interface [ 668.436824][T22514] xt_hashlimit: size too large, truncated to 1048576 [ 668.447125][T22504] bond0: (slave bond_slave_1): Releasing backup interface [ 668.477519][T22504] team_slave_0: left allmulticast mode [ 668.494780][T22504] team_slave_0: left promiscuous mode [ 668.519614][T22504] team0: Port device team_slave_0 removed [ 668.533656][T22504] team_slave_1: left allmulticast mode [ 668.540961][T22504] team_slave_1: left promiscuous mode [ 668.559577][T22504] team0: Port device team_slave_1 removed [ 668.571814][T22504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.580164][T22504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.591079][T22504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.600347][T22504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.610671][T22504] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 668.646580][T22505] team0: Mode changed to "loadbalance" [ 668.659610][T17950] syz1: Port: 1 Link DOWN [ 668.712026][T22521] netlink: 'syz.4.5266': attribute type 4 has an invalid length. [ 668.996363][T22531] syzkaller0: entered promiscuous mode [ 669.006865][T22531] syzkaller0: entered allmulticast mode [ 669.191098][T22550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5280'. [ 669.540201][T22572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5290'. [ 669.725064][T22582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5294'. [ 669.817665][T22586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5297'. [ 669.907516][T22591] xt_hashlimit: size too large, truncated to 1048576 [ 670.065735][T22598] tipc: Enabled bearer , priority 0 [ 670.174939][T22598] syzkaller0: entered promiscuous mode [ 670.186782][T22598] syzkaller0: entered allmulticast mode [ 670.199218][T22598] tipc: Resetting bearer [ 670.267083][T22594] tipc: Resetting bearer [ 673.368090][T22594] tipc: Disabling bearer [ 673.377320][T22612] mac80211_hwsim hwsim39 syzkaller0: Caught tx_queue_len zero misconfig [ 674.511899][T22704] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 674.538874][T22704] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode [ 674.873584][T22728] netlink: 'syz.3.5358': attribute type 11 has an invalid length. [ 675.794572][T22781] TCP: TCP_TX_DELAY enabled [ 675.922163][T22788] __nla_validate_parse: 1 callbacks suppressed [ 675.922183][T22788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5386'. [ 676.752201][T22834] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 676.770411][T22834] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 677.367668][T22874] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5425'. [ 677.381911][T22874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5425'. [ 677.391438][T22874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5425'. [ 677.413922][T22877] vlan0: entered allmulticast mode [ 677.419111][T22877] gretap0: entered allmulticast mode [ 678.404601][T17950] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 678.827927][T22963] tipc: Enabled bearer , priority 0 [ 678.858014][T22963] syzkaller0: mtu less than device minimum [ 679.110315][T22984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5475'. [ 679.263950][T17950] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 679.285888][T22993] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 680.074126][T23044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5500'. [ 680.534980][T23071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5511'. [ 680.640647][T23075] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5512'. [ 680.740783][T23082] netlink: 'syz.0.5515': attribute type 10 has an invalid length. [ 680.753989][T23082] netlink: 'syz.0.5515': attribute type 10 has an invalid length. [ 680.765460][T23082] team0: Port device dummy0 removed [ 680.776592][T23082] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 681.150677][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 681.164153][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 681.178669][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 681.188430][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 681.197301][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 681.629586][T14167] syz_tun (unregistering): left allmulticast mode [ 681.655369][T14167] syz_tun (unregistering): left promiscuous mode [ 681.673587][T14167] bridge0: port 1(syz_tun) entered disabled state [ 682.124358][T23145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5540'. [ 682.320439][T23157] lo: Caught tx_queue_len zero misconfig [ 682.810555][T23183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.004514][T23095] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.011770][T23095] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.019133][T23095] bridge_slave_0: entered allmulticast mode [ 683.027829][T23095] bridge_slave_0: entered promiscuous mode [ 683.036763][T23095] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.044226][T23095] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.051463][T23095] bridge_slave_1: entered allmulticast mode [ 683.059738][T23095] bridge_slave_1: entered promiscuous mode [ 683.100674][T23095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.117016][T23095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.157294][T23095] team0: Port device team_slave_0 added [ 683.166053][T23095] team0: Port device team_slave_1 added [ 683.223673][T23095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.231157][T23095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.257360][T23095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.273221][ T5627] Bluetooth: hci0: command tx timeout [ 683.277239][T23095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.286196][T23095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.313233][T23095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.413884][T23095] hsr_slave_0: entered promiscuous mode [ 683.420873][T23095] hsr_slave_1: entered promiscuous mode [ 683.427802][T23095] debugfs: 'hsr0' already exists in 'hsr' [ 683.434270][T23095] Cannot create hsr debugfs directory [ 684.057662][T23226] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 684.079045][T23226] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 684.412592][T23254] netlink: 'syz.4.5589': attribute type 3 has an invalid length. [ 684.464282][T23254] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5589'. [ 684.702487][T23095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 684.725262][T23095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 684.756422][T23095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 684.775879][T23095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 684.792234][T23272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5598'. [ 684.824456][T23095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 684.854616][T23095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 684.874937][T23095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 684.895747][T23095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 685.061340][T23095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.136952][T23290] bond5: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 685.153104][T23290] bond5 (unregistering): Released all slaves [ 685.343140][ T5627] Bluetooth: hci0: command tx timeout [ 685.356653][T23095] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.398756][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.405951][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.461694][T23309] netlink: 'syz.1.5613': attribute type 29 has an invalid length. [ 685.478783][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.485974][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.496743][T23309] netlink: 'syz.1.5613': attribute type 29 has an invalid length. [ 686.184889][T23095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.260466][T23095] veth0_vlan: entered promiscuous mode [ 686.281318][T23095] veth1_vlan: entered promiscuous mode [ 686.390872][T23095] veth0_macvtap: entered promiscuous mode [ 686.402343][T23095] veth1_macvtap: entered promiscuous mode [ 686.462184][T23353] bond0: (slave dummy0): Releasing backup interface [ 686.500455][T23353] bridge_slave_0: left allmulticast mode [ 686.506925][T23353] bridge_slave_0: left promiscuous mode [ 686.514054][T23353] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.552377][T23353] bridge_slave_1: left allmulticast mode [ 686.558228][T23353] bridge_slave_1: left promiscuous mode [ 686.565287][T23353] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.597768][T23353] bond0: (slave bond_slave_0): Releasing backup interface [ 686.622300][T23353] team0: Port device team_slave_1 removed [ 686.629906][T23353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.637863][T23353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.648207][T23353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.656011][T23353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.664932][T23353] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 686.696059][T23357] team0: Mode changed to "loadbalance" [ 686.729777][T23095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.776015][T23095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.827745][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.870485][T23370] sctp: [Deprecated]: syz.3.5634 (pid 23370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.870485][T23370] Use struct sctp_sack_info instead [ 686.880979][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.918133][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.991215][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.341924][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.370354][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.411633][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.422967][ T5627] Bluetooth: hci0: command tx timeout [ 687.443056][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.936313][T23401] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 687.983987][T23401] team0: Unable to change to the same mode the team is in [ 688.295814][T23416] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5651'. [ 688.328504][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5651'. [ 688.687856][T23436] bridge_slave_0: left allmulticast mode [ 688.715998][T23436] bridge_slave_0: left promiscuous mode [ 688.748036][T23436] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.761324][T23436] bridge_slave_1: left allmulticast mode [ 688.768745][T23436] bridge_slave_1: left promiscuous mode [ 688.784399][T23436] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.817253][T23436] bond0: (slave bond_slave_0): Releasing backup interface [ 688.827759][T23436] bond0: (slave bond_slave_1): Releasing backup interface [ 688.841191][T23436] team0: Port device team_slave_0 removed [ 688.856878][T23436] team0: Port device team_slave_1 removed [ 688.864293][T23436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.871740][T23436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.880807][T23436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.888628][T23436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.898491][T23436] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 688.926723][T23442] team0: Mode changed to "loadbalance" [ 688.941562][T23390] dvmrp2: entered allmulticast mode [ 688.978740][ T156] dvmrp2: left allmulticast mode [ 689.503289][ T5627] Bluetooth: hci0: command tx timeout [ 690.029227][T23495] sctp: [Deprecated]: syz.3.5683 (pid 23495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 690.029227][T23495] Use struct sctp_sack_info instead [ 690.272821][T23507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5690'. [ 690.345757][T23507] bridge0: port 1(veth9) entered blocking state [ 690.354323][T23507] bridge0: port 1(veth9) entered disabled state [ 690.372953][T23507] veth9: entered allmulticast mode [ 690.396016][T23507] veth9: entered promiscuous mode [ 690.419300][T23514] bridge0: port 2(veth0_to_bond) entered blocking state [ 690.438515][T23514] bridge0: port 2(veth0_to_bond) entered disabled state [ 690.469809][T23514] veth0_to_bond: entered allmulticast mode [ 690.500861][T23514] veth0_to_bond: entered promiscuous mode [ 690.640672][T23528] sctp: [Deprecated]: syz.1.5697 (pid 23528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 690.640672][T23528] Use struct sctp_sack_info instead [ 690.641450][T23529] xt_hashlimit: size too large, truncated to 1048576 [ 690.859310][T23535] sch_tbf: peakrate 1 is lower than or equals to rate 5 ! [ 691.293341][T23561] sctp: [Deprecated]: syz.1.5709 (pid 23561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 691.293341][T23561] Use struct sctp_sack_info instead [ 691.877223][T23597] sctp: [Deprecated]: syz.1.5725 (pid 23597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 691.877223][T23597] Use struct sctp_sack_info instead [ 692.480947][T23633] sctp: [Deprecated]: syz.0.5741 (pid 23633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 692.480947][T23633] Use struct sctp_sack_info instead [ 692.990233][T23666] sctp: [Deprecated]: syz.1.5757 (pid 23666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 692.990233][T23666] Use struct sctp_sack_info instead [ 693.592297][T23702] sctp: [Deprecated]: syz.2.5773 (pid 23702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 693.592297][T23702] Use struct sctp_sack_info instead [ 694.138232][T23737] sctp: [Deprecated]: syz.1.5789 (pid 23737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 694.138232][T23737] Use struct sctp_sack_info instead [ 694.668956][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 694.687009][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 694.701363][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 694.715735][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 694.724059][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 694.967713][T23773] sctp: [Deprecated]: syz.3.5807 (pid 23773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 694.967713][T23773] Use struct sctp_sack_info instead [ 695.240871][ T3388] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.456537][ T3388] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.696544][T23808] sctp: [Deprecated]: syz.2.5820 (pid 23808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 695.696544][T23808] Use struct sctp_sack_info instead [ 695.731597][ T3388] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.957459][ T3388] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.276087][T23839] sctp: [Deprecated]: syz.2.5834 (pid 23839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 696.276087][T23839] Use struct sctp_sack_info instead [ 696.783145][ T5633] Bluetooth: hci5: command tx timeout [ 696.825421][ T3388] dvmrp6: left allmulticast mode [ 696.928487][T23871] sctp: [Deprecated]: syz.0.5845 (pid 23871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 696.928487][T23871] Use struct sctp_sack_info instead [ 697.299725][ T3388] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 697.482251][ T3388] bond4 (unregistering): (slave geneve2): Releasing active interface [ 697.687204][ T3388] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 697.909202][ T3388] bond0 (unregistering): Released all slaves [ 697.920492][ T3388] bond1 (unregistering): Released all slaves [ 697.934077][ T3388] bond2 (unregistering): Released all slaves [ 697.948741][ T3388] bond3 (unregistering): Released all slaves [ 697.966689][ T3388] bond4 (unregistering): Released all slaves [ 698.022512][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 698.222215][ T3388] hmac(sha224: left promiscuous mode [ 698.387879][ T3388] tipc: Disabling bearer [ 698.404856][ T3388] tipc: Left network mode [ 698.863080][ T5633] Bluetooth: hci5: command tx timeout [ 699.578154][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 699.640054][T23759] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.677213][T23759] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.714851][T23759] bridge_slave_0: entered allmulticast mode [ 699.747663][T23759] bridge_slave_0: entered promiscuous mode [ 699.761160][T23759] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.772121][T23759] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.781837][T23759] bridge_slave_1: entered allmulticast mode [ 699.844821][T23759] bridge_slave_1: entered promiscuous mode [ 700.256865][T23759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.317144][T23759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.399630][ T3388] hsr_slave_0: left promiscuous mode [ 700.456660][ T3388] hsr_slave_1: left promiscuous mode [ 700.504837][ T3388] veth1_macvtap: left promiscuous mode [ 700.526931][ T3388] veth0_macvtap: left promiscuous mode [ 700.945714][ T5633] Bluetooth: hci5: command tx timeout [ 701.459654][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 701.593838][T23759] team0: Port device team_slave_0 added [ 701.632670][T23759] team0: Port device team_slave_1 added [ 701.739485][T23759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.764312][T23759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.845309][T23759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.858765][T23759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.868840][T23759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.895811][T23759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.119285][T23759] hsr_slave_0: entered promiscuous mode [ 702.148039][T23759] hsr_slave_1: entered promiscuous mode [ 702.173216][T23759] debugfs: 'hsr0' already exists in 'hsr' [ 702.211194][T23759] Cannot create hsr debugfs directory [ 702.418115][ T3388] IPVS: stop unused estimator thread 0... [ 703.033150][ T5633] Bluetooth: hci5: command tx timeout [ 704.139589][T23759] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 704.169330][T23759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 704.195032][T23759] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 704.231458][T23759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 704.261458][T23759] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 704.300192][T23759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 704.344777][T23759] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 704.383434][T23759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 704.708864][T23759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.797411][T23759] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.842334][ T6802] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.849576][ T6802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.910949][ T3388] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.918182][ T3388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.297446][T23759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.569721][T23759] veth0_vlan: entered promiscuous mode [ 706.605682][T23759] veth1_vlan: entered promiscuous mode [ 706.705234][T23759] veth0_macvtap: entered promiscuous mode [ 706.733691][T23759] veth1_macvtap: entered promiscuous mode [ 706.805385][T23759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.866711][T23759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.886550][T24306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5990'. [ 706.888808][ T6802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.922334][ T6802] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.949811][ T6802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.974465][ T6802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.205179][ T6802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.230293][ T6802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.465039][ T6802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.481326][ T6802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.997006][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 709.013439][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 709.027972][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 709.042171][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 709.052600][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 710.250993][T24469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6049'. [ 710.367269][T24474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6052'. [ 710.471713][T24474] bond1: entered promiscuous mode [ 710.500016][T24474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 710.559450][T24484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 710.567470][T24484] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 710.579523][T24484] bond1: (slave sit1): Error -95 calling set_mac_address [ 710.927420][T24506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6064'. [ 711.091281][T24400] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.093440][T24519] netlink: 768 bytes leftover after parsing attributes in process `syz.0.6069'. [ 711.104075][T24518] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6068'. [ 711.108429][ T5627] Bluetooth: hci1: command tx timeout [ 711.123844][T24400] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.131150][T24400] bridge_slave_0: entered allmulticast mode [ 711.140738][T24400] bridge_slave_0: entered promiscuous mode [ 711.149644][T24400] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.157171][T24400] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.164769][T24400] bridge_slave_1: entered allmulticast mode [ 711.175367][T24400] bridge_slave_1: entered promiscuous mode [ 711.214097][T24400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.226848][T24400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.282497][T24400] team0: Port device team_slave_0 added [ 711.294147][T24400] team0: Port device team_slave_1 added [ 711.350465][T24400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.359594][T24400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.387671][T24400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.401035][T24400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.444853][T24400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.533634][T24400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.551175][T24536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6077'. [ 711.767192][T24400] hsr_slave_0: entered promiscuous mode [ 711.781065][T24400] hsr_slave_1: entered promiscuous mode [ 711.801942][T24400] debugfs: 'hsr0' already exists in 'hsr' [ 711.811475][T24400] Cannot create hsr debugfs directory [ 712.214582][T24400] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.231445][T24400] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.394246][T24400] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.435024][T24400] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.516790][T24587] Unsupported ieee802154 address type: 0 [ 712.679521][T24400] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.694125][T24400] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.799576][T24400] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.822513][T24400] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.185926][ T5627] Bluetooth: hci1: command tx timeout [ 713.209271][T24400] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 713.232046][T24400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 713.254716][T24400] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 713.274637][T24400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 713.279610][T24621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6115'. [ 713.296194][T24400] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 713.310194][T24400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 713.319776][T24400] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 713.338429][T24400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 713.516879][T24400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.579615][T24400] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.609897][ T6802] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.617068][ T6802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.654440][ T6802] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.661628][ T6802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.788925][T24649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6124'. [ 713.922432][T24656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6127'. [ 713.971232][T24654] 8021q: adding VLAN 0 to HW filter on device bond3 [ 714.520088][T24687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6135'. [ 714.541651][T24400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.601185][T24400] veth0_vlan: entered promiscuous mode [ 714.619850][T24400] veth1_vlan: entered promiscuous mode [ 714.621193][T24691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6137'. [ 714.659630][T24400] veth0_macvtap: entered promiscuous mode [ 714.674563][T24400] veth1_macvtap: entered promiscuous mode [ 714.702544][T24400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.723592][T24400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.748899][ T3388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.760117][ T3388] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.776228][ T3388] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.787999][ T3388] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.936139][ T3388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.960897][ T3388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.998565][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.032142][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.263328][ T5627] Bluetooth: hci1: command tx timeout [ 715.436239][T24720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6146'. [ 715.695534][T24730] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 715.811133][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 715.827132][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 715.845919][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 715.860724][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 715.869388][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 716.530398][T24768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6162'. [ 717.302234][T24803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6178'. [ 717.343164][ T5633] Bluetooth: hci1: command tx timeout [ 717.844445][T24735] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.863150][T24735] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.882078][T24735] bridge_slave_0: entered allmulticast mode [ 717.903611][ T5633] Bluetooth: hci4: command tx timeout [ 717.918353][T24735] bridge_slave_0: entered promiscuous mode [ 717.927509][T24735] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.935192][T24735] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.944626][T24735] bridge_slave_1: entered allmulticast mode [ 717.964660][T24735] bridge_slave_1: entered promiscuous mode [ 718.009550][T24735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.045301][T24735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.057911][T24844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6192'. [ 718.135250][T24735] team0: Port device team_slave_0 added [ 718.167269][T24735] team0: Port device team_slave_1 added [ 718.290149][T24735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.315709][T24735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.394584][T24735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.421034][T24735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.443952][T24735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.486421][T24735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.717906][T24735] hsr_slave_0: entered promiscuous mode [ 718.736336][T24735] hsr_slave_1: entered promiscuous mode [ 718.760475][T24735] debugfs: 'hsr0' already exists in 'hsr' [ 718.775440][T24735] Cannot create hsr debugfs directory [ 718.813278][T24875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6205'. [ 718.862409][T24877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6206'. [ 718.901592][T24879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6207'. [ 718.944038][T24879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6207'. [ 719.185736][T24889] sctp: [Deprecated]: syz.0.6212 (pid 24889) Use of int in max_burst socket option deprecated. [ 719.185736][T24889] Use struct sctp_assoc_value instead [ 719.456951][T24735] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.616595][T24910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6221'. [ 719.703429][T24735] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.777578][T24735] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.875579][T24735] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.995732][ T5633] Bluetooth: hci4: command tx timeout [ 720.334792][T24735] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 720.347993][T24947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6236'. [ 720.373577][T24735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 720.385844][T24735] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 720.407314][T24735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 720.428490][T24735] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 720.449283][T24735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 720.475854][T24735] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 720.501737][T24735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 720.951919][T24735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.992597][T24735] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.021036][ T3388] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.028271][ T3388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.070188][ T6680] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.077437][ T6680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.105928][T24985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6250'. [ 721.718679][T25011] syzkaller0: entered promiscuous mode [ 721.733324][T25011] syzkaller0: entered allmulticast mode [ 721.827079][T25019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6262'. [ 722.063140][ T5633] Bluetooth: hci4: command tx timeout [ 722.145548][T24735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.494298][T25053] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 0, id = 0 [ 722.505103][T25051] IPVS: stopping backup sync thread 25053 ... [ 722.851090][T24735] veth0_vlan: entered promiscuous mode [ 722.883687][T24735] veth1_vlan: entered promiscuous mode [ 722.929458][T24735] veth0_macvtap: entered promiscuous mode [ 722.941779][T24735] veth1_macvtap: entered promiscuous mode [ 723.014391][T24735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.028857][T24735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.167141][ T6802] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.197233][ T6802] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.227456][ T6802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.253274][ T6802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.426313][ T6802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.457365][ T6802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.530889][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.544264][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.588968][T25077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6283'. [ 723.680321][T25081] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6147'. [ 724.143251][ T5633] Bluetooth: hci4: command tx timeout [ 724.251073][T25114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6297'. [ 724.257503][T25116] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6301'. [ 724.277885][T25116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6301'. [ 725.059203][T25149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6316'. [ 725.630077][T25179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6330'. [ 725.639365][T25179] netlink: 'syz.2.6330': attribute type 1 has an invalid length. [ 725.650284][T25179] netlink: 316 bytes leftover after parsing attributes in process `syz.2.6330'. [ 725.829211][T25187] netlink: 'syz.4.6334': attribute type 29 has an invalid length. [ 726.003369][T25194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6337'. [ 726.115872][T25200] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6340'. [ 726.248396][T25210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6346'. [ 726.259508][T25210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6346'. [ 726.392194][T25218] syzkaller1: entered promiscuous mode [ 726.399685][T25218] syzkaller1: entered allmulticast mode [ 727.330134][T25261] netlink: 'syz.4.6371': attribute type 29 has an invalid length. [ 727.371623][T25261] netlink: 'syz.4.6371': attribute type 29 has an invalid length. [ 727.509194][T25265] wireguard0: entered promiscuous mode [ 727.528048][T25265] wireguard0: entered allmulticast mode [ 727.637153][T25271] netlink: 'syz.4.6371': attribute type 29 has an invalid length. [ 729.441125][T25375] __nla_validate_parse: 11 callbacks suppressed [ 729.441145][T25375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6422'. [ 729.476399][T25377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6423'. [ 729.491099][T25377] netlink: 'syz.4.6423': attribute type 5 has an invalid length. [ 729.801293][T25392] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6430'. [ 730.139270][T25407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6438'. [ 730.228582][T25412] syzkaller0: entered promiscuous mode [ 730.243956][T25412] syzkaller0: entered allmulticast mode [ 730.392156][T25421] syzkaller1: entered promiscuous mode [ 730.419055][T25421] syzkaller1: entered allmulticast mode [ 730.691888][T25440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6453'. [ 730.840640][T25445] syzkaller0: entered promiscuous mode [ 730.858573][T25445] syzkaller0: entered allmulticast mode [ 731.347299][T25475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6471'. [ 732.207215][T25517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6488'. [ 732.996769][T25543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6502'. [ 733.283728][T25557] syzkaller0: entered promiscuous mode [ 733.302381][T25557] syzkaller0: entered allmulticast mode [ 733.309251][T25561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6511'. [ 733.448640][T25567] x_tables: duplicate underflow at hook 2 [ 734.150579][T25592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6525'. [ 734.459235][T25609] batadv1: entered promiscuous mode [ 734.481732][T25609] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 734.618263][T25616] __nla_validate_parse: 1 callbacks suppressed [ 734.618283][T25616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6539'. [ 734.699077][T25618] netlink: 'syz.1.6540': attribute type 3 has an invalid length. [ 734.731780][T25620] tipc: Enabling of bearer rejected, failed to enable media [ 734.818890][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 734.841903][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 734.850236][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 734.861711][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 734.875121][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 734.981803][T25634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6546'. [ 735.278182][T25646] xt_NFQUEUE: number of total queues is 0 [ 735.330355][T16846] syz_tun (unregistering): left allmulticast mode [ 735.862959][T25675] netlink: 'syz.3.6562': attribute type 1 has an invalid length. [ 736.192262][T25694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6571'. [ 736.945143][ T5633] Bluetooth: hci3: command tx timeout [ 737.163983][T25744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6593'. [ 737.345330][T25623] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.352646][T25623] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.360636][T25623] bridge_slave_0: entered allmulticast mode [ 737.369012][T25623] bridge_slave_0: entered promiscuous mode [ 737.378542][T25623] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.402221][T25623] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.410360][T25623] bridge_slave_1: entered allmulticast mode [ 737.419515][T25623] bridge_slave_1: entered promiscuous mode [ 737.519930][T25623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.546441][T25623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.598914][T25623] team0: Port device team_slave_0 added [ 737.619105][T25623] team0: Port device team_slave_1 added [ 737.640633][T25767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6603'. [ 737.707924][T25767] team0: Port device team_slave_0 removed [ 737.799590][T25623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.810600][T25777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6607'. [ 737.816103][T25623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.863666][T25623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.915449][T25623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.953077][T25623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.985762][T25623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.158252][T25791] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6613'. [ 738.173871][T25623] hsr_slave_0: entered promiscuous mode [ 738.189729][T25623] hsr_slave_1: entered promiscuous mode [ 738.197959][T25623] debugfs: 'hsr0' already exists in 'hsr' [ 738.211587][T25623] Cannot create hsr debugfs directory [ 738.569405][T25811] tipc: Started in network mode [ 738.583380][T25811] tipc: Node identity 56c9f36f099a, cluster identity 4711 [ 738.589607][T25820] netlink: 'syz.1.6625': attribute type 3 has an invalid length. [ 738.613184][T25811] tipc: Enabled bearer , priority 0 [ 738.679886][T25826] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6627'. [ 738.762101][T25821] syzkaller0: entered promiscuous mode [ 738.771977][T25821] syzkaller0: entered allmulticast mode [ 738.779670][T25821] tipc: Resetting bearer [ 738.827561][T25810] tipc: Resetting bearer [ 739.027950][ T5627] Bluetooth: hci3: command tx timeout [ 741.106227][ T5627] Bluetooth: hci3: command tx timeout [ 741.687403][T25810] tipc: Disabling bearer [ 741.775513][T17948] tipc: Node number set to 1599337327 [ 741.791630][T25851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6634'. [ 741.860595][T25623] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.136768][T25623] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.292091][T25623] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.425829][T25623] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.501867][T25886] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6651'. [ 742.521848][T25886] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6651'. [ 742.697222][T25892] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6654'. [ 742.726774][T25892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6654'. [ 742.753563][T25892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6654'. [ 743.068394][T25623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 743.090600][T25623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 743.118854][T25623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 743.156143][T25623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 743.183754][ T5627] Bluetooth: hci3: command tx timeout [ 743.191451][T25623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 743.215132][T25623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 743.240701][T25623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 743.274590][T25623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 743.301923][T25912] syzkaller0: entered promiscuous mode [ 743.319812][T25912] syzkaller0: entered allmulticast mode [ 743.837358][T25925] 8021q: VLANs not supported on lo [ 744.058110][T25623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.108177][T25930] netlink: 'syz.4.6669': attribute type 13 has an invalid length. [ 744.136133][T25623] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.217757][T25938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6672'. [ 744.371189][T25946] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6674'. [ 744.446917][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.454147][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.536686][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.543903][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.603673][T25623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.750374][T25623] veth0_vlan: entered promiscuous mode [ 745.802141][T25623] veth1_vlan: entered promiscuous mode [ 745.884303][T25623] veth0_macvtap: entered promiscuous mode [ 745.926131][T25623] veth1_macvtap: entered promiscuous mode [ 745.990890][T25623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.039955][T25623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.082237][ T3388] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.122964][ T3388] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.167561][ T3388] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.202864][ T3388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.475467][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.512671][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.586303][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.610188][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.731051][T26025] geneve1: entered promiscuous mode [ 746.916154][T26033] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 747.127432][T26046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6715'. [ 747.144295][T26046] netlink: 67 bytes leftover after parsing attributes in process `syz.4.6715'. [ 747.155353][T26043] syzkaller0: entered promiscuous mode [ 747.161269][T26043] syzkaller0: entered allmulticast mode [ 747.517999][T26061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6724'. [ 747.778092][T26073] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 747.812026][T26076] tipc: Started in network mode [ 747.820232][T26076] tipc: Node identity 9, cluster identity 2 [ 747.835978][T26076] tipc: Node number set to 9 [ 748.104850][T26092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6739'. [ 748.106218][T26093] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 748.177781][T26097] sctp: [Deprecated]: syz.2.6741 (pid 26097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 748.177781][T26097] Use struct sctp_sack_info instead [ 749.101715][T26133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6757'. [ 749.158932][T26137] sctp: [Deprecated]: syz.2.6759 (pid 26137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 749.158932][T26137] Use struct sctp_sack_info instead [ 749.436833][T26152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6767'. [ 749.652402][T26159] syzkaller0: entered promiscuous mode [ 749.655004][T26163] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6772'. [ 749.668859][T26159] syzkaller0: entered allmulticast mode [ 749.711437][T26163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6772'. [ 749.781943][T26169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6774'. [ 750.183534][T26193] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6786'. [ 750.503971][T26212] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 66, id = 0 [ 750.516886][T26211] IPVS: stopping backup sync thread 26212 ... [ 751.296103][T26246] vlan0: entered promiscuous mode [ 751.330939][T26246] bridge0: entered promiscuous mode [ 752.582350][T26319] __nla_validate_parse: 1 callbacks suppressed [ 752.582369][T26319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6847'. [ 752.913178][T26338] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6856'. [ 753.352385][T26366] netlink: 822 bytes leftover after parsing attributes in process `syz.4.6870'. [ 753.832549][T26395] netlink: 'syz.2.6882': attribute type 11 has an invalid length. [ 753.865815][T26397] tipc: Started in network mode [ 753.870346][T26385] syzkaller0: create flow: hash 4016826646 index 1 [ 753.877496][T26397] tipc: Node identity 76b81d0a304f, cluster identity 4711 [ 753.892988][T26397] tipc: Enabled bearer , priority 0 [ 753.906143][T26382] syzkaller0: delete flow: hash 4016826646 index 1 [ 756.972219][T26391] syzkaller0: entered promiscuous mode [ 756.978069][T26391] syzkaller0: entered allmulticast mode [ 756.985409][T26391] tipc: Resetting bearer [ 756.999670][T26390] tipc: Resetting bearer [ 759.650211][T26390] tipc: Disabling bearer [ 759.659079][ T5625] tipc: Node number set to 1190599946 [ 759.923504][T26446] netlink: 'syz.3.6896': attribute type 11 has an invalid length. [ 760.196018][T26460] syzkaller0: create flow: hash 4016826646 index 1 [ 760.228344][T26459] syzkaller0: delete flow: hash 4016826646 index 1 [ 763.459545][T26485] tipc: Enabling of bearer rejected, failed to enable media [ 763.703797][T26509] netlink: 'syz.0.6918': attribute type 11 has an invalid length. [ 763.894204][T26513] syzkaller0: entered promiscuous mode [ 763.900007][T26513] syzkaller0: entered allmulticast mode [ 764.031670][T26525] netlink: 'syz.0.6935': attribute type 11 has an invalid length. [ 767.064536][T26551] tipc: Enabled bearer , priority 0 [ 767.220258][T26551] syzkaller0: entered promiscuous mode [ 767.224023][T26564] netlink: 'syz.0.6937': attribute type 11 has an invalid length. [ 767.229623][T26551] syzkaller0: entered allmulticast mode [ 767.240456][T26551] tipc: Resetting bearer [ 767.298860][T26549] tipc: Resetting bearer [ 770.391634][T26549] tipc: Disabling bearer [ 770.579657][T26612] netlink: 'syz.0.6952': attribute type 11 has an invalid length. [ 773.688758][T26647] tipc: Enabling of bearer rejected, failed to enable media [ 774.000547][T26653] syzkaller0: entered promiscuous mode [ 774.006348][T26653] syzkaller0: entered allmulticast mode [ 777.143809][T26696] tipc: Enabled bearer , priority 0 [ 777.214077][T26699] syzkaller0: entered promiscuous mode [ 777.219605][T26699] syzkaller0: entered allmulticast mode [ 777.226736][T26699] tipc: Resetting bearer [ 777.236923][T26691] tipc: Resetting bearer [ 777.784069][T26719] xt_nfacct: accounting object `syz0' does not exist [ 780.196236][T26691] tipc: Disabling bearer [ 780.518699][T26738] syzkaller0: entered promiscuous mode [ 780.526728][T26738] syzkaller0: entered allmulticast mode [ 782.429671][T26791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7006'. [ 783.971960][T26797] bridge_slave_0: left allmulticast mode [ 783.993131][T26797] bridge_slave_0: left promiscuous mode [ 784.016473][T26797] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.121178][T26797] bridge_slave_1: left allmulticast mode [ 784.149882][T26797] bridge_slave_1: left promiscuous mode [ 784.172492][T26797] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.212122][T26797] bond0: (slave bond_slave_0): Releasing backup interface [ 784.259274][T26797] bond0: (slave bond_slave_1): Releasing backup interface [ 784.274053][T26797] team0: Port device team_slave_1 removed [ 784.280803][T26797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.289305][T26797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.301955][T26797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.311395][T26797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.320485][T26797] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 784.350293][T26800] team0: Mode changed to "loadbalance" [ 784.521768][T26830] netlink: 'syz.3.7019': attribute type 11 has an invalid length. [ 784.663294][T26833] syzkaller0: entered promiscuous mode [ 784.668817][T26833] syzkaller0: entered allmulticast mode [ 784.688578][T26835] syzkaller0: entered promiscuous mode [ 784.694732][T26835] syzkaller0: entered allmulticast mode [ 787.727610][T26850] bridge_slave_0: left allmulticast mode [ 787.741613][T26850] bridge_slave_0: left promiscuous mode [ 787.756691][T26850] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.772286][T26850] bridge_slave_1: left allmulticast mode [ 787.778474][T26850] bridge_slave_1: left promiscuous mode [ 787.790436][T26850] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.819314][T26850] bond0: (slave bond_slave_0): Releasing backup interface [ 787.849998][T26850] bond0: (slave bond_slave_1): Releasing backup interface [ 787.885547][T26850] team0: Port device team_slave_0 removed [ 787.911267][T26850] team0: Port device team_slave_1 removed [ 787.925126][T26850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.932560][T26850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.955998][T26850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.964101][T26850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.988686][T26850] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 788.007300][T26862] netlink: 'syz.0.7032': attribute type 11 has an invalid length. [ 788.620679][T26894] syzkaller0: entered promiscuous mode [ 788.640463][T26894] syzkaller0: entered allmulticast mode [ 795.171394][T26905] syzkaller0: entered promiscuous mode [ 795.200018][T26905] syzkaller0: entered allmulticast mode [ 795.258371][T26913] bridge_slave_0: left allmulticast mode [ 795.281129][T26913] bridge_slave_0: left promiscuous mode [ 795.293304][T26913] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.327131][T26913] bridge_slave_1: left allmulticast mode [ 795.337182][T26913] bridge_slave_1: left promiscuous mode [ 795.360083][T26913] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.414368][T26913] bond0: (slave bond_slave_0): Releasing backup interface [ 795.450583][T26913] bond0: (slave bond_slave_1): Releasing backup interface [ 795.498264][T26913] team0: Port device team_slave_0 removed [ 795.548486][T26913] team0: Port device team_slave_1 removed [ 795.590377][T26913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.609833][T26913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.638902][T26913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.656561][T26913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.686869][T26913] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 796.019106][T26930] netlink: 'syz.0.7054': attribute type 11 has an invalid length. [ 797.120274][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7059'. [ 802.312105][T26938] tipc: Enabling of bearer rejected, failed to enable media [ 802.713861][T26952] bridge1: port 1(veth0_to_bond) entered blocking state [ 802.725711][T26952] bridge1: port 1(veth0_to_bond) entered disabled state [ 802.864596][T26952] veth0_to_bond: entered allmulticast mode [ 805.817594][ T5633] Bluetooth: hci0: command 0x0406 tx timeout [ 806.921449][ C1] sched: DL replenish lagged too much [ 822.019683][T23762] Bluetooth: hci5: command 0x0406 tx timeout [ 887.553746][ T5627] Bluetooth: hci1: command tx timeout [ 894.300869][T26968] Bluetooth: hci4: command tx timeout [ 897.578683][T26968] Bluetooth: hci3: command tx timeout [ 908.789668][T26952] veth0_to_bond: entered promiscuous mode [ 955.625197][ T31] INFO: task kworker/u8:2:36 blocked for more than 145 seconds. [ 955.649927][ T31] Not tainted syzkaller #0 [ 958.900513][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.