last executing test programs: 3.810480565s ago: executing program 2 (id=9690): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x2, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x82, 0x0, &(0x7f0000000040)) 3.671279311s ago: executing program 1 (id=9692): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r1, @in={{0x2, 0x4e22, @empty}}, 0x811e, 0x2, 0xff, 0x1000005, 0x40, 0xcd, 0x7}, &(0x7f0000000580)=0x9c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000040)={@private2, @rand_addr=0x64010102, 0x15, 0x18}}) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f00000003c0)={0x2a, 0x2}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/54, 0x36}, 0x4fb}], 0x1, 0x12020, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x42000000, 0x4) recvmmsg(r5, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@nl=@unspec, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/190}], 0x0, &(0x7f0000000140)=""/21}, 0x3}], 0x40000000000022b, 0x45833af92e4bbbfe, 0x0) bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESDEC=r0], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x400, 0x452c}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x144}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="b40800000000000073114200000000008510000002000000b70000006c000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 3.629345793s ago: executing program 2 (id=9693): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x103, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c0001"], 0x50}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r5) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x4) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x89}, 0x8) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r7, 0x110, 0x2, &(0x7f00000000c0)='\x00', 0x1) connect$inet6(r1, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="89e7ee2cdcdad9b4b47380c988ca", 0xe}, {0x0}], 0x2) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, &(0x7f0000000000)="0586", 0x2, 0x20000092, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.560420213s ago: executing program 4 (id=9694): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005c00), r1) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000005c40)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xaf}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x84c) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x55}]}, 0x1c}}, 0x4880) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000000)={0x6, 0x6, 0x206, 0x8000, 0xfffffffc, 0x7fff, 0xff, 0x3ffc00, r9}, 0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000380)={r9, 0x375}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={r9, 0x2, 0x5, 0x7f, 0x7, 0x401}, &(0x7f0000000080)=0x14) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000240)={@default, @default}) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x891e) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='w\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x8, 0x2004}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35}, 0x94) 3.064723776s ago: executing program 4 (id=9697): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x0, 'cpuset'}]}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800010004000000000000008020000900040005"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x1) unshare(0x2c060000) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) unshare(0x12000200) socket$netlink(0x10, 0x3, 0x0) 2.959047489s ago: executing program 1 (id=9699): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x438, 0x2e0, 0x2e0, 0x438, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x348, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x1c00}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0xe4e7, 0x7, 0x0, 0x0, "756a1796ba7709aaf1afdd4c49089efda626f1a5ffe85e8698e207ea56736661698e1f152f8d024dc4c4dacc58a88e7f1e8534a8b0b9f8704e591c0762a21d16"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 2.819987325s ago: executing program 1 (id=9700): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xfffffffffffffffe}, {0x7d}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x4d6, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x44}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{@in=@remote, 0x0, 0x33}, 0xe327da050daf7a02, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x0, 0xfe}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.697137335s ago: executing program 1 (id=9701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x8864000000000000, 0x0, 0x22044028}, 0x0) 2.447732758s ago: executing program 1 (id=9704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x4800, 0x4000850}, 0x4000050) 2.439861348s ago: executing program 2 (id=9705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a"], 0x0}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a00fe00000000b5090000041d0000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ff27efa60363b716943cef534459c99aa77a0c59302ace8ce941eba91289cd2ec4c4d47f90a35218b4954f3f12b94879679ab4ad8eddc79acf267b86ce6cd8278487208a9a4301394b", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001d000bcc000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000a000200aaaaaaaaaa0c00c0060005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.255216429s ago: executing program 1 (id=9706): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x6a040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) close(r6) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100000200000000000000df98b07ed6c1497842eeab8c9b9bf61024e617f7409f7380f03ebc2cce1ccc2ae0058b1cb678014564d2bb8b574975057cf20738bc7a40cc9f8f9ae1f1da417c85d671588688b7f7837eec565c4efeb0549dc25016b7127ea17c73d52300000000"], 0x44}, 0x5}, 0x0) 2.210517445s ago: executing program 2 (id=9708): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1802000000000000000000000000c89bd2181ea2", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000002000000850000000800000095000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x80}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x50) r2 = socket(0x6, 0x5, 0xf) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000600)={0x0, 0x6, 0x2, 0x917b, 0x343, 0x101, 0x6, 0x7, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x6, 0x9, 0x6, 0xe, 0x3}}, &(0x7f0000000340)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000006c0)={r6, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffff001}}, 0xec, 0x6}, 0x90) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r7, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x24}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r12, @ANYBLOB="00000016010000001800120008000100736974000c00020008"], 0x38}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r12, @ANYBLOB="001100000000000040001280080001007369740034000280050009002900000008000200ac1414bb08000c0000000100"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r13, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) 2.122650742s ago: executing program 3 (id=9709): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180300004000000000000000000a000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702b20e00000000b5020000000000008500000083000000bc0900000000030055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xb, 0x1003, &(0x7f0000001e40)=""/4099, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.97864993s ago: executing program 2 (id=9711): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xfffffffffffffffe}, {0x7d}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x4d6, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x44}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {{@in=@remote, 0x0, 0x33}, 0xe327da050daf7a02, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x0, 0xfe}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.872750611s ago: executing program 3 (id=9712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x800, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000050) 1.724030334s ago: executing program 2 (id=9714): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmsg(r1, 0x0, 0x40080) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000091106b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.679917693s ago: executing program 3 (id=9715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000000007000000000000001000000000e4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={&(0x7f00000000c0)="fbb7f0b1db0c3eb56f904f9ae96f425fc831dabaae603a70560d23aa0605d959e536", &(0x7f0000000340)=""/224, &(0x7f0000002500)="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", &(0x7f0000000440)="6226c92251023771bd80b2f904e799c990cb26af5389ebe104269c013ffcfda0d28a825415ee6100a8324df0b9bf8ec38edf28e94ce2b78bcb8f557029e389569e1fa8a281fa5b0e0a9d34532f4abfed2ee191928f2d26abcbc41565cfc1fdfe65f40fc10aaae37c", 0xffff, r1, 0x4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r3 = socket(0x11, 0x2, 0x10001) recvfrom(r3, &(0x7f00000000c0)=""/4096, 0x1000, 0x40010100, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f1, 0x6}, {0x10007, 0x30000080}]}}) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) read(r4, 0x0, 0x0) close(0x3) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703b84108000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0xc, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x94) 1.607363618s ago: executing program 0 (id=9716): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x5, &(0x7f0000003280)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff, 0x3}, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) pipe(&(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="020300021000000000000000000000000300060000000000020000000000000000000000000000000200010000000000000009007fffffff03000500330000000200000064010102000000000000000002000800080001003400000000000000040004"], 0x80}, 0x1, 0x7}, 0x4044000) 1.400675503s ago: executing program 3 (id=9717): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x2, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x82, 0x0, &(0x7f0000000040)) 1.307256575s ago: executing program 0 (id=9718): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x22, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b08009f59d351f20c83a50ee033cf5f0759cfc67cb3a4", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000d40)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @default, @netrom={'nr', 0x0}, 0x101, 'syz0\x00', @null, 0x9, 0x2, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001340)=ANY=[@ANYBLOB="38000000030101030000000000000000020000000c00198008000100010800001800018014000180080401000a01010008000200ac1414aa"], 0x38}}, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x10000, 0x1000, 0x80000001, 0x1260c, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0xb}, 0x50) sendmsg$inet(r9, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0xd0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYRES8=r1, @ANYRES32=r2, @ANYBLOB="8b04040000000000700012800b00010067656e657665000060000280050004000100000014000700000000000000000000000800000000010800010002000000050009000100000005000c"], 0x90}}, 0x0) 1.007522642s ago: executing program 3 (id=9719): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xbe, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000013002f0a253d70000000000007006800", @ANYRES32=r1, @ANYBLOB="000900001020060024001a8009"], 0x44}}, 0x0) 814.250078ms ago: executing program 3 (id=9720): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$inet(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x240408c4) mmap(&(0x7f00002b2000/0xc00000)=nil, 0xc00000, 0x7, 0x12, r0, 0x20000000) 686.126346ms ago: executing program 0 (id=9721): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000040000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 531.422562ms ago: executing program 0 (id=9722): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180300004000000000000000000a000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702b20e00000000b5020000000000008500000083000000bc0900000001030055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xb, 0x1003, &(0x7f0000001e40)=""/4099, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 531.13837ms ago: executing program 4 (id=9723): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x408, 0x0, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random, @rand_addr, @rand_addr, 0x8}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffffff, 0xff000000, 0x3, 0x10, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x181, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0xc147, 0x8000, 0x8, 0x0, 0x7ff, 'veth1_macvtap\x00', 'caif0\x00', {0xff}, {}, 0x0, 0x348}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "00fc6318467e3c83c37e66cec1e44eb18a67f9ab80f453c14b046598b980"}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x652b910927df25be]}}, {@empty, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="0403ff00", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x458) 375.698578ms ago: executing program 4 (id=9724): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x7, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x82a, 0x24, &(0x7f00000000c0)=""/36, 0x40f00, 0x9, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x10, 0xde, 0x80000}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x3, 0x2, 0x9, 0x4}, {0x3, 0x3, 0xa, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x1, 0x1, 0x9}, {0x5, 0x2, 0xb, 0x4}, {0x4, 0x5, 0x5, 0x3}], 0x10, 0x400}, 0x94) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ppoll(&(0x7f00000003c0)=[{r0}, {r1, 0x92beef88878b0f45}, {r2, 0x2220}, {r0, 0x204}], 0x4, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000440)={[0x1c]}, 0x8) write$cgroup_pressure(r0, &(0x7f0000000140)={'some'}, 0x2f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x3) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) 362.918175ms ago: executing program 0 (id=9725): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="09840000000000003c0012800b00010062726964676500002c000280060027000300000006000600fcff000008001d00000000000500260000000000050025"], 0x64}}, 0x0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x150, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9e, 0x5, "960317eb4977f425416b29fba8a5c9890bd02ddd370c6057c5e7b0bb5f6fe3520278765a34b49611ff5174a46f6170cc064b59a03c4a9ac072a8d3bb0a8febdb8e80c42bc27a096577c48a855f922107066122a96465e1ed26577e63f5eefcbaca99d061efee8dc831575d2f4c79986e0bbe6e5b3092075f11a7ded6fa6a4483d18f57e30edbb508741ee3249648fde26f2c6ea384a2b090ddc0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x41, 0x4, "bc5ec55619c64b5cb48109f2a8e221bfc85373df7c7b261d664f84198b5d17f6db9ccb2912b2b240ac588ad3d24d85b50d7cd04ad361a0cbdf92239d4d"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x150}}, 0x8001) socket$inet(0x2, 0x5, 0x5) 201.098461ms ago: executing program 4 (id=9726): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r2, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000180)="1054", 0x2}], 0x1, 0x2, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000340)=""/209, &(0x7f0000000440)=0xd1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c000000480005800800010065756800070002"], 0x5c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r3}, 0x8) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@base={0xa, 0xdb, 0x8, 0x2, 0xc28}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000280), &(0x7f0000001340), 0x2}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x19, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10101}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_VFINFO_LIST={0x4}]}, 0x38}}, 0x0) 39.525576ms ago: executing program 0 (id=9727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000002}, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x1000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0001000020696c250000000c002020207b1af8ff00", @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000000340)={0xa, "0b7bc4a66be01d5825dd3b428bdaf81b09d62f889492181e47d7269646925cdb075dd45359e35a9cbd51fce8bb183d7cf7eea59ad53af07495c7b68171c9c2d5a808db86ee05de1e2acc2e97e3f0b757ed60b955a13f2f689a21f1005f7b79ecae3ccc86fc68c316fec463eea99e929738164909273844b8b2f483812b953a3f"}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) recvmmsg(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000000480)=""/190, 0xbe}}], 0x1, 0x12143, &(0x7f0000000180)={0x0, 0x989680}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x4, 0x61, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="034886dd0900300003003004120060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120088be"], 0xfdef) 0s ago: executing program 4 (id=9728): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x438, 0x2e0, 0x2e0, 0x438, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x348, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x3500}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0xe4e7, 0x7, 0x0, 0x0, "756a1796ba7709aaf1afdd4c49089efda626f1a5ffe85e8698e207ea56736661698e1f152f8d024dc4c4dacc58a88e7f1e8534a8b0b9f8704e591c0762a21d16"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) kernel console output (not intermixed with test programs): 5288] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.8500'. [ 830.846184][ T5297] FAULT_INJECTION: forcing a failure. [ 830.846184][ T5297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.875071][ T5297] CPU: 0 UID: 0 PID: 5297 Comm: syz.3.8503 Not tainted syzkaller #0 PREEMPT(full) [ 830.875097][ T5297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 830.875108][ T5297] Call Trace: [ 830.875116][ T5297] [ 830.875125][ T5297] dump_stack_lvl+0x189/0x250 [ 830.875149][ T5297] ? __pfx____ratelimit+0x10/0x10 [ 830.875174][ T5297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 830.875191][ T5297] ? __pfx__printk+0x10/0x10 [ 830.875209][ T5297] ? __might_fault+0xb0/0x130 [ 830.875238][ T5297] should_fail_ex+0x414/0x560 [ 830.875262][ T5297] _copy_from_user+0x2d/0xb0 [ 830.875286][ T5297] ___sys_sendmsg+0x158/0x2a0 [ 830.875314][ T5297] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.875374][ T5297] ? __fget_files+0x2a/0x420 [ 830.875394][ T5297] ? __fget_files+0x3a0/0x420 [ 830.875425][ T5297] __x64_sys_sendmsg+0x19b/0x260 [ 830.875452][ T5297] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 830.875485][ T5297] ? __pfx_ksys_write+0x10/0x10 [ 830.875508][ T5297] ? do_syscall_64+0xbe/0xfa0 [ 830.875536][ T5297] do_syscall_64+0xfa/0xfa0 [ 830.875558][ T5297] ? lockdep_hardirqs_on+0x9c/0x150 [ 830.875581][ T5297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.875598][ T5297] ? clear_bhb_loop+0x60/0xb0 [ 830.875619][ T5297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.875636][ T5297] RIP: 0033:0x7f804b98eec9 [ 830.875654][ T5297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.875670][ T5297] RSP: 002b:00007f8049bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.875691][ T5297] RAX: ffffffffffffffda RBX: 00007f804bbe5fa0 RCX: 00007f804b98eec9 [ 830.875705][ T5297] RDX: 000000000000c004 RSI: 0000200000000700 RDI: 0000000000000004 [ 830.875717][ T5297] RBP: 00007f8049bee090 R08: 0000000000000000 R09: 0000000000000000 [ 830.875728][ T5297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.875739][ T5297] R13: 00007f804bbe6038 R14: 00007f804bbe5fa0 R15: 00007ffc5ef4a108 [ 830.875772][ T5297] [ 831.532864][ T5320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 831.585353][ T5317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8513'. [ 832.043147][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8519'. [ 832.069152][ T5342] vxcan1 speed is unknown, defaulting to 1000 [ 833.045433][ T5489] __nla_validate_parse: 4 callbacks suppressed [ 833.045453][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8535'. [ 833.134978][ T5485] vxcan1 speed is unknown, defaulting to 1000 [ 833.187716][ T5493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8534'. [ 834.174136][ T5710] netlink: 'syz.0.8539': attribute type 1 has an invalid length. [ 834.253730][ T5713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8540'. [ 834.386196][ T5719] 8021q: VLANs not supported on ipvlan0 [ 834.490309][ T5723] FAULT_INJECTION: forcing a failure. [ 834.490309][ T5723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.522461][ T5723] CPU: 0 UID: 0 PID: 5723 Comm: syz.0.8544 Not tainted syzkaller #0 PREEMPT(full) [ 834.522489][ T5723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 834.522500][ T5723] Call Trace: [ 834.522508][ T5723] [ 834.522517][ T5723] dump_stack_lvl+0x189/0x250 [ 834.522541][ T5723] ? __pfx____ratelimit+0x10/0x10 [ 834.522565][ T5723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 834.522581][ T5723] ? __pfx__printk+0x10/0x10 [ 834.522609][ T5723] should_fail_ex+0x414/0x560 [ 834.522633][ T5723] _copy_to_user+0x31/0xb0 [ 834.522657][ T5723] simple_read_from_buffer+0xe1/0x170 [ 834.522683][ T5723] proc_fail_nth_read+0x1b3/0x220 [ 834.522711][ T5723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 834.522739][ T5723] ? rw_verify_area+0x2a6/0x4d0 [ 834.522756][ T5723] ? __lock_acquire+0xab9/0xd20 [ 834.522777][ T5723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 834.522804][ T5723] vfs_read+0x1fd/0xa30 [ 834.522822][ T5723] ? fdget_pos+0x247/0x320 [ 834.522846][ T5723] ? __pfx___mutex_lock+0x10/0x10 [ 834.522865][ T5723] ? __pfx_vfs_read+0x10/0x10 [ 834.522885][ T5723] ? __fget_files+0x2a/0x420 [ 834.522911][ T5723] ? __fget_files+0x3a0/0x420 [ 834.522930][ T5723] ? __fget_files+0x2a/0x420 [ 834.522968][ T5723] ksys_read+0x145/0x250 [ 834.522989][ T5723] ? __pfx_ksys_read+0x10/0x10 [ 834.523012][ T5723] ? do_syscall_64+0xbe/0xfa0 [ 834.523040][ T5723] do_syscall_64+0xfa/0xfa0 [ 834.523062][ T5723] ? lockdep_hardirqs_on+0x9c/0x150 [ 834.523086][ T5723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.523104][ T5723] ? clear_bhb_loop+0x60/0xb0 [ 834.523126][ T5723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.523143][ T5723] RIP: 0033:0x7f964c38d8dc [ 834.523160][ T5723] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 834.523175][ T5723] RSP: 002b:00007f964d18d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 834.523196][ T5723] RAX: ffffffffffffffda RBX: 00007f964c5e5fa0 RCX: 00007f964c38d8dc [ 834.523210][ T5723] RDX: 000000000000000f RSI: 00007f964d18d0a0 RDI: 0000000000000004 [ 834.523222][ T5723] RBP: 00007f964d18d090 R08: 0000000000000000 R09: 0000000000000000 [ 834.523234][ T5723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 834.523246][ T5723] R13: 00007f964c5e6038 R14: 00007f964c5e5fa0 R15: 00007ffc506bdfa8 [ 834.523279][ T5723] [ 835.332256][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 835.468964][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8554'. [ 835.710867][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8555'. [ 835.996766][ T5879] bridge_slave_0: left allmulticast mode [ 836.011851][ T5879] bridge_slave_0: left promiscuous mode [ 836.017814][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.143613][ T5879] bond0: (slave bridge0): Releasing backup interface [ 836.282508][ T6001] vxcan1 speed is unknown, defaulting to 1000 [ 836.477268][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8564'. [ 836.631915][ T6013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8566'. [ 836.913478][ T6115] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8570'. [ 837.995591][ T6370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 838.263258][ T6379] FAULT_INJECTION: forcing a failure. [ 838.263258][ T6379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.305323][ T6379] CPU: 1 UID: 0 PID: 6379 Comm: syz.3.8590 Not tainted syzkaller #0 PREEMPT(full) [ 838.305349][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 838.305360][ T6379] Call Trace: [ 838.305368][ T6379] [ 838.305377][ T6379] dump_stack_lvl+0x189/0x250 [ 838.305401][ T6379] ? __pfx____ratelimit+0x10/0x10 [ 838.305424][ T6379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 838.305441][ T6379] ? __pfx__printk+0x10/0x10 [ 838.305468][ T6379] should_fail_ex+0x414/0x560 [ 838.305492][ T6379] _copy_to_user+0x31/0xb0 [ 838.305516][ T6379] simple_read_from_buffer+0xe1/0x170 [ 838.305542][ T6379] proc_fail_nth_read+0x1b3/0x220 [ 838.305569][ T6379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 838.305597][ T6379] ? rw_verify_area+0x2a6/0x4d0 [ 838.305612][ T6379] ? __lock_acquire+0xab9/0xd20 [ 838.305633][ T6379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 838.305657][ T6379] vfs_read+0x1fd/0xa30 [ 838.305674][ T6379] ? fdget_pos+0x247/0x320 [ 838.305699][ T6379] ? __pfx___mutex_lock+0x10/0x10 [ 838.305718][ T6379] ? __pfx_vfs_read+0x10/0x10 [ 838.305736][ T6379] ? __fget_files+0x2a/0x420 [ 838.305760][ T6379] ? __fget_files+0x3a0/0x420 [ 838.305786][ T6379] ? __fget_files+0x2a/0x420 [ 838.305813][ T6379] ksys_read+0x145/0x250 [ 838.305835][ T6379] ? __pfx_ksys_read+0x10/0x10 [ 838.305858][ T6379] ? do_syscall_64+0xbe/0xfa0 [ 838.305886][ T6379] do_syscall_64+0xfa/0xfa0 [ 838.305912][ T6379] ? lockdep_hardirqs_on+0x9c/0x150 [ 838.305936][ T6379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.305954][ T6379] ? clear_bhb_loop+0x60/0xb0 [ 838.305975][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.305992][ T6379] RIP: 0033:0x7f804b98d8dc [ 838.306009][ T6379] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 838.306025][ T6379] RSP: 002b:00007f8049bee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 838.306044][ T6379] RAX: ffffffffffffffda RBX: 00007f804bbe5fa0 RCX: 00007f804b98d8dc [ 838.306056][ T6379] RDX: 000000000000000f RSI: 00007f8049bee0a0 RDI: 0000000000000003 [ 838.306068][ T6379] RBP: 00007f8049bee090 R08: 0000000000000000 R09: 0000000000000000 [ 838.306078][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.306089][ T6379] R13: 00007f804bbe6038 R14: 00007f804bbe5fa0 R15: 00007ffc5ef4a108 [ 838.306122][ T6379] [ 838.622148][ T6387] netlink: 448 bytes leftover after parsing attributes in process `syz.3.8595'. [ 838.960821][ T6407] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8602'. [ 839.670419][ T6547] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8619'. [ 839.694648][ T6545] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8617'. [ 839.755135][ T6549] vxcan1 speed is unknown, defaulting to 1000 [ 839.859968][ T6556] netlink: 'syz.3.8622': attribute type 10 has an invalid length. [ 840.216931][ T6662] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8625'. [ 840.596194][ T6686] tipc: Enabled bearer , priority 0 [ 840.628232][ T6686] syzkaller0: entered promiscuous mode [ 840.637981][ T6690] netlink: 448 bytes leftover after parsing attributes in process `syz.2.8634'. [ 840.667291][ T6686] syzkaller0: entered allmulticast mode [ 840.729675][ T6686] tipc: Resetting bearer [ 840.875063][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8638'. [ 841.272953][ T6807] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8641'. [ 841.334023][ T6681] tipc: Resetting bearer [ 841.524774][ T6681] tipc: Disabling bearer [ 841.592035][ T6821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 841.688749][ T6825] netlink: 448 bytes leftover after parsing attributes in process `syz.0.8648'. [ 841.955816][ T6837] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8653'. [ 843.716483][ T7016] xt_hashlimit: max too large, truncated to 1048576 [ 843.779273][ T7016] xt_bpf: check failed: parse error [ 843.930914][ T7022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 844.304160][ T7054] __nla_validate_parse: 1 callbacks suppressed [ 844.304181][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8700'. [ 844.384021][ T7055] netlink: 277 bytes leftover after parsing attributes in process `syz.4.8701'. [ 844.545582][ T5828] IPVS: starting estimator thread 0... [ 844.633424][ T7148] batadv_slave_0: entered promiscuous mode [ 844.642007][ T7068] IPVS: using max 27 ests per chain, 64800 per kthread [ 845.163183][ T7204] netlink: 'syz.0.8719': attribute type 1 has an invalid length. [ 845.192685][ T7204] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8719'. [ 845.232456][ T7211] vxcan1: entered allmulticast mode [ 845.272706][ T7211] vxcan1: left allmulticast mode [ 845.287570][ T7210] vxcan1 speed is unknown, defaulting to 1000 [ 845.345967][ T7272] netlink: 'syz.0.8725': attribute type 6 has an invalid length. [ 845.435128][ T7211] raw_sendmsg: syz.2.8721 forgot to set AF_INET. Fix it! [ 845.865487][ T7348] netlink: 'syz.2.8734': attribute type 29 has an invalid length. [ 846.054679][ T7358] netlink: 'syz.4.8739': attribute type 1 has an invalid length. [ 846.063053][ T7358] netlink: 248 bytes leftover after parsing attributes in process `syz.4.8739'. [ 846.189683][ T7363] netlink: 'syz.0.8740': attribute type 1 has an invalid length. [ 846.370378][ T7363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 846.430653][ T7378] netlink: 'syz.4.8746': attribute type 1 has an invalid length. [ 846.440347][ T7378] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8746'. [ 846.445414][ T7363] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8740'. [ 846.493874][ T7378] netlink: 'syz.4.8746': attribute type 1 has an invalid length. [ 846.516057][ T7378] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8746'. [ 846.624719][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8750'. [ 846.686855][ T7394] xt_bpf: check failed: parse error [ 847.372585][ T7533] xt_bpf: check failed: parse error [ 847.710068][ T7646] IPVS: length: 63 != 24 [ 847.862597][ T7664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 847.901124][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8770'. [ 848.323092][ T7684] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.8778'. [ 848.448872][ T7686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 848.783171][ T7703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 849.178532][ T7827] vxcan1 speed is unknown, defaulting to 1000 [ 849.645407][ T7882] vxcan1 speed is unknown, defaulting to 1000 [ 850.024948][ T7957] __nla_validate_parse: 5 callbacks suppressed [ 850.024968][ T7957] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.8806'. [ 850.236343][ T8069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8810'. [ 850.294810][ T8070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8810'. [ 850.958614][ T8102] FAULT_INJECTION: forcing a failure. [ 850.958614][ T8102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.987619][ T8102] CPU: 1 UID: 0 PID: 8102 Comm: syz.2.8823 Not tainted syzkaller #0 PREEMPT(full) [ 850.987648][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 850.987658][ T8102] Call Trace: [ 850.987666][ T8102] [ 850.987675][ T8102] dump_stack_lvl+0x189/0x250 [ 850.987699][ T8102] ? __pfx____ratelimit+0x10/0x10 [ 850.987723][ T8102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 850.987741][ T8102] ? __pfx__printk+0x10/0x10 [ 850.987773][ T8102] should_fail_ex+0x414/0x560 [ 850.987797][ T8102] _copy_to_user+0x31/0xb0 [ 850.987823][ T8102] simple_read_from_buffer+0xe1/0x170 [ 850.987849][ T8102] proc_fail_nth_read+0x1b3/0x220 [ 850.987876][ T8102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 850.987914][ T8102] ? rw_verify_area+0x2a6/0x4d0 [ 850.987932][ T8102] ? __lock_acquire+0xab9/0xd20 [ 850.987951][ T8102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 850.987974][ T8102] vfs_read+0x1fd/0xa30 [ 850.987988][ T8102] ? fdget_pos+0x247/0x320 [ 850.988008][ T8102] ? __pfx___mutex_lock+0x10/0x10 [ 850.988023][ T8102] ? __pfx_vfs_read+0x10/0x10 [ 850.988038][ T8102] ? __fget_files+0x2a/0x420 [ 850.988058][ T8102] ? __fget_files+0x3a0/0x420 [ 850.988073][ T8102] ? __fget_files+0x2a/0x420 [ 850.988096][ T8102] ksys_read+0x145/0x250 [ 850.988113][ T8102] ? __pfx_ksys_read+0x10/0x10 [ 850.988130][ T8102] ? do_syscall_64+0xbe/0xfa0 [ 850.988153][ T8102] do_syscall_64+0xfa/0xfa0 [ 850.988177][ T8102] ? lockdep_hardirqs_on+0x9c/0x150 [ 850.988197][ T8102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.988211][ T8102] ? clear_bhb_loop+0x60/0xb0 [ 850.988228][ T8102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.988241][ T8102] RIP: 0033:0x7f32f438d8dc [ 850.988256][ T8102] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 850.988270][ T8102] RSP: 002b:00007f32f51b0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 850.988286][ T8102] RAX: ffffffffffffffda RBX: 00007f32f45e5fa0 RCX: 00007f32f438d8dc [ 850.988297][ T8102] RDX: 000000000000000f RSI: 00007f32f51b00a0 RDI: 0000000000000004 [ 850.988306][ T8102] RBP: 00007f32f51b0090 R08: 0000000000000000 R09: 0000000000000000 [ 850.988315][ T8102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.988324][ T8102] R13: 00007f32f45e6038 R14: 00007f32f45e5fa0 R15: 00007ffd83e47ee8 [ 850.988351][ T8102] [ 851.410017][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8826'. [ 851.483642][ T8163] xfrm1: entered promiscuous mode [ 851.493843][ T8163] xfrm1: entered allmulticast mode [ 851.739283][ T8225] vxcan1 speed is unknown, defaulting to 1000 [ 852.585736][ T8267] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8843'. [ 852.610257][ T8266] vxcan1 speed is unknown, defaulting to 1000 [ 852.619539][ T8267] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8843'. [ 853.064330][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8855'. [ 853.170767][ T8381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8852'. [ 853.218133][ T8392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8856'. [ 853.269144][ T8381] bond3: entered promiscuous mode [ 853.280166][ T8381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 853.640259][ T8381] bond3 (unregistering): Released all slaves [ 853.839133][ T8398] vxcan1 speed is unknown, defaulting to 1000 [ 854.113391][ T8403] netlink: 'syz.2.8858': attribute type 11 has an invalid length. [ 854.595596][ T8415] xt_hashlimit: max too large, truncated to 1048576 [ 854.687104][ T8415] xt_bpf: check failed: parse error [ 856.311805][ T8674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 856.607699][ T8685] vxcan1 speed is unknown, defaulting to 1000 [ 856.689444][ T8696] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 856.958680][ T8802] FAULT_INJECTION: forcing a failure. [ 856.958680][ T8802] name failslab, interval 1, probability 0, space 0, times 0 [ 856.981478][ T8802] CPU: 0 UID: 0 PID: 8802 Comm: syz.3.8894 Not tainted syzkaller #0 PREEMPT(full) [ 856.981506][ T8802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 856.981517][ T8802] Call Trace: [ 856.981525][ T8802] [ 856.981535][ T8802] dump_stack_lvl+0x189/0x250 [ 856.981559][ T8802] ? __pfx____ratelimit+0x10/0x10 [ 856.981584][ T8802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 856.981602][ T8802] ? __pfx__printk+0x10/0x10 [ 856.981627][ T8802] ? __pfx___might_resched+0x10/0x10 [ 856.981651][ T8802] ? fs_reclaim_acquire+0x7d/0x100 [ 856.981675][ T8802] should_fail_ex+0x414/0x560 [ 856.981698][ T8802] should_failslab+0xa8/0x100 [ 856.981720][ T8802] __kmalloc_cache_noprof+0x70/0x3d0 [ 856.981739][ T8802] ? __request_module+0x2b5/0x5e0 [ 856.981767][ T8802] __request_module+0x2b5/0x5e0 [ 856.981794][ T8802] ? rtnl_link_ops_get+0x23/0x250 [ 856.981817][ T8802] ? __pfx___request_module+0x10/0x10 [ 856.981852][ T8802] ? rtnl_link_ops_get+0x23/0x250 [ 856.981871][ T8802] ? rtnl_link_ops_get+0x23/0x250 [ 856.981894][ T8802] ? rtnl_link_ops_get+0x215/0x250 [ 856.981920][ T8802] rtnl_newlink+0x65d/0x1c80 [ 856.981954][ T8802] ? __pfx_rtnl_newlink+0x10/0x10 [ 856.981978][ T8802] ? __lock_acquire+0xab9/0xd20 [ 856.982014][ T8802] ? __lock_acquire+0xab9/0xd20 [ 856.982047][ T8802] ? __lock_acquire+0xab9/0xd20 [ 856.982090][ T8802] ? is_bpf_text_address+0x26/0x2b0 [ 856.982119][ T8802] ? is_bpf_text_address+0x292/0x2b0 [ 856.982142][ T8802] ? is_bpf_text_address+0x26/0x2b0 [ 856.982174][ T8802] ? __lock_acquire+0xab9/0xd20 [ 856.982222][ T8802] ? __pfx_rtnl_newlink+0x10/0x10 [ 856.982243][ T8802] rtnetlink_rcv_msg+0x7cf/0xb70 [ 856.982263][ T8802] ? __lock_acquire+0xab9/0xd20 [ 856.982287][ T8802] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 856.982315][ T8802] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 856.982354][ T8802] netlink_rcv_skb+0x208/0x470 [ 856.982375][ T8802] ? __lock_acquire+0xab9/0xd20 [ 856.982398][ T8802] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 856.982420][ T8802] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 856.982454][ T8802] ? netlink_deliver_tap+0x2e/0x1b0 [ 856.982484][ T8802] netlink_unicast+0x82f/0x9e0 [ 856.982514][ T8802] ? __pfx_netlink_unicast+0x10/0x10 [ 856.982536][ T8802] ? netlink_sendmsg+0x642/0xb30 [ 856.982555][ T8802] ? skb_put+0x11b/0x210 [ 856.982581][ T8802] netlink_sendmsg+0x805/0xb30 [ 856.982613][ T8802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 856.982638][ T8802] ? aa_sock_msg_perm+0xf1/0x1d0 [ 856.982662][ T8802] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 856.982685][ T8802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 856.982708][ T8802] __sock_sendmsg+0x21c/0x270 [ 856.982730][ T8802] ____sys_sendmsg+0x505/0x830 [ 856.982760][ T8802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 856.982793][ T8802] ? import_iovec+0x74/0xa0 [ 856.982819][ T8802] ___sys_sendmsg+0x21f/0x2a0 [ 856.982845][ T8802] ? __pfx____sys_sendmsg+0x10/0x10 [ 856.982904][ T8802] ? __fget_files+0x2a/0x420 [ 856.982923][ T8802] ? __fget_files+0x3a0/0x420 [ 856.982953][ T8802] __x64_sys_sendmsg+0x19b/0x260 [ 856.982979][ T8802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 856.983011][ T8802] ? __pfx_ksys_write+0x10/0x10 [ 856.983034][ T8802] ? do_syscall_64+0xbe/0xfa0 [ 856.983061][ T8802] do_syscall_64+0xfa/0xfa0 [ 856.983083][ T8802] ? lockdep_hardirqs_on+0x9c/0x150 [ 856.983106][ T8802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.983124][ T8802] ? clear_bhb_loop+0x60/0xb0 [ 856.983145][ T8802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.983162][ T8802] RIP: 0033:0x7f804b98eec9 [ 856.983179][ T8802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.983195][ T8802] RSP: 002b:00007f8049bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 856.983215][ T8802] RAX: ffffffffffffffda RBX: 00007f804bbe5fa0 RCX: 00007f804b98eec9 [ 856.983228][ T8802] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 856.983240][ T8802] RBP: 00007f8049bee090 R08: 0000000000000000 R09: 0000000000000000 [ 856.983252][ T8802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.983263][ T8802] R13: 00007f804bbe6038 R14: 00007f804bbe5fa0 R15: 00007ffc5ef4a108 [ 856.983301][ T8802] [ 857.458300][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8893'. [ 857.657832][ T8812] xt_CT: You must specify a L4 protocol and not use inversions on it [ 857.746284][ T8814] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 858.160515][ T8832] vxcan1 speed is unknown, defaulting to 1000 [ 858.386000][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8902'. [ 859.057436][ T8953] vxcan1 speed is unknown, defaulting to 1000 [ 859.567238][ T9081] FAULT_INJECTION: forcing a failure. [ 859.567238][ T9081] name failslab, interval 1, probability 0, space 0, times 0 [ 859.584655][ T9081] CPU: 1 UID: 0 PID: 9081 Comm: syz.3.8921 Not tainted syzkaller #0 PREEMPT(full) [ 859.584683][ T9081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 859.584694][ T9081] Call Trace: [ 859.584702][ T9081] [ 859.584711][ T9081] dump_stack_lvl+0x189/0x250 [ 859.584734][ T9081] ? __pfx____ratelimit+0x10/0x10 [ 859.584757][ T9081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 859.584773][ T9081] ? __pfx__printk+0x10/0x10 [ 859.584796][ T9081] ? __pfx___might_resched+0x10/0x10 [ 859.584826][ T9081] should_fail_ex+0x414/0x560 [ 859.584852][ T9081] should_failslab+0xa8/0x100 [ 859.584872][ T9081] __kmalloc_cache_noprof+0x70/0x3d0 [ 859.584891][ T9081] ? call_usermodehelper_setup+0x8e/0x270 [ 859.584911][ T9081] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 859.584935][ T9081] call_usermodehelper_setup+0x8e/0x270 [ 859.584956][ T9081] ? __pfx_free_modprobe_argv+0x10/0x10 [ 859.584984][ T9081] __request_module+0x39f/0x5e0 [ 859.585013][ T9081] ? rtnl_link_ops_get+0x23/0x250 [ 859.585035][ T9081] ? __pfx___request_module+0x10/0x10 [ 859.585070][ T9081] ? rtnl_link_ops_get+0x23/0x250 [ 859.585089][ T9081] ? rtnl_link_ops_get+0x23/0x250 [ 859.585111][ T9081] ? rtnl_link_ops_get+0x215/0x250 [ 859.585136][ T9081] rtnl_newlink+0x65d/0x1c80 [ 859.585170][ T9081] ? __pfx_rtnl_newlink+0x10/0x10 [ 859.585198][ T9081] ? is_bpf_text_address+0x26/0x2b0 [ 859.585231][ T9081] ? __lock_acquire+0xab9/0xd20 [ 859.585265][ T9081] ? __lock_acquire+0xab9/0xd20 [ 859.585314][ T9081] ? is_bpf_text_address+0x26/0x2b0 [ 859.585340][ T9081] ? is_bpf_text_address+0x292/0x2b0 [ 859.585362][ T9081] ? is_bpf_text_address+0x26/0x2b0 [ 859.585395][ T9081] ? __lock_acquire+0xab9/0xd20 [ 859.585439][ T9081] ? __pfx_rtnl_newlink+0x10/0x10 [ 859.585459][ T9081] rtnetlink_rcv_msg+0x7cf/0xb70 [ 859.585478][ T9081] ? __lock_acquire+0xab9/0xd20 [ 859.585503][ T9081] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 859.585523][ T9081] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 859.585559][ T9081] netlink_rcv_skb+0x208/0x470 [ 859.585579][ T9081] ? __lock_acquire+0xab9/0xd20 [ 859.585600][ T9081] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 859.585620][ T9081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 859.585656][ T9081] ? netlink_deliver_tap+0x2e/0x1b0 [ 859.585681][ T9081] netlink_unicast+0x82f/0x9e0 [ 859.585708][ T9081] ? __pfx_netlink_unicast+0x10/0x10 [ 859.585728][ T9081] ? netlink_sendmsg+0x642/0xb30 [ 859.585747][ T9081] ? skb_put+0x11b/0x210 [ 859.585770][ T9081] netlink_sendmsg+0x805/0xb30 [ 859.585798][ T9081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.585821][ T9081] ? aa_sock_msg_perm+0xf1/0x1d0 [ 859.585842][ T9081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 859.585863][ T9081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.585884][ T9081] __sock_sendmsg+0x21c/0x270 [ 859.585912][ T9081] ____sys_sendmsg+0x505/0x830 [ 859.585940][ T9081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 859.585973][ T9081] ? import_iovec+0x74/0xa0 [ 859.585999][ T9081] ___sys_sendmsg+0x21f/0x2a0 [ 859.586025][ T9081] ? __pfx____sys_sendmsg+0x10/0x10 [ 859.586078][ T9081] ? __fget_files+0x2a/0x420 [ 859.586096][ T9081] ? __fget_files+0x3a0/0x420 [ 859.586124][ T9081] __x64_sys_sendmsg+0x19b/0x260 [ 859.586149][ T9081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 859.586179][ T9081] ? __pfx_ksys_write+0x10/0x10 [ 859.586198][ T9081] ? do_syscall_64+0xbe/0xfa0 [ 859.586223][ T9081] do_syscall_64+0xfa/0xfa0 [ 859.586244][ T9081] ? lockdep_hardirqs_on+0x9c/0x150 [ 859.586265][ T9081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.586287][ T9081] ? clear_bhb_loop+0x60/0xb0 [ 859.586307][ T9081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.586321][ T9081] RIP: 0033:0x7f804b98eec9 [ 859.586337][ T9081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 859.586351][ T9081] RSP: 002b:00007f8049bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.586370][ T9081] RAX: ffffffffffffffda RBX: 00007f804bbe5fa0 RCX: 00007f804b98eec9 [ 859.586382][ T9081] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 859.586392][ T9081] RBP: 00007f8049bee090 R08: 0000000000000000 R09: 0000000000000000 [ 859.586403][ T9081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.586413][ T9081] R13: 00007f804bbe6038 R14: 00007f804bbe5fa0 R15: 00007ffc5ef4a108 [ 859.586443][ T9081] [ 860.302323][ T9093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8926'. [ 860.319237][ T9093] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8926'. [ 860.916797][ T9110] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8932'. [ 860.922316][ T9112] xt_hashlimit: max too large, truncated to 1048576 [ 860.992866][ T9112] xt_bpf: check failed: parse error [ 861.082545][ T9118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 861.244997][ T9116] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8936'. [ 861.327303][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8941'. [ 861.379577][ T9173] netlink: 'syz.3.8942': attribute type 1 has an invalid length. [ 861.430751][ T9135] vxcan1 speed is unknown, defaulting to 1000 [ 862.183063][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8945'. [ 862.213819][ T9246] netlink: 'syz.3.8945': attribute type 5 has an invalid length. [ 862.271027][ T9257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8948'. [ 862.283027][ T9246] netlink: 'syz.3.8945': attribute type 8 has an invalid length. [ 862.302645][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8945'. [ 862.329086][ T9259] bond0: (slave bridge0): Releasing backup interface [ 862.395781][ T9259] bridge0: left promiscuous mode [ 862.403454][ T9259] bridge_slave_0: left allmulticast mode [ 862.419242][ T9259] bridge_slave_0: left promiscuous mode [ 862.429637][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.645295][ T9259] bridge_slave_1: left allmulticast mode [ 862.650987][ T9259] bridge_slave_1: left promiscuous mode [ 862.668917][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.742505][ T9259] bond0: (slave bond_slave_0): Releasing backup interface [ 862.778020][ T9259] bond_slave_0: left promiscuous mode [ 862.790127][ T9259] bond0: (slave bond_slave_1): Releasing backup interface [ 862.813562][ T9259] bond_slave_1: left promiscuous mode [ 862.822004][ T9259] team0: Port device team_slave_0 removed [ 862.839861][ T9259] team0: Port device team_slave_1 removed [ 862.853896][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.874042][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.884790][ T9259] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 862.928414][ T9246] geneve4: entered promiscuous mode [ 862.937032][ T9246] geneve4: entered allmulticast mode [ 863.069175][ T9371] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 863.071236][T16683] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 863.161431][T16683] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 863.170200][T16683] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 863.222992][T16683] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 863.283616][ T9297] vxcan1 speed is unknown, defaulting to 1000 [ 863.539242][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8957'. [ 863.578641][ T9587] vlan0: entered promiscuous mode [ 863.649804][ T9590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8957'. [ 863.680058][ T9592] geneve3: entered promiscuous mode [ 863.696273][ T1136] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 863.719471][ T1136] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 863.837846][ T1136] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 863.862742][ T3484] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 864.030296][ T9703] ip6gre1: entered promiscuous mode [ 864.050681][ T9600] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.079919][ T9600] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.104300][ T9600] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.173006][ T9600] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 864.237886][ T9600] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.263506][ T9600] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.296491][ T9600] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.340227][ T9600] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.351018][ T9708] vxcan1 speed is unknown, defaulting to 1000 [ 864.377045][ T9600] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.429519][ T9600] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.470897][ T9600] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.517312][ T9600] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.526680][ T9600] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.552561][ T9600] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.919325][ T9822] geneve3: entered promiscuous mode [ 864.941075][ T1136] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.981068][ T1136] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.002228][ T1136] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.038690][ T1136] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.445820][ T9710] vxcan1 speed is unknown, defaulting to 1000 [ 865.629556][ T9838] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8974'. [ 865.803081][ T9840] IPVS: Error connecting to the multicast addr [ 865.847403][ T9708] virt_wifi0 speed is unknown, defaulting to 1000 [ 866.079666][ T9844] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8977'. [ 866.090213][ T9842] vxcan1 speed is unknown, defaulting to 1000 [ 866.486382][ T9842] virt_wifi0 speed is unknown, defaulting to 1000 [ 867.636685][ T9981] netlink: 'syz.4.8990': attribute type 13 has an invalid length. [ 867.674953][ T9981] netlink: 'syz.4.8990': attribute type 17 has an invalid length. [ 867.737230][ T9985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 867.937345][ T9981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.966554][ T9981] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.007695][ T9981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 868.207043][T10098] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 868.309061][T10118] Unsupported ieee802154 address type: 0 [ 868.579376][T10212] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9001'. [ 868.705309][T10221] xt_CT: You must specify a L4 protocol and not use inversions on it [ 868.725378][T10223] xt_hashlimit: max too large, truncated to 1048576 [ 868.745964][T10226] geneve4: entered promiscuous mode [ 868.753030][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.766994][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.776170][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.822593][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.832852][T10223] xt_bpf: check failed: parse error [ 869.065838][T10230] vxcan1 speed is unknown, defaulting to 1000 [ 869.374132][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9013'. [ 869.654466][T10345] vxcan1 speed is unknown, defaulting to 1000 [ 869.654483][T10230] virt_wifi0 speed is unknown, defaulting to 1000 [ 869.968794][T10345] virt_wifi0 speed is unknown, defaulting to 1000 [ 870.136469][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 870.299873][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9020'. [ 870.647371][T10381] vxcan1 speed is unknown, defaulting to 1000 [ 871.374776][T10380] vxcan1 speed is unknown, defaulting to 1000 [ 871.375991][T10381] virt_wifi0 speed is unknown, defaulting to 1000 [ 871.405363][T10417] syz_tun: entered allmulticast mode [ 871.605719][T10404] syz_tun: left allmulticast mode [ 871.862260][T10516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9034'. [ 872.320005][T10380] virt_wifi0 speed is unknown, defaulting to 1000 [ 872.453285][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 872.464264][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 872.474619][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 872.498829][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 872.507180][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 872.935813][T10519] vxcan1 speed is unknown, defaulting to 1000 [ 872.959804][T10533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9039'. [ 873.132441][T10537] netlink: 'syz.4.9041': attribute type 10 has an invalid length. [ 873.226016][T10539] netlink: 596 bytes leftover after parsing attributes in process `syz.2.9042'. [ 873.412027][T10542] vxcan1 speed is unknown, defaulting to 1000 [ 873.423106][T10519] virt_wifi0 speed is unknown, defaulting to 1000 [ 874.023504][T10557] netlink: 'syz.0.9047': attribute type 33 has an invalid length. [ 874.029910][T10519] chnl_net:caif_netlink_parms(): no params data found [ 874.032113][T10557] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9047'. [ 874.136601][T10555] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9046'. [ 874.146741][T10555] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 874.206105][T10555] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9046'. [ 874.357140][T10519] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.369607][T10519] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.410324][T10519] bridge_slave_0: entered allmulticast mode [ 874.423422][T10566] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9049'. [ 874.429937][T10519] bridge_slave_0: entered promiscuous mode [ 874.446334][T10542] virt_wifi0 speed is unknown, defaulting to 1000 [ 874.485772][T10519] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.513399][T10519] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.520783][T10519] bridge_slave_1: entered allmulticast mode [ 874.543764][T10519] bridge_slave_1: entered promiscuous mode [ 874.617029][ T51] Bluetooth: hci2: command tx timeout [ 874.626409][T10572] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9052'. [ 874.636988][T10577] xt_hashlimit: max too large, truncated to 1048576 [ 874.684807][T10577] xt_bpf: check failed: parse error [ 874.764712][T10574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9053'. [ 874.804345][T10578] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9052'. [ 874.806051][T10519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.866621][T10519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.912148][T10578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.934149][T10578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.964734][T10578] bond0 (unregistering): Released all slaves [ 875.176791][T10519] team0: Port device team_slave_0 added [ 875.209044][T10519] team0: Port device team_slave_1 added [ 875.236535][T10593] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9059'. [ 875.278106][T10519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.312702][T10519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.381773][T10519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.405215][T10519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.413529][T10519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.453741][T10519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.812512][T10605] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9063'. [ 875.850492][T10519] hsr_slave_0: entered promiscuous mode [ 875.870489][T10519] hsr_slave_1: entered promiscuous mode [ 875.880447][T10519] debugfs: 'hsr0' already exists in 'hsr' [ 875.886841][T10519] Cannot create hsr debugfs directory [ 875.900077][T10605] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9063'. [ 876.335373][T10519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.376746][T10519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 876.419359][T10519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 876.574086][T10519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.590243][T10519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 876.614706][T10519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 876.698835][ T51] Bluetooth: hci2: command tx timeout [ 876.785539][T10519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.813725][T10519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 876.835598][T10519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 876.936743][T10519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.972919][T10519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 876.993735][T10647] netlink: 'syz.3.9077': attribute type 1 has an invalid length. [ 877.002289][T10519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 877.191088][T10647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 877.227588][T10647] netlink: 'syz.3.9077': attribute type 1 has an invalid length. [ 877.349995][T10649] bond2: (slave veth5): Enslaving as an active interface with a down link [ 877.397376][T10647] netlink: 'syz.3.9077': attribute type 1 has an invalid length. [ 877.476494][T10649] bond2: (slave veth7): Enslaving as an active interface with a down link [ 877.502773][T10647] netlink: 'syz.3.9077': attribute type 1 has an invalid length. [ 877.590816][T10649] bond2: (slave veth9): Enslaving as an active interface with a down link [ 877.698677][T10649] bond2: (slave veth11): Enslaving as an active interface with a down link [ 877.723996][T10647] netlink: 'syz.3.9077': attribute type 1 has an invalid length. [ 877.773924][T10649] bond2: (slave veth13): Enslaving as an active interface with a down link [ 877.820335][T10647] netlink: 'syz.3.9077': attribute type 1 has an invalid length. [ 877.846079][T10649] bond2: (slave veth15): Enslaving as an active interface with a down link [ 877.930095][T10519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 877.976071][T10519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 878.029057][T10519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 878.055887][T10519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 878.114100][T10681] 8021q: adding VLAN 0 to HW filter on device bond3 [ 878.403105][T10706] Bluetooth: MGMT ver 1.23 [ 878.485558][T10708] netlink: 'syz.4.9094': attribute type 10 has an invalid length. [ 878.516235][T10519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.604191][T10519] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.663296][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.671069][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.708100][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.715375][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.780654][ T51] Bluetooth: hci2: command tx timeout [ 879.317520][T10519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.605591][T10519] veth0_vlan: entered promiscuous mode [ 879.676577][T10519] veth1_vlan: entered promiscuous mode [ 879.755806][T10519] veth0_macvtap: entered promiscuous mode [ 879.777604][T10519] veth1_macvtap: entered promiscuous mode [ 879.803534][T10746] veth1_to_batadv: entered allmulticast mode [ 879.856817][T10519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.916210][T10519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.982844][ T3484] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.003893][ T3484] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.043948][ T3484] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.063030][ T3484] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.196228][T10759] veth0: entered promiscuous mode [ 880.232102][T10758] vxcan1 speed is unknown, defaulting to 1000 [ 880.256951][T10764] netlink: 'syz.4.9111': attribute type 10 has an invalid length. [ 880.339353][T10764] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 880.379106][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.398064][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.554162][ T1317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.570199][ T1317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.856905][ T51] Bluetooth: hci2: command tx timeout [ 881.067486][T10758] virt_wifi0 speed is unknown, defaulting to 1000 [ 881.203707][T10759] veth0: left promiscuous mode [ 881.230390][T10785] netlink: 'syz.1.9117': attribute type 1 has an invalid length. [ 881.252225][T10785] netlink: 'syz.1.9117': attribute type 2 has an invalid length. [ 881.260011][T10785] __nla_validate_parse: 3 callbacks suppressed [ 881.260032][T10785] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9117'. [ 881.318526][T10787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9118'. [ 881.721109][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 881.734591][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 881.767965][T10799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 881.785573][T10799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 881.803611][T10799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 882.069742][T23631] bond0: (slave syz_tun): Releasing backup interface [ 882.274271][T10794] vxcan1 speed is unknown, defaulting to 1000 [ 882.962607][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9132'. [ 883.074249][T10835] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9133'. [ 883.135481][T10794] virt_wifi0 speed is unknown, defaulting to 1000 [ 883.541066][T10847] netlink: 'syz.3.9137': attribute type 10 has an invalid length. [ 883.598751][T10851] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9139'. [ 883.669520][T10847] bridge0: entered promiscuous mode [ 883.683097][T10847] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 883.716059][T10859] block nbd1: Unsupported socket: should be TCP or UNIX. [ 883.730068][T10854] vlan0: entered promiscuous mode [ 883.746826][T10854] geneve1: entered promiscuous mode [ 883.768764][T10854] vlan0: entered allmulticast mode [ 883.778730][T10854] geneve1: entered allmulticast mode [ 883.892151][T10799] Bluetooth: hci3: command tx timeout [ 884.045071][T10794] chnl_net:caif_netlink_parms(): no params data found [ 884.271698][T10886] netlink: 'syz.1.9148': attribute type 13 has an invalid length. [ 884.463993][T10886] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.471771][T10886] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.550282][T10880] Set syz1 is full, maxelem 6117 reached [ 884.700733][T10886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 884.734757][T10886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.869583][T10900] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9155'. [ 885.075538][T10900] vlan4: entered promiscuous mode [ 885.080798][T10900] geneve1: entered promiscuous mode [ 885.087129][T10900] vlan4: entered allmulticast mode [ 885.104397][T10900] geneve1: entered allmulticast mode [ 885.110102][ T4874] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.131470][ T4874] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.164247][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9156'. [ 885.256869][T10794] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.277933][T10794] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.290142][T10794] bridge_slave_0: entered allmulticast mode [ 885.299390][T10794] bridge_slave_0: entered promiscuous mode [ 885.309695][ T4874] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.328525][ T4874] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.360904][T10794] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.372003][T10794] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.392153][T10794] bridge_slave_1: entered allmulticast mode [ 885.415840][T10794] bridge_slave_1: entered promiscuous mode [ 885.495286][T10903] vxcan1 speed is unknown, defaulting to 1000 [ 885.546639][T10794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.610475][T10794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.823099][T10794] team0: Port device team_slave_0 added [ 885.833617][T10794] team0: Port device team_slave_1 added [ 885.974024][T10799] Bluetooth: hci3: command tx timeout [ 885.987109][T10934] netlink: 'syz.3.9164': attribute type 2 has an invalid length. [ 886.030862][T10931] vlan1: entered promiscuous mode [ 886.040782][T10934] netlink: 'syz.3.9164': attribute type 1 has an invalid length. [ 886.094338][T10939] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9164'. [ 886.121367][T10934] netlink: 'syz.3.9164': attribute type 1 has an invalid length. [ 886.160784][T10794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.176998][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.250698][T10794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.278297][T10903] virt_wifi0 speed is unknown, defaulting to 1000 [ 886.325858][T10794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.333763][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.363960][T10794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.528402][T10794] hsr_slave_0: entered promiscuous mode [ 886.544513][T10794] hsr_slave_1: entered promiscuous mode [ 886.552659][T10794] debugfs: 'hsr0' already exists in 'hsr' [ 886.559425][T10794] Cannot create hsr debugfs directory [ 886.758765][T10956] ±ÿ: renamed from batadv_slave_1 [ 887.425123][T10982] netlink: 'syz.2.9180': attribute type 1 has an invalid length. [ 887.438347][T10982] netlink: 'syz.2.9180': attribute type 2 has an invalid length. [ 887.457536][T10982] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9180'. [ 887.532596][T10990] netlink: 33 bytes leftover after parsing attributes in process `syz.2.9184'. [ 887.788575][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9186'. [ 887.813117][T11010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9188'. [ 887.850025][T11010] vlan2: entered promiscuous mode [ 887.856524][T11010] bond0: entered promiscuous mode [ 887.863795][T11010] bond_slave_0: entered promiscuous mode [ 887.869833][T11010] bond_slave_1: entered promiscuous mode [ 887.942495][T11002] vxcan1 speed is unknown, defaulting to 1000 [ 887.959945][T10794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 887.996409][T10794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 888.052490][T10799] Bluetooth: hci3: command tx timeout [ 888.058228][T10794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 888.104986][T10794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 888.156266][T11002] virt_wifi0 speed is unknown, defaulting to 1000 [ 888.249698][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9192'. [ 888.270899][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9192'. [ 888.466260][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9193'. [ 888.517779][T11031] vxcan1 speed is unknown, defaulting to 1000 [ 888.603200][ T3484] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.622756][ T3484] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.648727][ T3484] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.670703][ T3484] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.773686][T10794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.845559][T11047] veth19: entered promiscuous mode [ 888.874285][T10794] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.928955][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.936302][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.977378][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.984628][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.017118][T11031] virt_wifi0 speed is unknown, defaulting to 1000 [ 889.426061][T11062] vxcan1 speed is unknown, defaulting to 1000 [ 890.025569][T11064] vxcan1 speed is unknown, defaulting to 1000 [ 890.033092][T11062] virt_wifi0 speed is unknown, defaulting to 1000 [ 890.047080][T10794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.132866][T10799] Bluetooth: hci3: command tx timeout [ 890.752670][T11064] virt_wifi0 speed is unknown, defaulting to 1000 [ 890.768956][T11088] vxcan1 speed is unknown, defaulting to 1000 [ 890.847035][T10794] veth0_vlan: entered promiscuous mode [ 890.947045][T10794] veth1_vlan: entered promiscuous mode [ 891.128640][T10794] veth0_macvtap: entered promiscuous mode [ 891.146996][T10794] veth1_macvtap: entered promiscuous mode [ 891.181999][T10794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.206411][T10794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.239993][T17095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.250519][T11088] virt_wifi0 speed is unknown, defaulting to 1000 [ 891.254519][T17095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.291790][T17095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.320189][T17095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.660372][T16683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.670453][T16683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.931147][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.958678][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.580892][T11129] bond6 (unregistering): Released all slaves [ 892.922480][T11138] vxcan1 speed is unknown, defaulting to 1000 [ 893.094365][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 893.106911][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 893.117592][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 893.125810][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 893.137560][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 893.400750][T11155] vxcan1 speed is unknown, defaulting to 1000 [ 893.408156][T11138] virt_wifi0 speed is unknown, defaulting to 1000 [ 893.634316][T11175] xt_bpf: check failed: parse error [ 893.753784][T11177] FAULT_INJECTION: forcing a failure. [ 893.753784][T11177] name failslab, interval 1, probability 0, space 0, times 0 [ 893.783191][T11177] CPU: 1 UID: 0 PID: 11177 Comm: syz.4.9234 Not tainted syzkaller #0 PREEMPT(full) [ 893.783219][T11177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 893.783230][T11177] Call Trace: [ 893.783238][T11177] [ 893.783246][T11177] dump_stack_lvl+0x189/0x250 [ 893.783271][T11177] ? __pfx____ratelimit+0x10/0x10 [ 893.783295][T11177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 893.783313][T11177] ? __pfx__printk+0x10/0x10 [ 893.783334][T11177] ? __pfx___might_resched+0x10/0x10 [ 893.783359][T11177] ? fs_reclaim_acquire+0x7d/0x100 [ 893.783384][T11177] should_fail_ex+0x414/0x560 [ 893.783408][T11177] should_failslab+0xa8/0x100 [ 893.783430][T11177] __kmalloc_noprof+0xcb/0x4f0 [ 893.783448][T11177] ? sk_prot_alloc+0xe7/0x220 [ 893.783474][T11177] sk_prot_alloc+0xe7/0x220 [ 893.783495][T11177] ? sk_alloc+0x24/0x370 [ 893.783518][T11177] sk_alloc+0x3a/0x370 [ 893.783539][T11177] ? bpf_ctx_init+0x167/0x1d0 [ 893.783563][T11177] bpf_prog_test_run_skb+0x313/0x1550 [ 893.783593][T11177] ? __fget_files+0x2a/0x420 [ 893.783619][T11177] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 893.783641][T11177] bpf_prog_test_run+0x2c7/0x340 [ 893.783669][T11177] __sys_bpf+0x562/0x860 [ 893.783693][T11177] ? __pfx___sys_bpf+0x10/0x10 [ 893.783733][T11177] ? ksys_write+0x22a/0x250 [ 893.783754][T11177] ? __pfx_ksys_write+0x10/0x10 [ 893.783778][T11177] __x64_sys_bpf+0x7c/0x90 [ 893.783800][T11177] do_syscall_64+0xfa/0xfa0 [ 893.783823][T11177] ? lockdep_hardirqs_on+0x9c/0x150 [ 893.783846][T11177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.783863][T11177] ? clear_bhb_loop+0x60/0xb0 [ 893.783891][T11177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.783907][T11177] RIP: 0033:0x7f59f538eec9 [ 893.783924][T11177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.783939][T11177] RSP: 002b:00007f59f62ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 893.783960][T11177] RAX: ffffffffffffffda RBX: 00007f59f55e5fa0 RCX: 00007f59f538eec9 [ 893.783973][T11177] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 893.783985][T11177] RBP: 00007f59f62ed090 R08: 0000000000000000 R09: 0000000000000000 [ 893.783997][T11177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.784008][T11177] R13: 00007f59f55e6038 R14: 00007f59f55e5fa0 R15: 00007ffca8a4ac98 [ 893.784041][T11177] [ 894.096236][T11155] virt_wifi0 speed is unknown, defaulting to 1000 [ 894.328648][T11193] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9239'. [ 894.411000][T11193] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9239'. [ 894.762428][T11155] chnl_net:caif_netlink_parms(): no params data found [ 894.905890][T11215] netlink: 'syz.2.9244': attribute type 3 has an invalid length. [ 895.008456][T11155] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.018494][T11155] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.032803][T11155] bridge_slave_0: entered allmulticast mode [ 895.040899][T11155] bridge_slave_0: entered promiscuous mode [ 895.052148][T11155] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.059786][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.077472][T11155] bridge_slave_1: entered allmulticast mode [ 895.096780][T11155] bridge_slave_1: entered promiscuous mode [ 895.110193][T11222] FAULT_INJECTION: forcing a failure. [ 895.110193][T11222] name failslab, interval 1, probability 0, space 0, times 0 [ 895.130816][T11222] CPU: 1 UID: 0 PID: 11222 Comm: syz.0.9248 Not tainted syzkaller #0 PREEMPT(full) [ 895.130843][T11222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 895.130855][T11222] Call Trace: [ 895.130863][T11222] [ 895.130871][T11222] dump_stack_lvl+0x189/0x250 [ 895.130894][T11222] ? __pfx____ratelimit+0x10/0x10 [ 895.130918][T11222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 895.130936][T11222] ? __pfx__printk+0x10/0x10 [ 895.130958][T11222] ? __pfx___might_resched+0x10/0x10 [ 895.130986][T11222] should_fail_ex+0x414/0x560 [ 895.131010][T11222] should_failslab+0xa8/0x100 [ 895.131032][T11222] __kmalloc_noprof+0xcb/0x4f0 [ 895.131050][T11222] ? security_sk_alloc+0x52/0x390 [ 895.131079][T11222] security_sk_alloc+0x52/0x390 [ 895.131105][T11222] sk_prot_alloc+0x101/0x220 [ 895.131127][T11222] ? sk_alloc+0x24/0x370 [ 895.131150][T11222] sk_alloc+0x3a/0x370 [ 895.131172][T11222] ? bpf_ctx_init+0x167/0x1d0 [ 895.131194][T11222] bpf_prog_test_run_skb+0x313/0x1550 [ 895.131222][T11222] ? __fget_files+0x2a/0x420 [ 895.131246][T11222] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 895.131266][T11222] bpf_prog_test_run+0x2c7/0x340 [ 895.131294][T11222] __sys_bpf+0x562/0x860 [ 895.131319][T11222] ? __pfx___sys_bpf+0x10/0x10 [ 895.131358][T11222] ? ksys_write+0x22a/0x250 [ 895.131378][T11222] ? __pfx_ksys_write+0x10/0x10 [ 895.131403][T11222] __x64_sys_bpf+0x7c/0x90 [ 895.131425][T11222] do_syscall_64+0xfa/0xfa0 [ 895.131448][T11222] ? lockdep_hardirqs_on+0x9c/0x150 [ 895.131470][T11222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.131488][T11222] ? clear_bhb_loop+0x60/0xb0 [ 895.131510][T11222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.131526][T11222] RIP: 0033:0x7f964c38eec9 [ 895.131543][T11222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 895.131559][T11222] RSP: 002b:00007f964d18d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 895.131578][T11222] RAX: ffffffffffffffda RBX: 00007f964c5e5fa0 RCX: 00007f964c38eec9 [ 895.131592][T11222] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 895.131604][T11222] RBP: 00007f964d18d090 R08: 0000000000000000 R09: 0000000000000000 [ 895.131615][T11222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.131625][T11222] R13: 00007f964c5e6038 R14: 00007f964c5e5fa0 R15: 00007ffc506bdfa8 [ 895.131658][T11222] [ 895.194004][T10799] Bluetooth: hci0: command tx timeout [ 895.384262][T11229] netlink: 'syz.1.9249': attribute type 3 has an invalid length. [ 895.404933][T11229] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9249'. [ 895.433137][T11155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.444006][T11227] vxcan1 speed is unknown, defaulting to 1000 [ 895.447915][T11155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.509688][T11155] team0: Port device team_slave_0 added [ 895.526192][T11155] team0: Port device team_slave_1 added [ 895.591774][T11155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.602271][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.631373][T11155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.648049][T11155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.660844][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.695134][T11155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.732111][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 895.737377][T11234] netlink: 'syz.4.9251': attribute type 1 has an invalid length. [ 895.763301][T11234] netlink: 'syz.4.9251': attribute type 2 has an invalid length. [ 895.869345][T11155] hsr_slave_0: entered promiscuous mode [ 895.888926][T11155] hsr_slave_1: entered promiscuous mode [ 895.896438][T11155] debugfs: 'hsr0' already exists in 'hsr' [ 895.903092][T11155] Cannot create hsr debugfs directory [ 895.908790][T11227] virt_wifi0 speed is unknown, defaulting to 1000 [ 895.909067][T11237] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 896.176793][T11242] tipc: Started in network mode [ 896.183675][T11242] tipc: Node identity , cluster identity 4711 [ 896.189898][T11242] tipc: Failed to obtain node identity [ 896.195614][T11242] tipc: Enabling of bearer rejected, failed to enable media [ 896.431059][T11249] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9257'. [ 896.712358][T11155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.738911][T11155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 896.845293][T11155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.884333][T11155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 897.006005][T11155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.040836][T11155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 897.128998][T11155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.139432][T11155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 897.337951][T16683] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 897.412356][T10799] Bluetooth: hci0: command tx timeout [ 897.433341][T11155] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 897.454722][T11155] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 897.467730][T11155] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 897.482761][T11155] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 897.492516][T11290] netlink: 'syz.2.9271': attribute type 1 has an invalid length. [ 897.617801][T11302] xt_bpf: check failed: parse error [ 897.657167][T11155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.684988][T11155] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.704778][ T4874] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.712060][ T4874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.736573][ T4874] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.743832][ T4874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.992890][T11315] batadv_slave_1: entered promiscuous mode [ 897.998871][T11315] batadv_slave_1: entered allmulticast mode [ 898.069001][T11281] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 898.110387][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9276'. [ 898.125764][T11155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.154592][T11318] bridge14: entered allmulticast mode [ 898.370955][T11155] veth0_vlan: entered promiscuous mode [ 898.423378][T11155] veth1_vlan: entered promiscuous mode [ 898.514006][T11342] netlink: 136 bytes leftover after parsing attributes in process `syz.0.9284'. [ 898.520726][T11155] veth0_macvtap: entered promiscuous mode [ 898.555732][T11155] veth1_macvtap: entered promiscuous mode [ 898.613989][T11155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.633742][T11343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9284'. [ 898.644558][T11344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9284'. [ 898.746871][T11342] vxcan1 speed is unknown, defaulting to 1000 [ 898.750467][T11155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.816001][T16683] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.837041][T16683] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.893064][T16683] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.911747][T16683] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.174552][T17095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.185206][T17095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.309231][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.324216][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.503485][T10799] Bluetooth: hci0: command 0x040f tx timeout [ 899.707659][T11372] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 899.714956][ T5828] IPVS: starting estimator thread 0... [ 899.720790][T11342] virt_wifi0 speed is unknown, defaulting to 1000 [ 899.812641][T11372] netlink: 308 bytes leftover after parsing attributes in process `syz.3.9292'. [ 899.812823][T11374] IPVS: using max 33 ests per chain, 79200 per kthread [ 900.319300][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 900.352527][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 900.361050][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 900.390493][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 900.415784][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 900.492858][T11384] vxcan1 speed is unknown, defaulting to 1000 [ 900.528046][T11389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9297'. [ 900.786353][T11399] netlink: 'syz.4.9299': attribute type 96 has an invalid length. [ 901.250573][T11404] IPVS: length: 130 != 24 [ 901.319230][T11384] virt_wifi0 speed is unknown, defaulting to 1000 [ 901.484243][T11411] netlink: 'syz.4.9302': attribute type 1 has an invalid length. [ 901.492665][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 901.503127][T11411] netlink: 'syz.4.9302': attribute type 2 has an invalid length. [ 901.571335][ T51] Bluetooth: hci0: command 0x040f tx timeout [ 901.716255][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9302'. [ 901.934682][T17095] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.025197][T17095] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.096984][T11384] chnl_net:caif_netlink_parms(): no params data found [ 902.140501][T17095] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.226919][T17095] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.278529][T11436] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9310'. [ 902.451665][T10799] Bluetooth: hci4: command tx timeout [ 902.511137][T11384] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.528698][T11384] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.538257][T11384] bridge_slave_0: entered allmulticast mode [ 902.548878][T11384] bridge_slave_0: entered promiscuous mode [ 902.581845][T11384] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.590491][T11384] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.598790][T11384] bridge_slave_1: entered allmulticast mode [ 902.608103][T11384] bridge_slave_1: entered promiscuous mode [ 902.619852][T11442] vxcan1 speed is unknown, defaulting to 1000 [ 902.735150][T11384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.778928][ T3484] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.806291][ T3484] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 902.886285][T11384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.900844][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.913925][ T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 903.209885][ T4874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.222688][ T4874] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 903.271881][T11442] virt_wifi0 speed is unknown, defaulting to 1000 [ 903.344673][T11384] team0: Port device team_slave_0 added [ 903.356273][ T4874] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.365824][ T4874] netdevsim netdevsim2 eth4: set [1, 1] type 2 family 0 port 20001 - 0 [ 903.385664][T11384] team0: Port device team_slave_1 added [ 903.452494][T17095] bridge_slave_1: left allmulticast mode [ 903.459243][T17095] bridge_slave_1: left promiscuous mode [ 903.476374][T17095] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.497006][T17095] bridge_slave_0: left allmulticast mode [ 903.504543][T17095] bridge_slave_0: left promiscuous mode [ 903.510600][T17095] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.512206][T11483] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9323'. [ 903.658172][T10799] Bluetooth: hci0: command 0x040f tx timeout [ 903.706742][T17095] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 903.718232][T17095] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 12:b3:9e:b2:02:da - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 904.532242][T10799] Bluetooth: hci4: command 0x041b tx timeout [ 904.919650][T17095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.930481][T17095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.944845][T17095] bond0 (unregistering): (slave team0): Releasing backup interface [ 904.955308][T17095] bond0 (unregistering): Released all slaves [ 905.136432][T17095] bond1 (unregistering): (slave veth3): Releasing active interface [ 905.148834][T17095] bond1 (unregistering): Released all slaves [ 905.342169][T17095] bond2 (unregistering): Released all slaves [ 905.500252][T17095] bond3 (unregistering): Released all slaves [ 905.514817][T17095] bond4 (unregistering): Released all slaves [ 905.528408][T17095] bond5 (unregistering): Released all slaves [ 905.647012][T11384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.673110][T11384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.715626][T11384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.728413][T17095] tipc: Left network mode [ 905.804760][T11490] vxcan1 speed is unknown, defaulting to 1000 [ 905.819014][T11384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.832154][T11384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.943182][T11384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.168715][T11384] hsr_slave_0: entered promiscuous mode [ 906.178247][T11384] hsr_slave_1: entered promiscuous mode [ 906.189383][T11384] debugfs: 'hsr0' already exists in 'hsr' [ 906.197017][T11384] Cannot create hsr debugfs directory [ 906.272458][T11490] virt_wifi0 speed is unknown, defaulting to 1000 [ 906.457542][T11505] vxcan1 speed is unknown, defaulting to 1000 [ 906.613494][T10799] Bluetooth: hci4: command 0x041b tx timeout [ 906.896575][T11510] vxcan1 speed is unknown, defaulting to 1000 [ 907.081133][T11384] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.094982][T11384] netdevsim netdevsim2 eth4 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 907.227712][T11384] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.238652][T11384] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 907.309990][T17095] hsr_slave_0: left promiscuous mode [ 907.317933][T17095] hsr_slave_1: left promiscuous mode [ 907.326644][T17095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.336540][T17095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.000050][T17095] team0 (unregistering): Port device team_slave_1 removed [ 908.050422][T17095] team0 (unregistering): Port device team_slave_0 removed [ 908.635471][T11384] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.647836][T11384] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 908.668036][T11512] vxcan1 speed is unknown, defaulting to 1000 [ 908.668115][T11510] virt_wifi0 speed is unknown, defaulting to 1000 [ 908.692000][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 908.771790][T11505] virt_wifi0 speed is unknown, defaulting to 1000 [ 908.792962][T11384] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.818493][T11384] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 909.013268][T11532] bridge_slave_0: left allmulticast mode [ 909.018964][T11532] bridge_slave_0: left promiscuous mode [ 909.042501][T11532] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.078155][T11532] bridge_slave_1: left allmulticast mode [ 909.104087][T11532] bridge_slave_1: left promiscuous mode [ 909.110222][T11532] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.126122][T11532] bond0: (slave bond_slave_0): Releasing backup interface [ 909.134478][T11532] bond_slave_0: left promiscuous mode [ 909.150966][T11532] bond0: (slave bond_slave_1): Releasing backup interface [ 909.165775][T11532] bond_slave_1: left promiscuous mode [ 909.189153][T11532] team0: Port device team_slave_0 removed [ 909.199009][T11532] team0: Port device team_slave_1 removed [ 909.206357][T11532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.215124][T11532] batman_adv: batadv0: Removing interface: 26±ÿ [ 909.231577][T11532] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 909.265560][T11512] virt_wifi0 speed is unknown, defaulting to 1000 [ 909.524880][T17095] IPVS: stop unused estimator thread 0... [ 909.809246][T11384] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 909.816583][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 909.954601][T11384] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 909.992461][T11384] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 910.009594][T11384] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 910.412409][T11384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.498651][T11384] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.559700][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.567140][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.589580][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.596848][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.607858][T11555] netlink: 'syz.0.9343': attribute type 9 has an invalid length. [ 910.664869][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9343'. [ 910.772275][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 910.860459][T11559] vxcan1 speed is unknown, defaulting to 1000 [ 910.912825][T11565] sctp: [Deprecated]: syz.4.9346 (pid 11565) Use of int in max_burst socket option. [ 910.912825][T11565] Use struct sctp_assoc_value instead [ 911.147242][T11384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.266300][T11384] veth0_vlan: entered promiscuous mode [ 911.312923][T11384] veth1_vlan: entered promiscuous mode [ 911.365609][T11559] virt_wifi0 speed is unknown, defaulting to 1000 [ 911.418211][T11580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9351'. [ 911.428798][T11580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9351'. [ 911.443710][T11580] netlink: 'syz.1.9351': attribute type 5 has an invalid length. [ 911.452122][T11580] netlink: 'syz.1.9351': attribute type 21 has an invalid length. [ 911.534616][T11384] veth0_macvtap: entered promiscuous mode [ 911.554011][T11384] veth1_macvtap: entered promiscuous mode [ 911.587792][T11384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.607081][T11384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.687740][ T1136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.729698][ T1136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.805762][T11591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9355'. [ 911.830490][T11591] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9355'. [ 911.850437][T11591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9355'. [ 911.871089][ T1136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.986071][ T1136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.024006][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9355'. [ 912.047879][T11591] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.060929][T11602] netlink: 'syz.1.9357': attribute type 1 has an invalid length. [ 912.096927][T11603] xt_hashlimit: max too large, truncated to 1048576 [ 912.175993][T11606] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9359'. [ 912.236363][T11603] xt_bpf: check failed: parse error [ 912.553045][T16683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.583114][T16683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.758249][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.777586][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.794914][T11628] netlink: 'syz.3.9364': attribute type 10 has an invalid length. [ 912.824113][T11628] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9364'. [ 912.848912][T11628] batman_adv: batadv0: Adding interface: virt_wifi0 [ 912.865705][T11628] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.896581][T11628] batman_adv: batadv0: Interface activated: virt_wifi0 [ 913.111693][T11642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9368'. [ 913.201058][T11640] vxcan1 speed is unknown, defaulting to 1000 [ 913.945834][T11640] virt_wifi0 speed is unknown, defaulting to 1000 [ 913.949884][T10799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 913.964376][T10799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 913.978171][T10799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 913.978202][T11660] xt_hashlimit: max too large, truncated to 1048576 [ 914.016652][T10799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 914.036942][T10799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 914.107501][T11660] xt_bpf: check failed: parse error [ 914.356844][T11666] netlink: 'syz.4.9376': attribute type 10 has an invalid length. [ 914.482817][T11666] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 914.495968][T11666] team0: Failed to send options change via netlink (err -105) [ 914.518604][T11666] team0: Port device netdevsim0 added [ 914.596171][T11658] vxcan1 speed is unknown, defaulting to 1000 [ 914.912510][T11658] virt_wifi0 speed is unknown, defaulting to 1000 [ 915.084059][T11689] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.203052][T11689] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.285740][T11689] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.409909][T11695] netlink: 'syz.2.9383': attribute type 10 has an invalid length. [ 915.420540][T11694] netlink: 'syz.2.9383': attribute type 10 has an invalid length. [ 915.437964][T11689] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.476915][T11694] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 915.548672][T11658] chnl_net:caif_netlink_parms(): no params data found [ 915.860500][T16683] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.908713][T11658] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.919849][T11658] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.929101][T11658] bridge_slave_0: entered allmulticast mode [ 915.938845][T11658] bridge_slave_0: entered promiscuous mode [ 915.964783][T16683] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.000176][ T3484] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.010014][T11658] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.018290][T11658] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.029725][T11658] bridge_slave_1: entered allmulticast mode [ 916.038691][T11658] bridge_slave_1: entered promiscuous mode [ 916.130417][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.143635][T10799] Bluetooth: hci5: command tx timeout [ 916.170596][T11658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.203684][T11728] __nla_validate_parse: 5 callbacks suppressed [ 916.203700][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9391'. [ 916.206634][T11658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.372404][T11658] team0: Port device team_slave_0 added [ 916.397246][T11658] team0: Port device team_slave_1 added [ 916.464411][T11658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.475242][T11658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.507585][T11658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.523353][T11658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.532953][T11658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.590090][T11658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.796177][T11658] hsr_slave_0: entered promiscuous mode [ 916.805503][T11658] hsr_slave_1: entered promiscuous mode [ 916.813482][T11658] debugfs: 'hsr0' already exists in 'hsr' [ 916.819701][T11658] Cannot create hsr debugfs directory [ 916.938045][T11753] vxcan1 speed is unknown, defaulting to 1000 [ 916.959446][T11759] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9399'. [ 917.114368][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9400'. [ 917.210622][T11763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 917.242566][T11756] netlink: 'syz.1.9396': attribute type 4 has an invalid length. [ 917.256475][T11756] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9396'. [ 917.278135][T11765] bond1: (slave macsec1): Error -34 calling dev_set_mtu [ 917.378035][T11658] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.402402][T11658] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.475362][T11760] vxcan1 speed is unknown, defaulting to 1000 [ 917.484922][T11753] virt_wifi0 speed is unknown, defaulting to 1000 [ 917.544604][T11658] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.557890][T11658] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.675569][T11658] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.690639][T11658] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.848280][T11658] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.862625][T11658] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.894730][T11760] virt_wifi0 speed is unknown, defaulting to 1000 [ 917.961511][T11781] netlink: 'syz.4.9406': attribute type 10 has an invalid length. [ 918.212230][T10799] Bluetooth: hci5: command tx timeout [ 918.425628][T11658] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 918.465637][T11658] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 918.525282][T11658] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 918.558890][T11658] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 918.661939][T11795] netlink: 'syz.4.9410': attribute type 10 has an invalid length. [ 918.683370][T11795] bridge0: port 3(macsec0) entered blocking state [ 918.690288][T11795] bridge0: port 3(macsec0) entered disabled state [ 918.699957][T11795] macsec0: entered allmulticast mode [ 918.706547][T11795] veth1_macvtap: entered allmulticast mode [ 918.716113][T11800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9410'. [ 918.717844][T11795] macsec0: entered promiscuous mode [ 918.733679][T11795] bridge0: port 3(macsec0) entered blocking state [ 918.740355][T11795] bridge0: port 3(macsec0) entered forwarding state [ 918.744060][T11800] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9410'. [ 918.871903][T11658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.937141][T11658] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.960253][T17095] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.967491][T17095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.059778][T17095] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.067195][T17095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.474289][T11826] tap0: tun_chr_ioctl cmd 1074025673 [ 919.482479][T11823] tap0: tun_chr_ioctl cmd 1074025680 [ 919.509395][T11826] tap0: tun_chr_ioctl cmd 1074025680 [ 919.526986][T11823] tipc: Started in network mode [ 919.551498][T11823] tipc: Node identity 2277bee38ba4, cluster identity 4711 [ 919.559060][T11823] tipc: Enabled bearer , priority 0 [ 919.594249][T11826] tap0: tun_chr_ioctl cmd 2147767519 [ 919.619011][T11658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.648964][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9417'. [ 919.674773][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9417'. [ 919.823097][T11826] tipc: Disabling bearer [ 919.857466][T11658] veth0_vlan: entered promiscuous mode [ 919.904800][T11658] veth1_vlan: entered promiscuous mode [ 919.945099][T11658] veth0_macvtap: entered promiscuous mode [ 919.978160][T11658] veth1_macvtap: entered promiscuous mode [ 920.046577][T11658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.096453][T11658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.166566][T11838] vxcan1 speed is unknown, defaulting to 1000 [ 920.177838][ T4874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.189119][ T4874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.217689][ T3484] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.245617][ T3484] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.303097][T10799] Bluetooth: hci5: command tx timeout [ 920.530107][T11856] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.610224][T11838] virt_wifi0 speed is unknown, defaulting to 1000 [ 920.694467][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.703545][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.870777][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.880216][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.550805][T11896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9440'. [ 921.667964][T11899] netlink: set zone limit has 8 unknown bytes [ 921.703906][T11899] netlink: 248 bytes leftover after parsing attributes in process `syz.4.9442'. [ 922.076938][T11916] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9447'. [ 922.096020][T11912] vxcan1 speed is unknown, defaulting to 1000 [ 922.102848][T11917] xt_hashlimit: max too large, truncated to 1048576 [ 922.165841][T11917] xt_bpf: check failed: parse error [ 922.199057][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9448'. [ 922.212064][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9448'. [ 922.386826][T10799] Bluetooth: hci5: command tx timeout [ 922.826871][T11912] virt_wifi0 speed is unknown, defaulting to 1000 [ 922.903633][T11940] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9453'. [ 923.482597][T11957] Bluetooth: MGMT ver 1.23 [ 923.628497][T11957] vxcan1 speed is unknown, defaulting to 1000 [ 923.983332][T11966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9459'. [ 924.102627][T11957] virt_wifi0 speed is unknown, defaulting to 1000 [ 924.122743][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9459'. [ 924.225706][T11968] veth1_macvtap: left promiscuous mode [ 924.315912][T11971] siw: device registration error -23 [ 924.685259][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9462'. [ 924.735919][T11980] netlink: 'syz.1.9462': attribute type 49 has an invalid length. [ 925.008200][T11992] FAULT_INJECTION: forcing a failure. [ 925.008200][T11992] name failslab, interval 1, probability 0, space 0, times 0 [ 925.024113][T11992] CPU: 0 UID: 0 PID: 11992 Comm: syz.3.9468 Not tainted syzkaller #0 PREEMPT(full) [ 925.024140][T11992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 925.024152][T11992] Call Trace: [ 925.024160][T11992] [ 925.024170][T11992] dump_stack_lvl+0x189/0x250 [ 925.024193][T11992] ? __pfx____ratelimit+0x10/0x10 [ 925.024220][T11992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 925.024237][T11992] ? __pfx__printk+0x10/0x10 [ 925.024256][T11992] ? rcu_is_watching+0x15/0xb0 [ 925.024282][T11992] should_fail_ex+0x414/0x560 [ 925.024308][T11992] should_failslab+0xa8/0x100 [ 925.024331][T11992] kmem_cache_alloc_noprof+0x73/0x3c0 [ 925.024350][T11992] ? skb_clone+0x212/0x3a0 [ 925.024378][T11992] skb_clone+0x212/0x3a0 [ 925.024404][T11992] bpf_clone_redirect+0xad/0x3d0 [ 925.024425][T11992] ? bpf_test_timer_continue+0x130/0x350 [ 925.024446][T11992] ? bpf_test_run+0x197/0x7b0 [ 925.024465][T11992] bpf_prog_8dc8bbec83c669e7+0x22/0x2a [ 925.024480][T11992] bpf_test_run+0x318/0x7b0 [ 925.024519][T11992] ? __pfx_bpf_test_run+0x10/0x10 [ 925.024563][T11992] ? convert___skb_to_skb+0x3d/0x590 [ 925.024584][T11992] bpf_prog_test_run_skb+0xb4e/0x1550 [ 925.024610][T11992] ? __fget_files+0x2a/0x420 [ 925.024633][T11992] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 925.024654][T11992] bpf_prog_test_run+0x2c7/0x340 [ 925.024682][T11992] __sys_bpf+0x562/0x860 [ 925.024705][T11992] ? __pfx___sys_bpf+0x10/0x10 [ 925.024741][T11992] ? ksys_write+0x22a/0x250 [ 925.024771][T11992] ? __pfx_ksys_write+0x10/0x10 [ 925.024792][T11992] __x64_sys_bpf+0x7c/0x90 [ 925.024810][T11992] do_syscall_64+0xfa/0xfa0 [ 925.024829][T11992] ? lockdep_hardirqs_on+0x9c/0x150 [ 925.024850][T11992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.024873][T11992] ? clear_bhb_loop+0x60/0xb0 [ 925.024896][T11992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.024911][T11992] RIP: 0033:0x7f55c758eec9 [ 925.024928][T11992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.024943][T11992] RSP: 002b:00007f55c8477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 925.024963][T11992] RAX: ffffffffffffffda RBX: 00007f55c77e5fa0 RCX: 00007f55c758eec9 [ 925.024977][T11992] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 925.024990][T11992] RBP: 00007f55c8477090 R08: 0000000000000000 R09: 0000000000000000 [ 925.025009][T11992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 925.025020][T11992] R13: 00007f55c77e6038 R14: 00007f55c77e5fa0 R15: 00007fff4cdb6658 [ 925.025047][T11992] [ 925.577368][T10799] Bluetooth: hci0: command 0x040f tx timeout [ 925.758207][T12004] vxcan1 speed is unknown, defaulting to 1000 [ 925.790857][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9471'. [ 926.123953][T12008] vxcan1 speed is unknown, defaulting to 1000 [ 926.263089][T12004] virt_wifi0 speed is unknown, defaulting to 1000 [ 926.593778][T12008] virt_wifi0 speed is unknown, defaulting to 1000 [ 927.091592][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 927.568410][T12035] vxcan1 speed is unknown, defaulting to 1000 [ 927.827184][T12043] __nla_validate_parse: 1 callbacks suppressed [ 927.827206][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9484'. [ 928.085991][T12055] xt_hashlimit: max too large, truncated to 1048576 [ 928.125501][T12055] xt_bpf: check failed: parse error [ 928.198301][T12038] vxcan1 speed is unknown, defaulting to 1000 [ 928.504231][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9489'. [ 928.532186][T12063] netlink: 'syz.3.9488': attribute type 72 has an invalid length. [ 928.726321][T12038] virt_wifi0 speed is unknown, defaulting to 1000 [ 928.743867][T12072] x_tables: duplicate underflow at hook 3 [ 928.752328][T12073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9491'. [ 928.782403][T12072] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20004 [ 928.793674][T12073] netlink: 'syz.0.9491': attribute type 13 has an invalid length. [ 928.809824][T12035] virt_wifi0 speed is unknown, defaulting to 1000 [ 928.818409][T12073] netlink: 'syz.0.9491': attribute type 17 has an invalid length. [ 928.846736][T12075] FAULT_INJECTION: forcing a failure. [ 928.846736][T12075] name failslab, interval 1, probability 0, space 0, times 0 [ 928.862358][T12075] CPU: 1 UID: 0 PID: 12075 Comm: syz.2.9493 Not tainted syzkaller #0 PREEMPT(full) [ 928.862383][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 928.862394][T12075] Call Trace: [ 928.862402][T12075] [ 928.862411][T12075] dump_stack_lvl+0x189/0x250 [ 928.862435][T12075] ? __pfx____ratelimit+0x10/0x10 [ 928.862468][T12075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 928.862486][T12075] ? __pfx__printk+0x10/0x10 [ 928.862504][T12075] ? rcu_is_watching+0x15/0xb0 [ 928.862532][T12075] should_fail_ex+0x414/0x560 [ 928.862557][T12075] should_failslab+0xa8/0x100 [ 928.862579][T12075] kmem_cache_alloc_noprof+0x73/0x3c0 [ 928.862598][T12075] ? skb_clone+0x212/0x3a0 [ 928.862627][T12075] skb_clone+0x212/0x3a0 [ 928.862655][T12075] bpf_clone_redirect+0xad/0x3d0 [ 928.862678][T12075] ? bpf_test_timer_continue+0x130/0x350 [ 928.862702][T12075] ? bpf_test_run+0x197/0x7b0 [ 928.862723][T12075] bpf_prog_8dc8bbec83c669e7+0x22/0x2a [ 928.862741][T12075] bpf_test_run+0x318/0x7b0 [ 928.862784][T12075] ? __pfx_bpf_test_run+0x10/0x10 [ 928.862833][T12075] ? convert___skb_to_skb+0x3d/0x590 [ 928.862857][T12075] bpf_prog_test_run_skb+0xb4e/0x1550 [ 928.862888][T12075] ? __fget_files+0x2a/0x420 [ 928.862914][T12075] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 928.862937][T12075] bpf_prog_test_run+0x2c7/0x340 [ 928.862966][T12075] __sys_bpf+0x562/0x860 [ 928.862991][T12075] ? __pfx___sys_bpf+0x10/0x10 [ 928.863031][T12075] ? ksys_write+0x22a/0x250 [ 928.863053][T12075] ? __pfx_ksys_write+0x10/0x10 [ 928.863079][T12075] __x64_sys_bpf+0x7c/0x90 [ 928.863101][T12075] do_syscall_64+0xfa/0xfa0 [ 928.863123][T12075] ? lockdep_hardirqs_on+0x9c/0x150 [ 928.863146][T12075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.863163][T12075] ? clear_bhb_loop+0x60/0xb0 [ 928.863185][T12075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.863203][T12075] RIP: 0033:0x7f926ab8eec9 [ 928.863219][T12075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.863234][T12075] RSP: 002b:00007f926b9c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 928.863255][T12075] RAX: ffffffffffffffda RBX: 00007f926ade5fa0 RCX: 00007f926ab8eec9 [ 928.863268][T12075] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 928.863281][T12075] RBP: 00007f926b9c9090 R08: 0000000000000000 R09: 0000000000000000 [ 928.863292][T12075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 928.863303][T12075] R13: 00007f926ade6038 R14: 00007f926ade5fa0 R15: 00007ffcb1517158 [ 928.863336][T12075] [ 929.523114][T12073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 929.744492][T12083] syzkaller0: entered promiscuous mode [ 929.756897][T12083] syzkaller0: entered allmulticast mode [ 929.987203][T12091] vxcan1 speed is unknown, defaulting to 1000 [ 930.220527][T12098] FAULT_INJECTION: forcing a failure. [ 930.220527][T12098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.246461][T12098] CPU: 0 UID: 0 PID: 12098 Comm: syz.1.9500 Not tainted syzkaller #0 PREEMPT(full) [ 930.246495][T12098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 930.246507][T12098] Call Trace: [ 930.246516][T12098] [ 930.246526][T12098] dump_stack_lvl+0x189/0x250 [ 930.246553][T12098] ? __pfx____ratelimit+0x10/0x10 [ 930.246617][T12098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 930.246634][T12098] ? __pfx__printk+0x10/0x10 [ 930.246651][T12098] ? __might_fault+0xb0/0x130 [ 930.246678][T12098] should_fail_ex+0x414/0x560 [ 930.246701][T12098] _copy_from_user+0x2d/0xb0 [ 930.246726][T12098] ___sys_sendmsg+0x158/0x2a0 [ 930.246755][T12098] ? __pfx____sys_sendmsg+0x10/0x10 [ 930.246817][T12098] ? __fget_files+0x2a/0x420 [ 930.246838][T12098] ? __fget_files+0x3a0/0x420 [ 930.246869][T12098] __x64_sys_sendmsg+0x19b/0x260 [ 930.246896][T12098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 930.247015][T12098] ? __pfx_ksys_write+0x10/0x10 [ 930.247041][T12098] ? do_syscall_64+0xbe/0xfa0 [ 930.247070][T12098] do_syscall_64+0xfa/0xfa0 [ 930.247093][T12098] ? lockdep_hardirqs_on+0x9c/0x150 [ 930.247116][T12098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.247134][T12098] ? clear_bhb_loop+0x60/0xb0 [ 930.247156][T12098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.247173][T12098] RIP: 0033:0x7f826fb8eec9 [ 930.247196][T12098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.247210][T12098] RSP: 002b:00007f826ddee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.247244][T12098] RAX: ffffffffffffffda RBX: 00007f826fde5fa0 RCX: 00007f826fb8eec9 [ 930.247258][T12098] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 930.247269][T12098] RBP: 00007f826ddee090 R08: 0000000000000000 R09: 0000000000000000 [ 930.247280][T12098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.247291][T12098] R13: 00007f826fde6038 R14: 00007f826fde5fa0 R15: 00007ffcb18c6a08 [ 930.247325][T12098] [ 930.555492][T12091] virt_wifi0 speed is unknown, defaulting to 1000 [ 930.734192][T12104] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.9502'. [ 931.073825][T12114] xt_bpf: check failed: parse error [ 931.226140][T12121] Bluetooth: MGMT ver 1.23 [ 931.425496][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9511'. [ 931.577390][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 931.595248][T12133] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9511'. [ 932.331625][T12156] xt_hashlimit: max too large, truncated to 1048576 [ 932.365794][ T1317] bridge_slave_1: left allmulticast mode [ 932.387720][ T1317] bridge_slave_1: left promiscuous mode [ 932.399390][T12156] xt_bpf: check failed: parse error [ 932.407601][ T1317] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.460942][ T1317] bridge_slave_0: left allmulticast mode [ 932.474295][ T1317] bridge_slave_0: left promiscuous mode [ 932.489078][ T1317] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.892508][T12176] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9524'. [ 932.914001][T12176] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 933.136802][ T1317] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 933.761285][ T1317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.773476][ T1317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.783673][ T1317] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 933.795475][ T1317] bond0 (unregistering): Released all slaves [ 933.823089][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9518'. [ 933.841762][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9526'. [ 933.880049][T12161] vxcan1 speed is unknown, defaulting to 1000 [ 934.010059][ T1317] tipc: Left network mode [ 934.028617][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9527'. [ 934.231818][T12201] xt_hashlimit: max too large, truncated to 1048576 [ 934.288363][T12201] xt_bpf: check failed: parse error [ 934.394315][T12206] tipc: Started in network mode [ 934.399224][T12206] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 934.433196][T12206] tipc: Enabled bearer , priority 10 [ 934.531091][T12209] mac80211_hwsim hwsim153 wlan1: entered allmulticast mode [ 934.616775][T12178] vxcan1 speed is unknown, defaulting to 1000 [ 934.623792][T12161] virt_wifi0 speed is unknown, defaulting to 1000 [ 934.650492][T12213] netlink: 'syz.0.9535': attribute type 1 has an invalid length. [ 934.924956][T12223] veth3: entered promiscuous mode [ 935.098021][T12178] virt_wifi0 speed is unknown, defaulting to 1000 [ 935.238689][T12229] Cannot find add_set index 2 as target [ 935.561643][T12393] tipc: Node number set to 10005162 [ 935.624582][T12242] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9542'. [ 935.786743][T12242] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.794631][T12242] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.818542][ T1317] hsr_slave_0: left promiscuous mode [ 935.858407][ T1317] hsr_slave_1: left promiscuous mode [ 936.513237][ T1317] team0 (unregistering): Port device team_slave_1 removed [ 936.569121][ T1317] team0 (unregistering): Port device team_slave_0 removed [ 937.234161][T12246] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9545'. [ 937.268167][T12249] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 937.279130][T12249] bridge2: entered allmulticast mode [ 938.052000][T12283] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9557'. [ 938.185370][T12289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9560'. [ 938.254470][T12293] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 938.308429][T12295] xt_hashlimit: max too large, truncated to 1048576 [ 938.316001][T12292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9561'. [ 938.395928][T12295] xt_bpf: check failed: parse error [ 938.655442][T12302] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 938.860485][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9565'. [ 939.297358][T12320] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9571'. [ 939.436041][ T1317] IPVS: stop unused estimator thread 0... [ 939.504514][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9573'. [ 939.695281][T12339] vxcan1 speed is unknown, defaulting to 1000 [ 939.735823][T12350] veth0: entered promiscuous mode [ 939.867215][T12355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9579'. [ 939.893720][T12350] netlink: 'syz.3.9574': attribute type 16 has an invalid length. [ 939.922539][T12350] netlink: 'syz.3.9574': attribute type 17 has an invalid length. [ 940.000444][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.008332][T12350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.100716][T12350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 940.224286][T12366] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9585'. [ 940.287057][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9584'. [ 940.378789][T12371] smc: net device veth0_virt_wifi applied user defined pnetid SYZ2 [ 940.438857][T12337] veth0: left promiscuous mode [ 940.451455][T10799] Bluetooth: hci5: command tx timeout [ 940.539964][T12339] virt_wifi0 speed is unknown, defaulting to 1000 [ 940.551991][T12364] vxcan1 speed is unknown, defaulting to 1000 [ 941.003291][T12386] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.034778][T12364] virt_wifi0 speed is unknown, defaulting to 1000 [ 941.246151][T12386] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.684697][T12386] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.966971][T12386] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.270780][T12412] vxcan1 speed is unknown, defaulting to 1000 [ 942.705719][T12412] virt_wifi0 speed is unknown, defaulting to 1000 [ 942.717950][ T4874] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.738418][ T4874] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.807976][ T4874] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.868640][ T4874] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.927533][T12420] vxcan1 speed is unknown, defaulting to 1000 [ 943.411352][T12447] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.9605'. [ 943.479274][T12420] virt_wifi0 speed is unknown, defaulting to 1000 [ 943.685651][T12451] vxcan1 speed is unknown, defaulting to 1000 [ 943.910614][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9610'. [ 944.170118][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9612'. [ 944.225757][T12451] virt_wifi0 speed is unknown, defaulting to 1000 [ 944.620070][T12484] netlink: 'syz.2.9616': attribute type 1 has an invalid length. [ 944.632907][T12484] FAULT_INJECTION: forcing a failure. [ 944.632907][T12484] name failslab, interval 1, probability 0, space 0, times 0 [ 944.648645][T12484] CPU: 0 UID: 0 PID: 12484 Comm: syz.2.9616 Not tainted syzkaller #0 PREEMPT(full) [ 944.648678][T12484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 944.648689][T12484] Call Trace: [ 944.648697][T12484] [ 944.648705][T12484] dump_stack_lvl+0x189/0x250 [ 944.648731][T12484] ? __pfx____ratelimit+0x10/0x10 [ 944.648755][T12484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 944.648773][T12484] ? __pfx__printk+0x10/0x10 [ 944.648798][T12484] ? __pfx___might_resched+0x10/0x10 [ 944.648819][T12484] ? fs_reclaim_acquire+0x7d/0x100 [ 944.648845][T12484] should_fail_ex+0x414/0x560 [ 944.648868][T12484] should_failslab+0xa8/0x100 [ 944.648890][T12484] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 944.648910][T12484] ? __alloc_skb+0x112/0x2d0 [ 944.648937][T12484] __alloc_skb+0x112/0x2d0 [ 944.648963][T12484] netlink_ack+0x146/0xa50 [ 944.648982][T12484] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 944.649002][T12484] ? ref_tracker_free+0x63a/0x7d0 [ 944.649021][T12484] ? __asan_memcpy+0x40/0x70 [ 944.649044][T12484] ? __pfx_ref_tracker_free+0x10/0x10 [ 944.649073][T12484] netlink_rcv_skb+0x28c/0x470 [ 944.649096][T12484] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 944.649119][T12484] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 944.649152][T12484] ? netlink_deliver_tap+0x2e/0x1b0 [ 944.649181][T12484] netlink_unicast+0x82f/0x9e0 [ 944.649210][T12484] ? __pfx_netlink_unicast+0x10/0x10 [ 944.649232][T12484] ? netlink_sendmsg+0x642/0xb30 [ 944.649251][T12484] ? skb_put+0x11b/0x210 [ 944.649292][T12484] netlink_sendmsg+0x805/0xb30 [ 944.649324][T12484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 944.649353][T12484] ? aa_sock_msg_perm+0xf1/0x1d0 [ 944.649378][T12484] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 944.649405][T12484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 944.649428][T12484] __sock_sendmsg+0x21c/0x270 [ 944.649452][T12484] ____sys_sendmsg+0x505/0x830 [ 944.649488][T12484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 944.649523][T12484] ? import_iovec+0x74/0xa0 [ 944.649549][T12484] ___sys_sendmsg+0x21f/0x2a0 [ 944.649575][T12484] ? __pfx____sys_sendmsg+0x10/0x10 [ 944.649635][T12484] ? __fget_files+0x2a/0x420 [ 944.649680][T12484] ? __fget_files+0x3a0/0x420 [ 944.649708][T12484] __x64_sys_sendmsg+0x19b/0x260 [ 944.649732][T12484] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 944.649776][T12484] ? __pfx_ksys_write+0x10/0x10 [ 944.649798][T12484] ? do_syscall_64+0xbe/0xfa0 [ 944.649825][T12484] do_syscall_64+0xfa/0xfa0 [ 944.649847][T12484] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.649870][T12484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.649887][T12484] ? clear_bhb_loop+0x60/0xb0 [ 944.649908][T12484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.649926][T12484] RIP: 0033:0x7f926ab8eec9 [ 944.649942][T12484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.649958][T12484] RSP: 002b:00007f926b9c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 944.649978][T12484] RAX: ffffffffffffffda RBX: 00007f926ade5fa0 RCX: 00007f926ab8eec9 [ 944.649992][T12484] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 944.650003][T12484] RBP: 00007f926b9c9090 R08: 0000000000000000 R09: 0000000000000000 [ 944.650014][T12484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.650025][T12484] R13: 00007f926ade6038 R14: 00007f926ade5fa0 R15: 00007ffcb1517158 [ 944.650057][T12484] [ 945.456660][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9618'. [ 945.519810][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9619'. [ 946.108315][T12519] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.149586][T12524] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9627'. [ 946.175445][T12524] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 946.368589][T12519] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.417749][T12529] tipc: Enabled bearer , priority 0 [ 946.436217][T12534] syzkaller0: entered promiscuous mode [ 946.455464][T12534] syzkaller0: entered allmulticast mode [ 946.494331][T12539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9634'. [ 946.535369][T12519] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.615988][T12534] tipc: Resetting bearer [ 946.627670][T12528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9630'. [ 946.657559][T12526] tipc: Resetting bearer [ 946.710002][T12526] tipc: Disabling bearer [ 946.725544][T12536] vxcan1 speed is unknown, defaulting to 1000 [ 946.753559][T12519] team0: Port device netdevsim0 removed [ 946.765508][T12519] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.957784][ T4874] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.007009][ T4874] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.044515][ T4874] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.079087][ T3484] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.272757][T12536] virt_wifi0 speed is unknown, defaulting to 1000 [ 947.498968][T12560] lo: entered promiscuous mode [ 947.509431][T12560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 947.566382][T12556] vxcan1 speed is unknown, defaulting to 1000 [ 947.754965][T12567] netlink: 'syz.2.9644': attribute type 10 has an invalid length. [ 947.822855][T12567] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.834639][T12567] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.894037][T12567] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.904378][T12567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.915109][T12567] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.924094][T12567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.965254][T12567] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 948.095114][T12571] gre1: entered promiscuous mode [ 948.111838][T12571] gre1: entered allmulticast mode [ 948.126983][T12556] virt_wifi0 speed is unknown, defaulting to 1000 [ 948.720849][T12580] vxcan1 speed is unknown, defaulting to 1000 [ 948.746964][T12586] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9651'. [ 948.768346][T12587] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9651'. [ 949.606067][T12580] virt_wifi0 speed is unknown, defaulting to 1000 [ 949.712046][T12602] vxcan1 speed is unknown, defaulting to 1000 [ 949.749777][T12609] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.9659'. [ 950.326023][T12617] !: renamed from dummy0 [ 950.390598][T12621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9664'. [ 950.517674][T12621] vlan2: entered allmulticast mode [ 950.551966][T12621] bridge0: entered allmulticast mode [ 950.687285][T12602] virt_wifi0 speed is unknown, defaulting to 1000 [ 950.795393][T12627] netlink: 284 bytes leftover after parsing attributes in process `syz.1.9666'. [ 951.100515][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9668'. [ 951.321988][T23984] IPVS: starting estimator thread 0... [ 951.421854][T12639] IPVS: using max 28 ests per chain, 67200 per kthread [ 951.949089][T12660] FAULT_INJECTION: forcing a failure. [ 951.949089][T12660] name failslab, interval 1, probability 0, space 0, times 0 [ 951.964018][T12660] CPU: 1 UID: 0 PID: 12660 Comm: syz.2.9676 Not tainted syzkaller #0 PREEMPT(full) [ 951.964044][T12660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 951.964055][T12660] Call Trace: [ 951.964065][T12660] [ 951.964075][T12660] dump_stack_lvl+0x189/0x250 [ 951.964098][T12660] ? __pfx____ratelimit+0x10/0x10 [ 951.964121][T12660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 951.964137][T12660] ? __pfx__printk+0x10/0x10 [ 951.964153][T12660] ? rcu_is_watching+0x15/0xb0 [ 951.964177][T12660] should_fail_ex+0x414/0x560 [ 951.964198][T12660] should_failslab+0xa8/0x100 [ 951.964217][T12660] kmem_cache_alloc_noprof+0x73/0x3c0 [ 951.964235][T12660] ? skb_clone+0x212/0x3a0 [ 951.964400][T12660] skb_clone+0x212/0x3a0 [ 951.964427][T12660] bpf_clone_redirect+0xad/0x3d0 [ 951.964450][T12660] ? bpf_test_timer_continue+0x130/0x350 [ 951.964471][T12660] ? bpf_test_run+0x197/0x7b0 [ 951.964501][T12660] bpf_prog_8dc8bbec83c669e7+0x22/0x2a [ 951.964517][T12660] bpf_test_run+0x318/0x7b0 [ 951.964560][T12660] ? __pfx_bpf_test_run+0x10/0x10 [ 951.964600][T12660] ? convert___skb_to_skb+0x3d/0x590 [ 951.964622][T12660] bpf_prog_test_run_skb+0xb4e/0x1550 [ 951.964650][T12660] ? __fget_files+0x2a/0x420 [ 951.964677][T12660] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 951.964699][T12660] bpf_prog_test_run+0x2c7/0x340 [ 951.964726][T12660] __sys_bpf+0x562/0x860 [ 951.964751][T12660] ? __pfx___sys_bpf+0x10/0x10 [ 951.964791][T12660] ? ksys_write+0x22a/0x250 [ 951.964813][T12660] ? __pfx_ksys_write+0x10/0x10 [ 951.964838][T12660] __x64_sys_bpf+0x7c/0x90 [ 951.964860][T12660] do_syscall_64+0xfa/0xfa0 [ 951.964884][T12660] ? lockdep_hardirqs_on+0x9c/0x150 [ 951.964908][T12660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.964926][T12660] ? clear_bhb_loop+0x60/0xb0 [ 951.964948][T12660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.964965][T12660] RIP: 0033:0x7f926ab8eec9 [ 951.964983][T12660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.964999][T12660] RSP: 002b:00007f926b9c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 951.965020][T12660] RAX: ffffffffffffffda RBX: 00007f926ade5fa0 RCX: 00007f926ab8eec9 [ 951.965034][T12660] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 951.965045][T12660] RBP: 00007f926b9c9090 R08: 0000000000000000 R09: 0000000000000000 [ 951.965055][T12660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 951.965065][T12660] R13: 00007f926ade6038 R14: 00007f926ade5fa0 R15: 00007ffcb1517158 [ 951.965095][T12660] [ 952.289237][T12664] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9679'. [ 952.560067][T12669] tun0: tun_chr_ioctl cmd 1074025675 [ 952.566243][T12669] tun0: persist enabled [ 952.570858][T12669] tun0: tun_chr_ioctl cmd 1074025675 [ 952.577342][T12669] tun0: persist disabled [ 952.632652][T12669] bridge_slave_0: left allmulticast mode [ 952.639520][T12669] bridge_slave_0: left promiscuous mode [ 952.664083][T12669] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.737698][T12669] bridge_slave_1: left allmulticast mode [ 952.764443][T12669] bridge_slave_1: left promiscuous mode [ 952.792781][T12669] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.820470][T12669] bond0: (slave bond_slave_0): Releasing backup interface [ 952.833125][T12684] netlink: 'syz.2.9685': attribute type 10 has an invalid length. [ 952.842681][T12669] bond0: (slave bond_slave_1): Releasing backup interface [ 952.879294][T12669] team0: Port device team_slave_0 removed [ 952.935496][T12669] team0: Port device team_slave_1 removed [ 952.956085][T12669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.970833][T12669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.984490][T12669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.996413][T12669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.007717][T12669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 953.026367][T12693] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9687'. [ 953.051079][T12693] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9687'. [ 953.068372][T12676] netlink: 'syz.0.9682': attribute type 12 has an invalid length. [ 953.183082][T12684] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.192516][T12684] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.210577][T12684] bond0: (slave bridge0): Releasing backup interface [ 953.230102][T12685] pim6reg1: entered promiscuous mode [ 953.244742][T12685] pim6reg1: entered allmulticast mode [ 954.323589][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9697'. [ 954.339654][T12729] vxcan1 speed is unknown, defaulting to 1000 [ 954.370633][T12737] netlink: 'syz.0.9698': attribute type 1 has an invalid length. [ 955.003078][T12756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9708'. [ 955.009667][T12753] vxcan1 speed is unknown, defaulting to 1000 [ 955.095927][T12729] virt_wifi0 speed is unknown, defaulting to 1000 [ 955.608658][T12753] virt_wifi0 speed is unknown, defaulting to 1000 [ 955.970836][T12784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9718'. [ 956.086386][T12778] vxcan1 speed is unknown, defaulting to 1000 [ 956.168197][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9719'. [ 956.798927][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9725'. [ 956.843843][T12773] vxcan1 speed is unknown, defaulting to 1000 [ 957.151115][T12813] [ 957.153575][T12813] ====================================================== [ 957.161741][T12813] WARNING: possible circular locking dependency detected [ 957.170521][T12813] syzkaller #0 Not tainted [ 957.175218][T12813] ------------------------------------------------------ [ 957.183896][T12813] syz.0.9727/12813 is trying to acquire lock: [ 957.190950][T12813] ffffffff8f62d718 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 957.202244][T12813] [ 957.202244][T12813] but task is already holding lock: [ 957.212387][T12813] ffffffff8f62d6b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 957.223900][T12813] [ 957.223900][T12813] which lock already depends on the new lock. [ 957.223900][T12813] [ 957.237238][T12813] [ 957.237238][T12813] the existing dependency chain (in reverse order) is: [ 957.247750][T12813] [ 957.247750][T12813] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 957.256058][T12813] lock_acquire+0x120/0x360 [ 957.262015][T12813] _raw_spin_lock_bh+0x36/0x50 [ 957.267681][T12813] nr_rt_ioctl+0x390/0xd50 [ 957.273413][T12813] sock_do_ioctl+0xd9/0x300 [ 957.278806][T12813] sock_ioctl+0x576/0x790 [ 957.284608][T12813] __se_sys_ioctl+0xf9/0x170 [ 957.291047][T12813] do_syscall_64+0xfa/0xfa0 [ 957.296548][T12813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.305437][T12813] [ 957.305437][T12813] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 957.314548][T12813] lock_acquire+0x120/0x360 [ 957.320586][T12813] _raw_spin_lock_bh+0x36/0x50 [ 957.327369][T12813] nr_rt_ioctl+0x193/0xd50 [ 957.332975][T12813] sock_do_ioctl+0xd9/0x300 [ 957.338996][T12813] sock_ioctl+0x576/0x790 [ 957.343962][T12813] __se_sys_ioctl+0xf9/0x170 [ 957.352135][T12813] do_syscall_64+0xfa/0xfa0 [ 957.357354][T12813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.365047][T12813] [ 957.365047][T12813] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 957.373870][T12813] validate_chain+0xb9b/0x2140 [ 957.380142][T12813] __lock_acquire+0xab9/0xd20 [ 957.386014][T12813] lock_acquire+0x120/0x360 [ 957.392070][T12813] _raw_spin_lock_bh+0x36/0x50 [ 957.398455][T12813] nr_rt_device_down+0xa9/0x720 [ 957.405421][T12813] nr_device_event+0x137/0x150 [ 957.411312][T12813] notifier_call_chain+0x1b6/0x3e0 [ 957.417791][T12813] __dev_notify_flags+0x18d/0x2e0 [ 957.424422][T12813] netif_change_flags+0xe8/0x1a0 [ 957.431165][T12813] dev_change_flags+0x130/0x260 [ 957.438053][T12813] dev_ioctl+0x7b4/0x1150 [ 957.443677][T12813] sock_do_ioctl+0x22c/0x300 [ 957.450291][T12813] sock_ioctl+0x576/0x790 [ 957.455596][T12813] __se_sys_ioctl+0xf9/0x170 [ 957.461797][T12813] do_syscall_64+0xfa/0xfa0 [ 957.467804][T12813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.477568][T12813] [ 957.477568][T12813] other info that might help us debug this: [ 957.477568][T12813] [ 957.491133][T12813] Chain exists of: [ 957.491133][T12813] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 957.491133][T12813] [ 957.506530][T12813] Possible unsafe locking scenario: [ 957.506530][T12813] [ 957.514465][T12813] CPU0 CPU1 [ 957.520102][T12813] ---- ---- [ 957.526800][T12813] lock(nr_neigh_list_lock); [ 957.531762][T12813] lock(&nr_node->node_lock); [ 957.540465][T12813] lock(nr_neigh_list_lock); [ 957.550566][T12813] lock(nr_node_list_lock); [ 957.555514][T12813] [ 957.555514][T12813] *** DEADLOCK *** [ 957.555514][T12813] [ 957.566036][T12813] 2 locks held by syz.0.9727/12813: [ 957.571497][T12813] #0: ffffffff8f4d3c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 957.580775][T12813] #1: ffffffff8f62d6b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 957.591274][T12813] [ 957.591274][T12813] stack backtrace: [ 957.599062][T12813] CPU: 1 UID: 0 PID: 12813 Comm: syz.0.9727 Not tainted syzkaller #0 PREEMPT(full) [ 957.599087][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 957.599098][T12813] Call Trace: [ 957.599108][T12813] [ 957.599116][T12813] dump_stack_lvl+0x189/0x250 [ 957.599138][T12813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 957.599153][T12813] ? __pfx__printk+0x10/0x10 [ 957.599169][T12813] ? print_lock_name+0xde/0x100 [ 957.599184][T12813] print_circular_bug+0x2ee/0x310 [ 957.599202][T12813] check_noncircular+0x134/0x160 [ 957.599219][T12813] validate_chain+0xb9b/0x2140 [ 957.599236][T12813] ? rt6_disable_ip+0x6b3/0x720 [ 957.599253][T12813] ? __lock_acquire+0xab9/0xd20 [ 957.599274][T12813] __lock_acquire+0xab9/0xd20 [ 957.599295][T12813] ? nr_rt_device_down+0xa9/0x720 [ 957.599314][T12813] lock_acquire+0x120/0x360 [ 957.599333][T12813] ? nr_rt_device_down+0xa9/0x720 [ 957.599355][T12813] ? nr_rt_device_down+0xa9/0x720 [ 957.599372][T12813] _raw_spin_lock_bh+0x36/0x50 [ 957.599392][T12813] ? nr_rt_device_down+0xa9/0x720 [ 957.599410][T12813] nr_rt_device_down+0xa9/0x720 [ 957.599429][T12813] ? do_raw_spin_unlock+0x122/0x240 [ 957.599447][T12813] nr_device_event+0x137/0x150 [ 957.599465][T12813] notifier_call_chain+0x1b6/0x3e0 [ 957.599482][T12813] __dev_notify_flags+0x18d/0x2e0 [ 957.599503][T12813] ? __pfx___dev_notify_flags+0x10/0x10 [ 957.599521][T12813] ? __dev_change_flags+0x4cc/0x6d0 [ 957.599542][T12813] ? __pfx___dev_change_flags+0x10/0x10 [ 957.599560][T12813] ? full_name_hash+0x92/0xe0 [ 957.599582][T12813] netif_change_flags+0xe8/0x1a0 [ 957.599603][T12813] dev_change_flags+0x130/0x260 [ 957.599623][T12813] dev_ioctl+0x7b4/0x1150 [ 957.599686][T12813] sock_do_ioctl+0x22c/0x300 [ 957.599703][T12813] ? __pfx_sock_do_ioctl+0x10/0x10 [ 957.599723][T12813] sock_ioctl+0x576/0x790 [ 957.599738][T12813] ? __pfx_sock_ioctl+0x10/0x10 [ 957.599753][T12813] ? __fget_files+0x3a0/0x420 [ 957.599770][T12813] ? __fget_files+0x2a/0x420 [ 957.599787][T12813] ? bpf_lsm_file_ioctl+0x9/0x20 [ 957.599800][T12813] ? __pfx_sock_ioctl+0x10/0x10 [ 957.599814][T12813] __se_sys_ioctl+0xf9/0x170 [ 957.599836][T12813] do_syscall_64+0xfa/0xfa0 [ 957.599856][T12813] ? lockdep_hardirqs_on+0x9c/0x150 [ 957.599877][T12813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.599892][T12813] ? clear_bhb_loop+0x60/0xb0 [ 957.599908][T12813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.599923][T12813] RIP: 0033:0x7f008878eec9 [ 957.599939][T12813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 957.599953][T12813] RSP: 002b:00007f00895ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 957.599971][T12813] RAX: ffffffffffffffda RBX: 00007f00889e5fa0 RCX: 00007f008878eec9 [ 957.599983][T12813] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008 [ 957.599993][T12813] RBP: 00007f0088811f91 R08: 0000000000000000 R09: 0000000000000000 [ 957.600003][T12813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.600012][T12813] R13: 00007f00889e6038 R14: 00007f00889e5fa0 R15: 00007ffd5eb6d6a8 [ 957.600030][T12813] [ 957.973074][T12773] virt_wifi0 speed is unknown, defaulting to 1000 [ 958.018060][T12778] virt_wifi0 speed is unknown, defaulting to 1000 [ 962.292619][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!