last executing test programs: 9.793322603s ago: executing program 1 (id=9166): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 9.592501167s ago: executing program 1 (id=9168): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000"], 0xf8}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000010000004000000020"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)="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", &(0x7f0000000040), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0xfffffffffffffffc, 0x6, r0}, 0x38) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000100)=0x6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x4080000, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0x400, 0x40000000}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 9.077510509s ago: executing program 1 (id=9175): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendfile(r1, r1, 0x0, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r2, 0x4) bind$alg(r0, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0xf00}, {&(0x7f0000000380)="f76d43ec44", 0x5}], 0x2}}], 0x2, 0x8004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7f}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x2, 0x7cc8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @exit, @alu={0x6, 0x0, 0xb, 0xa, 0x6, 0x2, 0x8}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 8.853090641s ago: executing program 1 (id=9176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff000000, 0xff], 'virt_wifi0\x00', 'geneve1\x00', {}, {}, 0x3a, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x18, 0x0, 0xb, 0x2}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000011400"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xffffffff}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41000, 0x3}, 0x94) 8.57314171s ago: executing program 1 (id=9177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) recvmsg(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/158, 0x9e}], 0x1}, 0x121) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4008054) write$cgroup_subtree(r3, &(0x7f0000000400)={[{0x2b, 'pids'}]}, 0x6) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="502913cbf1"], 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 5.436357984s ago: executing program 1 (id=9192): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000400)={'veth0_vlan\x00'}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@local, @empty, 0x1, 0x4, [@dev={0xac, 0x14, 0x14, 0x1d}, @broadcast, @multicast1, @multicast1]}, 0x20) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r3, r5, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x1212, &(0x7f0000001e80)=ANY=[], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff79, 0x0, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080011400000000005001500090000000500010006000000050005000200000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) 4.186182571s ago: executing program 0 (id=9203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x53}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8889c) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRES16=r2], 0xfdef) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="9110c4000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 3.717250671s ago: executing program 0 (id=9207): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000fdffffff06000000000000009500000000f5ff00"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x15, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0xfffffffffffffcc5}, 0x22) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) 3.571951449s ago: executing program 0 (id=9210): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r2 = socket(0x2, 0x80805, 0x80000001) getsockopt$inet_opts(r2, 0x0, 0xd, 0x0, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000050900020073797a31000000000900010073797a3000000000300003802c000080090001006c617374000000000c0002"], 0xe0}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.303394521s ago: executing program 0 (id=9214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0100002c00010000000000fcdbdf250a01f28004001800140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) unshare(0x2020600) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x40b942b37d0000) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000100)={'team_slave_0\x00', @remote}) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000440)=0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x739ef000) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x307, @local}, 0x4a, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 'veth0_to_batadv\x00'}) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r9 = socket$inet(0x2, 0x800, 0xd) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r2, 0x1}, {r1, 0x44}, {r2, 0x101}, {r5, 0x1400}, {0xffffffffffffffff, 0x1084}, {r7, 0x220}, {r9, 0x20}, {r3, 0x200}, {r6, 0x20}, {r3, 0x2000}], 0xa, &(0x7f0000000240)={r10, r11+10000000}, &(0x7f00000003c0)={[0x9]}, 0x8) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0x11, r5, 0xc98e5000) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000140)="448b7cff000000000000108a15df0953fdd7b0a35041b9ff1f1d4cf30aff22329273708b7da72e9179721f02", 0x2c}], 0x2) 2.658741317s ago: executing program 2 (id=9218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000010000000900010073797a30000000002c000000030a01030000000000000000010000000900010073797a30000000000900030073797a300000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000300500020007000000240001800a000100726564697200000014000280080001400000000c080002400000000a0900010073797a30"], 0xf8}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000880)={r4, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x66}}, 0x1}}}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e21, 0x2c1ae692, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x8, 0x1000, 0x3, 0xfffffe01, 0x4}, &(0x7f0000000180)=0x98) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x801) 2.406220628s ago: executing program 2 (id=9220): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x800) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x28, 0x1, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000016c0)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="291101ed150000", @ANYBLOB="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", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="0500110002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) 2.362033726s ago: executing program 2 (id=9221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003ec0)={r5, &(0x7f0000002e80)="968e", &(0x7f0000003e80)=@tcp6=r2, 0x2}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100000000fd80000000080001400000041008000240000000000900010073797a30"], 0xd8}}, 0x4000000) 2.297472263s ago: executing program 0 (id=9222): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) close(r0) socket(0x3, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, &(0x7f0000000380)=""/46, 0xfffffeb4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000240)="2700000014000707030e0000120f0a0011000100f5fe1712ff000000078a151f75080039000500", 0x27) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 2.222074959s ago: executing program 2 (id=9224): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffd}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@remote, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@gettfilter={0x3c, 0x2e, 0x10, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0x7}, {0x1, 0xfff3}, {0xa, 0x3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000804) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100061f8145"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008f080000000000000010020118110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086002000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500008d480000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 2.055240965s ago: executing program 3 (id=9226): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000000), 0xc) bind$qrtr(r2, &(0x7f00000000c0)={0x2a, 0x1, 0x2}, 0xc) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x40011e00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$kcm(0x11, 0x200000000000003, 0x300) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0xd1}}}}]}, 0x38}}, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000600)={r5, 0x9}, 0x8) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000003c0), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115f000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) recvmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) 2.044530673s ago: executing program 0 (id=9227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'team_slave_1\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x4b, 0x2b, "43720700ca0917b3352050360ad4bc4c3f9525f0d2b6796ff2aba584417202d40b4fcdf2227f128a8dd150"}}) (async) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000480)={@rand_addr=' \x01\x00', 0x4000003d}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@multicast, @empty, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x67, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x26) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x6, 0x4b, 0x8, 0x1}, {0x800, 0x69, 0x52, 0x3}, {0x1, 0x0, 0xfa, 0x8}]}, 0x10) 1.61549208s ago: executing program 4 (id=9229): socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) socket(0x11, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) socket$inet(0x2, 0x4000000000000001, 0xcb) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4044081}, 0x40004010) 1.444233198s ago: executing program 4 (id=9230): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000005c0)={0x1, 0x20, [0x6, 0x5, 0x9, 0x6], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x36, 0x107, 0xfffffffc, 0x810000, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x148, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb12}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1c0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x148}, 0x1, 0x0, 0x0, 0x11}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="1e00000000000000040000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000e8000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000100"/28], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0x4, 0x4}, 0x6) 1.215486303s ago: executing program 2 (id=9231): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) 1.163392075s ago: executing program 4 (id=9232): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4020010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000080)=""/213, &(0x7f0000000000)=0xd5) (async) r4 = socket$key(0xf, 0x3, 0x2) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2b}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 1.051742599s ago: executing program 3 (id=9233): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22c20}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7fffffff}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1f}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x1000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 825.090893ms ago: executing program 4 (id=9234): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000780)={0x5}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x499b, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) 610.561877ms ago: executing program 3 (id=9235): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) close(0x3) (async) r1 = socket$unix(0x1, 0x2, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) close(r1) listen(r2, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) sendmmsg$inet(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)='\a', 0x1}], 0x1}}], 0x1, 0x2400c884) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r6 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10) clock_gettime(0x0, &(0x7f0000006180)={0x0, 0x0}) (async) unshare(0x22020400) (async) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (async) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r10, 0x0, 0x0) (async) socket(0x6, 0xa, 0x19d) (async) readv(r9, 0x0, 0x0) (async) recvmmsg$unix(r4, &(0x7f0000006000)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f0000000180)}, {&(0x7f00000004c0)=""/147, 0x93}, {&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/104, 0x68}], 0x8, &(0x7f0000000700)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000002b40)=[{&(0x7f00000008c0)=""/224, 0xe0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000840)=""/21, 0x15}, {&(0x7f00000019c0)=""/177, 0xb1}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/173, 0xad}], 0x6, &(0x7f0000002bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000002c80)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002d00)=""/56, 0x38}, {&(0x7f0000002d40)=""/243, 0xf3}, {&(0x7f0000002e40)=""/120, 0x78}, {&(0x7f0000002ec0)=""/18, 0x12}, {&(0x7f0000002f00)=""/25, 0x19}, {&(0x7f0000002f40)=""/105, 0x69}, {&(0x7f0000002fc0)=""/209, 0xd1}], 0x7, &(0x7f0000003140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f00000044c0)=[{&(0x7f00000032c0)=""/39, 0x27}, {&(0x7f0000003300)=""/84, 0x54}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/41, 0x29}, {&(0x7f00000043c0)=""/42, 0x2a}, {&(0x7f0000004400)=""/45, 0x2d}, {&(0x7f0000004440)=""/119, 0x77}], 0x7}}, {{0x0, 0x0, &(0x7f0000005980)=[{&(0x7f0000004540)=""/16, 0x10}, {&(0x7f0000004580)=""/249, 0xf9}, {&(0x7f0000004680)=""/74, 0x4a}, {&(0x7f0000006200)=""/120, 0x78}, {&(0x7f0000004780)=""/234, 0xea}, {&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)=""/235, 0xeb}], 0x7, &(0x7f0000005a00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000005ac0), 0x6e, &(0x7f0000005e80)=[{&(0x7f0000005b40)=""/210, 0xd2}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f0000005c80)=""/146, 0x92}, {&(0x7f0000005d40)=""/119, 0x77}, {&(0x7f0000005dc0)=""/186, 0xba}], 0x5, &(0x7f0000005f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xe0}}], 0x6, 0x10100, &(0x7f00000061c0)={r7, r8+10000000}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES8=r11, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r4], 0x40}}, 0x0) (async) ppoll(&(0x7f0000000880)=[{r5, 0x8200}], 0x1, 0x0, 0x0, 0x0) 386.118823ms ago: executing program 3 (id=9236): syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "306720a65ecadd8f8d4096edd3a616a0c3491e3bea200200", "8e6dbc6bc4b02931a149e80581e14a2c", {"a65651e8000000000000007f96141e51", "dac60bebefc50000000000000200"}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004c00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="160d0b03756abe9c05a04dec81c5d6f8c97649108b186395de2ec0d8b5cc8a4563a08177c9d189de964d31fae1acdef21ce9f9b7e6a484ef8bde163fe3a9f734e3f67b25240af5a6a4c701", 0x4b}], 0x1, 0x0, 0x0, 0x40000}, 0x40005) unshare(0x20000400) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r6}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) 297.036025ms ago: executing program 4 (id=9237): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f0000000040)='GPL\x00', 0xf}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0xde, &(0x7f0000000440)=""/222, 0x0, 0x0, '\x00', r1}, 0x94) 172.570193ms ago: executing program 3 (id=9238): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x43, 0x4, 0x3}, 0x10) socket$tipc(0x1e, 0xe, 0x0) bind$tipc(r0, 0x0, 0x0) close(r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a700000000902010400000000000000000a0000080900020073797a310000000008000a40fffffffc0900010073797a310000000008000540fe0180090001006c6173740000000004000280140001800c000100636f756e74656100040002800800034000000130140000001100010000000000000000000100000a8efaf812494c9b0661215e09a882bedb7e620d51edc2cd3912578175304d"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f00000005c0)="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", 0x19e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2400408d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000fc6b6f5fcbc8fac800", @ANYRES16=r6, @ANYRESOCT=r4], 0x98}, 0x1, 0x0, 0x0, 0x4004840}, 0x60000800) listen(0xffffffffffffffff, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f00000000c0)=""/174, &(0x7f0000000180)=0xae) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x54}}, 0x24040054) getsockopt$sock_int(r4, 0x1, 0x3, &(0x7f00000001c0), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) 69.046751ms ago: executing program 2 (id=9239): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e21, 0x3, 0xa, 0x80, 0x30, 0x2b}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x5, 0x100000008, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0x4000003, 0x80000, 0x1, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x210000, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000380)=0x300, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="00f4ffffff0a31386e53000000000000000000000000000000cd4dfa323107d7cdc7a8d92e74dc4e7cc9088a36e36d46b5b2626592febf298abb4b30f51e19248e0824fe14638d7f4618780d1f5622f5139f5a822befa0645f6b197e33f4af61b4748d96048f38e0004f368c7a4755d500911d42c0baf5cff3d372b22709926c63b25bad5abdc2da5ee709aee6098d78761a7ff5a5a08a98c52f3175b31392e7f4522dd9000e8a5fe5cbabfeba5fc4329d8143f2ff9b8f03deb2593dd7ec81a81b20307d9bea8894f94b602062f720600223b4fc7f0a23beda29e60caacdd28e3e8eb5"], 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="04004600050034006e000000080026006c0900002400518020000080050009000000000009000100dba06c89140000000500020002000000"], 0x54}, 0x1, 0x0, 0x0, 0x7040}, 0x20004800) unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x2, &(0x7f0000001240)=@framed={{}, [@ldst={0x1, 0x2, 0x6, 0x0, 0x5, 0xb5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x40) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) 3.745906ms ago: executing program 4 (id=9240): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) (async) r1 = socket(0x10, 0x803, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async, rerun: 32) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x344}]}, 0x34}}, 0x0) (async, rerun: 64) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) (rerun: 64) 0s ago: executing program 3 (id=9241): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4) kernel console output (not intermixed with test programs): wn, defaulting to 1000 [ 1078.253938][ T5568] lo speed is unknown, defaulting to 1000 [ 1078.504677][ T5587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7945'. [ 1078.677211][ T5592] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7946'. [ 1078.741713][ T5595] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7946'. [ 1078.798761][ T5599] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7946'. [ 1078.945250][ T5601] netlink: 'syz.2.7948': attribute type 3 has an invalid length. [ 1079.019920][ T5602] wg1 speed is unknown, defaulting to 1000 [ 1079.080689][ T30] audit: type=1804 audit(1770047588.280:28): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7947" name="/newroot/342/memory.events" dev="tmpfs" ino=1764 res=1 errno=0 [ 1079.114796][ T30] audit: type=1800 audit(1770047588.280:29): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7947" name="memory.events" dev="tmpfs" ino=1764 res=0 errno=0 [ 1079.510842][ T5631] gretap2: entered allmulticast mode [ 1079.606128][ T5602] lo speed is unknown, defaulting to 1000 [ 1079.744331][ T5602] lo speed is unknown, defaulting to 1000 [ 1079.859232][ T5636] syzkaller0: entered promiscuous mode [ 1079.869092][ T5636] syzkaller0: entered allmulticast mode [ 1081.078480][ T5657] siw: device registration error -23 [ 1082.563356][ T5698] __nla_validate_parse: 8 callbacks suppressed [ 1082.563371][ T5698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7972'. [ 1082.626943][ T5702] netlink: 'syz.3.7973': attribute type 1 has an invalid length. [ 1083.100433][ T5710] ip6gre3: entered promiscuous mode [ 1083.107657][ T5710] ip6gre3: entered allmulticast mode [ 1083.235571][ T5715] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1083.339874][ T5718] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1083.361167][ T5718] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1083.401516][ T5718] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1083.426496][ T5724] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7978'. [ 1083.436429][ T5726] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7975'. [ 1083.516395][ T5726] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7975'. [ 1083.620299][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7981'. [ 1083.650446][ T5741] tipc: Enabled bearer , priority 10 [ 1083.671085][ T5741] mac80211_hwsim hwsim91 syzkaller0: entered promiscuous mode [ 1083.693500][ T5741] mac80211_hwsim hwsim91 syzkaller0: entered allmulticast mode [ 1083.854018][ T5741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7984'. [ 1084.093107][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7988'. [ 1084.115862][ T5758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7988'. [ 1084.196412][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7990'. [ 1084.563174][ T5778] netlink: 45 bytes leftover after parsing attributes in process `syz.2.7995'. [ 1084.649759][ T5789] netlink: 'syz.0.7998': attribute type 2 has an invalid length. [ 1084.669702][ T5789] netlink: 'syz.0.7998': attribute type 1 has an invalid length. [ 1084.816518][ T5792] wg1 speed is unknown, defaulting to 1000 [ 1084.824158][ T5792] lo speed is unknown, defaulting to 1000 [ 1084.850310][ T5792] lo speed is unknown, defaulting to 1000 [ 1084.917904][ T5811] nbd: must specify at least one socket [ 1084.944303][ T5801] syzkaller0: entered promiscuous mode [ 1084.950161][ T5801] syzkaller0: entered allmulticast mode [ 1085.000428][ T5811] geneve3: entered promiscuous mode [ 1085.213534][ T2051] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1085.674264][ T5842] sctp: [Deprecated]: syz.1.8012 (pid 5842) Use of int in max_burst socket option. [ 1085.674264][ T5842] Use struct sctp_assoc_value instead [ 1087.090951][ T2051] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1087.100852][ T2051] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1087.177020][ T5857] macsec2: entered promiscuous mode [ 1087.182310][ T5857] macsec2: entered allmulticast mode [ 1087.218051][ T2051] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1087.258516][ T5868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1087.326540][ T5871] netlink: 'syz.1.8018': attribute type 13 has an invalid length. [ 1087.877125][ T5905] __nla_validate_parse: 8 callbacks suppressed [ 1087.877149][ T5905] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8023'. [ 1088.168865][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8027'. [ 1088.485111][ T5911] wg1 speed is unknown, defaulting to 1000 [ 1088.493576][ T5911] lo speed is unknown, defaulting to 1000 [ 1088.563013][ T5913] wg1 speed is unknown, defaulting to 1000 [ 1088.796327][ T5911] lo speed is unknown, defaulting to 1000 [ 1088.806718][ T5913] lo speed is unknown, defaulting to 1000 [ 1088.944192][ T5932] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1089.141568][ T5937] bond8: entered promiscuous mode [ 1089.156477][ T5941] netlink: 'syz.1.8032': attribute type 178 has an invalid length. [ 1089.254532][ T5937] macvlan2: entered promiscuous mode [ 1089.285974][ T5937] macvlan2: entered allmulticast mode [ 1089.312486][ T5937] bond8: (slave macvlan2): Opening slave failed [ 1089.333820][ T5913] lo speed is unknown, defaulting to 1000 [ 1089.806536][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8040'. [ 1089.818453][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8040'. [ 1089.853238][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8040'. [ 1089.877721][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8040'. [ 1090.149757][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8043'. [ 1090.277247][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8044'. [ 1090.353908][ T5977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8043'. [ 1091.096144][ T6019] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8056'. [ 1091.534646][ T6035] tipc: Enabled bearer , priority 0 [ 1091.561318][ T6038] netlink: 'syz.1.8063': attribute type 18 has an invalid length. [ 1091.576243][ T6026] syzkaller0: entered promiscuous mode [ 1091.582022][ T6026] syzkaller0: entered allmulticast mode [ 1091.594280][ T6040] netlink: 'syz.3.8061': attribute type 1 has an invalid length. [ 1091.614397][ T6036] netlink: 'syz.3.8061': attribute type 1 has an invalid length. [ 1091.734790][ T6036] bond9: entered promiscuous mode [ 1091.750343][ T6036] bond9: entered allmulticast mode [ 1091.878631][ T6031] bond9: (slave ip6gretap1): making interface the new active one [ 1091.898679][ T6031] ip6gretap1: entered promiscuous mode [ 1091.904372][ T6031] ip6gretap1: entered allmulticast mode [ 1091.911523][ T6031] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1091.934522][ T6045] bond9: left promiscuous mode [ 1091.941239][ T6045] ip6gretap1: left promiscuous mode [ 1091.947057][ T6045] bond9: left allmulticast mode [ 1091.952013][ T6045] ip6gretap1: left allmulticast mode [ 1091.960003][ T6045] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1091.971867][ T6046] tipc: Resetting bearer [ 1092.015502][ T6025] tipc: Resetting bearer [ 1092.106389][ T6025] tipc: Disabling bearer [ 1092.167676][ T6052] veth0: entered promiscuous mode [ 1092.307386][ T6048] veth0 (unregistering): left promiscuous mode [ 1092.356027][ T6065] netlink: 'syz.1.8064': attribute type 2 has an invalid length. [ 1092.364184][ T6065] netlink: 'syz.1.8064': attribute type 1 has an invalid length. [ 1092.372561][ T6064] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002 [ 1092.380624][ T6067] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002 [ 1092.847238][ T6080] wg1 speed is unknown, defaulting to 1000 [ 1092.854842][ T6080] lo speed is unknown, defaulting to 1000 [ 1092.875671][ T6080] lo speed is unknown, defaulting to 1000 [ 1093.065563][ T6084] __nla_validate_parse: 15 callbacks suppressed [ 1093.065585][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8075'. [ 1093.106764][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8075'. [ 1093.118503][ T6088] wg1 speed is unknown, defaulting to 1000 [ 1093.135486][ T6088] lo speed is unknown, defaulting to 1000 [ 1093.143371][ T30] audit: type=1800 audit(1770047602.340:30): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8077" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=1963 res=0 errno=0 [ 1093.228130][ T6093] syzkaller0: entered promiscuous mode [ 1093.240205][ T6093] syzkaller0: entered allmulticast mode [ 1093.271511][ T6088] lo speed is unknown, defaulting to 1000 [ 1093.526880][ T6098] wg1 speed is unknown, defaulting to 1000 [ 1093.588774][ T6098] lo speed is unknown, defaulting to 1000 [ 1093.740690][ T6110] vlan2: entered promiscuous mode [ 1093.758648][ T6110] vlan2: entered allmulticast mode [ 1093.772080][ T6110] hsr_slave_1: entered allmulticast mode [ 1093.796433][ T6098] lo speed is unknown, defaulting to 1000 [ 1093.824394][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8082'. [ 1094.242751][ T6101] nr4: entered promiscuous mode [ 1094.281466][ T6101] nr4: entered allmulticast mode [ 1094.428470][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8083'. [ 1094.489019][ T6116] netlink: 'syz.3.8083': attribute type 1 has an invalid length. [ 1094.503783][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8083'. [ 1094.777793][ T6129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8086'. [ 1094.788883][ T6129] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.8086'. [ 1094.798767][ T6129] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1094.858604][ T6129] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 1094.953238][ T6132] tipc: Enabled bearer , priority 0 [ 1094.977187][ T6132] syzkaller0: entered promiscuous mode [ 1094.982731][ T6132] syzkaller0: entered allmulticast mode [ 1095.010679][ T6130] tipc: Resetting bearer [ 1095.045573][ T6130] tipc: Disabling bearer [ 1095.067035][ T6134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8088'. [ 1095.125980][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8088'. [ 1095.136263][ T6136] nbd: nbd64 already in use [ 1095.143094][ T6134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8088'. [ 1095.152784][ T6134] openvswitch: netlink: Flow key attr not present in new flow. [ 1095.392747][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.403283][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.456120][ T5471] udevd[5471]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1095.820270][ T6149] netlink: 'syz.3.8092': attribute type 1 has an invalid length. [ 1095.947699][ T6149] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1095.948626][ T6150] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1096.030192][ T6158] bond9: option mode: invalid value (254) [ 1096.049248][ T6158] bond9 (unregistering): Released all slaves [ 1096.085901][ T6161] tipc: Enabling of bearer rejected, failed to enable media [ 1096.260288][ T6172] dvmrp1: left allmulticast mode [ 1096.423185][ T6180] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1096.492117][ T6171] dvmrp1: entered allmulticast mode [ 1096.897415][ T6178] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 1096.948050][ T6178] bond4 (unregistering): Released all slaves [ 1097.009550][ T6172] dvmrp1: left allmulticast mode [ 1097.500005][ T6216] tipc: Enabling of bearer rejected, already enabled [ 1097.712480][ T6228] netlink: 'syz.3.8108': attribute type 28 has an invalid length. [ 1097.883262][ T6239] wg1 speed is unknown, defaulting to 1000 [ 1097.907188][ T6239] lo speed is unknown, defaulting to 1000 [ 1097.995121][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1098.045743][ T6239] lo speed is unknown, defaulting to 1000 [ 1098.140457][ T6243] bond6: option miimon: invalid value (18446744073709551607) [ 1098.179769][ T6243] bond6: option miimon: allowed values 0 - 2147483647 [ 1098.188815][ T6254] No such timeout policy "syz0" [ 1098.210427][ T6243] bond6 (unregistering): Released all slaves [ 1098.316678][ T6247] bridge_slave_1: left allmulticast mode [ 1098.345081][ T6247] bridge_slave_1: left promiscuous mode [ 1098.373304][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.476578][ T6247] bond0: (slave bond_slave_0): Releasing backup interface [ 1098.499697][ T6247] bond0: (slave bond_slave_1): Releasing backup interface [ 1098.517269][ T6247] team0: Port device team_slave_0 removed [ 1098.531811][ T6247] team0: Port device team_slave_1 removed [ 1098.541949][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.571622][ T6247] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1098.606476][ T6256] dvmrp12: entered allmulticast mode [ 1098.879367][ T6249] dvmrp12: left allmulticast mode [ 1099.213677][ T6303] __nla_validate_parse: 8 callbacks suppressed [ 1099.213700][ T6303] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8127'. [ 1099.450722][ T6309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8130'. [ 1099.579883][ T6311] wg1 speed is unknown, defaulting to 1000 [ 1099.588299][ T6311] lo speed is unknown, defaulting to 1000 [ 1099.721069][ T6311] lo speed is unknown, defaulting to 1000 [ 1100.243878][ T6342] tipc: Enabling of bearer rejected, failed to enable media [ 1100.579209][ T6346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1100.616494][ T6351] sctp: [Deprecated]: syz.3.8139 (pid 6351) Use of int in max_burst socket option deprecated. [ 1100.616494][ T6351] Use struct sctp_assoc_value instead [ 1100.874639][ T6361] wg1 speed is unknown, defaulting to 1000 [ 1100.908541][ T6361] lo speed is unknown, defaulting to 1000 [ 1101.172791][ T6361] lo speed is unknown, defaulting to 1000 [ 1101.709891][ T6376] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1101.736991][ T6376] bond9 (unregistering): Released all slaves [ 1102.182132][ T6398] ip6tnl0: Caught tx_queue_len zero misconfig [ 1102.859725][ T6435] syzkaller0: entered promiscuous mode [ 1102.866210][ T6435] syzkaller0: entered allmulticast mode [ 1102.907486][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8159'. [ 1102.917574][ T6435] ip6tnl0: Master is either lo or non-ether device [ 1103.275304][ T6445] tipc: Enabling of bearer rejected, failed to enable media [ 1103.286795][ T6445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8161'. [ 1103.296419][ T6445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8161'. [ 1103.306388][ T6445] macvlan0: entered allmulticast mode [ 1103.311984][ T6445] veth1_vlan: entered allmulticast mode [ 1103.568353][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8164'. [ 1103.690875][ T6455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8163'. [ 1103.700489][ T6455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8163'. [ 1103.710288][ T6456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8163'. [ 1103.735861][ T6456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8163'. [ 1103.868430][ T6459] syzkaller0: entered promiscuous mode [ 1103.884353][ T6459] syzkaller0: entered allmulticast mode [ 1103.924737][ T6464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1104.038302][ T6471] nbd: nbd64 already in use [ 1104.234455][ T5471] udevd[5471]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1106.081660][ T6484] netlink: 'syz.0.8170': attribute type 12 has an invalid length. [ 1106.304065][ T6498] netlink: 'syz.2.8177': attribute type 10 has an invalid length. [ 1106.369550][ T6499] wg1 speed is unknown, defaulting to 1000 [ 1106.384402][ T6499] lo speed is unknown, defaulting to 1000 [ 1106.409215][ T6499] lo speed is unknown, defaulting to 1000 [ 1106.723231][T11943] IPVS: starting estimator thread 0... [ 1106.733130][ T6516] __nla_validate_parse: 4 callbacks suppressed [ 1106.733149][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8183'. [ 1106.845415][ T6519] IPVS: using max 27 ests per chain, 64800 per kthread [ 1106.896914][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8185'. [ 1107.143029][ T6530] syzkaller0: entered promiscuous mode [ 1107.155152][ T6530] syzkaller0: entered allmulticast mode [ 1107.162002][ T6536] netlink: 252 bytes leftover after parsing attributes in process `syz.2.8189'. [ 1107.457062][ T6557] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1107.549636][ T6565] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8197'. [ 1109.396065][ T6575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8199'. [ 1109.494335][ T6575] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8199'. [ 1110.030717][ T6590] netlink: 'syz.3.8205': attribute type 2 has an invalid length. [ 1110.087889][ T6587] wg1 speed is unknown, defaulting to 1000 [ 1110.127009][ T6587] lo speed is unknown, defaulting to 1000 [ 1110.191196][ T6587] lo speed is unknown, defaulting to 1000 [ 1110.237249][ T6608] wg1 speed is unknown, defaulting to 1000 [ 1110.253566][ T6608] lo speed is unknown, defaulting to 1000 [ 1110.314167][ T6591] syzkaller0: entered promiscuous mode [ 1110.319841][ T6591] syzkaller0: entered allmulticast mode [ 1110.423275][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8208'. [ 1112.166654][ T6608] lo speed is unknown, defaulting to 1000 [ 1112.432440][ T6623] netlink: 'syz.1.8211': attribute type 1 has an invalid length. [ 1112.441029][ T6623] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8211'. [ 1112.466906][ T6623] xt_nat: multiple ranges no longer supported [ 1112.489216][ T6625] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1113.275531][T25798] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1113.451500][ T6656] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1113.589157][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8219'. [ 1113.696943][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8221'. [ 1113.785565][T25798] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1113.814938][ T6662] wg1 speed is unknown, defaulting to 1000 [ 1113.901264][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8222'. [ 1114.042035][ T6662] lo speed is unknown, defaulting to 1000 [ 1114.051218][ T5986] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1114.090268][ T6662] lo speed is unknown, defaulting to 1000 [ 1114.097029][ T6682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8224'. [ 1114.204348][ T6684] netlink: 'syz.1.8225': attribute type 32 has an invalid length. [ 1114.230811][ T6684] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8225'. [ 1114.259150][ T6684] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1114.521248][ T6700] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8228'. [ 1114.577743][ T6700] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 1115.029677][ T6706] wg1 speed is unknown, defaulting to 1000 [ 1115.077592][ T6706] lo speed is unknown, defaulting to 1000 [ 1115.085386][ T6706] lo speed is unknown, defaulting to 1000 [ 1115.125971][ T5986] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1115.145078][ T5986] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1115.356698][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8232'. [ 1115.496621][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8235'. [ 1115.685176][T11974] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1115.802496][ T6727] bond6: option miimon: invalid value (18446744073709551607) [ 1115.810691][ T6727] bond6: option miimon: allowed values 0 - 2147483647 [ 1115.837093][ T6727] bond6 (unregistering): Released all slaves [ 1116.163025][ T6735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8237'. [ 1116.756497][ T6746] wg1 speed is unknown, defaulting to 1000 [ 1116.821635][ T6755] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1116.884991][ T6746] lo speed is unknown, defaulting to 1000 [ 1116.908692][ T6746] lo speed is unknown, defaulting to 1000 [ 1116.974408][ T6755] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1117.080012][ T6755] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1117.153545][ T6758] netlink: 'syz.4.8243': attribute type 23 has an invalid length. [ 1117.216301][ T6759] netlink: 'syz.4.8243': attribute type 1 has an invalid length. [ 1117.257400][ T6755] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1117.338083][ T6759] bond5: entered promiscuous mode [ 1117.346160][ T6759] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1117.378639][ T6761] bond5: (slave bridge0): making interface the new active one [ 1117.396727][ T6761] bridge0: entered promiscuous mode [ 1117.403145][ T6761] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 1117.611647][ T2051] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1117.635859][ T2051] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1117.702812][ T6123] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1117.736383][ T2051] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1117.809773][ T6770] wg1 speed is unknown, defaulting to 1000 [ 1117.843177][ T6770] lo speed is unknown, defaulting to 1000 [ 1117.873200][ T6770] lo speed is unknown, defaulting to 1000 [ 1117.957995][ T6777] __nla_validate_parse: 1 callbacks suppressed [ 1117.958016][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8248'. [ 1117.995764][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8248'. [ 1118.355720][ T6793] netlink: 'syz.4.8252': attribute type 3 has an invalid length. [ 1118.479087][ T6800] netlink: 'syz.4.8252': attribute type 12 has an invalid length. [ 1118.489971][ T6800] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8252'. [ 1118.538345][ T6803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8254'. [ 1118.846031][ T6810] mac80211_hwsim hwsim91 wlan0: entered promiscuous mode [ 1118.853307][ T6810] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1119.013397][ T6814] netlink: 'syz.1.8257': attribute type 2 has an invalid length. [ 1119.043239][ T6814] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8257'. [ 1119.279418][ T6825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8261'. [ 1119.355598][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1119.374848][ T6825] mac80211_hwsim hwsim103 wlan0: entered promiscuous mode [ 1119.458981][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8263'. [ 1119.494825][ T6829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8262'. [ 1119.508066][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8263'. [ 1119.662927][ T6839] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1119.932704][ T6861] netlink: 'syz.1.8269': attribute type 10 has an invalid length. [ 1119.976237][ T6861] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8269'. [ 1120.032294][ T6861] team0: Port device geneve0 added [ 1120.038321][ T2051] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1120.047798][ T2051] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1120.076428][ T6865] netlink: 'syz.4.8270': attribute type 1 has an invalid length. [ 1120.131674][ T2051] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1120.146977][ T6868] sctp: [Deprecated]: syz.0.8272 (pid 6868) Use of int in maxseg socket option. [ 1120.146977][ T6868] Use struct sctp_assoc_value instead [ 1120.193267][ T2051] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1120.253707][ T6869] wg1 speed is unknown, defaulting to 1000 [ 1120.271566][ T6869] lo speed is unknown, defaulting to 1000 [ 1120.299570][ T6869] lo speed is unknown, defaulting to 1000 [ 1120.860982][ T6907] sit2: entered promiscuous mode [ 1120.911034][ T6910] geneve4: entered promiscuous mode [ 1121.044162][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1121.054749][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1121.343377][ T6919] syzkaller0: entered promiscuous mode [ 1121.349757][ T6919] syzkaller0: entered allmulticast mode [ 1121.919511][ T6939] netlink: 'syz.3.8290': attribute type 10 has an invalid length. [ 1121.980517][ T6941] netlink: 'syz.3.8290': attribute type 10 has an invalid length. [ 1123.806657][ T6939] team0: Port device dummy0 added [ 1123.876638][ T6941] team0: Port device dummy0 removed [ 1123.895812][ T6941] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1123.932593][ T6925] wg1 speed is unknown, defaulting to 1000 [ 1124.085607][ T6925] lo speed is unknown, defaulting to 1000 [ 1124.145792][ T6925] lo speed is unknown, defaulting to 1000 [ 1124.379032][ T6959] __nla_validate_parse: 4 callbacks suppressed [ 1124.379054][ T6959] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8295'. [ 1124.427587][ T6965] netlink: 'syz.0.8295': attribute type 13 has an invalid length. [ 1124.514619][ T6962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8293'. [ 1124.548427][ T6965] veth1_vlan: left allmulticast mode [ 1125.034036][ T6978] wg1 speed is unknown, defaulting to 1000 [ 1125.042320][ T6978] lo speed is unknown, defaulting to 1000 [ 1125.050917][ T6978] lo speed is unknown, defaulting to 1000 [ 1125.278389][ T6987] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1125.390296][ T6992] netlink: 'syz.4.8301': attribute type 1 has an invalid length. [ 1125.492841][ T6992] bond6: entered promiscuous mode [ 1125.499886][ T6996] netlink: 'syz.0.8302': attribute type 1 has an invalid length. [ 1125.530714][ T6992] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1125.542685][ T6996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1125.562862][ T6994] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1125.576934][ T6994] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1125.590108][ T6994] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1125.740498][ T6994] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1125.777050][ T6994] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1125.983016][ T7010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8305'. [ 1126.054965][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1126.063055][ C0] lec:lec_tx_timeout: lec0 [ 1126.195647][ T7018] netlink: 'syz.4.8308': attribute type 83 has an invalid length. [ 1126.233199][ T7005] wg1 speed is unknown, defaulting to 1000 [ 1126.256303][ T7018] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8308'. [ 1126.271184][ T7021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8310'. [ 1126.281506][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8308'. [ 1126.295621][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8308'. [ 1126.316454][ T7005] lo speed is unknown, defaulting to 1000 [ 1126.427308][ T7005] lo speed is unknown, defaulting to 1000 [ 1126.459314][ T7021] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8310'. [ 1126.573775][ T7026] tipc: Enabled bearer , priority 0 [ 1126.582478][ T7026] syzkaller0: entered promiscuous mode [ 1126.588669][ T7026] syzkaller0: entered allmulticast mode [ 1126.753009][ T7025] tipc: Resetting bearer [ 1126.802860][ T7025] tipc: Disabling bearer [ 1126.937814][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8312'. [ 1127.468862][ T8796] lec:lec_start_xmit: lec0:No lecd attached [ 1128.075107][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1128.371371][ T7092] xt_hashlimit: max too large, truncated to 1048576 [ 1128.430987][ T7095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1128.703586][ T7105] netlink: 'syz.0.8332': attribute type 83 has an invalid length. [ 1128.974183][ T7127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1129.173692][ T7140] nbd: illegal input index 38656 [ 1129.180467][ T7140] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20003 [ 1129.229677][ T7142] pim6reg: entered allmulticast mode [ 1129.252398][ T7142] pim6reg: left allmulticast mode [ 1129.914029][ T7163] nbd: nbd1 already in use [ 1129.937431][ T7160] delete_channel: no stack [ 1130.379269][ T7187] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1130.408069][ T7187] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1130.422222][ T7187] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1130.450145][ T7193] __nla_validate_parse: 8 callbacks suppressed [ 1130.450161][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8358'. [ 1130.478109][ T2051] tipc: Subscription rejected, illegal request [ 1130.626424][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.662803][ T7191] tipc: Resetting bearer [ 1130.749169][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1131.018908][ T7187] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.064505][ T7187] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1131.081690][ T7187] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1131.110432][ T6123] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.120690][ T6123] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1131.130027][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8360'. [ 1131.141925][ T6123] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1131.151368][ T7213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8360'. [ 1131.162399][ T6123] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.171376][ T6123] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1131.181949][ T6123] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1131.241445][ T7211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8361'. [ 1131.317039][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8361'. [ 1131.383017][ T7211] macvtap1: entered promiscuous mode [ 1131.417506][ T7211] dummy0: entered promiscuous mode [ 1131.435375][ T7211] macvtap1: entered allmulticast mode [ 1131.451156][ T7211] dummy0: entered allmulticast mode [ 1131.744577][ T7231] wg1 speed is unknown, defaulting to 1000 [ 1131.786607][ T7231] lo speed is unknown, defaulting to 1000 [ 1131.794148][ T7231] lo speed is unknown, defaulting to 1000 [ 1132.954999][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5480 ms [ 1132.963091][ C0] lec:lec_tx_timeout: lec0 [ 1133.192349][ T7279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8369'. [ 1133.784274][ T7298] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8373'. [ 1133.843066][ T7295] netlink: 'syz.3.8372': attribute type 1 has an invalid length. [ 1133.943963][ T7295] bond10: entered promiscuous mode [ 1133.950381][ T7295] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1133.962859][ T7292] syzkaller1: entered promiscuous mode [ 1133.985353][ T7292] syzkaller1: entered allmulticast mode [ 1134.010735][ T7302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8373'. [ 1134.034287][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8373'. [ 1134.217425][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8376'. [ 1134.894803][ T7342] netlink: 'syz.0.8381': attribute type 4 has an invalid length. [ 1135.049679][ T7348] netlink: 'syz.3.8382': attribute type 32 has an invalid length. [ 1135.087887][ T7349] macvlan0: left allmulticast mode [ 1135.128028][ T7349] ip6gre2: left promiscuous mode [ 1135.143899][ T7349] ip6gre3: left promiscuous mode [ 1135.157120][ T7349] ip6gre3: left allmulticast mode [ 1135.168754][ T7349] macsec2: left promiscuous mode [ 1135.173902][ T7349] macsec2: left allmulticast mode [ 1135.188608][ T7349] sit2: left promiscuous mode [ 1135.341186][ T7348] bond11: option coupled_control: invalid value (12) [ 1135.368511][ T7348] bond11 (unregistering): Released all slaves [ 1135.776390][ T7369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1135.812537][ T7369] netlink: 'syz.1.8386': attribute type 1 has an invalid length. [ 1135.876830][ T7372] __nla_validate_parse: 2 callbacks suppressed [ 1135.876851][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8388'. [ 1135.978718][ T7381] bridge1: entered promiscuous mode [ 1135.995766][ T7381] bridge1: entered allmulticast mode [ 1136.222760][T29244] block nbd6: Receive control failed (result -32) [ 1136.340652][ T7412] FAULT_INJECTION: forcing a failure. [ 1136.340652][ T7412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1136.358890][ T7412] CPU: 1 UID: 0 PID: 7412 Comm: syz.0.8397 Not tainted syzkaller #0 PREEMPT(full) [ 1136.358920][ T7412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1136.358934][ T7412] Call Trace: [ 1136.358943][ T7412] [ 1136.358952][ T7412] dump_stack_lvl+0xe8/0x150 [ 1136.358988][ T7412] should_fail_ex+0x412/0x560 [ 1136.359020][ T7412] _copy_from_iter+0x1d3/0x1670 [ 1136.359059][ T7412] ? rcu_is_watching+0x15/0xb0 [ 1136.359082][ T7412] ? __pfx__copy_from_iter+0x10/0x10 [ 1136.359107][ T7412] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 1136.359151][ T7412] ? netlink_sendmsg+0x650/0xb40 [ 1136.359174][ T7412] ? skb_put+0x11b/0x210 [ 1136.359206][ T7412] netlink_sendmsg+0x6c0/0xb40 [ 1136.359242][ T7412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.359272][ T7412] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1136.359300][ T7412] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1136.359325][ T7412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.359349][ T7412] ____sys_sendmsg+0xa68/0xad0 [ 1136.359378][ T7412] ? __might_fault+0xaf/0x130 [ 1136.359417][ T7412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1136.359456][ T7412] ? import_iovec+0x73/0xa0 [ 1136.359491][ T7412] ___sys_sendmsg+0x2a5/0x360 [ 1136.359519][ T7412] ? __lock_acquire+0x6b5/0x2cf0 [ 1136.359554][ T7412] ? __pfx____sys_sendmsg+0x10/0x10 [ 1136.359623][ T7412] ? __fget_files+0x2a/0x420 [ 1136.359654][ T7412] ? __fget_files+0x3a0/0x420 [ 1136.359689][ T7412] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1136.359722][ T7412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1136.359764][ T7412] ? __pfx_ksys_write+0x10/0x10 [ 1136.359808][ T7412] do_syscall_64+0xe2/0xf80 [ 1136.359836][ T7412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.359856][ T7412] ? trace_irq_disable+0x37/0x100 [ 1136.359876][ T7412] ? clear_bhb_loop+0x60/0xb0 [ 1136.359902][ T7412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.359927][ T7412] RIP: 0033:0x7ff82819aeb9 [ 1136.359946][ T7412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.359965][ T7412] RSP: 002b:00007ff82913d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.359988][ T7412] RAX: ffffffffffffffda RBX: 00007ff828415fa0 RCX: 00007ff82819aeb9 [ 1136.360004][ T7412] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1136.360018][ T7412] RBP: 00007ff82913d090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.360031][ T7412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.360043][ T7412] R13: 00007ff828416038 R14: 00007ff828415fa0 R15: 00007ffd7a05ba38 [ 1136.360079][ T7412] [ 1136.647902][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8396'. [ 1136.887261][ T7425] IPVS: set_ctl: invalid protocol: 12 172.20.20.21:20004 [ 1136.998067][ T7427] pim6reg: entered allmulticast mode [ 1137.027416][ T7427] pim6reg: left allmulticast mode [ 1137.080853][ T7430] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1137.083829][ T7433] syzkaller0: entered promiscuous mode [ 1137.096628][ T7433] syzkaller0: entered allmulticast mode [ 1137.447790][ T7448] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1137.560305][ T7453] netlink: 'syz.1.8410': attribute type 11 has an invalid length. [ 1137.607500][ T7446] syzkaller0: entered promiscuous mode [ 1137.613335][ T7446] syzkaller0: entered allmulticast mode [ 1140.040012][ T7463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.066481][ T7463] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.087702][ T7463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1140.326964][ T7480] netlink: 'syz.3.8416': attribute type 3 has an invalid length. [ 1140.371094][ T7474] netlink: 'syz.3.8416': attribute type 3 has an invalid length. [ 1140.422439][ T7480] ªªªªªª: entered allmulticast mode [ 1140.466212][ T7472] ªªªªªª: left allmulticast mode [ 1140.680054][ T7496] bond5: entered promiscuous mode [ 1140.697732][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8421'. [ 1140.710971][ T7496] macvlan2: entered promiscuous mode [ 1140.717556][ T7496] macvlan2: entered allmulticast mode [ 1140.724364][ T7496] bond5: (slave macvlan2): Opening slave failed [ 1140.762843][ T7499] syzkaller0: entered promiscuous mode [ 1140.785140][ T7499] syzkaller0: entered allmulticast mode [ 1140.841788][ T7502] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1140.855419][ T7509] netlink: 'syz.4.8424': attribute type 1 has an invalid length. [ 1140.871054][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8423'. [ 1140.883432][ T7502] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8423'. [ 1140.893554][ T7502] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8423'. [ 1140.904052][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8423'. [ 1140.916612][ T7509] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1140.917882][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8423'. [ 1140.942100][ T7507] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1140.958627][ T7500] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1140.974268][ T7520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8426'. [ 1141.019024][ T7502] netlink: 'syz.3.8423': attribute type 3 has an invalid length. [ 1141.039713][ T7520] netlink: 35 bytes leftover after parsing attributes in process `syz.1.8426'. [ 1141.049789][ T7517] netem: change failed [ 1141.058450][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8423'. [ 1141.071257][ T7517] netlink: 'syz.2.8425': attribute type 3 has an invalid length. [ 1141.172126][ T7502] bond11: (slave ip6gretap3): making interface the new active one [ 1141.193222][ T7502] bond11: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1141.347408][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8430'. [ 1141.356915][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8430'. [ 1141.367053][ T7534] netlink: 'syz.3.8430': attribute type 12 has an invalid length. [ 1141.378219][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8430'. [ 1141.426535][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8430'. [ 1141.445622][ T7534] netlink: 'syz.3.8430': attribute type 12 has an invalid length. [ 1141.553816][ T7540] tipc: Enabled bearer , priority 0 [ 1141.589152][ T7540] syzkaller0: entered promiscuous mode [ 1141.613753][ T7540] syzkaller0: entered allmulticast mode [ 1141.643163][ T7544] syzkaller0: entered promiscuous mode [ 1141.656665][ T7544] syzkaller0: entered allmulticast mode [ 1141.677651][ T7540] tipc: Resetting bearer [ 1141.726285][ T7540] tipc: Resetting bearer [ 1141.868733][ T7540] tipc: Disabling bearer [ 1142.048352][ T7551] bond0: entered promiscuous mode [ 1142.066684][ T7551] rose0: entered promiscuous mode [ 1142.076823][ T7551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.439115][ T7565] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.451837][ T7565] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.517304][ T7553] wg1 speed is unknown, defaulting to 1000 [ 1142.537224][ T7553] lo speed is unknown, defaulting to 1000 [ 1142.550139][ T7567] syzkaller0: entered promiscuous mode [ 1142.571327][ T7567] syzkaller0: entered allmulticast mode [ 1142.587979][ T7567] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1142.632921][ T7572] tipc: Enabled bearer , priority 0 [ 1142.653205][ T7553] lo speed is unknown, defaulting to 1000 [ 1142.662790][ T7565] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.683398][ T7565] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.717584][ T7569] syzkaller0: entered promiscuous mode [ 1142.723106][ T7569] syzkaller0: entered allmulticast mode [ 1142.803969][ T7565] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.814291][ T7565] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.878534][ T7569] tipc: Resetting bearer [ 1142.910131][ T7568] tipc: Resetting bearer [ 1142.978413][ T7568] tipc: Disabling bearer [ 1143.002488][ T7565] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.023017][ T7565] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.190293][ T3647] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1143.213503][ T3647] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.251213][ T7593] netlink: 'syz.0.8445': attribute type 1 has an invalid length. [ 1143.262421][ T1078] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1143.279081][ T1078] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.322086][ T1078] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1143.333917][ T1078] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.345139][ T7595] netlink: 'syz.4.8446': attribute type 1 has an invalid length. [ 1143.419684][ T1078] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1143.428680][ T1078] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.487764][ T7601] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1143.792748][ T7615] wg1 speed is unknown, defaulting to 1000 [ 1143.800720][ T7615] lo speed is unknown, defaulting to 1000 [ 1143.808885][ T7615] lo speed is unknown, defaulting to 1000 [ 1144.197475][ T7629] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1144.235991][ T7629] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1144.406804][ T7629] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1144.419869][ T7629] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1144.524403][ T7629] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1144.564846][ T7629] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1144.663763][ T7629] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1144.705922][ T7629] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1144.842868][ T7645] netlink: 'syz.3.8457': attribute type 10 has an invalid length. [ 1144.881768][ T7645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.969623][ T7645] bond0: (slave team0): Enslaving as an active interface with an up link [ 1145.209651][ T1078] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.218778][ T1078] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1145.355096][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1145.409473][ T2054] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.425174][ T2054] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1145.459395][ T2054] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.467796][ T2054] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1145.557045][ T2054] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.568565][ T2054] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 1146.126690][ T7678] __nla_validate_parse: 5 callbacks suppressed [ 1146.126710][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8464'. [ 1146.212901][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8464'. [ 1146.234561][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8464'. [ 1146.244838][ T2051] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1146.253901][ T2051] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1146.273715][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8464'. [ 1146.288540][ T2051] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1146.309115][ T2051] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1146.461536][ T7689] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8467'. [ 1146.491430][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8468'. [ 1146.580607][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8467'. [ 1146.607976][ T7559] block nbd64: NBD_DISCONNECT [ 1146.622299][ T7696] wg1 speed is unknown, defaulting to 1000 [ 1146.666622][ T7699] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8469'. [ 1146.715464][ T7696] lo speed is unknown, defaulting to 1000 [ 1146.764778][ T7696] lo speed is unknown, defaulting to 1000 [ 1146.839184][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8473'. [ 1146.868311][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8472'. [ 1146.940829][ T7708] batadv1: entered promiscuous mode [ 1146.951274][ T7708] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1147.014355][ T7715] netlink: 'syz.3.8474': attribute type 1 has an invalid length. [ 1147.090574][ T7715] syzkaller0: entered promiscuous mode [ 1147.108767][ T7715] syzkaller0: entered allmulticast mode [ 1147.193356][ T7722] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1147.628002][ T7734] hsr_slave_0: left promiscuous mode [ 1147.647440][ T7734] hsr_slave_1: left promiscuous mode [ 1147.845742][ T7742] xt_ecn: cannot match TCP bits for non-tcp packets [ 1148.337966][ T7769] netlink: 'syz.1.8487': attribute type 4 has an invalid length. [ 1149.513201][ T7821] wg1 speed is unknown, defaulting to 1000 [ 1149.543443][ T7823] wg1 speed is unknown, defaulting to 1000 [ 1149.550514][ T7821] lo speed is unknown, defaulting to 1000 [ 1149.560471][ T7823] lo speed is unknown, defaulting to 1000 [ 1149.568476][ T7823] lo speed is unknown, defaulting to 1000 [ 1149.943567][ T7840] sctp: [Deprecated]: syz.3.8503 (pid 7840) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1149.943567][ T7840] Use struct sctp_sack_info instead [ 1149.961657][ T7840] xt_hashlimit: max too large, truncated to 1048576 [ 1150.097785][ T7821] lo speed is unknown, defaulting to 1000 [ 1151.022937][ T7883] netlink: 'syz.3.8515': attribute type 1 has an invalid length. [ 1151.098750][ T7882] delete_channel: no stack [ 1151.612463][ T7905] netlink: 'syz.3.8522': attribute type 3 has an invalid length. [ 1151.647683][ T7905] __nla_validate_parse: 18 callbacks suppressed [ 1151.647705][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8522'. [ 1151.965490][ T7913] dvmrp6: entered allmulticast mode [ 1152.017673][ T7923] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1152.082277][ T7923] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1152.114167][ T7923] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1152.498780][T11974] IPVS: starting estimator thread 0... [ 1152.509440][ T7943] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1152.607598][ T7945] IPVS: using max 39 ests per chain, 93600 per kthread [ 1152.676970][ T7958] netlink: 6 bytes leftover after parsing attributes in process `syz.0.8535'. [ 1152.803657][ T7958] team0 (unregistering): Port device macvlan2 removed [ 1152.820824][ T7958] team0 (unregistering): Port device batadv1 removed [ 1152.863792][ T7963] syzkaller0: entered promiscuous mode [ 1152.876234][ T7963] syzkaller0: entered allmulticast mode [ 1152.962387][ T7963] wg1 speed is unknown, defaulting to 1000 [ 1152.981793][ T7963] lo speed is unknown, defaulting to 1000 [ 1153.007396][ T7963] lo speed is unknown, defaulting to 1000 [ 1153.088769][ T7973] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.8541'. [ 1153.249957][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8544'. [ 1153.683591][ T8010] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8550'. [ 1153.836141][ T8013] netlink: 'syz.0.8551': attribute type 39 has an invalid length. [ 1153.941879][ T7968] dvmrp1: entered allmulticast mode [ 1154.270984][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8553'. [ 1154.289014][ T8021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8553'. [ 1154.321476][ T8027] nftables ruleset with unbound chain [ 1154.711048][ T8044] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1154.789106][ T8037] wg1 speed is unknown, defaulting to 1000 [ 1154.832653][ T8037] lo speed is unknown, defaulting to 1000 [ 1154.915644][ T8037] lo speed is unknown, defaulting to 1000 [ 1156.135761][ T8086] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1156.156955][ T8085] bridge0: port 1(erspan0) entered blocking state [ 1156.163555][ T8085] bridge0: port 1(erspan0) entered disabled state [ 1156.205319][ T8085] erspan0: entered allmulticast mode [ 1156.234090][ T8085] erspan0: entered promiscuous mode [ 1156.414271][ T8100] bond8: option all_slaves_active: invalid value (13) [ 1156.454212][ T8100] bond8 (unregistering): Released all slaves [ 1156.577420][ T8100] xt_hashlimit: max too large, truncated to 1048576 [ 1156.627763][ T8119] netlink: 'syz.3.8573': attribute type 5 has an invalid length. [ 1157.424829][ T8154] FAULT_INJECTION: forcing a failure. [ 1157.424829][ T8154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.443698][ T8154] CPU: 0 UID: 0 PID: 8154 Comm: syz.4.8580 Not tainted syzkaller #0 PREEMPT(full) [ 1157.443728][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1157.443743][ T8154] Call Trace: [ 1157.443751][ T8154] [ 1157.443760][ T8154] dump_stack_lvl+0xe8/0x150 [ 1157.443794][ T8154] should_fail_ex+0x412/0x560 [ 1157.443824][ T8154] _copy_from_user+0x2d/0xb0 [ 1157.443858][ T8154] ___sys_sendmsg+0x1c6/0x360 [ 1157.443887][ T8154] ? __lock_acquire+0x6b5/0x2cf0 [ 1157.443920][ T8154] ? __pfx____sys_sendmsg+0x10/0x10 [ 1157.443986][ T8154] ? __fget_files+0x2a/0x420 [ 1157.444010][ T8154] ? __fget_files+0x3a0/0x420 [ 1157.444044][ T8154] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1157.444077][ T8154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1157.444117][ T8154] ? __pfx_ksys_write+0x10/0x10 [ 1157.444159][ T8154] do_syscall_64+0xe2/0xf80 [ 1157.444186][ T8154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.444207][ T8154] ? trace_irq_disable+0x37/0x100 [ 1157.444228][ T8154] ? clear_bhb_loop+0x60/0xb0 [ 1157.444254][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.444274][ T8154] RIP: 0033:0x7fc360b9aeb9 [ 1157.444295][ T8154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.444313][ T8154] RSP: 002b:00007fc361a2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.444336][ T8154] RAX: ffffffffffffffda RBX: 00007fc360e15fa0 RCX: 00007fc360b9aeb9 [ 1157.444352][ T8154] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1157.444366][ T8154] RBP: 00007fc361a2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.444380][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.444397][ T8154] R13: 00007fc360e16038 R14: 00007fc360e15fa0 R15: 00007ffde1548788 [ 1157.444439][ T8154] [ 1157.788224][ T8157] __nla_validate_parse: 6 callbacks suppressed [ 1157.788245][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8581'. [ 1157.828056][ T8160] bond0: option min_links: invalid value (18446744073624092673) [ 1157.868940][ T8160] bond0: option min_links: allowed values 0 - 2147483647 [ 1158.056641][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8586'. [ 1158.253387][ T8177] netlink: 'syz.3.8587': attribute type 1 has an invalid length. [ 1158.341582][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8591'. [ 1158.422376][ T8203] netlink: 'syz.0.8592': attribute type 1 has an invalid length. [ 1158.505967][ T8177] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1158.593598][ T8203] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1158.629155][ T8209] veth11: entered promiscuous mode [ 1158.641495][ T8209] bond7: (slave veth11): Enslaving as an active interface with an up link [ 1158.867373][ T8218] syzkaller0: entered promiscuous mode [ 1158.873352][ T8218] syzkaller0: entered allmulticast mode [ 1160.114519][ T8276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8610'. [ 1160.664769][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8612'. [ 1161.407228][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8615'. [ 1161.667472][ T8304] syzkaller1: entered promiscuous mode [ 1161.673031][ T8304] syzkaller1: entered allmulticast mode [ 1161.946086][ T8327] netlink: 'syz.3.8624': attribute type 9 has an invalid length. [ 1161.953914][ T8327] netlink: 'syz.3.8624': attribute type 6 has an invalid length. [ 1161.972455][ T8315] wg1 speed is unknown, defaulting to 1000 [ 1161.985522][ T8327] netlink: 'syz.3.8624': attribute type 7 has an invalid length. [ 1162.008690][ T8327] netlink: 'syz.3.8624': attribute type 8 has an invalid length. [ 1162.201284][ T8315] lo speed is unknown, defaulting to 1000 [ 1162.214261][ T8338] IPVS: Error connecting to the multicast addr [ 1162.224177][ T8315] lo speed is unknown, defaulting to 1000 [ 1162.864041][ T8357] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1162.880102][ T8357] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1162.891976][ T8357] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 1163.055181][ T8362] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8632'. [ 1163.240054][ T8374] syzkaller0: entered promiscuous mode [ 1163.258601][ T8374] syzkaller0: entered allmulticast mode [ 1163.329581][ T8374] tipc: Enabled bearer , priority 0 [ 1163.481912][ T8373] tipc: Resetting bearer [ 1163.550133][ T8373] tipc: Disabling bearer [ 1163.730228][ T8392] bond13 (unregistering): Released all slaves [ 1163.822611][ T8401] openvswitch: netlink: EtherType 50a is less than min 600 [ 1163.938634][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8646'. [ 1164.174600][ T8418] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 1164.422349][ T7700] udevd[7700]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1164.510973][ T7559] udevd[7559]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1164.750161][ T8444] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8658'. [ 1164.782327][ T8445] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8657'. [ 1165.218177][ T8471] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8664'. [ 1165.308970][ T8468] wg1 speed is unknown, defaulting to 1000 [ 1165.353730][ T8468] lo speed is unknown, defaulting to 1000 [ 1165.393569][ T8468] lo speed is unknown, defaulting to 1000 [ 1165.549258][ T8489] netlink: 'syz.4.8669': attribute type 1 has an invalid length. [ 1165.663028][ T8489] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1165.732351][ T8489] bond8: (slave ip6gretap1): making interface the new active one [ 1165.790287][ T8489] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1165.855954][ T8492] veth11: entered promiscuous mode [ 1165.867054][ T8492] bond8: (slave veth11): Enslaving as an active interface with a down link [ 1165.924163][ T8496] bond9: entered promiscuous mode [ 1165.933242][ T8496] bond9: entered allmulticast mode [ 1165.944454][ T8496] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1165.959068][ T8492] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.8669'. [ 1166.087616][ T8492] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1166.102161][ T8489] bond8: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1166.172712][ T8503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8672'. [ 1166.191202][ T8503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8672'. [ 1166.257672][ T8503] erspan0: entered promiscuous mode [ 1166.286586][ T8503] gretap0: entered promiscuous mode [ 1166.295154][ T8503] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1166.336084][ T8503] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1166.384174][ T8509] batadv2: entered promiscuous mode [ 1166.652075][ T8529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1166.677080][ T8530] netlink: 'syz.4.8677': attribute type 15 has an invalid length. [ 1166.803444][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8678'. [ 1166.847294][T11943] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1166.863726][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8678'. [ 1167.115146][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1167.225311][T20899] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1168.167828][ T8579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8688'. [ 1168.959759][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8691'. [ 1169.300627][ T8611] sock: sock_set_timeout: `syz.3.8695' (pid 8611) tries to set negative timeout [ 1169.392189][ T2054] vlan2: left promiscuous mode [ 1169.408170][ T2054] dummy0: left promiscuous mode [ 1169.416976][ T8614] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8696'. [ 1169.440754][ T2054] bridge0: port 4(vlan2) entered disabled state [ 1169.454071][ T2054] team0: left promiscuous mode [ 1169.459761][ T2054] team_slave_0: left promiscuous mode [ 1169.468201][ T2054] team_slave_1: left promiscuous mode [ 1169.477429][ T2054] bridge1: left promiscuous mode [ 1169.488987][ T2054] bridge0: port 3(team0) entered disabled state [ 1169.515272][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8697'. [ 1169.658324][ T2054] bridge_slave_1: left allmulticast mode [ 1169.664367][ T2054] bridge_slave_1: left promiscuous mode [ 1169.678542][ T2054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.693981][ T2054] bridge_slave_0: left allmulticast mode [ 1169.707672][ T2054] bridge_slave_0: left promiscuous mode [ 1169.716585][ T2054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.874481][ T2054] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1169.889626][ T2054] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1170.058836][ T2054] gretap0 (unregistering): left promiscuous mode [ 1170.084614][ T2054] bond7 (unregistering): (slave gretap1): Releasing backup interface [ 1170.390249][ T2054] bridge1 (unregistering): left allmulticast mode [ 1170.399961][ T2054] team0: Port device bridge1 removed [ 1170.750995][ T2054] bond10 (unregistering): (slave bridge7): Releasing active interface [ 1171.311836][ T8646] sctp: [Deprecated]: syz.3.8702 (pid 8646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1171.311836][ T8646] Use struct sctp_sack_info instead [ 1171.441040][ T2054] bond0 (unregistering): left promiscuous mode [ 1171.447602][ T2054] ÿÿ: left promiscuous mode [ 1171.452746][ T2054] bond_slave_1: left promiscuous mode [ 1171.463980][ T2054] bond0 (unregistering): (slave 32ÿÿ): Releasing backup interface [ 1171.473999][ T2054] ÿÿ: left allmulticast mode [ 1171.480306][ T2054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.490366][ T2054] bond_slave_1: left allmulticast mode [ 1171.497020][ T2054] bond0 (unregistering): Released all slaves [ 1171.621853][ T2054] bond1 (unregistering): Released all slaves [ 1171.749928][ T2054] bond2 (unregistering): Released all slaves [ 1171.764280][ T2054] bond3 (unregistering): Released all slaves [ 1171.779790][ T2054] bond4 (unregistering): Released all slaves [ 1171.797097][ T2054] bond5 (unregistering): Released all slaves [ 1171.817845][ T2054] bond6 (unregistering): Released all slaves [ 1171.958183][ T2054] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1171.967256][ T2054] bond7 (unregistering): Released all slaves [ 1172.097563][ T2054] bond8 (unregistering): Released all slaves [ 1172.113855][ T2054] bond9 (unregistering): Released all slaves [ 1172.128254][ T2054] bond10 (unregistering): Released all slaves [ 1172.283361][ T2054] bond11 (unregistering): Released all slaves [ 1172.403737][ T8639] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8702'. [ 1172.470614][ T2054] : left promiscuous mode [ 1172.627414][ T2054] tipc: Left network mode [ 1173.152096][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8714'. [ 1173.207820][ T8690] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8715'. [ 1173.482976][ T8705] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8719'. [ 1173.576538][ T8705] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8719'. [ 1173.634205][ T8705] netlink: 'syz.0.8719': attribute type 6 has an invalid length. [ 1173.654998][ T8705] netlink: 'syz.0.8719': attribute type 5 has an invalid length. [ 1173.667747][ T8705] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8719'. [ 1173.755959][ T8722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8721'. [ 1174.127661][ T8738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1174.207163][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8729'. [ 1174.265269][ T8744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8729'. [ 1174.289214][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8729'. [ 1174.318688][ T8745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8729'. [ 1174.528432][ T8763] Bluetooth: MGMT ver 1.23 [ 1174.596149][ T8762] bond11: option resend_igmp: invalid value (2878) [ 1174.624235][ T8762] bond11: option resend_igmp: allowed values 0 - 255 [ 1174.693762][ T8762] bond11 (unregistering): Released all slaves [ 1174.921133][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8735'. [ 1175.093126][ T8780] gretap3: entered promiscuous mode [ 1175.259626][ T8787] syzkaller1: entered allmulticast mode [ 1175.297498][ T8789] netlink: 'syz.4.8738': attribute type 8 has an invalid length. [ 1175.533424][ T2054] batadv0: left promiscuous mode [ 1175.566256][ T2054] macvlan1: left promiscuous mode [ 1175.715496][ T2054] hsr_slave_0: left promiscuous mode [ 1175.745086][ T2054] hsr_slave_1: left promiscuous mode [ 1175.751298][ T2054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.811455][ T2054] batman_adv: batadv0: Removing interface: dummy0 [ 1175.853851][ T2054] batman_adv: batadv0: Removing interface: macsec0 [ 1176.421495][ T8817] netlink: 'syz.2.8743': attribute type 4 has an invalid length. [ 1176.485444][ T8838] netlink: 'syz.2.8743': attribute type 4 has an invalid length. [ 1176.554001][ T8841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1177.237482][ T2054] team_slave_1 (unregistering): left allmulticast mode [ 1177.248979][ T2054] team0 (unregistering): Port device team_slave_1 removed [ 1177.301392][ T2054] team_slave_0 (unregistering): left allmulticast mode [ 1177.309581][ T2054] team0 (unregistering): Port device team_slave_0 removed [ 1177.982352][ T8864] wg1 speed is unknown, defaulting to 1000 [ 1178.009643][ T8864] lo speed is unknown, defaulting to 1000 [ 1178.049272][ T8864] lo speed is unknown, defaulting to 1000 [ 1178.089394][ T8880] wg1 speed is unknown, defaulting to 1000 [ 1178.111564][ T8880] lo speed is unknown, defaulting to 1000 [ 1178.414684][ T2054] IPVS: stop unused estimator thread 0... [ 1178.618640][ T8880] lo speed is unknown, defaulting to 1000 [ 1178.789147][ T8916] __nla_validate_parse: 3 callbacks suppressed [ 1178.789168][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8759'. [ 1178.817158][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8759'. [ 1179.113715][ T8928] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1179.659402][ T8951] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8765'. [ 1179.765744][ T8953] mac80211_hwsim hwsim103 wlan0: left promiscuous mode [ 1179.915158][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1180.748885][ T8983] netlink: 'syz.4.8774': attribute type 29 has an invalid length. [ 1180.868012][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8773'. [ 1180.988330][ T8980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.305220][ T9011] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8780'. [ 1181.325243][ T9003] nbd7: detected capacity change from 0 to 127 [ 1181.654305][T29244] block nbd7: Receive control failed (result -104) [ 1181.912257][ T9041] wg1 speed is unknown, defaulting to 1000 [ 1181.932638][ T9041] lo speed is unknown, defaulting to 1000 [ 1181.942792][ T9041] lo speed is unknown, defaulting to 1000 [ 1182.483254][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1182.494033][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1182.638963][ T9061] netlink: 'syz.3.8794': attribute type 21 has an invalid length. [ 1182.655645][ T9061] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8794'. [ 1184.298992][ T9127] netlink: 'syz.2.8807': attribute type 10 has an invalid length. [ 1184.317577][ T9126] netlink: 240 bytes leftover after parsing attributes in process `syz.3.8806'. [ 1184.572788][ T9135] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8810'. [ 1184.750784][ T9146] macsec1: entered allmulticast mode [ 1184.757059][ T9146] macsec0: entered allmulticast mode [ 1184.790804][ T9148] netlink: 'syz.2.8811': attribute type 1 has an invalid length. [ 1184.859830][ T9148] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1185.019111][ T9151] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8815'. [ 1185.049922][ T9151] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8815'. [ 1185.135562][ T9161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8817'. [ 1185.393672][ T9173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1185.823989][ T9203] nbd: must specify a device to reconfigure [ 1185.871659][ T9203] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8829'. [ 1185.907934][ T9206] wg1 speed is unknown, defaulting to 1000 [ 1185.916350][ T9203] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8829'. [ 1185.916907][ T9206] lo speed is unknown, defaulting to 1000 [ 1185.987063][ T9206] lo speed is unknown, defaulting to 1000 [ 1186.228275][ T9225] openvswitch: netlink: Key type 30 is not supported [ 1186.829497][ T9258] wg1 speed is unknown, defaulting to 1000 [ 1186.838717][ T9258] lo speed is unknown, defaulting to 1000 [ 1186.949042][ T9269] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8845'. [ 1186.964462][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8846'. [ 1186.977214][ T9258] lo speed is unknown, defaulting to 1000 [ 1187.004962][ T9270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8846'. [ 1187.078841][ T9211] netlink: 'syz.4.8830': attribute type 2 has an invalid length. [ 1187.097470][ T2051] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.121027][ T2051] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.135890][ T2051] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.157203][ T2051] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.408008][ T9281] syzkaller0: entered promiscuous mode [ 1187.423967][ T9281] syzkaller0: entered allmulticast mode [ 1187.474031][ T9283] netlink: 'syz.1.8852': attribute type 1 has an invalid length. [ 1187.738548][ T9294] pim6reg99999999: entered allmulticast mode [ 1187.915036][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 1187.923220][ C0] lec:lec_tx_timeout: lec0 [ 1188.005810][ T9304] syzkaller0: entered promiscuous mode [ 1188.021650][ T9304] syzkaller0: entered allmulticast mode [ 1188.840951][ T9321] wg1 speed is unknown, defaulting to 1000 [ 1188.922700][ T9321] lo speed is unknown, defaulting to 1000 [ 1188.950232][ T9321] lo speed is unknown, defaulting to 1000 [ 1189.449373][ T9350] netlink: 'syz.0.8869': attribute type 5 has an invalid length. [ 1189.619404][ T9356] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1189.718194][ T9363] __nla_validate_parse: 6 callbacks suppressed [ 1189.718217][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8872'. [ 1189.723224][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8873'. [ 1189.778850][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8873'. [ 1189.832454][ T9366] xt_hashlimit: size too large, truncated to 1048576 [ 1190.559129][ T9403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8883'. [ 1190.612728][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8883'. [ 1190.728439][ T6131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.774933][ T6131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.920008][ T30] audit: type=1800 audit(1770047700.120:31): pid=9393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8879" name="memory.events" dev="tmpfs" ino=2624 res=0 errno=0 [ 1191.621302][ T9426] bond13: option arp_interval: invalid value (18446744073709551615) [ 1191.643606][ T9426] bond13: option arp_interval: allowed values 0 - 2147483647 [ 1191.657970][ T9426] bond13 (unregistering): Released all slaves [ 1191.730860][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8889'. [ 1191.803839][ T9442] wg1 speed is unknown, defaulting to 1000 [ 1191.834571][ T9442] lo speed is unknown, defaulting to 1000 [ 1191.880189][ T9442] lo speed is unknown, defaulting to 1000 [ 1192.105121][ T8796] lec:lec_start_xmit: lec0:No lecd attached [ 1192.422108][ T9449] wg1 speed is unknown, defaulting to 1000 [ 1192.472023][ T9449] lo speed is unknown, defaulting to 1000 [ 1192.599718][ T9465] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8891'. [ 1192.647487][ T9465] netlink: 'syz.2.8891': attribute type 10 has an invalid length. [ 1192.665532][ T9465] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8891'. [ 1192.693349][ T9472] vlan6: entered promiscuous mode [ 1192.698925][ T9472] vlan6: entered allmulticast mode [ 1192.704222][ T9472] bond0: entered allmulticast mode [ 1192.710237][ T9472] bond_slave_0: entered allmulticast mode [ 1192.720496][ T9472] bond_slave_1: entered allmulticast mode [ 1192.833954][ T9444] netlink: 'syz.3.8889': attribute type 6 has an invalid length. [ 1193.025804][ T9449] lo speed is unknown, defaulting to 1000 [ 1193.429789][ T9497] Bluetooth: MGMT ver 1.23 [ 1193.719984][ T9503] ip6tnl1: entered promiscuous mode [ 1193.747898][ T9503] ip6tnl1: entered allmulticast mode [ 1194.126347][ T9525] sctp: [Deprecated]: syz.1.8910 (pid 9525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1194.126347][ T9525] Use struct sctp_sack_info instead [ 1194.151298][ T9524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8909'. [ 1194.182343][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8909'. [ 1194.915181][ T9566] __nla_validate_parse: 1 callbacks suppressed [ 1194.915202][ T9566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8917'. [ 1195.378372][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8921'. [ 1195.387611][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8921'. [ 1195.592913][ T9582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.863697][ T9587] geneve5: entered promiscuous mode [ 1196.054157][ T9603] syzkaller0: entered promiscuous mode [ 1196.095064][ T9603] syzkaller0: entered allmulticast mode [ 1196.231320][ T9612] sctp: [Deprecated]: syz.0.8928 (pid 9612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1196.231320][ T9612] Use struct sctp_sack_info instead [ 1196.252078][ T9617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8927'. [ 1196.296509][ T9612] sctp: [Deprecated]: syz.0.8928 (pid 9612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1196.296509][ T9612] Use struct sctp_sack_info instead [ 1196.384315][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8930'. [ 1196.522198][ T9632] bond0: (slave dummy0): Releasing backup interface [ 1196.534240][ T9632] batman_adv: batadv0: Adding interface: dummy0 [ 1196.541697][ T9632] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.569074][ T9632] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1196.751684][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8934'. [ 1196.903778][ T9652] netlink: 312 bytes leftover after parsing attributes in process `syz.0.8937'. [ 1197.111775][ T9665] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1197.124974][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1197.133032][ C0] lec:lec_tx_timeout: lec0 [ 1197.148450][ T9665] bond13: (slave lo): making interface the new active one [ 1197.159312][ T9665] bond13: (slave lo): Enslaving as an active interface with an up link [ 1197.168882][ T9665] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1197.185633][ T9659] tipc: Enabling of bearer rejected, failed to enable media [ 1197.203183][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8939'. [ 1197.352127][ T9679] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8944'. [ 1197.366839][ T9679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8944'. [ 1197.409202][ T9681] syzkaller0: entered promiscuous mode [ 1197.414750][ T9681] syzkaller0: entered allmulticast mode [ 1198.144412][ T9706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1198.892370][ T9757] syzkaller0: entered promiscuous mode [ 1198.899881][ T9757] syzkaller0: entered allmulticast mode [ 1198.929792][ T9757] macsec0: entered promiscuous mode [ 1198.936710][ T9757] macsec0: entered allmulticast mode [ 1198.943933][ T9757] syzkaller0: port 1(macsec0) entered blocking state [ 1198.951231][ T9757] syzkaller0: port 1(macsec0) entered disabled state [ 1201.109550][ T9772] __nla_validate_parse: 6 callbacks suppressed [ 1201.109571][ T9772] netlink: 65173 bytes leftover after parsing attributes in process `syz.0.8969'. [ 1201.371053][ T9783] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1201.535268][ T9789] syzkaller1: entered promiscuous mode [ 1201.540824][ T9789] syzkaller1: entered allmulticast mode [ 1201.583344][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1201.604277][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1201.616933][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1201.653482][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1201.661629][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1201.745507][ T9797] wg1 speed is unknown, defaulting to 1000 [ 1201.753137][ T9797] lo speed is unknown, defaulting to 1000 [ 1201.760985][ T9797] lo speed is unknown, defaulting to 1000 [ 1201.979806][ T9812] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8980'. [ 1202.224535][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8981'. [ 1202.341676][ T9828] FAULT_INJECTION: forcing a failure. [ 1202.341676][ T9828] name failslab, interval 1, probability 0, space 0, times 0 [ 1202.373362][ T9828] CPU: 1 UID: 0 PID: 9828 Comm: syz.0.8983 Not tainted syzkaller #0 PREEMPT(full) [ 1202.373392][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1202.373407][ T9828] Call Trace: [ 1202.373416][ T9828] [ 1202.373427][ T9828] dump_stack_lvl+0xe8/0x150 [ 1202.373462][ T9828] should_fail_ex+0x412/0x560 [ 1202.373494][ T9828] should_failslab+0xa8/0x100 [ 1202.373521][ T9828] __kmalloc_cache_noprof+0x83/0x6e0 [ 1202.373542][ T9828] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1202.373577][ T9828] ? sctp_add_bind_addr+0x8c/0x370 [ 1202.373608][ T9828] sctp_add_bind_addr+0x8c/0x370 [ 1202.373639][ T9828] sctp_copy_local_addr_list+0x314/0x4f0 [ 1202.373668][ T9828] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1202.373694][ T9828] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1202.373722][ T9828] ? sctp_v6_is_any+0x64/0x80 [ 1202.373751][ T9828] ? sctp_copy_one_addr+0x93/0x360 [ 1202.373785][ T9828] sctp_bind_addr_copy+0xb3/0x3c0 [ 1202.373812][ T9828] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1202.373839][ T9828] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1202.373873][ T9828] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1202.373905][ T9828] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1202.373953][ T9828] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1202.373983][ T9828] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1202.374014][ T9828] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1202.374038][ T9828] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1202.374071][ T9828] sctp_sendmsg+0x1528/0x2c10 [ 1202.374119][ T9828] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1202.374147][ T9828] ? aa_sk_perm+0x15a/0x960 [ 1202.374173][ T9828] ? aa_sk_perm+0x82d/0x960 [ 1202.374196][ T9828] ? __might_fault+0xaf/0x130 [ 1202.374233][ T9828] ? __pfx_aa_sk_perm+0x10/0x10 [ 1202.374262][ T9828] ? sock_rps_record_flow+0x19/0x400 [ 1202.374298][ T9828] ? inet_sendmsg+0x2f4/0x370 [ 1202.374328][ T9828] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1202.374354][ T9828] __sys_sendto+0x627/0x7a0 [ 1202.374386][ T9828] ? __pfx___sys_sendto+0x10/0x10 [ 1202.374410][ T9828] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1202.374455][ T9828] ? __fget_files+0x3a0/0x420 [ 1202.374492][ T9828] ? ksys_write+0x242/0x270 [ 1202.374526][ T9828] ? __pfx_ksys_write+0x10/0x10 [ 1202.374563][ T9828] __x64_sys_sendto+0xde/0x100 [ 1202.374595][ T9828] do_syscall_64+0xe2/0xf80 [ 1202.374623][ T9828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.374644][ T9828] ? trace_irq_disable+0x37/0x100 [ 1202.374664][ T9828] ? clear_bhb_loop+0x60/0xb0 [ 1202.374690][ T9828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.374712][ T9828] RIP: 0033:0x7ff82819aeb9 [ 1202.374733][ T9828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1202.374751][ T9828] RSP: 002b:00007ff82911c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1202.374774][ T9828] RAX: ffffffffffffffda RBX: 00007ff828416090 RCX: 00007ff82819aeb9 [ 1202.374790][ T9828] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 1202.374804][ T9828] RBP: 00007ff82911c090 R08: 000020000005ffe4 R09: 000000000000001c [ 1202.374818][ T9828] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 1202.374831][ T9828] R13: 00007ff828416128 R14: 00007ff828416090 R15: 00007ffd7a05ba38 [ 1202.374864][ T9828] [ 1202.817992][ T9834] macsec0: entered promiscuous mode [ 1202.823292][ T9834] bridge0: entered promiscuous mode [ 1203.050107][ T6131] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1203.058873][ T6131] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1203.067977][ T6131] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1203.114108][ T6131] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1203.143138][ T6131] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1203.158665][ T6131] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1203.168228][ T6131] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1203.178974][ T6131] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1203.187311][ T6131] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1203.258021][ T6123] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1203.268091][ T6123] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 1203.276628][ T6123] netdevsim netdevsim4 eth4: set [1, 1] type 2 family 0 port 6081 - 0 [ 1203.469142][ T1078] bond8 (unregistering): (slave ip6gretap1): Releasing active interface [ 1203.478148][ T1078] bond8 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 1e:ec:88:8e:54:e0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1203.627251][ T1078] bond2 (unregistering): (slave erspan0): Releasing active interface [ 1203.701963][ T1078] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1203.762569][T29244] Bluetooth: hci0: command tx timeout [ 1203.771517][ T1078] dvmrp6 (unregistering): left allmulticast mode [ 1203.852857][ T1078] bond5 (unregistering): (slave bridge0): Releasing backup interface [ 1203.861088][ T1078] bridge0 (unregistering): left promiscuous mode [ 1204.040388][ T1078] bond1 (unregistering): Released all slaves [ 1204.155685][ T1078] bond2 (unregistering): (slave veth3): Releasing active interface [ 1204.164593][ T1078] bond2 (unregistering): Released all slaves [ 1204.179741][ T1078] bond0 (unregistering): (slave bridge_slave_1): Releasing active interface [ 1204.192138][ T1078] bond0 (unregistering): Released all slaves [ 1204.311028][ T1078] bond3 (unregistering): Released all slaves [ 1204.423764][ T1078] bond4 (unregistering): Released all slaves [ 1204.535479][ T1078] bond5 (unregistering): Released all slaves [ 1204.651468][ T1078] bond6 (unregistering): Released all slaves [ 1204.667482][ T1078] bond7 (unregistering): Released all slaves [ 1204.782607][ T1078] bond8 (unregistering): (slave veth11): Releasing active interface [ 1204.792789][ T1078] bond8 (unregistering): Released all slaves [ 1204.889136][ T1078] æÿîÿ: left promiscuous mode [ 1204.912759][ T9797] chnl_net:caif_netlink_parms(): no params data found [ 1204.971278][ T1078] tipc: Left network mode [ 1205.051437][ T9797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.062771][ T9797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.072351][ T9797] bridge_slave_0: entered allmulticast mode [ 1205.080493][ T9797] bridge_slave_0: entered promiscuous mode [ 1205.091182][ T9797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.106192][ T9797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.113484][ T9797] bridge_slave_1: entered allmulticast mode [ 1205.122247][ T9797] bridge_slave_1: entered promiscuous mode [ 1205.161694][ T9797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.176192][ T9797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.236566][ T9797] team0: Port device team_slave_0 added [ 1205.250378][ T9797] team0: Port device team_slave_1 added [ 1205.274412][ T9822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1205.430409][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1205.464201][ T9868] xt_HMARK: spi-set and port-set can't be combined [ 1205.470982][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.499355][ T9797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1205.590596][ T9884] netlink: 4860 bytes leftover after parsing attributes in process `syz.3.8992'. [ 1205.616148][ T9884] openvswitch: netlink: Flow key attr not present in new flow. [ 1205.683492][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.715046][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.762965][ T9797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.836418][T29244] Bluetooth: hci0: command tx timeout [ 1205.948678][ T9900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8996'. [ 1206.010581][ T9903] FAULT_INJECTION: forcing a failure. [ 1206.010581][ T9903] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.050065][ T9903] CPU: 0 UID: 0 PID: 9903 Comm: syz.3.8995 Not tainted syzkaller #0 PREEMPT(full) [ 1206.050101][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1206.050115][ T9903] Call Trace: [ 1206.050124][ T9903] [ 1206.050134][ T9903] dump_stack_lvl+0xe8/0x150 [ 1206.050167][ T9903] should_fail_ex+0x412/0x560 [ 1206.050199][ T9903] should_failslab+0xa8/0x100 [ 1206.050226][ T9903] __kmalloc_cache_noprof+0x83/0x6e0 [ 1206.050250][ T9903] ? sctp_add_bind_addr+0x8c/0x370 [ 1206.050282][ T9903] sctp_add_bind_addr+0x8c/0x370 [ 1206.050313][ T9903] sctp_copy_local_addr_list+0x314/0x4f0 [ 1206.050344][ T9903] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1206.050369][ T9903] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1206.050397][ T9903] ? sctp_v6_is_any+0x64/0x80 [ 1206.050425][ T9903] ? sctp_copy_one_addr+0x93/0x360 [ 1206.050455][ T9903] sctp_bind_addr_copy+0xb3/0x3c0 [ 1206.050481][ T9903] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1206.050507][ T9903] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1206.050543][ T9903] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1206.050575][ T9903] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1206.050605][ T9903] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1206.050633][ T9903] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1206.050664][ T9903] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1206.050689][ T9903] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1206.050715][ T9903] sctp_sendmsg+0x1528/0x2c10 [ 1206.050762][ T9903] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1206.050790][ T9903] ? aa_sk_perm+0x15a/0x960 [ 1206.050816][ T9903] ? aa_sk_perm+0x82d/0x960 [ 1206.050838][ T9903] ? __might_fault+0xaf/0x130 [ 1206.050876][ T9903] ? __pfx_aa_sk_perm+0x10/0x10 [ 1206.050903][ T9903] ? sock_rps_record_flow+0x19/0x400 [ 1206.050938][ T9903] ? inet_sendmsg+0x2f4/0x370 [ 1206.050968][ T9903] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1206.050994][ T9903] __sys_sendto+0x627/0x7a0 [ 1206.051025][ T9903] ? __pfx___sys_sendto+0x10/0x10 [ 1206.051049][ T9903] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1206.051105][ T9903] ? __fget_files+0x3a0/0x420 [ 1206.051143][ T9903] ? ksys_write+0x242/0x270 [ 1206.051178][ T9903] ? __pfx_ksys_write+0x10/0x10 [ 1206.051213][ T9903] __x64_sys_sendto+0xde/0x100 [ 1206.051245][ T9903] do_syscall_64+0xe2/0xf80 [ 1206.051271][ T9903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.051291][ T9903] ? trace_irq_disable+0x37/0x100 [ 1206.051312][ T9903] ? clear_bhb_loop+0x60/0xb0 [ 1206.051337][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.051358][ T9903] RIP: 0033:0x7fb426f9aeb9 [ 1206.051378][ T9903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.051396][ T9903] RSP: 002b:00007fb427eae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1206.051419][ T9903] RAX: ffffffffffffffda RBX: 00007fb427216090 RCX: 00007fb426f9aeb9 [ 1206.051435][ T9903] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 1206.051448][ T9903] RBP: 00007fb427eae090 R08: 000020000005ffe4 R09: 000000000000001c [ 1206.051463][ T9903] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 1206.051476][ T9903] R13: 00007fb427216128 R14: 00007fb427216090 R15: 00007ffd94382b48 [ 1206.051513][ T9903] [ 1206.389647][ T9797] hsr_slave_0: entered promiscuous mode [ 1206.396565][ T9797] hsr_slave_1: entered promiscuous mode [ 1206.628215][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8998'. [ 1206.643982][ T9922] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8998'. [ 1206.754263][ T9915] wg1 speed is unknown, defaulting to 1000 [ 1206.832341][ T9797] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.864588][ T9797] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1206.886266][ T9797] netdevsim netdevsim4 eth4 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1206.923410][ T9915] lo speed is unknown, defaulting to 1000 [ 1206.950245][ T9915] lo speed is unknown, defaulting to 1000 [ 1207.018021][ T9797] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.045477][ T9797] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1207.089655][ T9797] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1207.169642][ T9797] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.182534][ T9797] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1207.207368][ T9797] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1207.408424][ T9797] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.423645][ T9797] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1207.451059][ T9797] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1207.916152][T29244] Bluetooth: hci0: command tx timeout [ 1208.133423][ T9982] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9010'. [ 1208.206906][ T9797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1208.252008][ T9797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1208.294030][ T9797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1208.327584][ T9797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1208.822305][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9012'. [ 1208.887897][T10003] wg1 speed is unknown, defaulting to 1000 [ 1208.908556][ T1078] hsr_slave_0: left promiscuous mode [ 1208.919717][ T1078] hsr_slave_1: left promiscuous mode [ 1208.933009][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1208.945941][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.961353][ T1078] macsec0: left allmulticast mode [ 1208.967478][ T1078] dummy0: left allmulticast mode [ 1208.972544][ T1078] dummy0: left promiscuous mode [ 1209.352922][ T1078] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 1209.839316][T10012] bridge_slave_1: left promiscuous mode [ 1209.845809][T10012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.950594][T10003] lo speed is unknown, defaulting to 1000 [ 1209.973106][T10018] tun0: tun_chr_ioctl cmd 1074025675 [ 1209.980036][T10018] tun0: persist enabled [ 1209.996440][T29244] Bluetooth: hci0: command tx timeout [ 1210.006112][T10003] lo speed is unknown, defaulting to 1000 [ 1210.047438][ T9797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.083966][ T9797] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.102539][ T2050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.109787][ T2050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.166973][ T2050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.174203][ T2050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.192075][T10022] Cannot find add_set index 3 as target [ 1210.538565][ T9797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1210.711061][ T6123] smc: removing ib device syû [ 1211.074315][ T9797] veth0_vlan: entered promiscuous mode [ 1211.132154][ T9797] veth1_vlan: entered promiscuous mode [ 1211.248120][ T9797] veth0_macvtap: entered promiscuous mode [ 1211.262760][ T9797] veth1_macvtap: entered promiscuous mode [ 1211.350189][ T9797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.374811][T10046] syzkaller0: entered promiscuous mode [ 1211.380771][T10046] syzkaller0: entered allmulticast mode [ 1211.401020][T10047] netlink: 'syz.2.9021': attribute type 11 has an invalid length. [ 1211.410361][ T9797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.428608][T10046] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1211.584585][T10057] netlink: 'syz.2.9024': attribute type 1 has an invalid length. [ 1211.623429][ T3647] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.637133][ T3647] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.733617][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9024'. [ 1211.827053][T10057] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1211.838395][ T3647] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.848991][ T3647] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.864497][T10068] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9023'. [ 1211.898643][T10057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9024'. [ 1211.925357][ T95] block nbd7: Possible stuck request ffff888026118000: control (read@0,1024B). Runtime 30 seconds [ 1211.938572][ T95] block nbd7: Possible stuck request ffff888026118200: control (read@1024,1024B). Runtime 30 seconds [ 1211.950374][ T95] block nbd7: Possible stuck request ffff888026118400: control (read@2048,1024B). Runtime 30 seconds [ 1211.962050][ T95] block nbd7: Possible stuck request ffff888026118600: control (read@3072,1024B). Runtime 30 seconds [ 1212.001345][T10057] bond14: entered allmulticast mode [ 1212.010685][T10059] batman_adv: batadv0: Removing interface: dummy0 [ 1212.057202][T10059] bond14: (slave dummy0): making interface the new active one [ 1212.093810][T10059] dummy0: entered allmulticast mode [ 1212.129854][T10059] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 1212.405038][ T2050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.412921][ T2050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.503796][T10079] gretap3: entered promiscuous mode [ 1212.613194][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9030'. [ 1212.655787][ T2051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.694384][ T2051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.744301][T10093] netlink: 'syz.2.9032': attribute type 2 has an invalid length. [ 1212.987240][T10101] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1213.136156][T10105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9033'. [ 1213.145603][T10105] tc_dump_action: action bad kind [ 1213.186540][T10104] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20002 [ 1213.418888][T10112] netlink: 'syz.1.9038': attribute type 1 has an invalid length. [ 1213.445094][T10112] netlink: 'syz.1.9038': attribute type 2 has an invalid length. [ 1213.527280][T10115] netlink: zone id is out of range [ 1213.532458][T10115] netlink: zone id is out of range [ 1213.591018][T10115] netlink: zone id is out of range [ 1213.625687][T10115] netlink: zone id is out of range [ 1213.645920][T10115] netlink: zone id is out of range [ 1213.651095][T10115] netlink: zone id is out of range [ 1213.696471][T10115] netlink: zone id is out of range [ 1213.701670][T10115] netlink: zone id is out of range [ 1213.726392][T10115] netlink: zone id is out of range [ 1213.739463][T10115] netlink: zone id is out of range [ 1213.796569][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1213.823628][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1213.832087][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1213.844759][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1213.855222][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1213.931074][T10128] netlink: 'syz.2.9042': attribute type 1 has an invalid length. [ 1213.984158][T10124] wg1 speed is unknown, defaulting to 1000 [ 1214.130649][T10124] lo speed is unknown, defaulting to 1000 [ 1214.269251][T10124] lo speed is unknown, defaulting to 1000 [ 1214.420384][T10146] syzkaller0: entered promiscuous mode [ 1214.427857][T10146] syzkaller0: entered allmulticast mode [ 1215.917755][T29244] Bluetooth: hci4: command tx timeout [ 1216.537165][ T1078] IPVS: stop unused estimator thread 0... [ 1216.738901][T10162] netlink: 'syz.4.9047': attribute type 1 has an invalid length. [ 1217.211769][T10124] chnl_net:caif_netlink_parms(): no params data found [ 1217.534528][T10185] netlink: 'syz.4.9054': attribute type 17 has an invalid length. [ 1217.843432][T10124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.852644][T10124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.860640][T10124] bridge_slave_0: entered allmulticast mode [ 1217.868888][T10124] bridge_slave_0: entered promiscuous mode [ 1217.878554][T10124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.886142][T10124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.893436][T10124] bridge_slave_1: entered allmulticast mode [ 1217.908229][T10124] bridge_slave_1: entered promiscuous mode [ 1217.983099][T10124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.995230][T29244] Bluetooth: hci4: command tx timeout [ 1218.004456][T10124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.040032][T10219] netlink: 'syz.4.9061': attribute type 1 has an invalid length. [ 1218.102374][T10124] team0: Port device team_slave_0 added [ 1218.166083][T10124] team0: Port device team_slave_1 added [ 1218.270848][T10124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.279937][T10124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.306992][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9065'. [ 1218.307383][T10124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.356262][T10230] ip6gre1: entered allmulticast mode [ 1218.366299][T10124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.383533][T10124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.434693][T10124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.462990][T10241] C: renamed from team_slave_0 [ 1218.477852][T10241] netlink: 'syz.0.9063': attribute type 8 has an invalid length. [ 1218.599286][T10249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1218.651627][T10254] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9070'. [ 1218.678157][T10124] hsr_slave_0: entered promiscuous mode [ 1218.685427][T10124] hsr_slave_1: entered promiscuous mode [ 1218.692615][T10124] debugfs: 'hsr0' already exists in 'hsr' [ 1218.700938][T10124] Cannot create hsr debugfs directory [ 1218.711859][T10257] netlink: 'syz.2.9071': attribute type 2 has an invalid length. [ 1218.721763][T10257] netlink: 'syz.2.9071': attribute type 2 has an invalid length. [ 1218.744112][T10257] netlink: 'syz.2.9071': attribute type 2 has an invalid length. [ 1218.771836][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9071'. [ 1218.780669][T10253] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9071'. [ 1218.874115][T10259] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9072'. [ 1218.947274][T10271] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9073'. [ 1218.963974][T10268] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9074'. [ 1218.995252][T10267] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9074'. [ 1219.032779][T10267] tipc: Started in network mode [ 1219.038108][T10267] tipc: Node identity aa3ef8799ae2, cluster identity 4711 [ 1219.046760][T10267] tipc: Enabled bearer , priority 0 [ 1219.054268][T10267] syzkaller0: entered promiscuous mode [ 1219.074989][T10267] syzkaller0: entered allmulticast mode [ 1219.219549][T10272] wg1 speed is unknown, defaulting to 1000 [ 1219.429113][T10272] lo speed is unknown, defaulting to 1000 [ 1219.434039][T10267] wg1 speed is unknown, defaulting to 1000 [ 1219.484135][T10272] lo speed is unknown, defaulting to 1000 [ 1219.502389][T10124] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1219.513363][T10124] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.545461][T10267] lo speed is unknown, defaulting to 1000 [ 1219.562273][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9077'. [ 1219.594688][T10124] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1219.609533][T10124] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.631957][T10288] netlink: 'syz.2.9078': attribute type 1 has an invalid length. [ 1219.665035][T10288] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9078'. [ 1219.709157][T10124] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1219.734988][T10124] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.806100][T10293] netlink: 'syz.2.9079': attribute type 1 has an invalid length. [ 1219.814079][T10293] NCSI netlink: No device for ifindex 0 [ 1219.837374][T10124] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1219.865160][T10124] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.940874][T10267] lo speed is unknown, defaulting to 1000 [ 1220.006824][T10300] tun0: tun_chr_ioctl cmd 1074025672 [ 1220.015018][T10300] tun0: ignored: set checksum disabled [ 1220.078309][T29244] Bluetooth: hci4: command tx timeout [ 1220.107500][T10303] team0: Device vlan0 is already an upper device of the team interface [ 1220.254321][T25800] tipc: Node number set to 819787897 [ 1220.559859][T10124] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1220.589794][T10124] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1220.632770][T10124] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1220.647646][T10124] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1220.929912][T10124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.991171][T10124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.015122][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.022377][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.044492][T10326] net_ratelimit: 7 callbacks suppressed [ 1221.044513][T10326] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1221.093167][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.100393][ T6123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.132210][T10267] tipc: Resetting bearer [ 1221.163290][T10267] tipc: Disabling bearer [ 1221.583377][T10124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.641111][T10349] nbd: must specify at least one socket [ 1221.655969][T10346] wg1 speed is unknown, defaulting to 1000 [ 1221.663560][T10346] lo speed is unknown, defaulting to 1000 [ 1221.686447][T10346] lo speed is unknown, defaulting to 1000 [ 1221.804054][T10124] veth0_vlan: entered promiscuous mode [ 1221.818939][T10124] veth1_vlan: entered promiscuous mode [ 1221.882560][T10124] veth0_macvtap: entered promiscuous mode [ 1221.907127][T10124] veth1_macvtap: entered promiscuous mode [ 1221.943775][T10124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1221.985727][T10124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1222.052886][ T2050] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.062048][ T2050] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.083700][ T2050] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.093832][ T2050] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.157602][T29244] Bluetooth: hci4: command tx timeout [ 1222.322079][ T6095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.348834][ T6095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.470179][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.479957][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.517745][T10382] netlink: 'syz.0.9103': attribute type 16 has an invalid length. [ 1222.680677][T10385] geneve3: entered promiscuous mode [ 1222.694007][ T6123] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.708184][T10387] netlink: 'syz.3.9036': attribute type 2 has an invalid length. [ 1222.714600][ T6123] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.765205][ T6123] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.773465][ T6123] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.419637][T10410] wg1 speed is unknown, defaulting to 1000 [ 1223.438131][T10410] lo speed is unknown, defaulting to 1000 [ 1223.447772][T10410] lo speed is unknown, defaulting to 1000 [ 1223.509714][T10413] __nla_validate_parse: 12 callbacks suppressed [ 1223.509735][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9113'. [ 1224.050750][T10424] wg1 speed is unknown, defaulting to 1000 [ 1224.114038][T10424] lo speed is unknown, defaulting to 1000 [ 1224.145507][T10424] lo speed is unknown, defaulting to 1000 [ 1224.169804][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9120'. [ 1224.199105][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1224.223694][T10437] wg1 speed is unknown, defaulting to 1000 [ 1224.253066][T10437] lo speed is unknown, defaulting to 1000 [ 1224.456180][T10437] lo speed is unknown, defaulting to 1000 [ 1224.903067][T10458] netlink: 'syz.3.9126': attribute type 89 has an invalid length. [ 1225.545768][T10466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9128'. [ 1226.060466][T10474] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9131'. [ 1226.343395][T10477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9132'. [ 1226.878284][T10514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9141'. [ 1226.888071][T10514] netlink: 'syz.3.9141': attribute type 7 has an invalid length. [ 1226.916064][T10514] netlink: 'syz.3.9141': attribute type 8 has an invalid length. [ 1226.923862][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9141'. [ 1227.096642][T10514] bond0: entered promiscuous mode [ 1227.123037][T10530] sctp: [Deprecated]: syz.0.9147 (pid 10530) Use of int in max_burst socket option deprecated. [ 1227.123037][T10530] Use struct sctp_assoc_value instead [ 1227.131706][T10514] bond_slave_0: entered promiscuous mode [ 1227.179832][T10514] bond_slave_1: entered promiscuous mode [ 1227.215919][T10514] bond0: left promiscuous mode [ 1227.229746][T10514] bond_slave_0: left promiscuous mode [ 1227.245883][T10514] bond_slave_1: left promiscuous mode [ 1227.282751][T10533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9148'. [ 1227.316860][T29244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1227.334734][T29244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1227.343638][T29244] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1227.357314][T29244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1227.367538][T29244] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1227.599234][T10532] wg1 speed is unknown, defaulting to 1000 [ 1227.628871][T10532] lo speed is unknown, defaulting to 1000 [ 1227.657477][T10532] lo speed is unknown, defaulting to 1000 [ 1227.825930][T10558] netlink: 'syz.4.9151': attribute type 33 has an invalid length. [ 1227.834050][T10558] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9151'. [ 1228.078349][T10569] netlink: 'syz.1.9155': attribute type 1 has an invalid length. [ 1228.121727][T10569] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1228.144735][T10573] bond6: (slave ip6erspan0): making interface the new active one [ 1228.157742][T10573] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1228.320077][T10532] chnl_net:caif_netlink_parms(): no params data found [ 1228.417474][T10532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.424689][T10532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.432822][T10532] bridge_slave_0: entered allmulticast mode [ 1228.440362][T10532] bridge_slave_0: entered promiscuous mode [ 1228.448823][T10532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.456695][T10532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.463948][T10532] bridge_slave_1: entered allmulticast mode [ 1228.472545][T10532] bridge_slave_1: entered promiscuous mode [ 1228.507725][T10532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.520601][T10532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.558440][T10532] team0: Port device team_slave_0 added [ 1228.573175][T10532] team0: Port device team_slave_1 added [ 1228.616676][T10532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.623817][T10532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.651683][T10532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.665982][T10532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.673069][T10532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.699797][T10532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.768311][T10532] hsr_slave_0: entered promiscuous mode [ 1228.775815][T10532] hsr_slave_1: entered promiscuous mode [ 1228.782350][T10532] debugfs: 'hsr0' already exists in 'hsr' [ 1228.788909][T10532] Cannot create hsr debugfs directory [ 1228.989338][T10532] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.072996][T10532] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.129529][T10532] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.182729][T10532] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.435245][ T5831] Bluetooth: hci5: command tx timeout [ 1230.677679][T10550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1230.717009][T10532] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1230.781232][T10532] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1230.817798][T10590] __nla_validate_parse: 2 callbacks suppressed [ 1230.817817][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9157'. [ 1230.856660][T10532] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1230.890812][T10532] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1230.949976][T10590] bridge_slave_1 (unregistering): left allmulticast mode [ 1230.958712][T10590] bridge_slave_1 (unregistering): left promiscuous mode [ 1230.967110][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.242962][T10532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.300405][T10532] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.319212][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.326457][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.389320][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.396548][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.471351][T10625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9165'. [ 1231.516377][ T5831] Bluetooth: hci5: command tx timeout [ 1231.646722][T10593] netlink: 'syz.0.9160': attribute type 61 has an invalid length. [ 1231.666416][T10593] netlink: 'syz.0.9160': attribute type 62 has an invalid length. [ 1231.974301][T10637] syzkaller0: entered promiscuous mode [ 1231.989353][T10637] syzkaller0: entered allmulticast mode [ 1232.085505][T10532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.122427][T10647] wg1 speed is unknown, defaulting to 1000 [ 1232.136667][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9173'. [ 1232.166794][T10647] lo speed is unknown, defaulting to 1000 [ 1232.177553][T10647] lo speed is unknown, defaulting to 1000 [ 1232.251388][T10532] veth0_vlan: entered promiscuous mode [ 1232.309812][T10532] veth1_vlan: entered promiscuous mode [ 1232.420519][T10532] veth0_macvtap: entered promiscuous mode [ 1232.454257][T10532] veth1_macvtap: entered promiscuous mode [ 1232.533854][T10532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.561030][T10532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.742798][ T2050] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.810994][ T2050] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.836977][ T2050] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.904525][ T2050] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.076530][T10683] netlink: 536 bytes leftover after parsing attributes in process `syz.4.9179'. [ 1233.596029][ T5831] Bluetooth: hci5: command tx timeout [ 1234.023985][T10695] : renamed from bond_slave_0 [ 1234.257696][T10705] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1234.263878][T10705] pim6reg0: linktype set to 804 [ 1234.411001][T11951] IPVS: starting estimator thread 0... [ 1234.505563][T10712] IPVS: using max 29 ests per chain, 69600 per kthread [ 1234.686763][T10731] wg1 speed is unknown, defaulting to 1000 [ 1234.699931][T10731] lo speed is unknown, defaulting to 1000 [ 1234.702583][T10729] wg1 speed is unknown, defaulting to 1000 [ 1234.711435][T10731] lo speed is unknown, defaulting to 1000 [ 1234.727528][T10729] lo speed is unknown, defaulting to 1000 [ 1234.873155][T10729] lo speed is unknown, defaulting to 1000 [ 1235.576397][T10740] netlink: 192 bytes leftover after parsing attributes in process `syz.0.9191'. [ 1235.675825][ T5831] Bluetooth: hci5: command tx timeout [ 1235.794450][T10675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1235.904563][ T6095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.929935][ T6095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.122297][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.162783][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.520085][T10767] netlink: 'syz.4.9196': attribute type 1 has an invalid length. [ 1236.549693][T10766] bridge1: entered allmulticast mode [ 1237.109950][T29244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1237.130660][T29244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1237.142724][T29244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1237.157367][T29244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1237.165900][T29244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1237.281077][T10788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9202'. [ 1237.358326][T10786] wg1 speed is unknown, defaulting to 1000 [ 1237.394792][T10786] lo speed is unknown, defaulting to 1000 [ 1237.436322][T10786] lo speed is unknown, defaulting to 1000 [ 1237.501710][T10803] netlink: 216 bytes leftover after parsing attributes in process `syz.3.9205'. [ 1237.511611][T10803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9205'. [ 1237.523850][T10803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9205'. [ 1237.732291][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9208'. [ 1237.827729][T10818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9210'. [ 1237.850211][T10818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9210'. [ 1237.870497][T10818] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9210'. [ 1237.929533][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9212'. [ 1238.086984][T10829] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9212'. [ 1238.148567][T10834] netlink: 'syz.0.9214': attribute type 1 has an invalid length. [ 1238.239180][T10836] IPv6: addrconf: prefix option has invalid lifetime [ 1238.516327][T10834] tipc: Enabled bearer , priority 0 [ 1238.845567][T10855] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 1238.984025][T10868] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 1239.047727][T10786] chnl_net:caif_netlink_parms(): no params data found [ 1239.139870][T10872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1239.252699][T10880] x_tables: duplicate underflow at hook 1 [ 1239.275403][T29244] Bluetooth: hci2: command tx timeout [ 1239.509407][T10889] syzkaller1: entered promiscuous mode [ 1239.531993][T10889] syzkaller1: entered allmulticast mode [ 1239.568203][T10786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.578910][T10786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.591052][T10786] bridge_slave_0: entered allmulticast mode [ 1239.619836][T10786] bridge_slave_0: entered promiscuous mode [ 1239.648187][T10786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.655759][T10786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.663137][T10786] bridge_slave_1: entered allmulticast mode [ 1239.672179][T10786] bridge_slave_1: entered promiscuous mode [ 1239.770259][T10786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.799057][T10786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.873072][T10786] team0: Port device team_slave_0 added [ 1239.891326][T10786] team0: Port device team_slave_1 added [ 1239.981279][T10786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.989449][T10786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.019090][T10786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.031087][ T6123] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.051919][T10786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.069053][T10786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.102826][T10786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.117278][ T6123] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.171363][ T6123] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.188474][ T6123] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.457884][T10885] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1240.545320][T10885] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1240.685984][T10786] hsr_slave_0: entered promiscuous mode [ 1240.714234][T10786] hsr_slave_1: entered promiscuous mode [ 1240.757472][T10786] debugfs: 'hsr0' already exists in 'hsr' [ 1240.783619][T10786] Cannot create hsr debugfs directory [ 1240.909898][T10885] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1240.928480][T10885] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1241.015459][ T5485] veth0_vlan: left promiscuous mode [ 1241.063560][ T5485] veth0_vlan: entered promiscuous mode [ 1241.103745][T10885] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1241.122617][T10885] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1241.208865][T10945] tipc: Failed to remove unknown binding: 66,0,0/0:271428570/271428571 [ 1241.219005][T10945] tipc: Failed to remove unknown binding: 66,0,0/0:271428570/271428571 [ 1241.341455][T10885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1241.348853][T10885] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1241.359135][T10947] openvswitch: netlink: Flow actions attr not present in new flow. [ 1241.367704][ C0] ------------[ cut here ]------------ [ 1241.373750][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 1241.380499][ C0] WARNING: kernel/workqueue.c:2252 at __queue_work+0xd1f/0xf90, CPU#0: syz-executor/10948 [ 1241.390632][ C0] Modules linked in: [ 1241.394895][ C0] CPU: 0 UID: 0 PID: 10948 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1241.404514][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1241.414614][ C0] RIP: 0010:__queue_work+0xd4a/0xf90 [ 1241.419944][ C0] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 e7 81 a0 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8e 71 [ 1241.439683][ C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00010086 [ 1241.445803][ C0] RAX: 1ffff1100c6cd151 RBX: 0000000000000008 RCX: ffff888031173d00 [ 1241.453817][ C0] RDX: ffff88809c32e178 RSI: ffffffff8a8cc210 RDI: ffffffff8ff22010 [ 1241.461835][ C0] RBP: 0000000000000100 R08: ffffffff8fef3477 R09: 1ffffffff1fde68e [ 1241.469848][ C0] R10: dffffc0000000000 R11: ffffffff818c27d0 R12: dffffc0000000000 [ 1241.477866][ C0] R13: ffff888063668a88 R14: ffffffff8ff22010 R15: ffff88809c32e178 [ 1241.485968][ C0] FS: 000055555d206500(0000) GS:ffff8881256ed000(0000) knlGS:0000000000000000 [ 1241.494939][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1241.501557][ C0] CR2: 00007f211ff2a180 CR3: 000000004f6c4000 CR4: 00000000003526f0 [ 1241.509576][ C0] Call Trace: [ 1241.512891][ C0] [ 1241.516031][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1241.521122][ C0] call_timer_fn+0x192/0x5a0 [ 1241.525852][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1241.531696][ C0] ? call_timer_fn+0xd4/0x5a0 [ 1241.536514][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1241.541820][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1241.546987][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1241.552836][ C0] __run_timer_base+0x67e/0x8b0 [ 1241.557741][ C0] ? ktime_get+0x45/0x200 [ 1241.562139][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1241.567570][ C0] ? sched_clock_cpu+0x74/0x440 [ 1241.572485][ C0] run_timer_softirq+0xb7/0x170 [ 1241.577388][ C0] handle_softirqs+0x22a/0x7c0 [ 1241.582195][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1241.587020][ C0] __irq_exit_rcu+0x5f/0x150 [ 1241.591650][ C0] irq_exit_rcu+0x9/0x30 [ 1241.595934][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1241.601614][ C0] [ 1241.604591][ C0] [ 1241.607555][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1241.613581][ C0] RIP: 0010:kasan_check_range+0x93/0x2c0 [ 1241.619266][ C0] Code: 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb <41> 80 3b 00 0f 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 [ 1241.638935][ C0] RSP: 0018:ffffc900000f76e0 EFLAGS: 00000282 [ 1241.645050][ C0] RAX: ffffc900000f7b01 RBX: fffffffffffffffe RCX: ffffffff81757f9e [ 1241.653067][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc900000f7858 [ 1241.661079][ C0] RBP: 0000000000000000 R08: ffffc900000f7867 R09: 1ffff9200001ef0c [ 1241.669087][ C0] R10: dffffc0000000000 R11: fffff5200001ef0b R12: 0000000000000002 [ 1241.677104][ C0] R13: 1ffff9200001ef03 R14: fffff5200001ef0d R15: 1ffff9200001ef0b [ 1241.685135][ C0] ? unwind_next_frame+0xeae/0x23c0 [ 1241.690392][ C0] __asan_memset+0x22/0x50 [ 1241.694860][ C0] unwind_next_frame+0xeae/0x23c0 [ 1241.699934][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1241.705093][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1241.710515][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1241.717065][ C0] arch_stack_walk+0x11b/0x150 [ 1241.721884][ C0] ? kmem_cache_alloc_lru_noprof+0x35f/0x6c0 [ 1241.727931][ C0] stack_trace_save+0xa9/0x100 [ 1241.732782][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1241.738308][ C0] kasan_save_track+0x3e/0x80 [ 1241.743126][ C0] ? kasan_save_track+0x3e/0x80 [ 1241.748049][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1241.753180][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1241.758085][ C0] kmem_cache_alloc_lru_noprof+0x35f/0x6c0 [ 1241.763958][ C0] ? shmem_alloc_inode+0x28/0x40 [ 1241.768941][ C0] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1241.774483][ C0] shmem_alloc_inode+0x28/0x40 [ 1241.779307][ C0] alloc_inode+0x6a/0x1b0 [ 1241.783695][ C0] new_inode+0x22/0x170 [ 1241.787911][ C0] shmem_get_inode+0x347/0xe60 [ 1241.792817][ C0] shmem_symlink+0xa3/0x470 [ 1241.797365][ C0] ? inode_permission+0x2fd/0x5f0 [ 1241.802443][ C0] vfs_symlink+0x4a1/0x550 [ 1241.806911][ C0] do_symlinkat+0x1f1/0x3c0 [ 1241.811459][ C0] ? __pfx_do_symlinkat+0x10/0x10 [ 1241.816510][ C0] ? getname_flags+0x1e4/0x540 [ 1241.821303][ C0] __x64_sys_symlinkat+0x95/0xb0 [ 1241.826259][ C0] do_syscall_64+0xe2/0xf80 [ 1241.830791][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.836887][ C0] ? trace_irq_disable+0x37/0x100 [ 1241.841948][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1241.846646][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.852561][ C0] RIP: 0033:0x7f211ff99f77 [ 1241.857015][ C0] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 fe f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1241.876642][ C0] RSP: 002b:00007fff9148bf88 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 1241.885116][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f211ff99f77 [ 1241.893121][ C0] RDX: 00007f212000ac2a RSI: 00000000ffffff9c RDI: 00007f2120005a6e [ 1241.901119][ C0] RBP: 00007fff9148bfcc R08: 0000000000000000 R09: 0000000000000000 [ 1241.909155][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000031 [ 1241.917151][ C0] R13: 00000000000927c0 R14: 000000000012f03a R15: 00007fff9148c020 [ 1241.925181][ C0] [ 1241.928226][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1241.935528][ C0] CPU: 0 UID: 0 PID: 10948 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1241.945107][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1241.955194][ C0] Call Trace: [ 1241.958546][ C0] [ 1241.961417][ C0] vpanic+0x1e0/0x670 [ 1241.965442][ C0] panic+0xc5/0xd0 [ 1241.969219][ C0] ? __pfx_panic+0x10/0x10 [ 1241.973691][ C0] __warn+0x315/0x4a0 [ 1241.977710][ C0] ? __queue_work+0xd1f/0xf90 [ 1241.982455][ C0] ? __queue_work+0xd1f/0xf90 [ 1241.987183][ C0] __report_bug+0x29a/0x540 [ 1241.991738][ C0] ? __queue_work+0xd1f/0xf90 [ 1241.996446][ C0] ? __pfx___report_bug+0x10/0x10 [ 1242.001528][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1242.006860][ C0] ? register_lock_class+0x31/0x2e0 [ 1242.012093][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1242.017066][ C0] report_bug_entry+0x19a/0x290 [ 1242.021978][ C0] ? __queue_work+0xd4a/0xf90 [ 1242.026682][ C0] ? __queue_work+0xd4f/0xf90 [ 1242.031395][ C0] handle_bug+0xca/0x200 [ 1242.035774][ C0] exc_invalid_op+0x1a/0x50 [ 1242.040328][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1242.045204][ C0] RIP: 0010:__queue_work+0xd4a/0xf90 [ 1242.050524][ C0] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 e7 81 a0 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8e 71 [ 1242.070202][ C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00010086 [ 1242.076359][ C0] RAX: 1ffff1100c6cd151 RBX: 0000000000000008 RCX: ffff888031173d00 [ 1242.084404][ C0] RDX: ffff88809c32e178 RSI: ffffffff8a8cc210 RDI: ffffffff8ff22010 [ 1242.092404][ C0] RBP: 0000000000000100 R08: ffffffff8fef3477 R09: 1ffffffff1fde68e [ 1242.100419][ C0] R10: dffffc0000000000 R11: ffffffff818c27d0 R12: dffffc0000000000 [ 1242.108418][ C0] R13: ffff888063668a88 R14: ffffffff8ff22010 R15: ffff88809c32e178 [ 1242.116429][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1242.122262][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1242.127580][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1242.132648][ C0] call_timer_fn+0x192/0x5a0 [ 1242.137267][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1242.143087][ C0] ? call_timer_fn+0xd4/0x5a0 [ 1242.147802][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1242.152950][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1242.158118][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1242.163949][ C0] __run_timer_base+0x67e/0x8b0 [ 1242.168823][ C0] ? ktime_get+0x45/0x200 [ 1242.173203][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1242.178605][ C0] ? sched_clock_cpu+0x74/0x440 [ 1242.183495][ C0] run_timer_softirq+0xb7/0x170 [ 1242.188385][ C0] handle_softirqs+0x22a/0x7c0 [ 1242.193168][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1242.197958][ C0] __irq_exit_rcu+0x5f/0x150 [ 1242.202565][ C0] irq_exit_rcu+0x9/0x30 [ 1242.206824][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1242.212481][ C0] [ 1242.215444][ C0] [ 1242.218405][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1242.224415][ C0] RIP: 0010:kasan_check_range+0x93/0x2c0 [ 1242.230066][ C0] Code: 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb <41> 80 3b 00 0f 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 [ 1242.249786][ C0] RSP: 0018:ffffc900000f76e0 EFLAGS: 00000282 [ 1242.255899][ C0] RAX: ffffc900000f7b01 RBX: fffffffffffffffe RCX: ffffffff81757f9e [ 1242.263905][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc900000f7858 [ 1242.271897][ C0] RBP: 0000000000000000 R08: ffffc900000f7867 R09: 1ffff9200001ef0c [ 1242.279888][ C0] R10: dffffc0000000000 R11: fffff5200001ef0b R12: 0000000000000002 [ 1242.287884][ C0] R13: 1ffff9200001ef03 R14: fffff5200001ef0d R15: 1ffff9200001ef0b [ 1242.295895][ C0] ? unwind_next_frame+0xeae/0x23c0 [ 1242.301143][ C0] __asan_memset+0x22/0x50 [ 1242.305594][ C0] unwind_next_frame+0xeae/0x23c0 [ 1242.310666][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1242.315803][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1242.320860][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1242.327043][ C0] arch_stack_walk+0x11b/0x150 [ 1242.331834][ C0] ? kmem_cache_alloc_lru_noprof+0x35f/0x6c0 [ 1242.337852][ C0] stack_trace_save+0xa9/0x100 [ 1242.342641][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1242.348043][ C0] kasan_save_track+0x3e/0x80 [ 1242.352740][ C0] ? kasan_save_track+0x3e/0x80 [ 1242.357627][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1242.362718][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1242.367605][ C0] kmem_cache_alloc_lru_noprof+0x35f/0x6c0 [ 1242.373482][ C0] ? shmem_alloc_inode+0x28/0x40 [ 1242.378445][ C0] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1242.383920][ C0] shmem_alloc_inode+0x28/0x40 [ 1242.388704][ C0] alloc_inode+0x6a/0x1b0 [ 1242.393050][ C0] new_inode+0x22/0x170 [ 1242.397256][ C0] shmem_get_inode+0x347/0xe60 [ 1242.402050][ C0] shmem_symlink+0xa3/0x470 [ 1242.406579][ C0] ? inode_permission+0x2fd/0x5f0 [ 1242.411634][ C0] vfs_symlink+0x4a1/0x550 [ 1242.416075][ C0] do_symlinkat+0x1f1/0x3c0 [ 1242.420610][ C0] ? __pfx_do_symlinkat+0x10/0x10 [ 1242.425657][ C0] ? getname_flags+0x1e4/0x540 [ 1242.430460][ C0] __x64_sys_symlinkat+0x95/0xb0 [ 1242.435431][ C0] do_syscall_64+0xe2/0xf80 [ 1242.440063][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.446145][ C0] ? trace_irq_disable+0x37/0x100 [ 1242.451193][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1242.455896][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.461902][ C0] RIP: 0033:0x7f211ff99f77 [ 1242.466338][ C0] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 fe f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.485984][ C0] RSP: 002b:00007fff9148bf88 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 1242.494454][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f211ff99f77 [ 1242.502449][ C0] RDX: 00007f212000ac2a RSI: 00000000ffffff9c RDI: 00007f2120005a6e [ 1242.510438][ C0] RBP: 00007fff9148bfcc R08: 0000000000000000 R09: 0000000000000000 [ 1242.518429][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000031 [ 1242.526422][ C0] R13: 00000000000927c0 R14: 000000000012f03a R15: 00007fff9148c020 [ 1242.534424][ C0] [ 1242.538072][ C0] Kernel Offset: disabled [ 1242.542413][ C0] Rebooting in 86400 seconds..