last executing test programs: 13.991221696s ago: executing program 1 (id=9912): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000004000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x5176f1fe8700a96b, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x9, 0x0, @void}, 0x10) r1 = socket(0xa, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wlan1\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) unshare(0x2020600) syz_emit_ethernet(0x30, &(0x7f0000000040)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x22, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xe, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}, 'Xy'}}}}}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x44004, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x290, 0x8, 0x7f02ae, 0x0, 0x200, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg1\x00', {}, 'veth1_to_team\x00', {0xff}, 0xa, 0x17}}, @common=@inet=@iprange={{0x68}, {@ipv4=@rand_addr=0x4, @ipv6=@empty, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@private=0xa010100}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x6, 0x3}}}, {{@ipv6={@private2, @private2, [0xffffff00, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000], 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x5, 0x800, 'syz0\x00', {0x600000}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x11000000}, {0x28}}}}, 0x3c0) r4 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) 13.715733952s ago: executing program 1 (id=9915): r0 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "693e1b4c37ac"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8804}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x68, &(0x7f0000000200)}, 0x10) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x4}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 13.492451374s ago: executing program 1 (id=9920): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x9, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x9, 0xf, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7ffffffb]}, 0x80, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$inet6(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="50a44c774a81aab7772310e3b127daca54de15b8c8f7475b91d097c21633461f86680947a36b4710", 0x28}, {&(0x7f00000003c0)="2d85981b30734f984abec10eef56f1ebe9bf", 0x12}], 0x2}, 0xe24ee390a8a6b293) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f00000002c0), &(0x7f0000000340)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r9, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1012, &(0x7f00000030c0)=ANY=[], 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00415f86001000"/23, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 13.325740626s ago: executing program 1 (id=9922): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@gettaction={0xb4, 0x32, 0xc, 0x70bd27, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2000c804}, 0x1400c090) (rerun: 32) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xfee7, &(0x7f0000000140)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x400c0) 12.904672562s ago: executing program 1 (id=9924): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x4000, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd7000000000000400300004000d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 12.392404597s ago: executing program 1 (id=9929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x51, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x1b, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x1b, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "aaf43bbacf0d7d4dd62d252269d4c7"}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc811"], 0xffe) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f000087a000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000240)="d29edb52e9bc960d8858f5476408b13788a8", 0x12}], 0x1) 8.842433132s ago: executing program 3 (id=9942): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x2000, &(0x7f00000000c0)={@_ha_fsid={[0x1, 0x5]}, {0x8001, 0x8, 0x1, 0xf}}, 0x5, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x401}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @volatile={0x10, 0x0, 0x0, 0x9, 0x2}, @union={0xd, 0x2, 0x0, 0x5, 0x1, 0x401, [{0x3, 0x1, 0x6}, {0x8, 0x0, 0x4}]}, @typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @var={0xf, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x5f]}}, &(0x7f0000000540)=""/130, 0x73, 0x82, 0x0, 0x1, 0x10000}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x762, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x5, 0x18}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r8, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x5, 0x1, 0x4, 0xa, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x1c, &(0x7f00000009c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc22}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x3, 0xb, 0xb, 0x15}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000380)='syzkaller\x00', 0x1, 0xc5, &(0x7f00000003c0)=""/197, 0x41100, 0x20, '\x00', 0x0, 0x18, r1, 0x8, &(0x7f0000000640)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x3, 0x7003, 0x7}, 0x10, 0x252d1, r3, 0x1, &(0x7f0000000880)=[r4, r5, r6, r7, r8, r9], &(0x7f00000008c0)=[{0x4, 0x4, 0x5, 0xa}], 0x10, 0x7}, 0x94) 8.63950655s ago: executing program 3 (id=9945): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a11000000322000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100080002"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 7.532547287s ago: executing program 3 (id=9950): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd, 0x3}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) 6.983749393s ago: executing program 3 (id=9954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80cc85}, 0x94) socket$kcm(0x2, 0xa, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r3) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)={@private, @local}, &(0x7f0000000480)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000002b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x10040000) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000406050000001400000000000c0000000900020073797a31000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 6.572825809s ago: executing program 3 (id=9957): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002100090002000000ffdbdf2502000010"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x36, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1cc, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2efd808c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x62, 0x3, "20b9ce552d916a9156e242c157b92fc46fe622b88282e23fd90e004289f2332672709aeb36115c7c747fa44596ae1b7100c28b9ad1d3a743229f45375b1e7b88a6e8f12316c97ee946011c99926ad337995ec26705d9cd35319a07fd109a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0x29, 0x3, "a0949224d058b686b81a6b034829894dbc0e5488b59b6a0a8373f402f6de6c462197a83633"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4048091}, 0x8) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2.9813675s ago: executing program 4 (id=9974): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.965730181s ago: executing program 4 (id=9975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060003000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2.858700688s ago: executing program 4 (id=9977): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) unshare(0x20380) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000140)="c2", 0x11, 0x400c080, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x7, 0xc, 0x9, 0x0, 0x8, 0x4, 0x6, 0x8, 0xfd, 0xa4, 0x4, 0x43, 0x80}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffe46, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYRES64=r3], 0x7c}}, 0x400881c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b1600000000000000000200000838000480340001800b0001006e756d67656e00002400028000000240fffffff80800014000000016080003400000000008000440ffffffff0900010073797a30000000000900020073797a32000000001400000011000100000000000000006813000000"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) write$tun(r3, &(0x7f0000000980)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRESHEX], 0x33) sendfile(r3, r2, 0x0, 0x10000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000002c0), 0x10000000000002ad, 0x4008005, 0x80) close(r6) r7 = socket$kcm(0x29, 0x2, 0x0) sendfile(r6, r6, 0x0, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000400)=@caif=@dgm={0x25, 0x8, 0x2}, 0x80, &(0x7f0000000bc0), 0x0, &(0x7f0000000bc0)=ANY=[@ANYRESDEC=r7, @ANYRESOCT=r5, @ANYRESDEC=r0, @ANYRES16, @ANYRES64=r1, @ANYBLOB="0c4d658954cdf71c6bc8ea85d5f4cbe98c9ef961fcdec060232bfd515332f23c4effc130212f2f46292f9b8c2b28cf7c2cc61400313e3a5265979a296f84163b2fd9ec42049c50a227c2a68bb796a71b1aef98077e7c7b8be32e810fd51e88a14f988066132c55d5f75e1725d6331e5dee30b5faf765d6fa08a28fd9095efedb3d26b62e496d4fb062f857820f16cbd8ac61159c8f0a4c2e616a8ed475ccc4a2e751fd2d9a0b6a61dfbc6e0f4175686c967031", @ANYRESOCT=r3, @ANYBLOB="1efb35fad68525cbd469f47564879b8feecb06c36d27df0d9f5761510d8a941542e37fcdaa65c187be91c8dd2308f4e6721aabe35b75e2b0231c5bd5c7eb01a4ad9149800d0632ef02fa29c5f17b0789d3b0aecb380a986badcad41553", @ANYRESHEX=r6, @ANYRESHEX], 0x240}}], 0x1, 0x48040) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) 1.878252568s ago: executing program 4 (id=9986): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003600)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x7, @loopback, 0x80020}, 0x1c, &(0x7f0000004ec0)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x600}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000e80)="06", 0x1}], 0x1}}], 0x2, 0x14008034) 1.51511724s ago: executing program 3 (id=9988): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000300aaff020000000000000000000000000001042022eb"], 0xfdef) 784.4046ms ago: executing program 4 (id=9993): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6100000000103afef18000000000000000000000000000aa00000000000000000000000000000001"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 781.255321ms ago: executing program 2 (id=9994): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000001c0)=0xc, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000001c0)=0xc, 0x4) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffece}, 0x8a}], 0x1, 0x10022, 0x0) getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r2, &(0x7f0000004e80)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)="407e49fe96231316ac7899219aaa1559a6e777302de5809573d662b22c7deee03c6484128e55774afa64ffec0057f704808fc14ad8ce2d5b03ebb53f37d880144d5cdbf7f90803654dd07b6493e47157a413b311f7d6845db4bb30", 0x5b}], 0x1}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f00000006c0)="2b9ce22f07baf3512aa44d559dbbb15a76a0aea0720057565fb53d9fb19896a26cb6d1ffa98dc5d753f59d75d5492b2441b7ed2cec99", 0x36}, {&(0x7f0000000700)="21742f63e0bdd06d7d07cfd730c0c95e51ced753e2cbc4e6", 0x18}, {&(0x7f0000000740)="66dd6baabfcf45fcf5ed4d62f074bd91d063c515760472194af27cd322f2dcb61cf8eab2bf3e054ebd79e9c78b16a2332f46e2b85d651644bae2b8f93528ec5ea3645325d2e3bdad3c46945ffc4ac157ef8074d84c244d76d5bea6705a434791ffeb1823b9bc47dcc07aa4ca383fd368b9d7f8580f0062121e1208601f1155a35651d89045a74967c29a504080d78ec86df72a23123748d8575cac5cb8223db8ecb1ebf2345a3865d33c5f9e80d5048d4ddf0513f4780c26cb38b7373469f1be2efc6de83b8729f6bbcaea93d0f468ee1ea229c86bd3", 0xd6}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="80298d07e918cfc42a8732ebb444cf39f8e9dcc1c7de3021736828b7a0dc8a523d205ca3f2d90cf62e99f37c46b9f530c3b2c31464a7338f0b46011f88a7605d130cc9eef2616a99d041870ba977842ee451422a37894c137d1d9a6104", 0x5d}, {&(0x7f0000003540)="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", 0x1000}, {&(0x7f0000004540)="7f5da1fa39f132f6bee3c27210833fa7400e10aa50bfc5bfdefe34dca23c61d80610c3af9a78316a9e2539f398bf0f50b30a9b63a89bf4e3623a3e63c85ce6d4702d0ecbf6f63e0c323c94e8be0fd7a344346208d45a4d924e459c624ea146e22048691424c6eca320709d45013e29554286bc5b79c14d", 0x77}, {&(0x7f00000045c0)="bf5c2563fddd690d46b3a0a8d2bac99fa69bed43f8eb60b2821ed6dba2d4e31885ba8b3361e17eb5a897c19b9e3066c298af4ddfd8a91f4291be8b34d02c203419df0c2cdee7ce7686d040e3049f6c2722b6f3a78064b7d72d5c4cf0051d54efb104aadec1ca302d830364", 0x6b}, {&(0x7f0000004640)="ae06ab3ac1a238d95afaa1432ebb6ebc913a6ba08fde56ce2f8663e407604692dbf6308c04bdf485233101b639f549d45b1c0198f00ab471e87273f1c42dac104cc9adf0885da697e063d84cfa92802bd1188a9300963b4e69d07930810f8099826682153caaff4706dcc5", 0x6b}], 0xa}}, {{0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000004980)="a189322c", 0x4}], 0x1}}], 0x4, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 701.810648ms ago: executing program 2 (id=9995): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x1, 0x0, 0x2}}, 0x26) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd000000100001000c0810000c00000008040000", 0x58}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xa, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000e917180001000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0xfffffffffffffdbf, &(0x7f0000000780)=""/4088, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 606.223746ms ago: executing program 2 (id=9996): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000001100000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$key(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x2d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00w', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x7, 0x0, @val=@tcx}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x4}, 0x5) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000400), 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, 0x0, &(0x7f00000004c0)) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) 603.72392ms ago: executing program 0 (id=9997): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 520.835303ms ago: executing program 0 (id=9998): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r2) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) unshare(0x600) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, 0x0, 0x0, 0x4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES16=r0, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027515641c2a0dfafba1f3e88f4508e6b6843be87c8c978234424eff85308f2175cb61ac2a6206cb770630edfb976895f8b7c97054d0ac4e2e5b2d6d3ffc1701189c6c48a91517baa554499cac908eee1a8edc2415223e87b2b8b9bd45a6aa564521ab75402354ff9dd4312305da359ae4d724f8275fcf04a49fa4ec2fe952603473ffa3fe71d1e9e97d15cc05aec700a496d"], 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x400c4) 453.274589ms ago: executing program 2 (id=9999): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000340)={r0, 0x0, 0x4, 0x7, 0x0, 0xf, [0x59, 0x5, 0x5, 0x41f9, 0x8, 0x7fffffff]}) socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000300)={&(0x7f0000000180)=0x5, 0x33b, &(0x7f0000000200)=[{}], &(0x7f00000002c0)}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 396.389455ms ago: executing program 0 (id=10000): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x13, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6b}, [@map_fd={0x18, 0xa}, @call={0x85, 0x0, 0x0, 0x71}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_fd, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x6}]}, &(0x7f0000000f00)='GPL\x00', 0x6, 0x6a, &(0x7f0000000f40)=""/106, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x183}, 0x94) 245.779808ms ago: executing program 2 (id=10001): r0 = socket$kcm(0x1e, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x2194362b35d5d3c3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2001}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', r4, 0x7, 0x80, 0x0, 0x5, {{0x13, 0x4, 0x1, 0x6, 0x4c, 0x68, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@cipso={0x86, 0x36, 0xffffffffffffffff, [{0x2, 0xe, "8dfe57ec231b186885eb62f3"}, {0x1, 0xa, "a24c0b8dd5733e9d"}, {0x0, 0x11, "be89e095cf4e393f09a29c3642be8c"}, {0x6, 0x7, "328f4c1d71"}]}]}}}}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000200)={{r1, &(0x7f00000000c0)='cake\x00', 0x200000, &(0x7f0000000100)={@align=0x9, {0xd, 0xfffa, 0x200, 0x40}}, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x5}, {[0x8000, 0x9f05, 0xa, 0xe]}, 0x1c, 0x0, &(0x7f00000001c0)}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r3, 0xffffffffffffffff}, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x6, 0x18}, 0xc) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r5, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002100)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000008c0)={r3, 0x7, 0x8, 0x7}) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d85800000000000000000018110000ebe39d510c32ae78da72600f5453131835", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000180000000180000000000000000000008510000002000000185400001000000000000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0xda, &(0x7f0000000580)=""/218, 0x40f00, 0x8, '\x00', r4, 0x0, r7, 0x8, &(0x7f00000006c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x7, 0x6, 0x9b9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000980)=[r8, r9, r10, 0x1, r11, 0xffffffffffffffff, r12, 0x1, r2, r13], &(0x7f00000009c0)=[{0x2, 0x3, 0xd}, {0x5, 0x4, 0x2, 0x3}, {0x2, 0x1, 0x0, 0x3}, {0x3, 0x1, 0x2, 0x6}, {0x3, 0x3, 0x9, 0xa}, {0x3, 0x4, 0x2, 0x7}], 0x10, 0x2}, 0x94) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) 185.403225ms ago: executing program 0 (id=10002): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket(0x11, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e084000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 82.937407ms ago: executing program 0 (id=10003): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000002000000079107ffffffe0000db000000400000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 82.41129ms ago: executing program 2 (id=10004): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x41) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r5 = socket$inet6(0xa, 0xa, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x81000, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x3502, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x9}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000440)="e93d", 0x2}, {0x0}], 0x2) writev(r2, &(0x7f0000000980), 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8000}]}}]}, 0x60}}, 0x4000) r6 = socket(0x28, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000100)=r8) 81.554255ms ago: executing program 4 (id=10005): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06414d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 0s ago: executing program 0 (id=10006): socket$inet6(0xa, 0x2, 0x3a) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x4e21, @empty}}) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x20008000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0303ba2e0500000000001280080001006b8cab26741003697400240002800800d500", @ANYRES32=0x0, @ANYBLOB="08000200ac14144005000900890000000600080017000000"], 0x50}, 0x1, 0x0, 0x0, 0x800c}, 0x0) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)}, 0x40000123) shutdown(r0, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0xffffffff, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x3}}, 0x10) socket$inet6(0xa, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x2, 0x1}}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x2, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'sit0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x0, 0x8000, 0x2, 0x5, {{0x26, 0x4, 0x3, 0x9, 0x98, 0x64, 0x0, 0xd0, 0x4, 0x0, @private=0xa010101, @local, {[@ssrr={0x89, 0x13, 0x4e, [@empty, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xf, 0x57, [@loopback, @multicast1, @multicast1]}, @cipso={0x86, 0x38, 0x3, [{0x7, 0x8, "b5b82ca07f6f"}, {0x5, 0x10, "a522542f0f3246f109666b06ac8a"}, {0x1, 0xd, "eb0e70ffee21b6aef366b5"}, {0x0, 0xd, "fd28cfa6d62991a6bc4ae1"}]}, @timestamp_prespec={0x44, 0x1c, 0x42, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x7ff}, {@multicast1, 0xe8d}]}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0xa, "e9e5e36d34ae84af"}]}}}}}) bind$alg(r6, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) bind$tipc(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.2.8794'. [ 1020.022991][ T2661] netlink: 'syz.0.8797': attribute type 1 has an invalid length. [ 1020.097639][ T2667] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8797'. [ 1020.169124][ T2669] netlink: 'syz.4.8799': attribute type 1 has an invalid length. [ 1020.223976][ T2669] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1020.237294][ T2672] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8800'. [ 1020.317622][ T2673] bond15: (slave veth13): Enslaving as a backup interface with a down link [ 1020.333839][ T2681] xt_SECMARK: invalid mode: 4 [ 1020.353548][ T2682] netlink: 'syz.4.8799': attribute type 10 has an invalid length. [ 1020.375016][ T2682] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8799'. [ 1020.400713][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1020.429045][ T2669] bond15: (slave dummy0): Enslaving as a backup interface with an up link [ 1020.460765][ T7177] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1020.500605][ T2682] bond15: (slave dummy0): Removing an active aggregator [ 1020.517989][ T2682] bond15: (slave dummy0): Releasing backup interface [ 1020.571505][ T2686] xfrm0: entered allmulticast mode [ 1020.588752][ T2686] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1020.924257][ T2714] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8811'. [ 1020.955604][ T2715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1021.135472][ T2725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8814'. [ 1021.153729][ T2725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8814'. [ 1021.368520][ T2744] netlink: 'syz.4.8817': attribute type 1 has an invalid length. [ 1021.399426][ T2744] netlink: 'syz.4.8817': attribute type 2 has an invalid length. [ 1021.440757][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1021.690266][ T2758] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8823'. [ 1021.744520][ T2760] xt_hashlimit: size too large, truncated to 1048576 [ 1021.979724][ T2767] tipc: Started in network mode [ 1021.986615][ T2767] tipc: Node identity ac1414aa, cluster identity 4711 [ 1022.010425][ T2767] tipc: Enabled bearer , priority 10 [ 1022.065670][ T2774] xt_SECMARK: invalid mode: 4 [ 1022.225286][ T2776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8829'. [ 1022.480742][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1023.122915][ T2000] tipc: Node number set to 2886997162 [ 1023.272801][ T2828] netlink: 'syz.0.8845': attribute type 1 has an invalid length. [ 1023.520668][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1023.733455][ T2860] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1024.025125][ T2893] netlink: 'syz.4.8859': attribute type 1 has an invalid length. [ 1024.560622][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1024.936905][ T2947] netlink: 'syz.2.8876': attribute type 3 has an invalid length. [ 1025.279227][ T2958] syzkaller0: entered promiscuous mode [ 1025.285371][ T2963] __nla_validate_parse: 4 callbacks suppressed [ 1025.285388][ T2963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8880'. [ 1025.290858][ T2958] syzkaller0: entered allmulticast mode [ 1025.309690][ T2962] xt_hashlimit: size too large, truncated to 1048576 [ 1025.365029][ T2958] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1025.377013][ T2960] sch_tbf: burst 88 is lower than device veth15 mtu (1514) ! [ 1025.600907][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1025.876576][ T2977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8886'. [ 1025.906170][ T2978] syzkaller0: entered promiscuous mode [ 1025.915664][ T2980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8888'. [ 1025.918693][ T2978] syzkaller0: entered allmulticast mode [ 1025.933459][ T2977] netlink: 356 bytes leftover after parsing attributes in process `syz.2.8886'. [ 1025.965717][ T2977] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8886'. [ 1025.999281][ T2977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8886'. [ 1026.042869][ T2983] vlan2: entered allmulticast mode [ 1026.059960][ T2983] bridge2: entered allmulticast mode [ 1026.141700][ T2988] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8891'. [ 1026.168964][ T2988] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8891'. [ 1026.640717][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1026.654464][ T3015] Bluetooth: MGMT ver 1.23 [ 1026.704222][ T3015] xfrm0: left allmulticast mode [ 1026.763951][ T3015] vlan3: left allmulticast mode [ 1026.781053][ T3015] bond1: left allmulticast mode [ 1026.791640][ T3015] geneve2: left allmulticast mode [ 1026.998155][ T3022] netlink: 'syz.1.8893': attribute type 75 has an invalid length. [ 1027.057796][ T3015] bond4: left allmulticast mode [ 1027.065345][ T3015] bond4: left promiscuous mode [ 1027.074260][ T3015] macvlan2: left promiscuous mode [ 1027.080394][ T3015] macvlan2: left allmulticast mode [ 1027.117690][ T96] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.140418][ T96] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.165488][ T3002] netlink: 766 bytes leftover after parsing attributes in process `syz.1.8893'. [ 1027.203792][ T96] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.234065][ T96] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.589660][ T3035] tipc: Enabling of bearer rejected, failed to enable media [ 1027.651259][ T3035] lo speed is unknown, defaulting to 1000 [ 1027.681362][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1028.033553][ T3049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8910'. [ 1028.292897][ T3035] lo speed is unknown, defaulting to 1000 [ 1028.366129][ T3066] netlink: 'syz.0.8913': attribute type 1 has an invalid length. [ 1028.730729][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1029.054958][ T3090] netlink: 'syz.3.8923': attribute type 1 has an invalid length. [ 1029.443157][ T3109] ip6gretap0: entered promiscuous mode [ 1029.464877][ T3109] syz_tun: entered promiscuous mode [ 1029.479394][ T3109] debugfs: 'hsr1' already exists in 'hsr' [ 1029.485762][ T3109] Cannot create hsr debugfs directory [ 1029.760824][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1030.008034][ T3142] xt_hashlimit: size too large, truncated to 1048576 [ 1030.685137][ T3151] syzkaller1: entered promiscuous mode [ 1030.700269][ T3151] syzkaller1: entered allmulticast mode [ 1030.799021][ T3168] netlink: 'syz.1.8951': attribute type 1 has an invalid length. [ 1030.810813][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1030.849112][ T3168] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1030.898775][ T3168] vlan2: entered allmulticast mode [ 1030.906662][ T3168] bond11: entered allmulticast mode [ 1031.086719][ T3178] __nla_validate_parse: 9 callbacks suppressed [ 1031.086737][ T3178] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8955'. [ 1031.429330][ T3178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8955'. [ 1031.526545][ T3178] ip6gretap1: entered promiscuous mode [ 1031.840665][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1032.139240][ T3248] netlink: 'syz.0.8969': attribute type 1 has an invalid length. [ 1032.214813][ T3248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1032.243400][ T3253] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8970'. [ 1032.283166][ T3255] vlan2: entered allmulticast mode [ 1032.288499][ T3255] bond1: entered allmulticast mode [ 1032.346488][ T3248] bond1: (slave geneve2): making interface the new active one [ 1032.354886][ T3248] geneve2: entered allmulticast mode [ 1032.369035][ T3248] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1032.446369][ T3261] netlink: 'syz.4.8973': attribute type 1 has an invalid length. [ 1032.648568][ T3261] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1032.669426][ T3270] xt_hashlimit: size too large, truncated to 1048576 [ 1032.736404][ T3278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8978'. [ 1032.827297][ T3278] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1032.880951][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1033.035529][ T3278] bond2 (unregistering): Released all slaves [ 1033.172146][ T3296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8983'. [ 1033.435483][ T3309] netlink: 'syz.0.8986': attribute type 21 has an invalid length. [ 1033.444407][ T3309] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8986'. [ 1033.474839][ T3309] netlink: 'syz.0.8986': attribute type 4 has an invalid length. [ 1033.496644][ T3309] netlink: 'syz.0.8986': attribute type 5 has an invalid length. [ 1033.519700][ T3309] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8986'. [ 1033.550239][ T3315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8986'. [ 1033.562712][ T3315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8986'. [ 1033.616720][ T3318] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8990'. [ 1033.921253][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1033.968392][ T3336] netlink: 'syz.2.8997': attribute type 1 has an invalid length. [ 1034.116165][ T3341] syzkaller0: entered promiscuous mode [ 1034.146179][ T3341] syzkaller0: entered allmulticast mode [ 1034.432197][ T3360] syzkaller0: entered promiscuous mode [ 1034.448085][ T3360] syzkaller0: entered allmulticast mode [ 1034.480013][ T3360] tipc: Enabled bearer , priority 0 [ 1034.509357][ T3358] tipc: Resetting bearer [ 1034.605733][ T3358] tipc: Disabling bearer [ 1034.960786][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1035.004334][ T3389] netlink: 'syz.4.9012': attribute type 1 has an invalid length. [ 1035.084286][ T3390] tipc: Enabled bearer , priority 0 [ 1035.157518][ T3390] +: renamed from syzkaller0 [ 1035.167862][ T3390] tipc: Disabling bearer [ 1035.307406][ T3404] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1035.437634][ T3408] syzkaller0: entered promiscuous mode [ 1035.458630][ T3408] syzkaller0: entered allmulticast mode [ 1035.483423][ T3408] tipc: Enabled bearer , priority 0 [ 1035.508960][ T3407] tipc: Resetting bearer [ 1035.563307][ T3407] tipc: Disabling bearer [ 1035.959408][ T3423] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1035.973450][ T3445] netlink: 'syz.2.9031': attribute type 1 has an invalid length. [ 1036.000759][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1036.096033][ T3440] bond4: (slave bond0): Releasing backup interface [ 1036.127175][ T3440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.165942][ T3440] bond12: (slave bond0): Enslaving as an active interface with an up link [ 1036.398069][ T3432] tipc: Enabling of bearer rejected, failed to enable media [ 1036.684115][ T3467] __nla_validate_parse: 5 callbacks suppressed [ 1036.684154][ T3467] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9035'. [ 1036.955149][ T3479] syzkaller0: entered promiscuous mode [ 1036.972936][ T3479] syzkaller0: entered allmulticast mode [ 1037.040737][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1037.176490][ T3488] xt_hashlimit: size too large, truncated to 1048576 [ 1037.391630][ T3498] xt_SECMARK: invalid mode: 4 [ 1037.466332][ T3502] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9047'. [ 1037.651198][ T3510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9048'. [ 1037.662517][ T3510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9048'. [ 1037.753215][ T3516] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9051'. [ 1037.837081][ T3520] netlink: 'syz.1.9052': attribute type 1 has an invalid length. [ 1037.932871][ T3523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9053'. [ 1038.080750][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1038.175126][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9059'. [ 1038.566467][ T3555] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9067'. [ 1038.589455][ T3556] netlink: 'syz.2.9065': attribute type 1 has an invalid length. [ 1038.600949][ T3555] FAULT_INJECTION: forcing a failure. [ 1038.600949][ T3555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.634737][ T3555] CPU: 1 UID: 0 PID: 3555 Comm: syz.4.9067 Not tainted syzkaller #0 PREEMPT(full) [ 1038.634779][ T3555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1038.634799][ T3555] Call Trace: [ 1038.634807][ T3555] [ 1038.634817][ T3555] dump_stack_lvl+0xe8/0x150 [ 1038.634853][ T3555] should_fail_ex+0x40c/0x560 [ 1038.634883][ T3555] _copy_from_user+0x2d/0xb0 [ 1038.634914][ T3555] kstrtouint_from_user+0xd6/0x180 [ 1038.634942][ T3555] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1038.634984][ T3555] proc_fail_nth_write+0x8e/0x210 [ 1038.635013][ T3555] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1038.635050][ T3555] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1038.635076][ T3555] vfs_write+0x296/0xba0 [ 1038.635115][ T3555] ? __pfx_vfs_write+0x10/0x10 [ 1038.635147][ T3555] ? __fget_files+0x2a/0x420 [ 1038.635178][ T3555] ? __fget_files+0x3a2/0x420 [ 1038.635203][ T3555] ? __fget_files+0x2a/0x420 [ 1038.635238][ T3555] ksys_write+0x150/0x270 [ 1038.635271][ T3555] ? __pfx_ksys_write+0x10/0x10 [ 1038.635310][ T3555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.635334][ T3555] do_syscall_64+0x174/0x580 [ 1038.635361][ T3555] ? trace_irq_disable+0x3b/0x140 [ 1038.635387][ T3555] ? clear_bhb_loop+0x40/0x90 [ 1038.635412][ T3555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.635431][ T3555] RIP: 0033:0x7fc14a95e68e [ 1038.635448][ T3555] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1038.635465][ T3555] RSP: 002b:00007fc14b8c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1038.635486][ T3555] RAX: ffffffffffffffda RBX: 00007fc14b8c26c0 RCX: 00007fc14a95e68e [ 1038.635502][ T3555] RDX: 0000000000000001 RSI: 00007fc14b8c20a0 RDI: 0000000000000005 [ 1038.635515][ T3555] RBP: 00007fc14b8c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.635537][ T3555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.635550][ T3555] R13: 00007fc14ac26038 R14: 00007fc14ac25fa0 R15: 00007ffc7891b768 [ 1038.635584][ T3555] [ 1038.637009][ T3556] netlink: 'syz.2.9065': attribute type 2 has an invalid length. [ 1039.120649][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1039.258060][ T3576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9072'. [ 1039.601589][ T3590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9079'. [ 1040.170608][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1040.714551][ T3655] netlink: 'syz.4.9101': attribute type 10 has an invalid length. [ 1040.818496][ T3655] tipc: Resetting bearer [ 1040.840770][ T3655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1040.864888][ T3655] batadv0: entered promiscuous mode [ 1040.884940][ T3655] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1041.019461][ T3671] netlink: 'syz.0.9104': attribute type 3 has an invalid length. [ 1041.200672][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1041.888831][ T3694] macsec0: Caught tx_queue_len zero misconfig [ 1041.921842][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1041.937403][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1041.946626][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1041.955715][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1041.963452][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1042.241418][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1042.286712][ T3709] __nla_validate_parse: 9 callbacks suppressed [ 1042.286731][ T3709] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9114'. [ 1042.425016][ T3716] tipc: Enabling of bearer rejected, already enabled [ 1042.458328][ T3717] netlink: 1060 bytes leftover after parsing attributes in process `syz.0.9117'. [ 1042.527195][ T3711] lo speed is unknown, defaulting to 1000 [ 1043.257665][ T3718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.280686][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1043.362537][ T3711] lo speed is unknown, defaulting to 1000 [ 1043.396202][T26228] syz_tun (unregistering): left promiscuous mode [ 1043.448890][ T3733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9121'. [ 1043.655787][ T3695] lo speed is unknown, defaulting to 1000 [ 1043.665539][ T3741] xt_connbytes: Forcing CT accounting to be enabled [ 1044.000783][ T5626] Bluetooth: hci3: command tx timeout [ 1044.059319][ T3757] netlink: 1060 bytes leftover after parsing attributes in process `syz.3.9130'. [ 1044.116895][ T3695] lo speed is unknown, defaulting to 1000 [ 1044.345066][ T3762] bond10 (unregistering): Released all slaves [ 1044.449323][ T3767] 8021q: VLANs not supported on sit0 [ 1044.979002][ T3790] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9140'. [ 1045.117701][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.147772][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.156767][ T3695] bridge_slave_0: entered allmulticast mode [ 1045.175024][ T3695] bridge_slave_0: entered promiscuous mode [ 1045.196645][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.205474][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.224307][ T3695] bridge_slave_1: entered allmulticast mode [ 1045.243637][ T3695] bridge_slave_1: entered promiscuous mode [ 1045.395556][ T3695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.423072][ T3695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.580015][ T3695] team0: Port device team_slave_0 added [ 1045.603872][ T3695] team0: Port device team_slave_1 added [ 1045.631970][ T3811] netlink: 'syz.1.9147': attribute type 3 has an invalid length. [ 1045.695796][ T3695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.710848][ T3695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.768438][ T3695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.791115][ T3813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9148'. [ 1045.811863][ T3695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.822756][ T3815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9149'. [ 1045.831753][ T3695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.831789][ T3695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.891143][ T3815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.901402][ T3815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.902367][ T3818] netlink: 'syz.2.9150': attribute type 1 has an invalid length. [ 1045.916810][ T3818] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9150'. [ 1045.927011][ T3818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9150'. [ 1045.971191][ T3695] hsr_slave_0: entered promiscuous mode [ 1045.985797][ T3695] hsr_slave_1: entered promiscuous mode [ 1045.996350][ T3695] debugfs: 'hsr0' already exists in 'hsr' [ 1046.004929][ T3695] Cannot create hsr debugfs directory [ 1046.086337][ T5626] Bluetooth: hci3: command tx timeout [ 1047.136706][ T3870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9158'. [ 1047.368879][ T3695] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1047.401114][ T3695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1047.418932][ T3695] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1047.445898][ T3695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1047.469262][ T3695] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1047.523915][ T3695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1047.545515][ T3695] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1047.563846][ T3695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1047.626651][ T3887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9161'. [ 1047.647831][ T3887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9161'. [ 1047.775954][ T3695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.827442][ T3695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.855171][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.862416][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.882700][T10043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.889873][T10043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.010335][ T3894] lo speed is unknown, defaulting to 1000 [ 1048.170651][ T50] Bluetooth: hci3: command tx timeout [ 1048.179439][ T3907] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9168'. [ 1048.209636][ T3907] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9168'. [ 1048.336342][ T3912] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9169'. [ 1048.631811][ T3921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9173'. [ 1048.686076][ T3923] netlink: 292 bytes leftover after parsing attributes in process `syz.1.9174'. [ 1049.208462][ T3894] lo speed is unknown, defaulting to 1000 [ 1049.361556][ T3935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9177'. [ 1049.478353][ T3935] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1049.726107][ T3695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.893607][ T3958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9179'. [ 1050.241963][ T50] Bluetooth: hci3: command 0x0419 tx timeout [ 1050.471348][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9186'. [ 1050.499562][ T3976] netlink: 'syz.2.9186': attribute type 12 has an invalid length. [ 1050.527982][ T3976] netlink: 'syz.2.9186': attribute type 14 has an invalid length. [ 1050.694234][ T3695] veth0_vlan: entered promiscuous mode [ 1050.720243][ T3695] veth1_vlan: entered promiscuous mode [ 1050.771466][ T3695] veth0_macvtap: entered promiscuous mode [ 1050.783270][ T3695] veth1_macvtap: entered promiscuous mode [ 1050.789765][ T3993] netlink: 'syz.1.9189': attribute type 16 has an invalid length. [ 1050.822378][ T3993] netlink: 'syz.1.9189': attribute type 17 has an invalid length. [ 1050.832123][ T3695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.855418][ T3695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.926015][ T3998] syz_tun (unregistering): left promiscuous mode [ 1050.957015][ T983] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.994496][ T983] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.023396][ T983] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.056217][ T983] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.320942][ T5626] Bluetooth: hci3: command 0x0419 tx timeout [ 1052.337242][ T4055] netlink: 'syz.2.9203': attribute type 4 has an invalid length. [ 1053.655788][ T3987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1053.806096][ T4057] netlink: 'syz.1.9205': attribute type 11 has an invalid length. [ 1053.818280][ T4057] netlink: 'syz.1.9205': attribute type 11 has an invalid length. [ 1053.829997][ T4057] __nla_validate_parse: 2 callbacks suppressed [ 1053.830014][ T4057] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9205'. [ 1053.846505][T10043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.863584][T10043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.963019][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.978036][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.182068][ T4065] xfrm0: entered allmulticast mode [ 1054.202298][ T4065] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1054.403778][ T1318] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1054.451441][ T4086] sctp: [Deprecated]: syz.4.9109 (pid 4086) Use of int in max_burst socket option deprecated. [ 1054.451441][ T4086] Use struct sctp_assoc_value instead [ 1054.772575][ T4100] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9217'. [ 1054.815248][ T4098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9215'. [ 1054.831214][ T4100] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9217'. [ 1054.845038][ T4104] netlink: 'syz.3.9219': attribute type 1 has an invalid length. [ 1054.981161][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1054.996502][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1055.006731][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1055.020501][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1055.029175][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1055.143095][ T4104] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1055.195791][ T4107] vlan2: entered allmulticast mode [ 1055.206968][ T4107] bond10: entered allmulticast mode [ 1055.213883][ T4112] FAULT_INJECTION: forcing a failure. [ 1055.213883][ T4112] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.227299][ T4112] CPU: 0 UID: 0 PID: 4112 Comm: syz.3.9219 Not tainted syzkaller #0 PREEMPT(full) [ 1055.227325][ T4112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1055.227339][ T4112] Call Trace: [ 1055.227348][ T4112] [ 1055.227358][ T4112] dump_stack_lvl+0xe8/0x150 [ 1055.227399][ T4112] should_fail_ex+0x40c/0x560 [ 1055.227432][ T4112] should_failslab+0xa8/0x100 [ 1055.227467][ T4112] __kmalloc_cache_noprof+0xa8/0x660 [ 1055.227498][ T4112] ? __hw_addr_create+0x62/0x240 [ 1055.227530][ T4112] ? __hw_addr_create+0x62/0x240 [ 1055.227569][ T4112] __hw_addr_create+0x62/0x240 [ 1055.227606][ T4112] __hw_addr_add_ex+0x1ce/0x520 [ 1055.227646][ T4112] dev_addr_init+0x15a/0x240 [ 1055.227680][ T4112] ? __pfx_dev_addr_init+0x10/0x10 [ 1055.227717][ T4112] ? __kvmalloc_node_noprof+0x35c/0x860 [ 1055.227756][ T4112] alloc_netdev_mqs+0x2b4/0x12b0 [ 1055.227777][ T4112] ? __pfx_snprintf+0x10/0x10 [ 1055.227802][ T4112] ? __pfx_geneve_setup+0x10/0x10 [ 1055.227933][ T4112] rtnl_create_link+0x321/0xd70 [ 1055.227965][ T4112] rtnl_newlink_create+0x258/0x7b0 [ 1055.228005][ T4112] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1055.228061][ T4112] ? __pfx___mutex_lock+0x10/0x10 [ 1055.228104][ T4112] ? ns_capable+0x89/0xe0 [ 1055.228135][ T4112] rtnl_newlink+0x167f/0x1bd0 [ 1055.228166][ T4112] ? __lock_acquire+0x683/0x2cf0 [ 1055.228210][ T4112] ? __pfx_rtnl_newlink+0x10/0x10 [ 1055.228241][ T4112] ? __lock_acquire+0x683/0x2cf0 [ 1055.228279][ T4112] ? __lock_acquire+0x683/0x2cf0 [ 1055.228326][ T4112] ? unwind_next_frame+0x8f/0x2550 [ 1055.228358][ T4112] ? is_bpf_text_address+0x26/0x2b0 [ 1055.228403][ T4112] ? is_bpf_text_address+0x26/0x2b0 [ 1055.228439][ T4112] ? __lock_acquire+0x683/0x2cf0 [ 1055.228473][ T4112] ? kernel_text_address+0xa5/0xe0 [ 1055.228525][ T4112] ? __kernel_text_address+0xd/0x30 [ 1055.228558][ T4112] ? unwind_get_return_address+0x4d/0x90 [ 1055.228580][ T4112] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1055.228609][ T4112] ? arch_stack_walk+0xfb/0x150 [ 1055.228645][ T4112] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1055.228695][ T4112] ? __pfx_rtnl_newlink+0x10/0x10 [ 1055.228723][ T4112] rtnetlink_rcv_msg+0x802/0xc00 [ 1055.228752][ T4112] ? netlink_sendmsg+0x5d4/0xb40 [ 1055.228792][ T4112] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1055.228821][ T4112] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1055.228860][ T4112] ? __lock_acquire+0x683/0x2cf0 [ 1055.228906][ T4112] netlink_rcv_skb+0x226/0x4a0 [ 1055.228942][ T4112] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1055.228974][ T4112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1055.229024][ T4112] ? netlink_deliver_tap+0x2e/0x1b0 [ 1055.229058][ T4112] ? netlink_deliver_tap+0x2e/0x1b0 [ 1055.229097][ T4112] netlink_unicast+0x7bb/0x940 [ 1055.229142][ T4112] netlink_sendmsg+0x813/0xb40 [ 1055.229188][ T4112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1055.229227][ T4112] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1055.229257][ T4112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1055.229290][ T4112] sock_sendmsg_nosec+0x13a/0x180 [ 1055.229318][ T4112] ____sys_sendmsg+0x54e/0x850 [ 1055.229359][ T4112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1055.229404][ T4112] ? import_iovec+0x73/0xa0 [ 1055.229441][ T4112] ___sys_sendmsg+0x2a5/0x360 [ 1055.229473][ T4112] ? __lock_acquire+0x683/0x2cf0 [ 1055.229508][ T4112] ? __pfx____sys_sendmsg+0x10/0x10 [ 1055.229585][ T4112] ? __fget_files+0x2a/0x420 [ 1055.229614][ T4112] ? __fget_files+0x3a2/0x420 [ 1055.229655][ T4112] __x64_sys_sendmsg+0x1b1/0x290 [ 1055.229702][ T4112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1055.229756][ T4112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.229782][ T4112] do_syscall_64+0x174/0x580 [ 1055.229810][ T4112] ? trace_irq_disable+0x3b/0x140 [ 1055.229835][ T4112] ? clear_bhb_loop+0x40/0x90 [ 1055.229870][ T4112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.229891][ T4112] RIP: 0033:0x7fed0a19de59 [ 1055.229911][ T4112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.229929][ T4112] RSP: 002b:00007fed0b000028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1055.229951][ T4112] RAX: ffffffffffffffda RBX: 00007fed0a426180 RCX: 00007fed0a19de59 [ 1055.229966][ T4112] RDX: 0000000004000854 RSI: 0000200000000240 RDI: 0000000000000004 [ 1055.229981][ T4112] RBP: 00007fed0b000090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.229994][ T4112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1055.230008][ T4112] R13: 00007fed0a426218 R14: 00007fed0a426180 R15: 00007fffed3a0798 [ 1055.230044][ T4112] [ 1056.235309][ T4147] netlink: 87 bytes leftover after parsing attributes in process `syz.3.9223'. [ 1056.457348][T26582] syz_tun (unregistering): left promiscuous mode [ 1056.552950][ T4108] lo speed is unknown, defaulting to 1000 [ 1056.952205][ T4175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9233'. [ 1057.101524][ T4180] netlink: 'syz.0.9234': attribute type 21 has an invalid length. [ 1057.121762][ T5626] Bluetooth: hci5: command tx timeout [ 1057.414867][ T4108] lo speed is unknown, defaulting to 1000 [ 1057.642279][ T4189] netlink: 'syz.0.9235': attribute type 1 has an invalid length. [ 1057.682942][ T4189] netlink: 'syz.0.9235': attribute type 2 has an invalid length. [ 1058.466609][ T4206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9236'. [ 1059.202397][ T5626] Bluetooth: hci5: command tx timeout [ 1059.229484][ T4213] lo speed is unknown, defaulting to 1000 [ 1059.922948][ T983] bridge_slave_1: left allmulticast mode [ 1059.941127][ T983] bridge_slave_1: left promiscuous mode [ 1059.962338][ T983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.006943][ T983] bridge_slave_0: left allmulticast mode [ 1060.027997][ T983] bridge_slave_0: left promiscuous mode [ 1060.044811][ T983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.109665][ T4248] netlink: 'syz.1.9250': attribute type 1 has an invalid length. [ 1060.174509][ T983] ip6gretap0 (unregistering): left promiscuous mode [ 1060.195292][ T4256] netlink: 'syz.1.9250': attribute type 1 has an invalid length. [ 1060.223951][ T4256] netlink: 'syz.1.9250': attribute type 3 has an invalid length. [ 1060.234045][ T4258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9246'. [ 1060.262218][ T4256] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9250'. [ 1060.606117][ T983] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1060.914315][ T983] bond1 (unregistering): Released all slaves [ 1060.978771][ T983] bond0 (unregistering): Released all slaves [ 1061.004431][ T983] bond2 (unregistering): Released all slaves [ 1061.030103][ T983] bond3 (unregistering): (slave veth3): Releasing active interface [ 1061.046425][ T983] bond3 (unregistering): Released all slaves [ 1061.068170][ T983] team0: Port device macvlan2 removed [ 1061.080246][ T983] bond4 (unregistering): Released all slaves [ 1061.104143][ T983] bond5 (unregistering): Released all slaves [ 1061.125109][ T983] bond6 (unregistering): Released all slaves [ 1061.153396][ T983] bond7 (unregistering): Released all slaves [ 1061.176553][ T983] bond8 (unregistering): Released all slaves [ 1061.201803][ T983] bond9 (unregistering): Released all slaves [ 1061.233585][ T983] bond10 (unregistering): Released all slaves [ 1061.281579][ T5626] Bluetooth: hci5: command tx timeout [ 1061.304268][ T4213] lo speed is unknown, defaulting to 1000 [ 1061.331199][ T4248] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1061.379189][ T4108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.421101][ T4108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.428604][ T4108] bridge_slave_0: entered allmulticast mode [ 1061.452580][ T4108] bridge_slave_0: entered promiscuous mode [ 1061.496262][ T4293] netlink: 'syz.3.9253': attribute type 1 has an invalid length. [ 1061.579163][ T4108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.593147][ T4108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.613942][ T4108] bridge_slave_1: entered allmulticast mode [ 1061.624421][ T4292] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9253'. [ 1061.633386][ T4108] bridge_slave_1: entered promiscuous mode [ 1061.764349][ T983] tipc: Disabling bearer [ 1061.774079][ T983] tipc: Disabling bearer [ 1061.792541][ T983] tipc: Left network mode [ 1062.193992][ T4108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.279197][ T4108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.626572][ T4108] team0: Port device team_slave_0 added [ 1062.662968][ T4108] team0: Port device team_slave_1 added [ 1062.920159][ T4108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.947430][ T4108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.984134][ T4108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.034219][ T4108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.041769][ T4108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.094459][ T4108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.120508][ T4345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9261'. [ 1063.131933][ T4345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9261'. [ 1063.142204][ T4345] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1063.176477][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1063.373434][ T5626] Bluetooth: hci5: command tx timeout [ 1063.451901][ T4108] hsr_slave_0: entered promiscuous mode [ 1063.468905][ T4108] hsr_slave_1: entered promiscuous mode [ 1063.482661][ T4108] debugfs: 'hsr0' already exists in 'hsr' [ 1063.496062][ T4355] netlink: 'syz.0.9265': attribute type 1 has an invalid length. [ 1063.512013][ T4108] Cannot create hsr debugfs directory [ 1063.636517][ T4360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9265'. [ 1064.553166][ T4383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9269'. [ 1064.865778][ T4391] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9271'. [ 1065.036958][ T4402] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 1065.107690][ T4406] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9275'. [ 1065.129857][ T983] hsr_slave_0: left promiscuous mode [ 1065.136800][ T983] hsr_slave_1: left promiscuous mode [ 1065.494690][ T983] team0 (unregistering): Port device team_slave_1 removed [ 1065.515335][ T983] team0 (unregistering): Port device team_slave_0 removed [ 1065.716678][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1065.991082][ T4428] netlink: 'syz.4.9279': attribute type 1 has an invalid length. [ 1066.139213][ T4425] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9279'. [ 1066.737621][ T4465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9286'. [ 1067.146545][ T4465] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1067.173160][ T4470] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1067.219700][ T983] IPVS: stop unused estimator thread 0... [ 1067.360361][ T4484] FAULT_INJECTION: forcing a failure. [ 1067.360361][ T4484] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.415841][ T4484] CPU: 1 UID: 0 PID: 4484 Comm: syz.3.9287 Not tainted syzkaller #0 PREEMPT(full) [ 1067.415870][ T4484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1067.415883][ T4484] Call Trace: [ 1067.415892][ T4484] [ 1067.415902][ T4484] dump_stack_lvl+0xe8/0x150 [ 1067.415940][ T4484] should_fail_ex+0x40c/0x560 [ 1067.415972][ T4484] should_failslab+0xa8/0x100 [ 1067.416007][ T4484] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1067.416038][ T4484] ? dst_alloc+0x105/0x170 [ 1067.416070][ T4484] ? dst_alloc+0x105/0x170 [ 1067.416100][ T4484] dst_alloc+0x105/0x170 [ 1067.416129][ T4484] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1067.416161][ T4484] ? ip_route_output_key_hash_rcu+0x1dc1/0x2720 [ 1067.416198][ T4484] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1067.416231][ T4484] ip_route_output_key_hash+0x18d/0x2a0 [ 1067.416263][ T4484] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1067.416300][ T4484] ? look_up_lock_class+0x57/0x110 [ 1067.416341][ T4484] tcp_v4_connect+0x6fd/0x1950 [ 1067.416468][ T4484] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1067.416505][ T4484] ? tcp_v6_connect+0x6bc/0x1cf0 [ 1067.416562][ T4484] ? mptcpv6_handle_mapped+0xe8/0x1f0 [ 1067.416655][ T4484] ? tcp_v6_connect+0xb2a/0x1cf0 [ 1067.416691][ T4484] tcp_v6_connect+0xcb1/0x1cf0 [ 1067.416740][ T4484] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1067.416779][ T4484] ? __local_bh_enable_ip+0xd0/0x130 [ 1067.416812][ T4484] mptcp_connect+0x4d3/0x7a0 [ 1067.416847][ T4484] __inet_stream_connect+0x258/0xe00 [ 1067.416883][ T4484] ? do_raw_spin_lock+0x12b/0x2f0 [ 1067.416906][ T4484] ? lock_sock_nested+0x6a/0x100 [ 1067.416933][ T4484] ? __pfx___inet_stream_connect+0x10/0x10 [ 1067.416979][ T4484] ? inet_stream_connect+0x51/0xa0 [ 1067.417007][ T4484] ? __local_bh_enable_ip+0xd0/0x130 [ 1067.417036][ T4484] inet_stream_connect+0x66/0xa0 [ 1067.417074][ T4484] __sys_connect+0x323/0x460 [ 1067.417104][ T4484] ? __pfx___sys_connect+0x10/0x10 [ 1067.417145][ T4484] ? __pfx_ksys_write+0x10/0x10 [ 1067.417182][ T4484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.417205][ T4484] __x64_sys_connect+0x7a/0x90 [ 1067.417232][ T4484] do_syscall_64+0x174/0x580 [ 1067.417258][ T4484] ? trace_irq_disable+0x3b/0x140 [ 1067.417283][ T4484] ? clear_bhb_loop+0x40/0x90 [ 1067.417309][ T4484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.417329][ T4484] RIP: 0033:0x7fed0a19de59 [ 1067.417348][ T4484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.417365][ T4484] RSP: 002b:00007fed0b042028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1067.417405][ T4484] RAX: ffffffffffffffda RBX: 00007fed0a425fa0 RCX: 00007fed0a19de59 [ 1067.417422][ T4484] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 1067.417436][ T4484] RBP: 00007fed0b042090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.417449][ T4484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.417463][ T4484] R13: 00007fed0a426038 R14: 00007fed0a425fa0 R15: 00007fffed3a0798 [ 1067.417500][ T4484] [ 1067.495999][ T4490] Bluetooth: MGMT ver 1.23 [ 1067.859912][ T4491] lo speed is unknown, defaulting to 1000 [ 1067.870347][ T4496] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1067.919100][ T4486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9288'. [ 1068.045918][ T4501] netlink: 'syz.4.9292': attribute type 1 has an invalid length. [ 1068.234678][ T4508] vlan2: entered allmulticast mode [ 1068.249136][ T4508] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1068.590782][ T4519] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9296'. [ 1068.805977][ T4491] lo speed is unknown, defaulting to 1000 [ 1068.863429][ T4108] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1068.887071][ T4108] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1068.966702][ T4108] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1069.001867][ T4535] netlink: 'syz.3.9301': attribute type 3 has an invalid length. [ 1069.051564][ T4108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1069.069840][ T4108] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1069.108179][ T4108] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1069.155639][ T4108] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1069.167839][ T4108] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1069.509717][ T4559] sctp: [Deprecated]: syz.3.9305 (pid 4559) Use of int in max_burst socket option. [ 1069.509717][ T4559] Use struct sctp_assoc_value instead [ 1069.648209][ T4108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.730279][ T4108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.827180][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.834397][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.910132][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.917338][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.034135][ T4575] veth1_to_batadv: entered promiscuous mode [ 1070.285368][ T4584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9312'. [ 1070.649509][ T4602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9317'. [ 1070.785891][ T4609] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9318'. [ 1070.796761][ T4602] ipvlan1: entered promiscuous mode [ 1070.824163][ T4602] ipvlan1: left promiscuous mode [ 1071.200293][ T4625] netlink: 'syz.4.9323': attribute type 1 has an invalid length. [ 1071.378806][ T4625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1071.506053][ T4629] vlan3: entered allmulticast mode [ 1071.529436][ T4629] bond1: entered allmulticast mode [ 1071.614365][ T4637] bond1: (slave geneve2): making interface the new active one [ 1071.635914][ T4637] geneve2: entered allmulticast mode [ 1071.646812][ T4637] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1071.948133][ T4108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.075672][ T4658] xt_SECMARK: invalid mode: 4 [ 1072.092310][ T4108] veth0_vlan: entered promiscuous mode [ 1072.157132][ T4108] veth1_vlan: entered promiscuous mode [ 1072.364819][ T4108] veth0_macvtap: entered promiscuous mode [ 1072.415294][ T4108] veth1_macvtap: entered promiscuous mode [ 1072.615930][ T4108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.822303][ T4108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.997572][T10045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.024988][T10045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.065425][T10045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.112951][T10045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.347674][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9338'. [ 1073.367395][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.389709][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.547710][T10045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.559832][T10045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.308385][ T4751] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9351'. [ 1075.374048][ T4788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9364'. [ 1075.396549][ T4781] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9363'. [ 1075.464522][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1075.475667][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1075.487505][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1075.495911][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1075.508340][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1075.957498][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9368'. [ 1076.275952][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9372'. [ 1076.420403][ T4831] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9372'. [ 1076.529207][ T4834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9376'. [ 1076.580083][ T4792] lo speed is unknown, defaulting to 1000 [ 1076.757498][ T4836] netlink: 'syz.0.9377': attribute type 1 has an invalid length. [ 1076.962487][ T4836] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1076.973421][ T4840] netlink: 'syz.0.9377': attribute type 10 has an invalid length. [ 1076.981702][ T4840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9377'. [ 1077.098267][ T4838] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 1077.137072][ T4840] dummy0: entered promiscuous mode [ 1077.264322][ T4792] lo speed is unknown, defaulting to 1000 [ 1077.438317][ T4845] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9381'. [ 1077.601237][ T50] Bluetooth: hci1: command tx timeout [ 1077.741099][ T4863] ip6gretap0: entered promiscuous mode [ 1077.754672][ T4863] syz_tun: entered promiscuous mode [ 1077.769833][ T4863] debugfs: 'hsr1' already exists in 'hsr' [ 1077.776082][ T4863] Cannot create hsr debugfs directory [ 1077.784850][T10047] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1077.801647][T10047] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1077.824224][T10047] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1077.873848][ T4865] tipc: Enabling of bearer rejected, already enabled [ 1077.896198][T10047] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.098509][ T4792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.105924][ T4792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.114220][ T4792] bridge_slave_0: entered allmulticast mode [ 1078.122707][ T4792] bridge_slave_0: entered promiscuous mode [ 1078.132729][ T4792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.140338][ T4792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.148361][ T4792] bridge_slave_1: entered allmulticast mode [ 1078.156795][ T4792] bridge_slave_1: entered promiscuous mode [ 1078.205468][ T4792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.218943][ T4792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.264111][ T4792] team0: Port device team_slave_0 added [ 1078.274790][ T4792] team0: Port device team_slave_1 added [ 1078.345997][ T4792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.361994][ T4792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.434455][ T4792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.487036][ T4888] __nla_validate_parse: 4 callbacks suppressed [ 1078.487056][ T4888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9395'. [ 1078.514065][ T4792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.521693][ T4792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.550882][ T4792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.697141][ T4792] hsr_slave_0: entered promiscuous mode [ 1078.712654][ T4792] hsr_slave_1: entered promiscuous mode [ 1078.723567][ T4890] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 1078.737576][ T4792] debugfs: 'hsr0' already exists in 'hsr' [ 1078.750646][ T4792] Cannot create hsr debugfs directory [ 1079.034292][ T4902] tipc: Enabling of bearer rejected, already enabled [ 1079.164691][ T4906] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9403'. [ 1079.209678][ T4792] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.221532][ T4792] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.379369][ T4792] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.397270][ T4792] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.455379][ T4921] xt_connbytes: Forcing CT accounting to be enabled [ 1079.635694][ T4792] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.647189][ T4792] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.681315][ T50] Bluetooth: hci1: command tx timeout [ 1079.807505][ T4792] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.833057][ T4792] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.910361][ T4938] tipc: Enabling of bearer rejected, already enabled [ 1080.129363][ T4948] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9417'. [ 1080.294501][ T4957] atomic_op ffff8880b0959998 conn xmit_atomic 0000000000000000 [ 1080.438063][ T4953] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 1080.571473][ T4792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1080.597668][ T4792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1080.607357][ T4792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1080.628363][ T4792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1080.659283][ T4792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1080.691658][ T4792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1080.722138][ T4792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1080.734113][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9427'. [ 1080.749281][ T4792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1080.761578][ T4980] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1080.779214][ T4977] syzkaller0: entered promiscuous mode [ 1080.788427][ T4977] syzkaller0: entered allmulticast mode [ 1080.811551][ T4982] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9428'. [ 1080.824961][ T4977] tipc: Enabled bearer , priority 0 [ 1080.851206][ T4977] tipc: Resetting bearer [ 1080.873484][ T4973] tipc: Resetting bearer [ 1080.915100][ T4973] tipc: Disabling bearer [ 1081.031424][ T4991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.039556][ T4991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.061594][ T5000] netlink: 11 bytes leftover after parsing attributes in process `syz.0.9432'. [ 1081.204733][ T4991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.224663][ T4991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.463450][ T14] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.501288][ T14] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.558773][ T5017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9437'. [ 1081.597241][ T5011] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 1081.606775][ T14] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.616917][ T14] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.706098][ T5017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.713359][ T5017] bridge0: port 2(bridge_slave_1) entered listening state [ 1081.720815][ T5017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.728036][ T5017] bridge0: port 1(bridge_slave_0) entered listening state [ 1081.762712][ T50] Bluetooth: hci1: command tx timeout [ 1081.851922][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9440'. [ 1081.870379][ T5017] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1081.874640][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9440'. [ 1081.900344][ T5027] lo: Caught tx_queue_len zero misconfig [ 1082.022195][ T5035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9442'. [ 1082.142079][T10047] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1082.152278][T10047] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1082.173046][T10047] bond3: active interface up! [ 1082.188353][ T4792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.219820][ T5043] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 1082.229662][ T4792] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.253835][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.261242][T10047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.277824][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.285089][T10047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.092833][ T5063] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 1083.108474][ T5074] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1083.194710][ T5070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1083.222360][ T5084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.252143][ T5084] bond2: (slave bond0): Enslaving as an active interface with an up link [ 1083.503525][ T4792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.703554][ T5099] __nla_validate_parse: 2 callbacks suppressed [ 1083.703569][ T5099] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9456'. [ 1083.753927][ T5099] netlink: 124 bytes leftover after parsing attributes in process `syz.4.9456'. [ 1083.768423][ T4792] veth0_vlan: entered promiscuous mode [ 1083.842608][ T50] Bluetooth: hci1: command tx timeout [ 1083.848964][ T5097] lo speed is unknown, defaulting to 1000 [ 1083.859876][ T4792] veth1_vlan: entered promiscuous mode [ 1083.925123][ T4792] veth0_macvtap: entered promiscuous mode [ 1083.939092][ T4792] veth1_macvtap: entered promiscuous mode [ 1083.974382][ T4792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.011336][ T5106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9457'. [ 1084.022357][ T4792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.058456][T10045] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.078607][T10045] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.121535][T10045] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.133492][T10045] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.428717][ T5097] lo speed is unknown, defaulting to 1000 [ 1084.464311][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.488889][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.555985][ T5113] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 1084.619255][ T7176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.628467][ T7176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.064094][ T5131] netlink: 'syz.0.9466': attribute type 1 has an invalid length. [ 1085.167127][ T5131] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1085.200413][ T983] batadv1: left allmulticast mode [ 1085.215815][ T983] batadv1: left promiscuous mode [ 1085.227086][ T983] bridge0: port 3(batadv1) entered disabled state [ 1085.256962][ T983] bridge_slave_1: left allmulticast mode [ 1085.282603][ T983] bridge_slave_1: left promiscuous mode [ 1085.302519][ T983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.322017][ T983] bridge_slave_0: left allmulticast mode [ 1085.337390][ T983] bridge_slave_0: left promiscuous mode [ 1085.346812][ T983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.371584][ T983] batman_adv: batadv0: Interface deactivated: gretap2 [ 1085.449023][ T5148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9471'. [ 1085.499930][ T983] ip6gretap0 (unregistering): left promiscuous mode [ 1085.764632][ T983] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1085.793254][ T983] batman_adv: batadv0: Removing interface: gretap2 [ 1085.841783][ T983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.853603][ T983] bond0 (unregistering): Released all slaves [ 1085.873726][ T983] bond1 (unregistering): Released all slaves [ 1085.894467][ T983] bond2 (unregistering): Released all slaves [ 1085.913781][ T983] bond3 (unregistering): Released all slaves [ 1085.935258][ T983] bond4 (unregistering): Released all slaves [ 1085.956252][ T983] bond5 (unregistering): (slave dummy0): Releasing active interface [ 1085.972919][ T983] bond5 (unregistering): Released all slaves [ 1085.992707][ T983] bond6 (unregistering): Released all slaves [ 1086.012387][ T983] bond7 (unregistering): Released all slaves [ 1086.036780][ T5137] vlan3: entered allmulticast mode [ 1086.042316][ T5137] bond4: entered allmulticast mode [ 1086.054794][ T5136] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1086.367552][ T983] tipc: Left network mode [ 1086.386136][ T5159] syzkaller0: entered promiscuous mode [ 1086.394053][ T5159] syzkaller0: entered allmulticast mode [ 1086.401106][ T983] IPVS: stopping master sync thread 21306 ... [ 1086.466131][ T5161] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1086.734934][ T5173] netlink: 11 bytes leftover after parsing attributes in process `syz.2.9477'. [ 1086.768003][ T5165] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9475'. [ 1086.786683][ T5173] FAULT_INJECTION: forcing a failure. [ 1086.786683][ T5173] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.805673][ T5173] CPU: 0 UID: 0 PID: 5173 Comm: syz.2.9477 Not tainted syzkaller #0 PREEMPT(full) [ 1086.805699][ T5173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1086.805711][ T5173] Call Trace: [ 1086.805719][ T5173] [ 1086.805728][ T5173] dump_stack_lvl+0xe8/0x150 [ 1086.805764][ T5173] should_fail_ex+0x40c/0x560 [ 1086.805791][ T5173] should_failslab+0xa8/0x100 [ 1086.805822][ T5173] __kmalloc_cache_noprof+0xa8/0x660 [ 1086.805848][ T5173] ? nsim_fib_event_nb+0x185/0x11d0 [ 1086.805986][ T5173] ? nsim_fib_event_nb+0x185/0x11d0 [ 1086.806023][ T5173] nsim_fib_event_nb+0x185/0x11d0 [ 1086.806067][ T5173] ? atomic_notifier_call_chain+0x26/0x180 [ 1086.806103][ T5173] notifier_call_chain+0x1a5/0x3d0 [ 1086.806133][ T5173] ? atomic_notifier_call_chain+0x26/0x180 [ 1086.806162][ T5173] atomic_notifier_call_chain+0xda/0x180 [ 1086.806192][ T5173] call_fib_notifiers+0x31/0x60 [ 1086.806268][ T5173] call_fib_entry_notifiers+0x158/0x200 [ 1086.806294][ T5173] ? __pfx_call_fib_entry_notifiers+0x10/0x10 [ 1086.806324][ T5173] ? lockdep_rtnl_is_held+0x26/0x40 [ 1086.806343][ T5173] ? fib_find_node+0x2b0/0x2f0 [ 1086.806368][ T5173] fib_table_delete+0xa47/0xd40 [ 1086.806414][ T5173] inet_rtm_delroute+0x272/0x330 [ 1086.806439][ T5173] ? __local_bh_enable_ip+0xd0/0x130 [ 1086.806465][ T5173] ? __pfx_inet_rtm_delroute+0x10/0x10 [ 1086.806514][ T5173] ? __pfx_inet_rtm_delroute+0x10/0x10 [ 1086.806540][ T5173] rtnetlink_rcv_msg+0x802/0xc00 [ 1086.806571][ T5173] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1086.806597][ T5173] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1086.806624][ T5173] ? ref_tracker_free+0x689/0x830 [ 1086.806654][ T5173] ? __pfx_ref_tracker_free+0x10/0x10 [ 1086.806689][ T5173] netlink_rcv_skb+0x226/0x4a0 [ 1086.806720][ T5173] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1086.806749][ T5173] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1086.806793][ T5173] ? netlink_deliver_tap+0x2e/0x1b0 [ 1086.806822][ T5173] ? netlink_deliver_tap+0x2e/0x1b0 [ 1086.806857][ T5173] netlink_unicast+0x7bb/0x940 [ 1086.806916][ T5173] netlink_sendmsg+0x813/0xb40 [ 1086.806946][ T5173] ? __fget_files+0x2a/0x420 [ 1086.806982][ T5173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1086.807024][ T5173] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1086.807050][ T5173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1086.807079][ T5173] sock_sendmsg_nosec+0x13a/0x180 [ 1086.807106][ T5173] __sys_sendto+0x408/0x5a0 [ 1086.807133][ T5173] ? ksys_write+0x1e6/0x270 [ 1086.807166][ T5173] ? __pfx___sys_sendto+0x10/0x10 [ 1086.807191][ T5173] ? __mutex_unlock_slowpath+0x731/0x900 [ 1086.807251][ T5173] ? __pfx_ksys_write+0x10/0x10 [ 1086.807286][ T5173] __x64_sys_sendto+0xde/0x100 [ 1086.807314][ T5173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.807338][ T5173] do_syscall_64+0x174/0x580 [ 1086.807364][ T5173] ? trace_irq_disable+0x3b/0x140 [ 1086.807389][ T5173] ? clear_bhb_loop+0x40/0x90 [ 1086.807414][ T5173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.807434][ T5173] RIP: 0033:0x7f393c39de59 [ 1086.807454][ T5173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.807471][ T5173] RSP: 002b:00007f393d25a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1086.807493][ T5173] RAX: ffffffffffffffda RBX: 00007f393c625fa0 RCX: 00007f393c39de59 [ 1086.807509][ T5173] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000004 [ 1086.807522][ T5173] RBP: 00007f393d25a090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 1086.807536][ T5173] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1086.807548][ T5173] R13: 00007f393c626038 R14: 00007f393c625fa0 R15: 00007fff0c97e5c8 [ 1086.807582][ T5173] [ 1087.446153][ T5167] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.482816][ T5196] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 1087.550210][ T5200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9484'. [ 1087.637690][ T5191] xfrm0: entered allmulticast mode [ 1087.644365][ T5191] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1087.926716][ T5209] FAULT_INJECTION: forcing a failure. [ 1087.926716][ T5209] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.948067][ T5209] CPU: 0 UID: 0 PID: 5209 Comm: syz.4.9488 Not tainted syzkaller #0 PREEMPT(full) [ 1087.948096][ T5209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1087.948110][ T5209] Call Trace: [ 1087.948120][ T5209] [ 1087.948129][ T5209] dump_stack_lvl+0xe8/0x150 [ 1087.948168][ T5209] should_fail_ex+0x40c/0x560 [ 1087.948202][ T5209] should_failslab+0xa8/0x100 [ 1087.948237][ T5209] __kmalloc_cache_noprof+0xa8/0x660 [ 1087.948264][ T5209] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1087.948290][ T5209] ? flow_indr_dev_setup_offload+0x252/0x670 [ 1087.948320][ T5209] ? flow_indr_dev_setup_offload+0x252/0x670 [ 1087.948359][ T5209] flow_indr_dev_setup_offload+0x252/0x670 [ 1087.948392][ T5209] ? __pfx_tc_block_indr_cleanup+0x10/0x10 [ 1087.948420][ T5209] tcf_block_offload_cmd+0x288/0x3b0 [ 1087.948456][ T5209] ? __pfx_tcf_block_offload_cmd+0x10/0x10 [ 1087.948488][ T5209] ? __pfx_down_write+0x10/0x10 [ 1087.948519][ T5209] ? __kmalloc_cache_noprof+0x150/0x660 [ 1087.948546][ T5209] ? tcf_block_get_ext+0x6e7/0x17d0 [ 1087.948575][ T5209] ? tcf_block_get_ext+0x6e7/0x17d0 [ 1087.948615][ T5209] tcf_block_get_ext+0xfe0/0x17d0 [ 1087.948658][ T5209] tcf_block_get+0x67/0xa0 [ 1087.948689][ T5209] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 1087.948727][ T5209] fq_codel_init+0x393/0x960 [ 1087.948857][ T5209] ? lockdep_rtnl_is_held+0x26/0x40 [ 1087.948883][ T5209] ? __pfx_fq_codel_init+0x10/0x10 [ 1087.948915][ T5209] qdisc_create+0x7b5/0xf00 [ 1087.948952][ T5209] tc_modify_qdisc+0x17af/0x2390 [ 1087.948994][ T5209] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1087.949055][ T5209] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1087.949082][ T5209] rtnetlink_rcv_msg+0x7b9/0xc00 [ 1087.949110][ T5209] ? netlink_sendmsg+0x5d4/0xb40 [ 1087.949148][ T5209] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1087.949177][ T5209] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1087.949208][ T5209] ? __lock_acquire+0x683/0x2cf0 [ 1087.949252][ T5209] netlink_rcv_skb+0x226/0x4a0 [ 1087.949287][ T5209] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1087.949319][ T5209] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1087.949368][ T5209] ? netlink_deliver_tap+0x2e/0x1b0 [ 1087.949401][ T5209] ? netlink_deliver_tap+0x2e/0x1b0 [ 1087.949442][ T5209] netlink_unicast+0x7bb/0x940 [ 1087.949488][ T5209] netlink_sendmsg+0x813/0xb40 [ 1087.949539][ T5209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.949580][ T5209] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1087.949611][ T5209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.949644][ T5209] sock_sendmsg_nosec+0x13a/0x180 [ 1087.949675][ T5209] ____sys_sendmsg+0x54e/0x850 [ 1087.949727][ T5209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1087.949772][ T5209] ? import_iovec+0x73/0xa0 [ 1087.949816][ T5209] ___sys_sendmsg+0x2a5/0x360 [ 1087.949847][ T5209] ? __lock_acquire+0x683/0x2cf0 [ 1087.949893][ T5209] ? __pfx____sys_sendmsg+0x10/0x10 [ 1087.949981][ T5209] ? __fget_files+0x2a/0x420 [ 1087.950009][ T5209] ? __fget_files+0x3a2/0x420 [ 1087.950050][ T5209] __x64_sys_sendmsg+0x1b1/0x290 [ 1087.950097][ T5209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1087.950147][ T5209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.950170][ T5209] do_syscall_64+0x174/0x580 [ 1087.950195][ T5209] ? trace_irq_disable+0x3b/0x140 [ 1087.950221][ T5209] ? clear_bhb_loop+0x40/0x90 [ 1087.950246][ T5209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.950267][ T5209] RIP: 0033:0x7fab8939de59 [ 1087.950287][ T5209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.950304][ T5209] RSP: 002b:00007fab875f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1087.950346][ T5209] RAX: ffffffffffffffda RBX: 00007fab89625fa0 RCX: 00007fab8939de59 [ 1087.950362][ T5209] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 1087.950376][ T5209] RBP: 00007fab875f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.950390][ T5209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.950404][ T5209] R13: 00007fab89626038 R14: 00007fab89625fa0 R15: 00007fff24e8a2c8 [ 1087.950442][ T5209] [ 1088.696986][ T5223] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9493'. [ 1088.727142][ T5167] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.829479][ T5211] lo speed is unknown, defaulting to 1000 [ 1088.842696][ T5217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9490'. [ 1088.853428][ T983] hsr_slave_0: left promiscuous mode [ 1088.868358][ T983] hsr_slave_1: left promiscuous mode [ 1088.904341][ T983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1088.933394][ T983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.955741][ T983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1088.988310][ T983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.052465][ T983] veth1_macvtap: left promiscuous mode [ 1089.068295][ T983] veth0_macvtap: left promiscuous mode [ 1089.085324][ T983] veth1_vlan: left promiscuous mode [ 1089.111881][ T983] veth0_vlan: left promiscuous mode [ 1090.092119][ T983] team0 (unregistering): Port device team_slave_1 removed [ 1090.116264][ T983] team0 (unregistering): Port device team_slave_0 removed [ 1090.234836][ T5234] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1090.254301][ T5234] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1090.264469][ T5234] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1090.339592][ T5167] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.364606][ T5237] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1090.376090][ T5211] lo speed is unknown, defaulting to 1000 [ 1090.597587][ T5167] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.611294][ T5286] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9500'. [ 1090.879776][ T5301] syzkaller0: entered promiscuous mode [ 1090.905789][ T5301] syzkaller0: entered allmulticast mode [ 1091.101282][ T5308] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 1091.246778][ T5312] netlink: 'syz.2.9505': attribute type 1 has an invalid length. [ 1091.275154][ T983] IPVS: stop unused estimator thread 0... [ 1091.507407][ T5312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1091.608428][ T5312] netlink: 'syz.2.9505': attribute type 10 has an invalid length. [ 1091.637479][ T5312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9505'. [ 1091.794659][ T5314] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1091.820158][ T5318] netlink: 428 bytes leftover after parsing attributes in process `syz.2.9505'. [ 1091.866672][ T5333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9507'. [ 1091.908815][ T5319] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 1091.941316][ T48] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1091.995582][ T7176] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.009990][ T5312] dummy0: entered promiscuous mode [ 1092.027331][ T5312] bond1: (slave dummy0): Removing an active aggregator [ 1092.046618][ T5312] bond1: (slave dummy0): Releasing backup interface [ 1092.162553][ T7177] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.266084][ T7177] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.449525][ T14] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.791174][ T5376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9513'. [ 1092.805997][ T5376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9513'. [ 1092.892924][ T5380] syzkaller0: entered promiscuous mode [ 1092.906366][ T5380] syzkaller0: entered allmulticast mode [ 1093.055483][ T5393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9520'. [ 1093.079646][ T5394] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9519'. [ 1093.108328][ T5393] syzkaller0: entered promiscuous mode [ 1093.123931][ T5393] syzkaller0: entered allmulticast mode [ 1093.289497][ T5397] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 1093.317115][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9521'. [ 1093.337848][ T5408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1093.483506][ T5401] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.517024][ T5401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.632295][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1093.640447][ T5401] veth1_to_batadv: left promiscuous mode [ 1093.650913][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1093.665703][ T5401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1093.676618][ T5401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1093.730027][ T5401] veth1_vlan: left promiscuous mode [ 1093.744663][ T5401] veth0_vlan: left promiscuous mode [ 1093.764969][ T5401] veth0_vlan: entered promiscuous mode [ 1093.789490][ T5401] veth1_vlan: entered promiscuous mode [ 1093.840185][ T5401] veth1_macvtap: left promiscuous mode [ 1093.871901][ T5401] veth0_macvtap: left promiscuous mode [ 1093.914440][ T5401] veth0_macvtap: entered promiscuous mode [ 1093.953526][ T5401] veth1_macvtap: entered promiscuous mode [ 1094.059947][ T5401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1094.095572][ T5437] __nla_validate_parse: 1 callbacks suppressed [ 1094.095591][ T5437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9525'. [ 1094.124328][ T5401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1094.154662][ T5401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1094.213326][ T5401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1094.271308][ T5401] veth1_to_batadv: entered promiscuous mode [ 1094.307223][ T5401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1094.398321][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.405567][ T12] bridge0: port 1(bridge_slave_0) entered listening state [ 1094.456712][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.464088][ T12] bridge0: port 2(bridge_slave_1) entered listening state [ 1094.479883][ T5455] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9529'. [ 1094.504236][ T5455] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9529'. [ 1094.784193][ T7177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.818212][ T7177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.842023][ T7177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.877809][ T7177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.363792][ T5494] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9536'. [ 1095.703200][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1095.717391][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1095.725580][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1095.737440][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1095.752561][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1095.805413][ T5507] netlink: 11 bytes leftover after parsing attributes in process `syz.0.9538'. [ 1095.818726][ T12] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1095.849686][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1095.885821][ T12] bond1: active interface up! [ 1095.914490][ T7177] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1095.923425][ T5510] netlink: 'syz.4.9539': attribute type 1 has an invalid length. [ 1096.334476][ T5531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9542'. [ 1096.470316][ T5510] bond3: (slave gretap1): making interface the new active one [ 1096.518316][ T5510] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1097.264482][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9545'. [ 1097.312890][ T5564] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1097.582231][ T5504] lo speed is unknown, defaulting to 1000 [ 1097.841610][ T50] Bluetooth: hci4: command tx timeout [ 1098.354435][ T5504] lo speed is unknown, defaulting to 1000 [ 1098.659459][ T5618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9555'. [ 1099.057152][ T5639] netlink: 'syz.0.9557': attribute type 1 has an invalid length. [ 1099.249112][ T5639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1099.397640][ T5643] vlan4: entered allmulticast mode [ 1099.442319][ T5643] bond5: entered allmulticast mode [ 1099.690932][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1099.923162][ T50] Bluetooth: hci4: command tx timeout [ 1099.935910][ T5504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.964279][ T5504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.979206][ T5504] bridge_slave_0: entered allmulticast mode [ 1099.992759][ T5504] bridge_slave_0: entered promiscuous mode [ 1100.048671][ T5504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.068137][ T5504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.087517][ T5504] bridge_slave_1: entered allmulticast mode [ 1100.102020][ T5504] bridge_slave_1: entered promiscuous mode [ 1100.225040][ T5504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.263781][ T5504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.496247][ T5504] team0: Port device team_slave_0 added [ 1100.652973][ T5504] team0: Port device team_slave_1 added [ 1100.686599][ T5716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9568'. [ 1100.905627][ T5504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.924171][ T5504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.994830][ T5504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.059237][ T5504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.079218][ T5504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.157645][ T5504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.517792][ T5504] hsr_slave_0: entered promiscuous mode [ 1101.545890][ T5504] hsr_slave_1: entered promiscuous mode [ 1101.560081][ T5504] debugfs: 'hsr0' already exists in 'hsr' [ 1101.577746][ T5504] Cannot create hsr debugfs directory [ 1101.596830][ T5761] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1101.828339][ T5774] lo speed is unknown, defaulting to 1000 [ 1102.001684][ T50] Bluetooth: hci4: command tx timeout [ 1102.266454][ T5504] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.278188][ T5504] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.382461][ T5774] lo speed is unknown, defaulting to 1000 [ 1102.532772][ T5504] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.580238][ T5504] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.729189][ T5798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9582'. [ 1102.831008][ T5805] xt_hashlimit: size too large, truncated to 1048576 [ 1102.906990][ T5504] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.930652][ T5504] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.147095][ T5504] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.162580][ T5504] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.219802][ T5816] vlan0: entered promiscuous mode [ 1103.329927][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9585'. [ 1103.730119][ T5838] netlink: 'syz.2.9588': attribute type 1 has an invalid length. [ 1103.813432][ T5838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1103.822459][ T5816] syzkaller1: entered promiscuous mode [ 1103.829246][ T5816] syzkaller1: entered allmulticast mode [ 1103.910448][ T5844] netlink: 'syz.2.9588': attribute type 10 has an invalid length. [ 1103.923926][ T5844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9588'. [ 1103.946790][ T5841] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 1103.967206][ T5838] dummy0: left promiscuous mode [ 1103.990465][ T5838] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 1104.051236][ T3274] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1104.082784][ T50] Bluetooth: hci4: command tx timeout [ 1104.103446][ T5844] dummy0: entered promiscuous mode [ 1104.118495][ T5844] bond2: (slave dummy0): Removing an active aggregator [ 1104.137248][ T5844] bond2: (slave dummy0): Releasing backup interface [ 1104.216961][ T5504] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1104.236943][ T5504] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1104.253701][ T5504] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1104.278947][ T5504] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1104.308391][ T5504] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1104.362196][ T5504] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1104.378654][ T5504] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1104.405831][ T5856] xt_hashlimit: size too large, truncated to 1048576 [ 1104.416887][ T5504] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1104.599937][ T5868] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9593'. [ 1104.694570][ T5504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.740221][ T5504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.774812][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.782117][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.834577][ T5257] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.841830][ T5257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.915728][ T7634] IPVS: starting estimator thread 0... [ 1105.012504][ T5876] IPVS: using max 32 ests per chain, 76800 per kthread [ 1105.128659][ T5883] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9597'. [ 1105.229425][ T5885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9596'. [ 1105.488832][ T5905] xt_hashlimit: size too large, truncated to 1048576 [ 1105.617390][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9601'. [ 1105.631371][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9601'. [ 1105.825785][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9603'. [ 1106.394271][ T5944] netlink: 'syz.4.9606': attribute type 3 has an invalid length. [ 1106.519461][ T5504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1106.939209][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.946492][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.223466][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1107.242666][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1107.520725][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1107.817603][ T5948] vlan2: left allmulticast mode [ 1107.828690][ T5948] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 1107.880153][ T5948] vlan3: left allmulticast mode [ 1107.891171][ T5948] bond1: left allmulticast mode [ 1107.900622][ T5948] geneve2: left allmulticast mode [ 1108.010360][ T7177] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.034467][ T7177] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.086850][ T7177] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.099435][ T7177] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.173311][ T5956] syzkaller0: entered promiscuous mode [ 1108.183915][ T5956] syzkaller0: entered allmulticast mode [ 1108.227789][ T5961] netlink: 'syz.4.9613': attribute type 1 has an invalid length. [ 1108.258774][ T5965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9615'. [ 1108.441661][ T5504] veth0_vlan: entered promiscuous mode [ 1108.486018][ T5504] veth1_vlan: entered promiscuous mode [ 1108.643859][ T5504] veth0_macvtap: entered promiscuous mode [ 1108.656975][ T5980] xt_hashlimit: size too large, truncated to 1048576 [ 1108.673639][ T5504] veth1_macvtap: entered promiscuous mode [ 1108.712154][ T5504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.765496][ T5504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.780466][ T5989] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9623'. [ 1108.819825][T10045] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.858817][T10045] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.895757][T10045] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.941011][T10045] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.977978][ T5995] netlink: 'syz.0.9626': attribute type 1 has an invalid length. [ 1109.164275][ T5995] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1109.235801][ T5998] vlan5: entered allmulticast mode [ 1109.241978][ T5998] bond6: entered allmulticast mode [ 1109.265447][ T5997] syzkaller0: entered promiscuous mode [ 1109.279705][ T5997] syzkaller0: entered allmulticast mode [ 1109.308402][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9628'. [ 1109.374578][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9629'. [ 1109.384036][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9629'. [ 1109.592332][ T983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.617045][ T983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.717180][ T3274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.726349][ T3274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.771030][ T6022] netlink: 'syz.0.9633': attribute type 1 has an invalid length. [ 1109.786452][ T6022] netlink: 'syz.0.9633': attribute type 2 has an invalid length. [ 1110.500436][ T6041] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9638'. [ 1110.963703][ T6056] syzkaller0: entered promiscuous mode [ 1110.989895][ T6056] syzkaller0: entered allmulticast mode [ 1111.134532][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9647'. [ 1111.239890][ T6073] netlink: 'syz.1.9648': attribute type 1 has an invalid length. [ 1111.745647][ T6076] bond1: (slave gretap1): making interface the new active one [ 1111.766042][ T6076] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1112.006314][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1112.015169][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1112.041531][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9651'. [ 1112.086431][ T6088] netlink: 260 bytes leftover after parsing attributes in process `syz.2.9652'. [ 1112.198858][ T6086] bond2: option min_links: invalid value (18446744073709551612) [ 1112.207480][ T6086] bond2: option min_links: allowed values 0 - 2147483647 [ 1112.236229][ T6086] bond2 (unregistering): Released all slaves [ 1112.529280][ T6103] vlan6: entered promiscuous mode [ 1112.678340][ T6108] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9657'. [ 1112.914988][ T6118] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9662'. [ 1113.235992][ T6134] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9670'. [ 1113.297973][ T6138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9671'. [ 1113.392114][ T6143] : renamed from dummy0 [ 1113.638168][ T6150] IPVS: set_ctl: invalid protocol: 8 172.20.20.42:20002 [ 1113.673327][ T6150] IPVS: length: 92 != 24 [ 1113.751420][T17715] IPVS: starting estimator thread 0... [ 1113.846251][ T6165] netlink: 'syz.4.9679': attribute type 3 has an invalid length. [ 1113.860659][ T6161] IPVS: using max 31 ests per chain, 74400 per kthread [ 1113.876853][ T6167] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9680'. [ 1113.933052][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.940935][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.142611][ T6169] lo speed is unknown, defaulting to 1000 [ 1114.231222][ T6172] netlink: 'syz.1.9681': attribute type 7 has an invalid length. [ 1114.427436][ T6192] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 1114.868557][ T6169] lo speed is unknown, defaulting to 1000 [ 1114.931921][ T6207] xt_connbytes: Forcing CT accounting to be enabled [ 1115.095736][ T6210] FAULT_INJECTION: forcing a failure. [ 1115.095736][ T6210] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.135694][ T6210] CPU: 1 UID: 0 PID: 6210 Comm: syz.0.9693 Not tainted syzkaller #0 PREEMPT(full) [ 1115.135726][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1115.135739][ T6210] Call Trace: [ 1115.135748][ T6210] [ 1115.135759][ T6210] dump_stack_lvl+0xe8/0x150 [ 1115.135798][ T6210] should_fail_ex+0x40c/0x560 [ 1115.135829][ T6210] should_failslab+0xa8/0x100 [ 1115.135864][ T6210] __kmalloc_noprof+0xfe/0x720 [ 1115.135903][ T6210] ? bpf_test_init+0x9f/0x150 [ 1115.135935][ T6210] ? bpf_test_init+0x9f/0x150 [ 1115.135974][ T6210] bpf_test_init+0x9f/0x150 [ 1115.136010][ T6210] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 1115.136060][ T6210] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1115.136100][ T6210] ? __fget_files+0x2a/0x420 [ 1115.136134][ T6210] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1115.136169][ T6210] bpf_prog_test_run+0x2c5/0x340 [ 1115.136204][ T6210] __sys_bpf+0xa22/0xd90 [ 1115.136241][ T6210] ? __pfx___sys_bpf+0x10/0x10 [ 1115.136281][ T6210] ? __fget_files+0x2a/0x420 [ 1115.136329][ T6210] ? ksys_write+0x242/0x270 [ 1115.136364][ T6210] ? __pfx_ksys_write+0x10/0x10 [ 1115.136403][ T6210] __x64_sys_bpf+0xba/0xd0 [ 1115.136429][ T6210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.136453][ T6210] do_syscall_64+0x174/0x580 [ 1115.136482][ T6210] ? trace_irq_disable+0x3b/0x140 [ 1115.136509][ T6210] ? clear_bhb_loop+0x40/0x90 [ 1115.136537][ T6210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.136559][ T6210] RIP: 0033:0x7fdef039de59 [ 1115.136580][ T6210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.136599][ T6210] RSP: 002b:00007fdef1321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1115.136622][ T6210] RAX: ffffffffffffffda RBX: 00007fdef0625fa0 RCX: 00007fdef039de59 [ 1115.136639][ T6210] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1115.136653][ T6210] RBP: 00007fdef1321090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.136667][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.136680][ T6210] R13: 00007fdef0626038 R14: 00007fdef0625fa0 R15: 00007ffc8c42c438 [ 1115.136714][ T6210] [ 1115.156864][ T6204] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 1115.402898][ T6204] netlink: 'syz.2.9691': attribute type 1 has an invalid length. [ 1115.413552][ T6204] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9691'. [ 1115.571116][ T6223] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9698'. [ 1115.843757][ T1318] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1116.035760][ T6236] xt_hashlimit: size too large, truncated to 1048576 [ 1116.160173][ T6244] netlink: 'syz.4.9704': attribute type 9 has an invalid length. [ 1116.467813][ T6253] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 1116.619868][ T6255] netlink: 'syz.3.9706': attribute type 1 has an invalid length. [ 1116.662438][ T6255] vlan2: entered allmulticast mode [ 1116.674694][ T6255] batadv_slave_0: entered allmulticast mode [ 1117.135347][ T6272] __nla_validate_parse: 1 callbacks suppressed [ 1117.135368][ T6272] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9712'. [ 1117.477817][ T6287] netlink: 204 bytes leftover after parsing attributes in process `syz.0.9718'. [ 1117.490014][ T6287] netlink: 232 bytes leftover after parsing attributes in process `syz.0.9718'. [ 1117.619393][ T6293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9719'. [ 1117.781357][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9720'. [ 1118.378256][ T6317] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 1118.399304][ T6320] syzkaller0: entered promiscuous mode [ 1118.413305][ T6320] syzkaller0: entered allmulticast mode [ 1118.557301][ T6326] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9730'. [ 1118.756435][ T6330] syzkaller1: entered promiscuous mode [ 1118.765443][ T6330] syzkaller1: entered allmulticast mode [ 1118.820145][ T6332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1118.831213][ T8243] IPVS: starting estimator thread 0... [ 1118.932181][ T6336] IPVS: using max 25 ests per chain, 60000 per kthread [ 1118.959658][ T6340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1119.133983][ T6344] FAULT_INJECTION: forcing a failure. [ 1119.133983][ T6344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.155666][ T6344] CPU: 0 UID: 0 PID: 6344 Comm: syz.4.9738 Not tainted syzkaller #0 PREEMPT(full) [ 1119.155696][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1119.155710][ T6344] Call Trace: [ 1119.155719][ T6344] [ 1119.155729][ T6344] dump_stack_lvl+0xe8/0x150 [ 1119.155769][ T6344] should_fail_ex+0x40c/0x560 [ 1119.155801][ T6344] _copy_to_user+0x31/0xb0 [ 1119.155836][ T6344] bpf_test_finish+0x4ea/0x690 [ 1119.155881][ T6344] ? __pfx_bpf_test_finish+0x10/0x10 [ 1119.155921][ T6344] ? _copy_from_user+0x94/0xb0 [ 1119.155952][ T6344] ? bpf_test_init+0x113/0x150 [ 1119.155994][ T6344] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 1119.156048][ T6344] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1119.156089][ T6344] ? __fget_files+0x2a/0x420 [ 1119.156123][ T6344] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1119.156159][ T6344] bpf_prog_test_run+0x2c5/0x340 [ 1119.156194][ T6344] __sys_bpf+0xa22/0xd90 [ 1119.156231][ T6344] ? __pfx___sys_bpf+0x10/0x10 [ 1119.156272][ T6344] ? __fget_files+0x2a/0x420 [ 1119.156320][ T6344] ? ksys_write+0x242/0x270 [ 1119.156357][ T6344] ? __pfx_ksys_write+0x10/0x10 [ 1119.156397][ T6344] __x64_sys_bpf+0xba/0xd0 [ 1119.156424][ T6344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.156450][ T6344] do_syscall_64+0x174/0x580 [ 1119.156480][ T6344] ? trace_irq_disable+0x3b/0x140 [ 1119.156508][ T6344] ? clear_bhb_loop+0x40/0x90 [ 1119.156536][ T6344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.156560][ T6344] RIP: 0033:0x7fab8939de59 [ 1119.156581][ T6344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.156601][ T6344] RSP: 002b:00007fab875f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1119.156629][ T6344] RAX: ffffffffffffffda RBX: 00007fab89625fa0 RCX: 00007fab8939de59 [ 1119.156646][ T6344] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1119.156662][ T6344] RBP: 00007fab875f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.156676][ T6344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.156690][ T6344] R13: 00007fab89626038 R14: 00007fab89625fa0 R15: 00007fff24e8a2c8 [ 1119.156728][ T6344] [ 1119.406446][ T6348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1119.689490][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.746345][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.760674][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1120.247953][ T6346] vlan2: left allmulticast mode [ 1120.256525][ T6346] batadv_slave_0: left allmulticast mode [ 1120.399772][ T6364] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1120.417367][ T6365] team0: Device xfrm0 is of different type [ 1120.439121][ T6361] tipc: Started in network mode [ 1120.460840][ T6361] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1120.471836][ T6375] netlink: 'syz.3.9746': attribute type 1 has an invalid length. [ 1120.484570][ T6361] tipc: Enabled bearer , priority 0 [ 1120.491048][ T6375] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9746'. [ 1120.502788][ T14] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.596744][ T14] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.616460][ T14] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.673901][ T6375] ip6gre1: entered promiscuous mode [ 1120.681106][ T6375] ip6gre1: entered allmulticast mode [ 1120.699937][ T14] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.729408][ T983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1120.750408][ T6382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9747'. [ 1120.761476][T17709] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1120.769311][ T983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1120.800225][ T6376] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9746'. [ 1120.800864][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1121.079612][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9750'. [ 1121.235344][ T6401] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1121.264667][ T6403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1121.321227][T17709] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1121.361203][T17715] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1121.645491][ T6417] syz_tun: entered allmulticast mode [ 1121.654921][ T8243] tipc: Node number set to 11578026 [ 1121.840900][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1122.095427][ T6432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1122.149014][ T6436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.162287][ T6450] xt_hashlimit: size too large, truncated to 1048576 [ 1122.198414][ T6436] bond2: (slave bond0): Enslaving as an active interface with an up link [ 1122.410709][ T6455] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1122.713580][ T6464] __nla_validate_parse: 2 callbacks suppressed [ 1122.713600][ T6464] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9767'. [ 1122.880921][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1122.903028][ T6472] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9770'. [ 1123.191234][ T6476] dvmrp8: entered allmulticast mode [ 1123.381999][ T6487] netlink: 'syz.3.9773': attribute type 1 has an invalid length. [ 1123.409871][ T6491] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9777'. [ 1123.428248][ T6487] netlink: 'syz.3.9773': attribute type 2 has an invalid length. [ 1123.524494][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1123.878658][ T6495] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1123.903703][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9776'. [ 1123.919499][ T6496] tipc: Enabled bearer , priority 0 [ 1123.926259][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1124.404985][ T6523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9783'. [ 1124.472237][ T6523] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 1124.572828][ T6529] netlink: 'syz.1.9785': attribute type 6 has an invalid length. [ 1124.589393][ T6529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9785'. [ 1124.602080][ T6530] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9784'. [ 1124.720897][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1124.961588][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1125.704580][ T6551] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9793'. [ 1126.000721][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1127.040770][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1127.194985][ T6584] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9797'. [ 1127.864527][ T6604] netlink: 'syz.0.9803': attribute type 1 has an invalid length. [ 1127.893275][ T6604] netlink: 'syz.0.9803': attribute type 2 has an invalid length. [ 1128.080633][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1128.105976][ T6616] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9808'. [ 1129.116705][ T6636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1129.120783][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1129.480968][ T6649] netlink: 'syz.0.9814': attribute type 1 has an invalid length. [ 1129.493468][ T6650] netlink: 'syz.2.9812': attribute type 1 has an invalid length. [ 1129.515711][ T6648] xt_connbytes: Forcing CT accounting to be enabled [ 1129.594916][ T6649] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1129.702450][ T6650] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1129.848276][ T6666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9818'. [ 1129.866031][ T6655] vlan2: entered allmulticast mode [ 1129.890203][ T6654] netlink: 'syz.0.9814': attribute type 21 has an invalid length. [ 1129.916061][ T6655] bond3: entered allmulticast mode [ 1129.944880][ T6656] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1129.969002][ T6654] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9814'. [ 1130.152143][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9820'. [ 1130.161386][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1130.285578][ T6671] netlink: 748 bytes leftover after parsing attributes in process `syz.4.9819'. [ 1130.463557][ T6685] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1130.499691][ T6685] FAULT_INJECTION: forcing a failure. [ 1130.499691][ T6685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1130.552103][ T6685] CPU: 0 UID: 0 PID: 6685 Comm: syz.1.9824 Not tainted syzkaller #0 PREEMPT(full) [ 1130.552133][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1130.552146][ T6685] Call Trace: [ 1130.552155][ T6685] [ 1130.552166][ T6685] dump_stack_lvl+0xe8/0x150 [ 1130.552206][ T6685] should_fail_ex+0x40c/0x560 [ 1130.552237][ T6685] _copy_to_user+0x31/0xb0 [ 1130.552281][ T6685] simple_read_from_buffer+0xe1/0x170 [ 1130.552318][ T6685] proc_fail_nth_read+0x1bb/0x230 [ 1130.552352][ T6685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1130.552385][ T6685] ? rw_verify_area+0x24a/0x4c0 [ 1130.552420][ T6685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1130.552448][ T6685] vfs_read+0x213/0xa80 [ 1130.552486][ T6685] ? __pfx___mutex_lock+0x10/0x10 [ 1130.552518][ T6685] ? __pfx_vfs_read+0x10/0x10 [ 1130.552552][ T6685] ? __fget_files+0x2a/0x420 [ 1130.552585][ T6685] ? __fget_files+0x3a2/0x420 [ 1130.552612][ T6685] ? __fget_files+0x2a/0x420 [ 1130.552650][ T6685] ksys_read+0x150/0x270 [ 1130.552685][ T6685] ? __pfx_ksys_read+0x10/0x10 [ 1130.552726][ T6685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.552751][ T6685] do_syscall_64+0x174/0x580 [ 1130.552793][ T6685] ? clear_bhb_loop+0x40/0x90 [ 1130.552817][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.552834][ T6685] RIP: 0033:0x7f6de7d5e68e [ 1130.552850][ T6685] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1130.552864][ T6685] RSP: 002b:00007f6de5ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1130.552882][ T6685] RAX: ffffffffffffffda RBX: 00007f6de5ff66c0 RCX: 00007f6de7d5e68e [ 1130.552897][ T6685] RDX: 000000000000000f RSI: 00007f6de5ff60a0 RDI: 0000000000000004 [ 1130.552910][ T6685] RBP: 00007f6de5ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.552920][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.552930][ T6685] R13: 00007f6de8026038 R14: 00007f6de8025fa0 R15: 00007ffc3b423a88 [ 1130.552956][ T6685] [ 1130.883696][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9827'. [ 1131.026264][ T6699] netlink: 'syz.1.9828': attribute type 1 has an invalid length. [ 1131.202108][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1131.258978][ T6699] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1131.470202][ T6721] netlink: 'syz.1.9828': attribute type 10 has an invalid length. [ 1131.479127][ T6721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9828'. [ 1131.533470][ T6705] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 1131.597749][ T6720] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9833'. [ 1131.628221][ T6721] : entered promiscuous mode [ 1132.240665][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1132.282379][ T6745] netlink: 'syz.0.9843': attribute type 1 has an invalid length. [ 1132.480890][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1132.609700][ T6745] bond8: (slave gretap1): making interface the new active one [ 1132.618394][ T6745] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 1132.648386][ T6761] netlink: 'syz.1.9844': attribute type 12 has an invalid length. [ 1133.074178][ T6778] xt_SECMARK: invalid mode: 4 [ 1133.224862][ T6779] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1133.280697][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1133.390538][ T6788] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9855'. [ 1133.494209][ T6793] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9859'. [ 1133.544359][ T6796] netlink: 'syz.2.9858': attribute type 1 has an invalid length. [ 1133.563369][ T6798] netlink: 'syz.3.9860': attribute type 7 has an invalid length. [ 1133.587045][ T6798] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9860'. [ 1133.637072][ T6796] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1133.733608][ T6801] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 1133.746967][ T6803] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1133.773224][ T9] IPVS: starting estimator thread 0... [ 1133.787142][ T6796] dummy0: left promiscuous mode [ 1133.834558][ T6796] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 1133.880837][T10043] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1133.892113][ T6801] netlink: 'syz.2.9858': attribute type 10 has an invalid length. [ 1133.892135][ T6801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9858'. [ 1133.892200][ T6801] dummy0: entered promiscuous mode [ 1133.945167][T10043] bond4: (slave dummy0): link status up again after 0 ms [ 1133.960456][ T6810] xt_SECMARK: invalid mode: 4 [ 1133.971533][T10043] bond4: (slave dummy0): link status up again after 0 ms [ 1133.983578][ T6812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9865'. [ 1133.996505][ T6801] bond4: (slave dummy0): Removing an active aggregator [ 1134.012484][ T983] bond4: (slave dummy0): link status up again after 0 ms [ 1134.023073][ T6801] bond4: (slave dummy0): Releasing backup interface [ 1134.037449][ T6805] IPVS: using max 30 ests per chain, 72000 per kthread [ 1134.106336][ T6819] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9866'. [ 1134.119046][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.126296][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.246655][ T6825] netlink: 'syz.2.9869': attribute type 1 has an invalid length. [ 1134.305427][ T6825] bond5: entered promiscuous mode [ 1134.310994][ T6825] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1134.320695][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1134.432612][ T6831] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9873'. [ 1134.626699][ T6845] netlink: 'syz.2.9876': attribute type 3 has an invalid length. [ 1134.703430][ T6848] xt_TCPMSS: Only works on TCP SYN packets [ 1135.044451][ T6863] bridge_slave_1: left allmulticast mode [ 1135.050415][ T6863] bridge_slave_1: left promiscuous mode [ 1135.060407][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.075104][ T6863] bridge_slave_0: left allmulticast mode [ 1135.081239][ T6863] bridge_slave_0: left promiscuous mode [ 1135.088358][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.360697][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1135.756215][ T6884] netlink: 1323 bytes leftover after parsing attributes in process `syz.0.9886'. [ 1135.814548][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9886'. [ 1136.057462][ T6892] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.400639][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1136.442623][ T6892] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.846992][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9890'. [ 1136.992350][ T6902] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1137.070398][ T6911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.107278][ T6911] bond9: (slave bond0): Enslaving as an active interface with an up link [ 1137.262829][ T6892] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.440848][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1138.089857][ T6939] netlink: 'syz.0.9897': attribute type 3 has an invalid length. [ 1138.359944][ T6892] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.480906][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1138.741024][T10043] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.851287][T10043] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.873107][T10045] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.981706][T10045] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.145216][ T6972] netlink: 'syz.1.9910': attribute type 1 has an invalid length. [ 1139.173616][ T6972] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1139.205562][ T6972] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 1139.223966][ T6972] netlink: 'syz.1.9910': attribute type 10 has an invalid length. [ 1139.232048][ T6972] __nla_validate_parse: 2 callbacks suppressed [ 1139.232065][ T6972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9910'. [ 1139.521248][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1139.834144][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9916'. [ 1140.035045][ T7003] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1140.058308][ T6991] bond9: (slave bond0): Releasing backup interface [ 1140.082443][ T6991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.100614][ T6991] bond10: (slave bond0): Enslaving as an active interface with an up link [ 1140.113458][ T7017] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9922'. [ 1140.281639][ T7019] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 1140.567299][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1140.746426][ T7023] tipc: Started in network mode [ 1140.764160][ T7023] tipc: Node identity 62a9676fd6e1, cluster identity 4711 [ 1140.784916][ T7023] tipc: Enabled bearer , priority 0 [ 1140.820248][ T7023] syzkaller0: entered promiscuous mode [ 1140.847016][ T7023] syzkaller0: entered allmulticast mode [ 1141.378379][ T7041] tipc: Resetting bearer [ 1141.415205][ T7022] tipc: Resetting bearer [ 1141.519909][ T7022] tipc: Disabling bearer [ 1141.600569][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1142.381697][ T7074] xt_hashlimit: size too large, truncated to 1048576 [ 1142.640605][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1142.804894][T10045] ip6gretap0 (unregistering): left promiscuous mode [ 1143.313957][T10045] bond6 (unregistering): (slave geneve2): Releasing active interface [ 1143.353812][T10045] bond12 (unregistering): (slave bond0): Releasing backup interface [ 1143.389807][T10045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1143.402196][T10045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.412391][T10045] bond0 (unregistering): Released all slaves [ 1143.428160][T10045] bond1 (unregistering): (slave veth3): Removing an active aggregator [ 1143.436950][T10045] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1143.446538][T10045] bond1 (unregistering): Released all slaves [ 1143.462607][T10045] bond2 (unregistering): (slave veth5): Removing an active aggregator [ 1143.472354][T10045] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1143.496631][T10045] bond2 (unregistering): Released all slaves [ 1143.518034][T10045] bond3 (unregistering): Released all slaves [ 1143.534007][T10045] bond4 (unregistering): Released all slaves [ 1143.549047][T10045] bond5 (unregistering): Released all slaves [ 1143.564262][T10045] bond6 (unregistering): Released all slaves [ 1143.580935][T10045] bond7 (unregistering): Released all slaves [ 1143.612815][T10045] bond8 (unregistering): Released all slaves [ 1143.628278][T10045] bond9 (unregistering): Released all slaves [ 1143.645260][T10045] bond10 (unregistering): Released all slaves [ 1143.675575][T10045] bond11 (unregistering): Released all slaves [ 1143.680880][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1143.696484][T10045] bond12 (unregistering): Released all slaves [ 1144.110354][T10045] tipc: Disabling bearer [ 1144.115613][T10045] tipc: Left network mode [ 1144.252017][ T7099] xfrm0: entered allmulticast mode [ 1144.316427][ T7099] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1144.342825][ T5257] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1144.351890][ T5257] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1144.365514][ T5257] bond4: active interface up! [ 1144.417101][T10043] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1144.514295][T10043] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1144.558737][T10043] bond2: active interface up! [ 1144.583315][ T7106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9944'. [ 1144.720815][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1144.916216][ T7113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.924659][ T7113] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.936998][ T7113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.072793][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.096457][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.106285][ T7113] xfrm0: left allmulticast mode [ 1145.129009][ T7113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1145.139785][ T7113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1145.157664][ T7113] veth1_vlan: left promiscuous mode [ 1145.166885][ T7113] veth0_vlan: left promiscuous mode [ 1145.174693][ T7113] veth0_vlan: entered promiscuous mode [ 1145.183916][ T7113] veth1_vlan: entered promiscuous mode [ 1145.201782][ T7113] veth1_macvtap: left promiscuous mode [ 1145.212464][ T7113] veth0_macvtap: left promiscuous mode [ 1145.219779][ T7113] veth0_macvtap: entered promiscuous mode [ 1145.227664][ T7113] veth1_macvtap: entered promiscuous mode [ 1145.242729][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1145.251869][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1145.263235][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1145.273212][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1145.305260][ T7113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1145.336031][ T7113] ip6gre1: left allmulticast mode [ 1145.343469][ T7113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1145.370819][ T2000] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1145.398358][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.405647][ T7177] bridge0: port 1(bridge_slave_0) entered listening state [ 1145.452137][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.459418][ T7177] bridge0: port 2(bridge_slave_1) entered listening state [ 1145.577894][ T983] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.601979][ T7120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9947'. [ 1145.611493][ T7120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9947'. [ 1145.676067][ T983] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.731664][ T7120] ip6gretap0: entered promiscuous mode [ 1145.755617][ T7120] syz_tun: entered promiscuous mode [ 1145.761010][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1145.807744][ T7120] debugfs: 'hsr1' already exists in 'hsr' [ 1145.830060][ T7120] Cannot create hsr debugfs directory [ 1145.852175][T17715] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1145.946960][ T983] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.966302][ T983] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.117230][ T7130] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9950'. [ 1146.429807][ T7129] Cannot find add_set index 2 as target [ 1146.790149][ T7149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9957'. [ 1146.800707][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1146.873080][ T7149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.145150][ T7163] netlink: 'syz.4.9962': attribute type 1 has an invalid length. [ 1147.237086][ T7163] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1147.267372][ T7166] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 1147.295898][ T7163] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 1147.308706][ T7161] netlink: 'syz.2.9961': attribute type 2 has an invalid length. [ 1147.313287][ T7163] netlink: 'syz.4.9962': attribute type 10 has an invalid length. [ 1147.322050][ T7161] netlink: 'syz.2.9961': attribute type 1 has an invalid length. [ 1147.335021][ T7177] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1147.341662][ T7163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9962'. [ 1147.398360][ T7163] dummy0: entered promiscuous mode [ 1147.407106][ T7163] bond6: (slave dummy0): Removing an active aggregator [ 1147.414817][ T7163] bond6: (slave dummy0): Releasing backup interface [ 1147.546736][ T7168] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1147.773115][ T7175] xt_connbytes: Forcing CT accounting to be enabled [ 1147.841309][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1148.155995][ T7149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.203351][T10045] hsr_slave_0: left promiscuous mode [ 1148.212637][T10045] hsr_slave_1: left promiscuous mode [ 1148.218692][T10045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1148.227032][T10045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1148.244488][T10045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1148.261994][T10045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1148.276981][T10045] veth1_macvtap: left promiscuous mode [ 1148.284019][T10045] veth0_macvtap: left promiscuous mode [ 1148.480790][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1148.624484][T10045] team0 (unregistering): Port device team_slave_1 removed [ 1148.640928][T10045] team0 (unregistering): Port device team_slave_0 removed [ 1148.820136][ T7149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.880580][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1149.187134][ T7194] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9970'. [ 1149.227170][ T7149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.423756][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9971'. [ 1149.920813][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1150.276230][ T7206] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9974'. [ 1150.342354][ T7208] netlink: 'syz.4.9975': attribute type 3 has an invalid length. [ 1150.390980][ T7210] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9976'. [ 1150.403170][ T7210] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9976'. [ 1150.408590][ T7212] xt_TCPMSS: Only works on TCP SYN packets [ 1150.481096][ T7214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1150.488317][ T7214] IPv6: NLM_F_CREATE should be set when creating new route [ 1150.495636][ T7214] IPv6: NLM_F_CREATE should be set when creating new route [ 1150.960747][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1151.675406][T10047] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.694631][T10047] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.710069][T10047] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.727461][T10047] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.000656][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1152.288845][ T7234] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1152.809588][ T7267] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9998'. [ 1153.040721][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1153.255332][ T7284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10005'. [ 1153.264447][ T7284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10005'. [ 1153.410098][ T7292] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10006'. [ 1153.440876][ C1] ------------[ cut here ]------------ [ 1153.446799][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 1153.453543][ C1] WARNING: kernel/workqueue.c:2306 at __queue_work+0xd4a/0x10a0, CPU#1: syz.0.10006/7291 [ 1153.463393][ C1] Modules linked in: [ 1153.467741][ C1] CPU: 1 UID: 0 PID: 7291 Comm: syz.0.10006 Not tainted syzkaller #0 PREEMPT(full) [ 1153.477140][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1153.487257][ C1] RIP: 0010:__queue_work+0xd66/0x10a0 [ 1153.492675][ C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 56 f0 cc 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 c4 ac a6 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 1153.512309][ C1] RSP: 0018:ffffc90000a08bc8 EFLAGS: 00010046 [ 1153.518416][ C1] RAX: 1ffff1100a27194e RBX: dffffc0000000000 RCX: ffff88804523be00 [ 1153.526425][ C1] RDX: ffff888040950170 RSI: ffffffff8ac088a0 RDI: ffffffff905a39d0 [ 1153.534419][ C1] RBP: 0000000000000100 R08: ffffffff905768f7 R09: 1ffffffff20aed1e [ 1153.542414][ C1] R10: dffffc0000000000 R11: ffffffff818d50a0 R12: 0000000000000008 [ 1153.550411][ C1] R13: ffff88805138ca58 R14: ffffffff905a39d0 R15: ffff888040950170 [ 1153.558418][ C1] FS: 00007fdef13216c0(0000) GS:ffff888125060000(0000) knlGS:0000000000000000 [ 1153.567382][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1153.573989][ C1] CR2: 0000000000000002 CR3: 00000000811fa000 CR4: 00000000003526f0 [ 1153.581990][ C1] Call Trace: [ 1153.585329][ C1] [ 1153.588221][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1153.593641][ C1] call_timer_fn+0x192/0x5e0 [ 1153.598269][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1153.604112][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1153.608833][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1153.614007][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1153.619173][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1153.625040][ C1] __run_timer_base+0x67e/0x8b0 [ 1153.629932][ C1] ? lock_acquire+0x106/0x350 [ 1153.634660][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1153.640100][ C1] run_timer_softirq+0xb7/0x170 [ 1153.644996][ C1] handle_softirqs+0x225/0x840 [ 1153.649804][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1153.654617][ C1] __irq_exit_rcu+0xca/0x220 [ 1153.659233][ C1] irq_exit_rcu+0x9/0x30 [ 1153.663511][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1153.669186][ C1] [ 1153.672141][ C1] [ 1153.675102][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1153.681115][ C1] RIP: 0010:finish_task_switch+0x417/0xc60 [ 1153.686949][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 43 fb 3b 0a e8 5e ac 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 1153.706584][ C1] RSP: 0018:ffffc900065b7580 EFLAGS: 00000206 [ 1153.712684][ C1] RAX: 0000000000000641 RBX: ffff8880b873bf20 RCX: 0000000080000001 [ 1153.720688][ C1] RDX: 0000000000000006 RSI: ffffffff8e22a4da RDI: ffffffff8c4bd280 [ 1153.728699][ C1] RBP: ffffc900065b75d0 R08: ffffffff905768f7 R09: 1ffffffff20aed1e [ 1153.736677][ C1] R10: dffffc0000000000 R11: fffffbfff20aed1f R12: ffff88804523be00 [ 1153.744646][ C1] R13: ffff8880b873bef8 R14: dffffc0000000000 R15: 1ffff110170e77e4 [ 1153.752654][ C1] __schedule+0x17e1/0x56c0 [ 1153.757172][ C1] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 1153.762635][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1153.768799][ C1] ? clockevents_program_event+0x1a6/0x630 [ 1153.774620][ C1] ? __pfx___schedule+0x10/0x10 [ 1153.779488][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1153.784522][ C1] irqentry_exit+0x14f/0x8f0 [ 1153.789151][ C1] ? trace_irq_disable+0x3b/0x140 [ 1153.794225][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1153.800241][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 1153.805572][ C1] Code: ff ff ff e8 41 20 2c 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 2b db c9 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 10 21 2f 0a cc 48 8d 3d b8 77 b8 [ 1153.825266][ C1] RSP: 0018:ffffc900065b7908 EFLAGS: 00000282 [ 1153.831367][ C1] RAX: 1bc7a26ddf67b100 RBX: 0000000000000000 RCX: 0000000000000046 [ 1153.839367][ C1] RDX: ffffffff94205ec8 RSI: ffffffff8e4afadf RDI: ffffffff8c4bd280 [ 1153.847368][ C1] RBP: ffffffff818d8a75 R08: 0000000000000008 R09: ffffffff96aff198 [ 1153.855346][ C1] R10: 0000000002b363ee R11: 00000000f8d7e4d5 R12: 0000000000000000 [ 1153.863310][ C1] R13: ffff888040950140 R14: 0000000000000001 R15: 0000000000000246 [ 1153.871286][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 1153.876587][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 1153.881882][ C1] touch_wq_lockdep_map+0xcb/0x180 [ 1153.887015][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 1153.892336][ C1] __flush_workqueue+0x148/0x1470 [ 1153.897362][ C1] ? drain_workqueue+0xb1/0x380 [ 1153.902236][ C1] ? __pfx___flush_workqueue+0x10/0x10 [ 1153.907713][ C1] ? __mutex_unlock_slowpath+0x731/0x900 [ 1153.913360][ C1] ? enable_work+0x17f/0x230 [ 1153.917962][ C1] drain_workqueue+0xce/0x380 [ 1153.922684][ C1] hci_dev_close_sync+0x60e/0x10a0 [ 1153.927922][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1153.932996][ C1] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1153.938596][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 1153.943656][ C1] ? _raw_read_unlock+0x28/0x50 [ 1153.948625][ C1] ? __hci_dev_get+0x144/0x270 [ 1153.953424][ C1] hci_dev_reset+0x14d/0x350 [ 1153.958079][ C1] sock_do_ioctl+0x101/0x320 [ 1153.962700][ C1] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1153.967850][ C1] ? hook_file_ioctl+0x1f0/0x5f0 [ 1153.972863][ C1] sock_ioctl+0x57a/0x7e0 [ 1153.977232][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 1153.982122][ C1] ? __fget_files+0x2a/0x420 [ 1153.986744][ C1] ? __fget_files+0x3a2/0x420 [ 1153.991470][ C1] ? __fget_files+0x2a/0x420 [ 1153.996109][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1154.001071][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 1154.005942][ C1] __se_sys_ioctl+0xfc/0x170 [ 1154.010551][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.016635][ C1] do_syscall_64+0x174/0x580 [ 1154.021246][ C1] ? trace_irq_disable+0x3b/0x140 [ 1154.026291][ C1] ? clear_bhb_loop+0x40/0x90 [ 1154.030979][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.036918][ C1] RIP: 0033:0x7fdef039de59 [ 1154.041347][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.060967][ C1] RSP: 002b:00007fdef1321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1154.069417][ C1] RAX: ffffffffffffffda RBX: 00007fdef0625fa0 RCX: 00007fdef039de59 [ 1154.077419][ C1] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 000000000000000b [ 1154.085422][ C1] RBP: 00007fdef0433e6f R08: 0000000000000000 R09: 0000000000000000 [ 1154.093415][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1154.101403][ C1] R13: 00007fdef0626038 R14: 00007fdef0625fa0 R15: 00007ffc8c42c438 [ 1154.109409][ C1] [ 1154.112459][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1154.119762][ C1] CPU: 1 UID: 0 PID: 7291 Comm: syz.0.10006 Not tainted syzkaller #0 PREEMPT(full) [ 1154.129156][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1154.139240][ C1] Call Trace: [ 1154.142541][ C1] [ 1154.145402][ C1] vpanic+0x56c/0xa60 [ 1154.149444][ C1] ? __pfx__printk+0x10/0x10 [ 1154.154061][ C1] ? __pfx_vpanic+0x10/0x10 [ 1154.158590][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1154.163902][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1154.169132][ C1] panic+0xc5/0xd0 [ 1154.172912][ C1] ? __pfx_panic+0x10/0x10 [ 1154.177382][ C1] __warn+0x315/0x4c0 [ 1154.181383][ C1] ? __queue_work+0xd4a/0x10a0 [ 1154.186186][ C1] ? __queue_work+0xd4a/0x10a0 [ 1154.191005][ C1] __report_bug+0x331/0x530 [ 1154.195633][ C1] ? __queue_work+0xd4a/0x10a0 [ 1154.200435][ C1] ? __pfx___report_bug+0x10/0x10 [ 1154.205504][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1154.210843][ C1] ? look_up_lock_class+0x57/0x110 [ 1154.216000][ C1] ? register_lock_class+0x31/0x2e0 [ 1154.221246][ C1] report_bug_entry+0x19a/0x290 [ 1154.226178][ C1] ? __queue_work+0xd66/0x10a0 [ 1154.230983][ C1] ? __queue_work+0xd6b/0x10a0 [ 1154.235787][ C1] handle_bug+0xce/0x200 [ 1154.240072][ C1] exc_invalid_op+0x1a/0x50 [ 1154.244630][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1154.249503][ C1] RIP: 0010:__queue_work+0xd66/0x10a0 [ 1154.254897][ C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 56 f0 cc 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 c4 ac a6 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 1154.274519][ C1] RSP: 0018:ffffc90000a08bc8 EFLAGS: 00010046 [ 1154.280608][ C1] RAX: 1ffff1100a27194e RBX: dffffc0000000000 RCX: ffff88804523be00 [ 1154.288602][ C1] RDX: ffff888040950170 RSI: ffffffff8ac088a0 RDI: ffffffff905a39d0 [ 1154.296596][ C1] RBP: 0000000000000100 R08: ffffffff905768f7 R09: 1ffffffff20aed1e [ 1154.304604][ C1] R10: dffffc0000000000 R11: ffffffff818d50a0 R12: 0000000000000008 [ 1154.312594][ C1] R13: ffff88805138ca58 R14: ffffffff905a39d0 R15: ffff888040950170 [ 1154.320611][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1154.326463][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1154.331807][ C1] ? __queue_work+0xd25/0x10a0 [ 1154.336619][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1154.342098][ C1] call_timer_fn+0x192/0x5e0 [ 1154.346748][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1154.352600][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1154.357325][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1154.362483][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1154.367613][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1154.373535][ C1] __run_timer_base+0x67e/0x8b0 [ 1154.378410][ C1] ? lock_acquire+0x106/0x350 [ 1154.383151][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1154.388572][ C1] run_timer_softirq+0xb7/0x170 [ 1154.393453][ C1] handle_softirqs+0x225/0x840 [ 1154.398248][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1154.403042][ C1] __irq_exit_rcu+0xca/0x220 [ 1154.407654][ C1] irq_exit_rcu+0x9/0x30 [ 1154.411916][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1154.417573][ C1] [ 1154.420525][ C1] [ 1154.423476][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1154.429496][ C1] RIP: 0010:finish_task_switch+0x417/0xc60 [ 1154.435341][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 43 fb 3b 0a e8 5e ac 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 1154.454967][ C1] RSP: 0018:ffffc900065b7580 EFLAGS: 00000206 [ 1154.461142][ C1] RAX: 0000000000000641 RBX: ffff8880b873bf20 RCX: 0000000080000001 [ 1154.469152][ C1] RDX: 0000000000000006 RSI: ffffffff8e22a4da RDI: ffffffff8c4bd280 [ 1154.477162][ C1] RBP: ffffc900065b75d0 R08: ffffffff905768f7 R09: 1ffffffff20aed1e [ 1154.485174][ C1] R10: dffffc0000000000 R11: fffffbfff20aed1f R12: ffff88804523be00 [ 1154.493177][ C1] R13: ffff8880b873bef8 R14: dffffc0000000000 R15: 1ffff110170e77e4 [ 1154.501317][ C1] __schedule+0x17e1/0x56c0 [ 1154.505868][ C1] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 1154.511365][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1154.517564][ C1] ? clockevents_program_event+0x1a6/0x630 [ 1154.523651][ C1] ? __pfx___schedule+0x10/0x10 [ 1154.528630][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1154.533775][ C1] irqentry_exit+0x14f/0x8f0 [ 1154.538383][ C1] ? trace_irq_disable+0x3b/0x140 [ 1154.543433][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1154.549430][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 1154.554754][ C1] Code: ff ff ff e8 41 20 2c 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 2b db c9 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 10 21 2f 0a cc 48 8d 3d b8 77 b8 [ 1154.574479][ C1] RSP: 0018:ffffc900065b7908 EFLAGS: 00000282 [ 1154.580580][ C1] RAX: 1bc7a26ddf67b100 RBX: 0000000000000000 RCX: 0000000000000046 [ 1154.588600][ C1] RDX: ffffffff94205ec8 RSI: ffffffff8e4afadf RDI: ffffffff8c4bd280 [ 1154.596681][ C1] RBP: ffffffff818d8a75 R08: 0000000000000008 R09: ffffffff96aff198 [ 1154.604678][ C1] R10: 0000000002b363ee R11: 00000000f8d7e4d5 R12: 0000000000000000 [ 1154.612671][ C1] R13: ffff888040950140 R14: 0000000000000001 R15: 0000000000000246 [ 1154.620684][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 1154.626040][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 1154.631359][ C1] touch_wq_lockdep_map+0xcb/0x180 [ 1154.636581][ C1] ? touch_wq_lockdep_map+0xb5/0x180 [ 1154.641889][ C1] __flush_workqueue+0x148/0x1470 [ 1154.646948][ C1] ? drain_workqueue+0xb1/0x380 [ 1154.651816][ C1] ? __pfx___flush_workqueue+0x10/0x10 [ 1154.657285][ C1] ? __mutex_unlock_slowpath+0x731/0x900 [ 1154.662951][ C1] ? enable_work+0x17f/0x230 [ 1154.667562][ C1] drain_workqueue+0xce/0x380 [ 1154.672269][ C1] hci_dev_close_sync+0x60e/0x10a0 [ 1154.677415][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1154.682464][ C1] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1154.688031][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 1154.693068][ C1] ? _raw_read_unlock+0x28/0x50 [ 1154.697933][ C1] ? __hci_dev_get+0x144/0x270 [ 1154.702718][ C1] hci_dev_reset+0x14d/0x350 [ 1154.707331][ C1] sock_do_ioctl+0x101/0x320 [ 1154.711939][ C1] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1154.717067][ C1] ? hook_file_ioctl+0x1f0/0x5f0 [ 1154.722042][ C1] sock_ioctl+0x57a/0x7e0 [ 1154.726385][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 1154.731254][ C1] ? __fget_files+0x2a/0x420 [ 1154.735882][ C1] ? __fget_files+0x3a2/0x420 [ 1154.740599][ C1] ? __fget_files+0x2a/0x420 [ 1154.745237][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1154.750398][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 1154.755292][ C1] __se_sys_ioctl+0xfc/0x170 [ 1154.759939][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.766053][ C1] do_syscall_64+0x174/0x580 [ 1154.770682][ C1] ? trace_irq_disable+0x3b/0x140 [ 1154.775742][ C1] ? clear_bhb_loop+0x40/0x90 [ 1154.780435][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.786365][ C1] RIP: 0033:0x7fdef039de59 [ 1154.790876][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.810511][ C1] RSP: 002b:00007fdef1321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1154.818954][ C1] RAX: ffffffffffffffda RBX: 00007fdef0625fa0 RCX: 00007fdef039de59 [ 1154.826945][ C1] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 000000000000000b [ 1154.834927][ C1] RBP: 00007fdef0433e6f R08: 0000000000000000 R09: 0000000000000000 [ 1154.842927][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1154.850933][ C1] R13: 00007fdef0626038 R14: 00007fdef0625fa0 R15: 00007ffc8c42c438 [ 1154.858939][ C1] [ 1154.862568][ C1] Kernel Offset: disabled [ 1154.866901][ C1] Rebooting in 86400 seconds..