last executing test programs: 3.432283733s ago: executing program 3 (id=3015): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xfffffffffffffffc, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400a400b703000000000000850000009e000000bf0900000000000055090100030000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 3.190061277s ago: executing program 3 (id=3018): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0xd0, 0x270, 0xd0, 0x340, 0x340, 0x430, 0x430, 0x341, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x44}, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@local, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0xffffffff], 'tunl0\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x340}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'wg1\x00', 'team_slave_1\x00', {0xff}, {}, 0x2f, 0x6b, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 2.963132737s ago: executing program 3 (id=3020): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000010080001000100000024c404514c35108ff746774e90d994250619dd85ccd6f9a2ed0157fc79d2957af58d5f75674a8c6b0ec64e2f7ebfa140f8c3a30d762142b96526b41db5f501b8920ef6c7571dd15ec4e7608d8c4d29520be42f4d84073a70281dd35c88ad1e9a1fe6cf1d0458fce7886bd3db6c61f419e1b0ef5412f681993b9bfd3d6b5dcabe425a2f551ab790199cebaeabf10cb8495d3a91bb84f9837c7d82895501de644bc3ea1faa520a109ef0841c"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000001000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "c91a5d1ad61de19a476276d0b0abd6dd1b2fb3a979b67bbef0bc195594c6ce68", "959b2e978beb1fdd534cde27d3e259e5e52e01e826f56425b4f57f0b615885d6c8862525170fc83a6ad07d25bdbfb809", "b60814cf57d8256fb447039f4f8ebd2e07b88853da364c02ccbba1b3", {"a282ed319ce9793b9f1df78ae130e84b", "d7bdcf770600fd9380f8f9a5d3e845b3"}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a010400ffffffffffffff0a0000000900010073797a30000000004c000000030a010400000000000000000a0000000900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000000b00070066696c7465720000b4000000060a1f0400000000000000000a0000000900010073797a30000000000900020073797a300000000088000480380001800e000100696d6d6564696174650000002400028008000140000000011800028014000100"/226], 0x148}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000001d00)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x650b1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x80) 2.603108683s ago: executing program 3 (id=3026): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3000000}]}, {}, {}, {}, {}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x14, 0xc, &(0x7f0000002440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x1f, 0xc, 0x0, &(0x7f0000002680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 2.392574095s ago: executing program 3 (id=3028): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000010080001000100000024c404514c35108ff746774e90d994250619dd85ccd6f9a2ed0157fc79d2957af58d5f75674a8c6b0ec64e2f7ebfa140f8c3a30d762142b96526b41db5f501b8920ef6c7571dd15ec4e7608d8c4d29520be42f4d84073a70281dd35c88ad1e9a1fe6cf1d0458fce7886bd3db6c61f419e1b0ef5412f681993b9bfd3d6b5dcabe425a2f551ab790199cebaeabf10cb8495d3a91bb84f9837c7d82895501de644bc3ea1faa520a109ef0841c"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000001000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "c91a5d1ad61de19a476276d0b0abd6dd1b2fb3a979b67bbef0bc195594c6ce68", "959b2e978beb1fdd534cde27d3e259e5e52e01e826f56425b4f57f0b615885d6c8862525170fc83a6ad07d25bdbfb809", "b60814cf57d8256fb447039f4f8ebd2e07b88853da364c02ccbba1b3", {"a282ed319ce9793b9f1df78ae130e84b", "d7bdcf770600fd9380f8f9a5d3e845b3"}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a010400000000000000400a0000000900010073797a30000000004c000000030a010400000000000000000a0000000900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000000b00070066696c7465720000b4000000060a1f0400000000000000000a0000000900010073797a30000000000900020073797a300000000088000480380001800e000100696d6d6564696174650000002400028008000140000000011800028014000100"/226], 0x148}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000001d00)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x650b1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x80) 2.003846382s ago: executing program 2 (id=3031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000500)=0x10) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000540)) (async) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@x25={0x8864, {0x2, 0x8, 0x1, "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"/443}}}}}, 0x1d4) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000280)={0x1d, r5}, 0x10, &(0x7f00000002c0)={0x0, 0x48}, 0x2, 0x0, 0x0, 0x24040040}, 0x3000c091) (async) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000000c0)={@local, @empty}, 0xc) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4c000) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000011c0)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x1, 0x7fff, 0x2}, &(0x7f0000000080)=0xc) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000580)={0x3, 'veth1_vlan\x00', {}, 0x3}) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000000)={0x7, {0x2, 0x8, 0x5f, 0xeca, 0xf97}}) 1.997530406s ago: executing program 3 (id=3033): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x0, 'none\x00', 0x10, 0x5, 0x2d}, 0x2c) r1 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x2000400) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000080)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x3a, 0x5, 0x4}, 0x2c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close(r2) 1.863584246s ago: executing program 1 (id=3035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000000206010100000000000000000000800005000100070000000900020073797a3100000000050005000a000000050004000000000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x8000000}, 0x0) 1.761221549s ago: executing program 1 (id=3037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000007000000002100000008000300", @ANYRES32=r2, @ANYBLOB="30002d8004"], 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x44110) 1.576714074s ago: executing program 1 (id=3039): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x4, 0xa5a, 0x3, 0x1, 0x3, 0x6, 0xb, 0x100}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000700), 0x4) bind$inet6(r2, &(0x7f0000000740)={0xa, 0x4e21, 0xfffffffe, @local, 0x20009}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000001b40)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000001b80)={&(0x7f0000001bc0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000001c00)={&(0x7f0000001c40)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008010}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000fd3f00000000000009011c008500000011000000850000002a00000095"], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001cc0)={r7, 0x0, 0xe, 0x0, &(0x7f0000001d40)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffd94) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f00000007c0)=0xce, 0x4) connect$inet(r6, &(0x7f0000000800)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) writev(r6, &(0x7f0000001b00)=[{&(0x7f0000001980)="54d3ef7372a56acef33e482233224ebdb15ef98fec03f30a6a22291040bccf800b0ea2d1b8bd6f046d0021a0b2a1fb160c4e142b26857aa4989c84410e1d112c1603a34aa451be75571dc51048f31fda9a3118a513042e014a0369f651a3b3e1ebc80ec5a78fadd06d477559e1db35887d34f151bbef921cedcf2f5a9bbed6f94a604df2ffe0aa350626b57f7c6550cc94a34a9579fcaa0425df3916987ffe6651a2775dd21deb2987566a1c229a4a04446d2a36c1fe72fc0d8e5455562d6a5c1ac676d966a424dd", 0xc8}, {&(0x7f0000001a80)="996bdeb5874b0a4fd9407c7557bf7569058a021aebe83ab66d2db7f4849650cd08acb7f0971e455d640929d341ff05c7e7afe85175c01cc19a03e4f6098131f15307fb7f8e", 0x45}], 0x2) sendmsg$inet(r6, &(0x7f0000000840)={0x0, 0x14, &(0x7f0000000880)=[{&(0x7f00000008c0)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000900)={0x0, 0x2, &(0x7f0000000940)=[{&(0x7f0000000980)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x5, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x26, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000200000000000000180000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183600000400000000000000000000001849000000000000000000000000000085100000feffffff3a430001ffffffffb7080000000000007b8af8ff00000000b708000001e200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000182b0000", @ANYRES32=r8, @ANYBLOB="000000000300000018360000030000000000000000000000bf91000000000000b7020000002000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 1.496364244s ago: executing program 4 (id=3040): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3e}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.286991959s ago: executing program 2 (id=3041): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x8000000}}}}]}]}, 0x8c}}, 0x0) 1.21308546s ago: executing program 0 (id=3042): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0xe, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x73) 1.164508199s ago: executing program 4 (id=3043): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000400003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.102416489s ago: executing program 0 (id=3044): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="7c01000013000101000000000000000064010102000000000000000000000000640101020000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000000000006c0000000000000000000000ffffffffffffffff060000000000000003000000000000000000000000000000080000000000000000000000000000000100000000000000000000000000000000010000fbfffffffeffffff000000000000000000000000c4000500ff010000000000000000000000000001000004d5320000000a00000064010101000000000000000000000000000000000002480004000000ffff000005000000ac141418000000000000000000000000000004d42b"], 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 1.01128063s ago: executing program 2 (id=3045): r0 = socket$inet(0x2, 0x3, 0xa) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xffff, 0x81, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000e000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 991.800726ms ago: executing program 0 (id=3046): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)={0x28, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000880}, 0xc0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r7) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000400)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440), 0x200002, 0x0) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000540)=0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x64, 0x42, 0x1, 0x70bd25, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x44, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002c000111000001f500010244132403b1fd606412c3258e3d67aa5b000100000000002c0000001d2bffc1264d"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x64}}, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00 ', @ANYRES16=r11, @ANYBLOB="000125bd7000fddbdf251e00000008000100", @ANYRES32=r12, @ANYBLOB="08000400ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xd, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x406}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80)={r15}, 0xc) r16 = openat$cgroup_int(r10, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r16, &(0x7f00000004c0)=ANY=[@ANYBLOB='-', @ANYRESDEC=r9], 0x5e) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100fdfffffffcffffff1d00000008000300", @ANYRES32=r17, @ANYBLOB="50002f800c0002000201aaaaaaaaaaaa38000380080001000000000005000300000000002400038006000300a1aa00000800020002000000060001000300000008000200020000000800"], 0x6c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000004}, 0x800) 867.642536ms ago: executing program 4 (id=3047): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3b0, 0x2a8, 0x2a8, 0x3b0, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'caif0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x318, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_hsr\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xcced, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x17, 0x0, [{0x3, 0xe, 0x8d, 0x8}, {0x1, 0xe, 0x6, 0x4}, {0x800, 0x9, 0x2, 0x100}, {0xb, 0x49, 0xfb, 0xfffff001}, {0x9, 0x9, 0xfd, 0x2}, {0x1000, 0x1, 0x9, 0xfffff801}, {0x6, 0x4, 0x3}, {0x1, 0x13, 0x1, 0x3}, {0xcec, 0x3, 0xaa, 0x80000001}, {0x6, 0xf6, 0xb6, 0xfffffffc}, {0x8, 0x57, 0x8e, 0xc}, {0x4, 0xad, 0x8}, {0x5, 0x0, 0xfb, 0x3}, {0xacde, 0x2, 0xfd, 0xd4db}, {0x87, 0x10, 0x6, 0x3ff}, {0x2820, 0x5, 0x6}, {0x3, 0x2, 0x89, 0x80000001}, {0x4, 0x8, 0x3, 0x10001}, {0x101, 0x80, 0x6, 0x7}, {0x2, 0x7, 0xc}, {0x9, 0x23, 0x71, 0x1}, {0x4, 0x7f, 0xa, 0x1ff}, {0x80, 0xa9, 0x7, 0x5}, {0x5, 0x3c, 0x9, 0x9}, {0x5, 0x7, 0x6, 0x8}, {0x1d, 0xfe, 0xb, 0xd7}, {0x4, 0x81, 0x0, 0xf78000}, {0x4, 0x3, 0x6, 0x1000}, {0x56d, 0x7, 0x1, 0x2}, {0x5, 0x7, 0x0, 0x7}, {0x5, 0x43, 0x8a, 0x16c}, {0x0, 0x81, 0x2, 0x4}, {0x8, 0x1, 0x2, 0x2}, {0x9, 0x6, 0x4, 0x5}, {0x6, 0x12, 0x1, 0x7}, {0x4, 0x3, 0xfd, 0x7}, {0x4, 0xb, 0x6, 0x5}, {0x400, 0x6, 0xae, 0x80002}, {0x1a, 0x6, 0x8, 0x80}, {0x5, 0x8e, 0xe, 0x7fffffff}, {0x6, 0x5, 0x8, 0x8000}, {0x5e, 0x7, 0x4, 0x401}, {0xf, 0x5, 0x0, 0x1}, {0x2, 0x2, 0x3, 0x7}, {0x10, 0x3, 0x7, 0x1}, {0x5, 0xc, 0x3, 0x8}, {0x4, 0xd8, 0x6, 0x3}, {0x0, 0x6b, 0x3, 0x7}, {0x5, 0x6, 0xfd, 0x7fffffff}, {0x8, 0x8, 0x6, 0x7}, {0x95, 0x6, 0xb9, 0xd6cd}, {0x401, 0x3, 0xfc, 0x8}, {0x9, 0xfb, 0x5, 0x9}, {0x4, 0x8, 0x7, 0x5}, {0x0, 0x9, 0x47, 0x4}, {0x5, 0x4, 0x7, 0x7fff}, {0x8, 0xff, 0x1d, 0x2}, {0x81, 0x5, 0x2, 0x2}, {0x1, 0x4, 0x8, 0x5}, {0x1f1c, 0xc, 0x3, 0x6}, {0x3830, 0x3, 0x40, 0x7}, {0x9, 0x8, 0x4, 0x8}, {0x200, 0x2, 0x1, 0xa23}, {0x2, 0xe2, 0x5, 0xffffffff}], {0x400}}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @empty, 0x0, 0xffffffff, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x1d, 0x0, 0x2a}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x9a, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a8) 623.22172ms ago: executing program 1 (id=3048): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 620.414985ms ago: executing program 0 (id=3049): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x400) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f0000000240)="66f7", 0x4}, {&(0x7f0000000280)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff080007400000000d2c000680140004000000000000000000000000000000000114000500fc"], 0xc0}}, 0x4) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x17, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20044840}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000fdff0000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000001085000000ca0000009500b800"/88], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) 620.211063ms ago: executing program 4 (id=3050): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0xfdff, 0xb9}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) 619.614794ms ago: executing program 2 (id=3051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0004001800ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="69fb0100671205003c0012800b00010069703667726500002c000280140006000000000000000000000000000000000114000700000000000000ff00000000000000010d"], 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) 555.829489ms ago: executing program 0 (id=3052): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x8000000}]}, {}, {}, {}, {}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x14, 0xc, &(0x7f0000002440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x1f, 0xc, 0x0, &(0x7f0000002680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 488.343032ms ago: executing program 2 (id=3053): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0], &(0x7f0000001440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001480), 0x8, 0x10, &(0x7f00000014c0)={0x4}, 0x10}, 0x94) 407.910938ms ago: executing program 4 (id=3054): r0 = socket$packet(0x11, 0x4, 0x300) sendto$packet(r0, &(0x7f00000000c0)="150120ab9dd930074f6716ac7c3c6e09c67b32664b28e037ff36e6af9fb87a9f7cf28884d91e583c2966967bcff6f24b0076ea15f6a42828e4201eb22a66e8e92211be526498151fbbc9b36af38fce1aeeea2ca56393c317a776fff8d6bd795b86d8c228834d11c74d61aa2a5a1d1ae0c759392303", 0x75, 0x40000, &(0x7f0000000140)={0x11, 0xe3, 0x0, 0x1, 0xa, 0x6, @random="481036ad4396"}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'macsec0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x5, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r1, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}, 0x1, 0x0, 0x0, 0x20000010}, 0x200080c4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000011c0)={0x3, &(0x7f0000001200)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfffff00c}, {0x6, 0x23, 0x7, 0xfffffff8}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000040)=0x4752, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 313.151875ms ago: executing program 1 (id=3055): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x10, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x148, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x50, 0x7d, 0x18, 0xe, 0x8}}, @TCA_RED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}]}}]}, 0x148}}, 0x0) 312.516702ms ago: executing program 2 (id=3056): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x14100, 0x1, 0x0, 0x0, 0x10000}, 0x1c) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000fc0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@gettfilter={0x5c, 0x2e, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0x10}, {0x9, 0xfff3}, {0x1, 0x8}}, [{0x8, 0xb, 0x87}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x132}, {0x8, 0xb, 0x1}, {0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000001240), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300a00000014000000020a0500000000000000000000000008140000001100010000000000000000000000000a"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d4552000000080002400000000134000300"], 0x104}}, 0x0) sendto$inet(r0, &(0x7f0000000980)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000b40)='westwood', 0x8) recvfrom$inet(r0, &(0x7f0000000b80), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r6, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000073112f00000000008510000002000000720000007600000095000000000000009500a50500"], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000480)=@llc={0x1a, 0x303, 0x7f, 0x6, 0x8, 0xf7, @random="bfc9b54e4a68"}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000500)="22e58ce9f6801b1dd219970b3e1dde77c73ac764fcbd0f5c3a39ac1f1c2fd054ff1890350ed0a96aab435e7f934955b933c61eb7ecd49d487b84c7a1dc8a291ac198842c89be7f985a74cfe2fb7d9e10e5c7a51788625609d1daabd5ade8b160936d8e5032b76fdd21ac2c9bfe6dd7f278f3f1379ca09aa1e67865cda1ec6b783f9301926a2abf597ef45793f396fc1add9ab98d4878fa60caea4383d985e6d413cf03b5529051d43d6708f141f8a9ad095439f7f5fc48c0523b0e7ed71b14ae89b0401b6952420d970133b428273e84882b23c7de3a64fb405c3a806dd2bb4a15", 0xe1}, {&(0x7f0000000600)="b1e51cd8744d1f02a06abf6bb88883dedd4efeb9436a007ce857abf9c89ac8b61eeea00ad91db01c7d2eceb1ac9cf5802ac5d42226d81d858ba2da7b8b9ec43b146beb59f544a2bda699ccae99c4e4", 0x4f}, {&(0x7f0000000680)="9eb75778c6629a3196f311c7ae269964f490b1abdae9a921bf02fefb9acc6fbb3e91d3ebdc2d4ff41e1f2b63895fc23b2b46bf3348ed", 0x36}, {&(0x7f00000006c0)="f2b79af20b3e76868ab834966c32948f9980b3cfc0257c6a5d3b332e0693105051ab8a3d34ce1fa67e1af36c46359be7c341a2d2535b49", 0x37}, {&(0x7f0000000700)="7df9ddb860543f16705393a0275d4e03bc11cc04ca45262b1082eead0dd8253fad7b115a251a1c62e43a4aa4e293411730e1aea7bdfc8389d9fcabea01b56cdd448851c994f7ce749543a81038644eb218c142c810f3ceb89932c43e0c281bf1c7e0a4d8f35cae4d1071d34ce96947b2a1cb04322dd44bf964f45beace6c0f3f17f6bdb6224d56ad9e", 0x89}, {&(0x7f00000007c0)="e6924431c5eb66576ff411c44db2a3abbb0c9a1f0525", 0x16}, {&(0x7f0000000800)="d2f4bb6e2a48e5621a43db1a048bf8ef03e1e88be4904d8ad811ab6bf71a4a2d6ce65af3c8861dd19765806b52641ca73d360a47cf00dbe8e132ce17b429b6884ec35f9f6abc94c3c4e6e203d40b", 0x4e}, {&(0x7f0000000880)="12ea2fb7c6f24eb801f3ead667c3d4abcd8be7ba5bb6b152b6303553a6c56ac0e7ada4c1864a0f047efb2f", 0x2b}], 0x8, &(0x7f0000000b80)=[{0xc0, 0x115, 0x7, "be9ea47b1dfdc59d5ab06476a475643c12356ec4d545a3d8da1e43674523e4627f5721c861d6b0680a9e784a9638610da1b5ba0a023b72bdfc22f29128c186cd7b56ff46b7c0eca2e65e8d2bda258ef70149e556f42c70b15d761d2bd3964fcaad6b7a98638f716d624559ed6de633be079250c78bd016dbac9a482c8ff1aa754f051f820ea69c479b8f83244837866df4618b3782bac6a1af7edd0b0e5621adfee9c8f182bd25a9f8851e2eddf1"}, {0x68, 0x10b, 0x8, "d7fbef2809377aa038aa94794e5a4c7b608a0ec5032188537692bcec7e2c4fbf2a0d84fc268231e08becd017255ce2f3d63115467c96e1f811e978222a8ffd5c77819fb000fdd09abdb3919c8ba5c9763d71eadc6d"}, {0x60, 0x110, 0x7, "1649e4ed9845c41be35605a1b5f9702c67197cf196c28f083aebfd50fe80c12af07f7af10beabd95af105ec7870fcd8098e80da5e13e3599ac0c29d210a1dcda0904ca99d8d0bdb9cf0e322b94fd"}], 0x188}, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) 215.32083ms ago: executing program 0 (id=3057): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x2f8, 0x2f8, 0xffffffff, 0x0, 0x1a0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '|z', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmmsg$inet(r2, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000540)="f6ca25a6a93eb039cef5fa66944cb1e70946fbd5652a37906aaae7d68c594491efa45e9f5b5cc3fa93fd944cdeae5af97cb4cdf52cab1490cfd0724a17a22e255839ffe32e6a36f9de974ffab87a87fbe3f057c8a43ca7b9ea616ff3d09640d65a56216e83bde428523879874f6fadf91b8604afbab0bd329f47abbf7711220f0bef57a9fb03d404d500ece8f69736aea07baef06289ac", 0x97}, {&(0x7f0000000600)="3d3059eaf475a06f22c59671a2825ea825017aff6ceaaefd0f4ac430003d9776ddf0e9727621440a1d4baf1bc49e57e8b09e1110c7be3af9d1df51ad0bd8944891095fda57789a9df4a9f118152fe1392eeafc28756fa1fefcbe8596f3569e93145a3118e528a60e6ba327eb447d9cf9355d21552c74dc51c771a4fc4f9974c079100141bdffbfa4b51b41293caa5b53ec46da36703bf312470be4be0ea928c2520cda42fbc5c426f18582b2ecd5f1f5cbbd172de97fd40f6fda091532f08ba52ac16e47569d2bc22893eb4623fcf1ff4090bbcb1ab0baf2e0", 0xd9}, {&(0x7f0000000700)="ebc3cd293a16fe67e0698b5fd2b93fcbba1a9af3f19181", 0x17}], 0x3, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010102, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@rr={0x7, 0xfffffffffffffe90, 0xdc, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x98, [@loopback]}, @cipso={0x86, 0x67, 0x0, [{0x5, 0xf, "432693a7994b5b4e773b07e66b"}, {0x7, 0x9, "a3215f1f262ab4"}, {0x5, 0x6, "2ecd339e"}, {0x0, 0x10, "bf84d634966dcf169f3ca1831a1c"}, {0x2, 0x6, "78e4089d"}, {0x2, 0xc, "3c8e0169e822519a8c6b"}, {0x0, 0xd, '\x00'/11}, {0x0, 0x4, "e07a"}, {0x5, 0xe, "59c23ef427813fddb59cb90d"}, {0x6, 0x2}]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xe0}}], 0x2, 0x40f4) 101.845375ms ago: executing program 1 (id=3058): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000004c0)={0x40000000, 0x0, &(0x7f0000000840)={&(0x7f0000000940)=ANY=[@ANYBLOB="021800001900000002000000fedbdf25050006006c8000000a000600000000000000000000000000000000000000000000000000000000000800120000000000feffff7f000000001200000000000000030000000000000020000002000000000000000000000000e000000200000000000000000000000005000500002000000a00000000000000fe80000000000000000000000000068bfc1d000400000000050019000000000002004e20e0000002000000000000000002"], 0xc8}}, 0x0) 0s ago: executing program 4 (id=3059): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0xe, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x73) kernel console output (not intermixed with test programs): copy to user failed while replacing table [ 185.870454][T11035] __nla_validate_parse: 1 callbacks suppressed [ 185.870474][T11035] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1737'. [ 186.041530][T11031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.061436][T11031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.162937][T11035] ipvlan2: entered promiscuous mode [ 186.168755][T11035] team0: Device ipvlan2 failed to register rx_handler [ 186.234864][T11049] syzkaller0: entered promiscuous mode [ 186.234887][T11049] syzkaller0: entered allmulticast mode [ 186.248798][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1746'. [ 186.327584][T11052] 8021q: adding VLAN 0 to HW filter on device bond12 [ 186.455707][T11054] can: request_module (can-proto-0) failed. [ 186.745076][T11078] No such timeout policy "syz1" [ 187.013169][T11096] syzkaller0: entered promiscuous mode [ 187.013191][T11096] syzkaller0: entered allmulticast mode [ 187.164789][T11107] syzkaller0: entered promiscuous mode [ 187.164811][T11107] syzkaller0: entered allmulticast mode [ 187.166907][ C1] TC_ACT_REPEAT abuse ? [ 187.167588][T11105] netlink: 'syz.0.1766': attribute type 21 has an invalid length. [ 187.167605][T11105] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1766'. [ 187.167684][T11105] netlink: 'syz.0.1766': attribute type 4 has an invalid length. [ 187.167697][T11105] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1766'. [ 187.210992][ C1] TC_ACT_REPEAT abuse ? [ 187.239076][ C1] TC_ACT_REPEAT abuse ? [ 187.588935][ C0] TC_ACT_REPEAT abuse ? [ 187.593087][ C0] TC_ACT_REPEAT abuse ? [ 187.611979][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1778'. [ 187.650184][T11135] 8021q: adding VLAN 0 to HW filter on device bond11 [ 187.667856][T11138] syzkaller0: entered promiscuous mode [ 187.667874][T11138] syzkaller0: entered allmulticast mode [ 187.699048][ C0] TC_ACT_REPEAT abuse ? [ 187.744669][T11141] can: request_module (can-proto-0) failed. [ 187.884083][T11152] block nbd1: server does not support multiple connections per device. [ 187.884392][T11152] block nbd1: shutting down sockets [ 187.940623][T11157] netlink: 'syz.0.1787': attribute type 12 has an invalid length. [ 188.115647][T11166] xt_l2tp: invalid flags combination: 8 [ 188.199714][T11167] FAULT_INJECTION: forcing a failure. [ 188.199714][T11167] name failslab, interval 1, probability 0, space 0, times 0 [ 188.199741][T11167] CPU: 0 UID: 0 PID: 11167 Comm: syz.3.1790 Not tainted syzkaller #0 PREEMPT(full) [ 188.199760][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.199769][T11167] Call Trace: [ 188.199776][T11167] [ 188.199784][T11167] dump_stack_lvl+0xe8/0x150 [ 188.199814][T11167] should_fail_ex+0x410/0x560 [ 188.199855][T11167] should_failslab+0xa8/0x100 [ 188.199883][T11167] __kmalloc_noprof+0xfe/0x720 [ 188.199904][T11167] ? tomoyo_encode+0x2ad/0x570 [ 188.199929][T11167] ? tomoyo_encode+0x2ad/0x570 [ 188.199960][T11167] tomoyo_encode+0x2ad/0x570 [ 188.199991][T11167] tomoyo_realpath_from_path+0x5fa/0x640 [ 188.200028][T11167] ? tomoyo_path_number_perm+0x219/0x5f0 [ 188.200051][T11167] tomoyo_path_number_perm+0x246/0x5f0 [ 188.200077][T11167] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 188.200104][T11167] ? sb_end_write+0xe8/0x190 [ 188.200129][T11167] ? vfs_write+0x9ce/0xba0 [ 188.200152][T11167] ? hook_file_ioctl+0x1f2/0x600 [ 188.200202][T11167] ? ksys_write+0x1fc/0x270 [ 188.200228][T11167] security_file_ioctl+0xc3/0x2a0 [ 188.200253][T11167] __se_sys_ioctl+0x47/0x170 [ 188.200277][T11167] do_syscall_64+0x166/0x520 [ 188.200299][T11167] ? trace_irq_disable+0x3b/0x140 [ 188.200333][T11167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.200351][T11167] ? clear_bhb_loop+0x70/0xc0 [ 188.200374][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.200392][T11167] RIP: 0033:0x7fd59c39e559 [ 188.200409][T11167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.200422][T11167] RSP: 002b:00007fd59d225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.200441][T11167] RAX: ffffffffffffffda RBX: 00007fd59c626090 RCX: 00007fd59c39e559 [ 188.200453][T11167] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000007 [ 188.200465][T11167] RBP: 00007fd59d225090 R08: 0000000000000000 R09: 0000000000000000 [ 188.200477][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.200488][T11167] R13: 00007fd59c626128 R14: 00007fd59c626090 R15: 00007ffd98a28558 [ 188.200516][T11167] [ 188.200561][T11167] ERROR: Out of memory at tomoyo_realpath_from_path. [ 188.295573][T11171] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.375497][T11173] syzkaller0: entered promiscuous mode [ 188.375519][T11173] syzkaller0: entered allmulticast mode [ 188.675573][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1796'. [ 188.772170][T11180] smbdirect: ib_dev[rxe0] renamed to [s] [ 188.861638][T11193] FAULT_INJECTION: forcing a failure. [ 188.861638][T11193] name failslab, interval 1, probability 0, space 0, times 0 [ 188.861668][T11193] CPU: 1 UID: 0 PID: 11193 Comm: syz.0.1799 Not tainted syzkaller #0 PREEMPT(full) [ 188.861689][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.861699][T11193] Call Trace: [ 188.861706][T11193] [ 188.861714][T11193] dump_stack_lvl+0xe8/0x150 [ 188.861744][T11193] should_fail_ex+0x410/0x560 [ 188.861774][T11193] should_failslab+0xa8/0x100 [ 188.861800][T11193] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 188.861825][T11193] ? copy_array+0x71/0x100 [ 188.861840][T11193] ? copy_array+0x71/0x100 [ 188.861860][T11193] ? copy_array+0x71/0x100 [ 188.861878][T11193] krealloc_node_align_noprof+0x19a/0x390 [ 188.861901][T11193] ? rcu_is_watching+0x16/0xb0 [ 188.861927][T11193] copy_array+0x71/0x100 [ 188.861946][T11193] bpf_copy_verifier_state+0xad/0x1170 [ 188.861966][T11193] ? bpf_is_state_visited+0x2e49/0x48b0 [ 188.861985][T11193] ? bpf_is_state_visited+0x2e49/0x48b0 [ 188.862012][T11193] bpf_is_state_visited+0x385b/0x48b0 [ 188.862042][T11193] ? verbose+0x11d/0x1a0 [ 188.862070][T11193] ? bpf_push_jmp_history+0x27d/0x6d0 [ 188.862100][T11193] do_check_common+0x229d/0x5610 [ 188.862160][T11193] ? __pfx_do_check_common+0x10/0x10 [ 188.862183][T11193] ? __pfx_verbose+0x10/0x10 [ 188.862199][T11193] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 188.862231][T11193] do_check_main+0xa2/0x1f0 [ 188.862255][T11193] bpf_check+0x2775/0x2ef0 [ 188.862299][T11193] ? __pfx_bpf_check+0x10/0x10 [ 188.862322][T11193] ? bpf_obj_name_cpy+0x194/0x1e0 [ 188.862351][T11193] bpf_prog_load+0x14d6/0x1c20 [ 188.862384][T11193] ? __pfx_bpf_prog_load+0x10/0x10 [ 188.862430][T11193] __sys_bpf+0xd0d/0xd90 [ 188.862459][T11193] ? __pfx___sys_bpf+0x10/0x10 [ 188.862490][T11193] ? __fget_files+0x2a/0x420 [ 188.862534][T11193] ? ksys_write+0x242/0x270 [ 188.862555][T11193] ? __pfx_ksys_write+0x10/0x10 [ 188.862579][T11193] __x64_sys_bpf+0xba/0xd0 [ 188.862601][T11193] do_syscall_64+0x166/0x520 [ 188.862624][T11193] ? trace_irq_disable+0x3b/0x140 [ 188.862643][T11193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.862663][T11193] ? clear_bhb_loop+0x70/0xc0 [ 188.862686][T11193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.862704][T11193] RIP: 0033:0x7f4bb5b9e559 [ 188.862721][T11193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.862736][T11193] RSP: 002b:00007f4bb6aea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.862756][T11193] RAX: ffffffffffffffda RBX: 00007f4bb5e25fa0 RCX: 00007f4bb5b9e559 [ 188.862769][T11193] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 188.862780][T11193] RBP: 00007f4bb6aea090 R08: 0000000000000000 R09: 0000000000000000 [ 188.862792][T11193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.862803][T11193] R13: 00007f4bb5e26038 R14: 00007f4bb5e25fa0 R15: 00007ffce61281b8 [ 188.862834][T11193] [ 189.228083][T11205] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 189.413600][ C0] TC_ACT_REPEAT abuse ? [ 189.813761][T11237] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 190.095550][T11248] syzkaller0: entered promiscuous mode [ 190.095571][T11248] syzkaller0: entered allmulticast mode [ 190.130106][T11250] netlink: 'syz.3.1822': attribute type 1 has an invalid length. [ 190.130127][T11250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1822'. [ 190.451352][T11258] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1826'. [ 190.721722][T11267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1829'. [ 190.783285][T11267] veth1_to_team: entered promiscuous mode [ 190.790920][T11267] veth1_to_team: left promiscuous mode [ 191.021958][T11276] xt_TPROXY: Can be used only with -p tcp or -p udp [ 191.160918][T11287] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1831'. [ 191.357542][T11293] xt_IDLETIMER: label is empty or not nul-terminated [ 191.527217][T11301] netlink: 'syz.2.1837': attribute type 11 has an invalid length. [ 191.655350][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1839'. [ 192.060275][T11330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1844'. [ 192.203880][T11339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1848'. [ 192.293940][T11343] No such timeout policy "syz1" [ 192.349383][T11345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1852'. [ 192.376161][T11347] 0ªX¹¦Dö»: entered promiscuous mode [ 193.200698][T11384] netlink: 'syz.2.1871': attribute type 4 has an invalid length. [ 193.200719][T11384] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1871'. [ 193.206139][T11384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.219601][T11384] net_ratelimit: 1 callbacks suppressed [ 193.219618][T11384] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.248345][T11383] block nbd1: server does not support multiple connections per device. [ 193.249399][T11383] block nbd1: shutting down sockets [ 193.957572][T11420] No such timeout policy "syz1" [ 194.000250][T11422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1882'. [ 194.156693][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.166967][T11428] xt_TPROXY: Can be used only with -p tcp or -p udp [ 194.662450][T11449] netlink: 83 bytes leftover after parsing attributes in process `syz.1.1894'. [ 195.402756][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1907'. [ 195.871554][T11494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1914'. [ 195.886897][T11494] veth1_to_team: entered promiscuous mode [ 195.897079][T11494] veth1_to_team: left promiscuous mode [ 196.006144][T11498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.068706][ T7231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.068949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.713807][ T6761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.714909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.897060][T11387] udevd[11387]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 197.048696][T11529] __nla_validate_parse: 2 callbacks suppressed [ 197.048715][T11529] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1925'. [ 197.350516][T10821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.458802][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1929'. [ 197.458824][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 197.498453][T11540] 8021q: adding VLAN 0 to HW filter on device bond13 [ 197.532356][T11545] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 197.533916][T11542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.584932][T11548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1930'. [ 197.586569][T11542] bond13: (slave bond0): Enslaving as an active interface with a down link [ 197.687344][T11545] 8021q: adding VLAN 0 to HW filter on device bond12 [ 197.706885][T11544] bond12: entered promiscuous mode [ 197.706906][T11544] bond12: entered allmulticast mode [ 197.720298][T11542] netlink: 'syz.1.1929': attribute type 2 has an invalid length. [ 197.720316][T11542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1929'. [ 197.769506][T11540] bond13 (unregistering): (slave bond0): Releasing active interface [ 197.802260][T11540] bond13 (unregistering): Released all slaves [ 197.945715][T11545] macvlan7: entered promiscuous mode [ 197.945737][T11545] macvlan7: entered allmulticast mode [ 197.950319][T11545] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 198.011783][T11561] xt_TPROXY: Can be used only with -p tcp or -p udp [ 198.013695][T11542] : entered promiscuous mode [ 198.226940][T11567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1939'. [ 198.459581][T11578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1944'. [ 198.482311][T11578] veth1_to_team: entered promiscuous mode [ 198.494950][T11578] veth1_to_team: left promiscuous mode [ 198.913077][T11593] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1949'. [ 199.057138][T11596] tc_dump_action: action bad kind [ 199.478557][T11625] netlink: 'syz.4.1961': attribute type 1 has an invalid length. [ 199.538453][T11625] 8021q: adding VLAN 0 to HW filter on device bond23 [ 199.585045][T11625] bond23: entered promiscuous mode [ 199.585069][T11625] bond23: entered allmulticast mode [ 199.631833][T11625] macvlan0: entered promiscuous mode [ 199.631854][T11625] macvlan0: entered allmulticast mode [ 199.634197][T11625] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 199.652693][T11639] netlink: 'syz.3.1965': attribute type 1 has an invalid length. [ 199.701588][T11642] sctp: [Deprecated]: syz.2.1964 (pid 11642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.701588][T11642] Use struct sctp_sack_info instead [ 199.701827][T11642] sctp: [Deprecated]: syz.2.1964 (pid 11642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.701827][T11642] Use struct sctp_sack_info instead [ 199.732963][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1966'. [ 199.755877][T11642] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 199.774967][T11642] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 199.792285][T11639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.838103][T11640] bond5: (slave gretap1): making interface the new active one [ 199.845841][T11640] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 199.849535][T11651] xt_bpf: check failed: parse error [ 199.875556][T11643] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 199.877624][T11640] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 199.897745][T11649] tun0: tun_chr_ioctl cmd 1074025677 [ 199.897815][T11649] tun0: linktype set to 0 [ 200.032436][T11661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1972'. [ 200.097373][T11664] veth0: entered promiscuous mode [ 200.102000][T11663] veth0: left promiscuous mode [ 200.395463][T10821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.549201][ C0] TC_ACT_REPEAT abuse ? [ 200.620599][T11694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.881315][T11714] xt_l2tp: invalid flags combination: 8 [ 201.188745][ T7232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.188961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.460084][T11738] netlink: 'syz.3.1999': attribute type 1 has an invalid length. [ 201.507094][T11738] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.519001][T11738] bond6: entered promiscuous mode [ 201.519020][T11738] bond6: entered allmulticast mode [ 201.543075][T11738] macvlan2: entered promiscuous mode [ 201.543093][T11738] macvlan2: entered allmulticast mode [ 201.546178][T11738] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 201.787499][T11745] syzkaller0: entered promiscuous mode [ 201.787520][T11745] syzkaller0: entered allmulticast mode [ 202.196924][T11771] netlink: 'syz.0.2014': attribute type 8 has an invalid length. [ 202.255904][T11773] netlink: 'syz.4.2016': attribute type 1 has an invalid length. [ 202.321363][T11784] netlink: 'syz.3.2015': attribute type 1 has an invalid length. [ 202.321598][T11773] 8021q: adding VLAN 0 to HW filter on device bond24 [ 202.416106][T11784] 8021q: adding VLAN 0 to HW filter on device bond7 [ 202.417570][T11790] sctp: [Deprecated]: syz.0.2019 (pid 11790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.417570][T11790] Use struct sctp_sack_info instead [ 202.417800][T11790] sctp: [Deprecated]: syz.0.2019 (pid 11790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.417800][T11790] Use struct sctp_sack_info instead [ 202.426252][T11790] IPVS: dh: FWM 3 0x00000003 - no destination available [ 202.426496][T11790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.480540][T11783] bond24: entered promiscuous mode [ 202.480562][T11783] bond24: entered allmulticast mode [ 202.484458][T11778] bond7: entered promiscuous mode [ 202.484477][T11778] bond7: entered allmulticast mode [ 202.526236][T11773] macvlan0: entered promiscuous mode [ 202.526256][T11773] macvlan0: entered allmulticast mode [ 202.527649][T11773] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 202.577644][T11784] macvlan2: entered promiscuous mode [ 202.577664][T11784] macvlan2: entered allmulticast mode [ 202.595783][T11784] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 202.718120][T11799] syzkaller0: entered promiscuous mode [ 202.718142][T11799] syzkaller0: entered allmulticast mode [ 203.065201][T11811] __nla_validate_parse: 6 callbacks suppressed [ 203.065221][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2028'. [ 203.320901][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2033'. [ 204.815566][T11828] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 204.846909][T11830] ip6erspan0: entered allmulticast mode [ 204.980675][T11839] net_ratelimit: 5 callbacks suppressed [ 204.980693][T11839] ip_tables: iptables: counters copy to user failed while replacing table [ 205.289274][ T6754] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.289318][ T6754] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.289350][ T6754] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.289378][ T6754] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.378519][T11849] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 205.452542][T11862] xt_l2tp: invalid flags combination: 8 [ 205.617019][T11868] xt_TPROXY: Can be used only with -p tcp or -p udp [ 206.247946][T11893] No such timeout policy "syz1" [ 206.284980][T11894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2055'. [ 206.316342][T11894] veth1_to_team: entered promiscuous mode [ 206.326118][T11894] veth1_to_team: left promiscuous mode [ 206.457804][T11903] netlink: 'syz.2.2060': attribute type 322 has an invalid length. [ 206.468681][T10821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.526638][T11909] ip_tables: iptables: counters copy to user failed while replacing table [ 206.577443][T11909] bridge0: port 3(syz_tun) entered disabled state [ 206.691385][T11918] sctp: [Deprecated]: syz.3.2065 (pid 11918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.691385][T11918] Use struct sctp_sack_info instead [ 206.692534][T11918] sctp: [Deprecated]: syz.3.2065 (pid 11918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.692534][T11918] Use struct sctp_sack_info instead [ 206.743308][T11918] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 206.744074][T11918] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 206.816488][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2067'. [ 206.949334][ T6754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.949517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.002638][T11933] xt_TPROXY: Can be used only with -p tcp or -p udp [ 207.161620][T11939] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 207.323491][T11929] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 207.327641][T11929] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 207.714956][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 207.802946][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2081'. [ 207.844516][T11960] netlink: 'syz.2.2082': attribute type 3 has an invalid length. [ 207.844530][T11960] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2082'. [ 207.879676][T11963] netlink: 'syz.0.2083': attribute type 1 has an invalid length. [ 207.949028][T11963] 8021q: adding VLAN 0 to HW filter on device bond12 [ 207.966985][T11967] bond12: entered promiscuous mode [ 207.967005][T11967] bond12: entered allmulticast mode [ 207.990706][T11966] netlink: 'syz.1.2084': attribute type 1 has an invalid length. [ 208.012481][T11970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.034363][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'. [ 208.049858][T11972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2084'. [ 208.077281][T11966] 8021q: adding VLAN 0 to HW filter on device bond13 [ 208.084436][T11963] macvlan0: entered promiscuous mode [ 208.084454][T11963] macvlan0: entered allmulticast mode [ 208.086656][T11963] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 208.207763][T11966] bond13: entered promiscuous mode [ 208.207787][T11966] bond13: entered allmulticast mode [ 208.260790][T11979] macvlan2: entered promiscuous mode [ 208.260811][T11979] macvlan2: entered allmulticast mode [ 208.263852][T11979] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 208.374446][T11988] netlink: 'syz.2.2090': attribute type 4 has an invalid length. [ 208.407565][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2090'. [ 208.429316][T11992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2092'. [ 208.573525][T12002] siw: device registration error -23 [ 208.743274][T12018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2097'. [ 208.758713][T12018] veth1_to_team: entered promiscuous mode [ 208.761845][T12018] veth1_to_team: left promiscuous mode [ 208.847223][T12020] ip6tnl1: entered allmulticast mode [ 208.852231][ T6754] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 208.852436][ T6754] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 208.878445][ T5742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 208.929288][ T990] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 208.971390][T12027] netlink: 'syz.2.2101': attribute type 1 has an invalid length. [ 209.023239][T12027] 8021q: adding VLAN 0 to HW filter on device bond13 [ 209.050558][T12027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2101'. [ 209.125988][T12027] bond13: entered promiscuous mode [ 209.126012][T12027] bond13: entered allmulticast mode [ 209.156137][T12037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2106'. [ 209.173296][T12032] macvlan7: entered promiscuous mode [ 209.173316][T12032] macvlan7: entered allmulticast mode [ 209.176076][T12032] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 209.432817][ T5742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 209.550866][T12068] sctp: [Deprecated]: syz.4.2115 (pid 12068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.550866][T12068] Use struct sctp_sack_info instead [ 209.551881][T12068] sctp: [Deprecated]: syz.4.2115 (pid 12068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.551881][T12068] Use struct sctp_sack_info instead [ 209.749661][T12081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2121'. [ 209.756106][T12081] veth1_to_team: entered promiscuous mode [ 209.776870][T12081] veth1_to_team: left promiscuous mode [ 210.171374][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2130'. [ 210.540042][T12112] syzkaller0: entered promiscuous mode [ 210.540064][T12112] syzkaller0: entered allmulticast mode [ 210.924512][T12138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2143'. [ 210.934200][T12138] veth1_to_team: entered promiscuous mode [ 210.938391][T12138] veth1_to_team: left promiscuous mode [ 210.988717][T12141] sctp: [Deprecated]: syz.1.2142 (pid 12141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.988717][T12141] Use struct sctp_sack_info instead [ 210.990173][T12141] sctp: [Deprecated]: syz.1.2142 (pid 12141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.990173][T12141] Use struct sctp_sack_info instead [ 211.018857][T12141] net_ratelimit: 5 callbacks suppressed [ 211.018872][T12141] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 211.022300][T12141] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 211.488512][T12156] ip_tables: iptables: counters copy to user failed while replacing table [ 211.845059][T12165] IPVS: Error connecting to the multicast addr [ 211.970609][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'. [ 212.202618][T12189] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2161'. [ 212.283553][T12196] netlink: 'syz.2.2163': attribute type 1 has an invalid length. [ 212.299778][T12191] can: request_module (can-proto-0) failed. [ 212.325902][T12196] 8021q: adding VLAN 0 to HW filter on device bond14 [ 212.339500][T12196] bond14: entered promiscuous mode [ 212.339513][T12196] bond14: entered allmulticast mode [ 212.364578][T12196] macvlan7: entered promiscuous mode [ 212.364598][T12196] macvlan7: entered allmulticast mode [ 212.366238][T12196] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 212.593784][T12209] ip_tables: iptables: counters copy to user failed while replacing table [ 212.714338][T12218] FAULT_INJECTION: forcing a failure. [ 212.714338][T12218] name failslab, interval 1, probability 0, space 0, times 0 [ 212.714368][T12218] CPU: 1 UID: 0 PID: 12218 Comm: syz.1.2172 Not tainted syzkaller #0 PREEMPT(full) [ 212.714388][T12218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.714399][T12218] Call Trace: [ 212.714406][T12218] [ 212.714413][T12218] dump_stack_lvl+0xe8/0x150 [ 212.714444][T12218] should_fail_ex+0x410/0x560 [ 212.714474][T12218] should_failslab+0xa8/0x100 [ 212.714501][T12218] __kmalloc_noprof+0xfe/0x720 [ 212.714521][T12218] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 212.714546][T12218] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 212.714579][T12218] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 212.714612][T12218] genl_family_rcv_msg_doit+0xda/0x340 [ 212.714643][T12218] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 212.714673][T12218] ? __pfx_genl_get_cmd+0x10/0x10 [ 212.714694][T12218] ? __pfx_nbd_genl_connect+0x10/0x10 [ 212.714719][T12218] ? __lock_acquire+0x747/0x2de0 [ 212.714758][T12218] genl_rcv_msg+0x614/0x7a0 [ 212.714789][T12218] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.714812][T12218] ? __pfx_nbd_genl_connect+0x10/0x10 [ 212.714850][T12218] netlink_rcv_skb+0x226/0x4a0 [ 212.714871][T12218] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.714897][T12218] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.714933][T12218] ? down_read+0x2be/0x330 [ 212.714964][T12218] genl_rcv+0x28/0x40 [ 212.714985][T12218] netlink_unicast+0x8ef/0xa80 [ 212.715034][T12218] netlink_sendmsg+0x813/0xb40 [ 212.715064][T12218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.715093][T12218] ? apparmor_socket_sendmsg+0x98/0x360 [ 212.715120][T12218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.715138][T12218] sock_sendmsg_nosec+0x14e/0x190 [ 212.715161][T12218] ____sys_sendmsg+0x54e/0x850 [ 212.715192][T12218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.715226][T12218] ? import_iovec+0x73/0xa0 [ 212.715257][T12218] ___sys_sendmsg+0x2a5/0x360 [ 212.715280][T12218] ? __lock_acquire+0x747/0x2de0 [ 212.715305][T12218] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.715368][T12218] ? __fget_files+0x2a/0x420 [ 212.715394][T12218] ? __fget_files+0x3a2/0x420 [ 212.715432][T12218] __x64_sys_sendmsg+0x1b1/0x290 [ 212.715460][T12218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.715508][T12218] do_syscall_64+0x166/0x520 [ 212.715531][T12218] ? trace_irq_disable+0x3b/0x140 [ 212.715550][T12218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.715569][T12218] ? clear_bhb_loop+0x70/0xc0 [ 212.715593][T12218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.715611][T12218] RIP: 0033:0x7fc1ca79e559 [ 212.715628][T12218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.715643][T12218] RSP: 002b:00007fc1c89f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.715663][T12218] RAX: ffffffffffffffda RBX: 00007fc1caa25fa0 RCX: 00007fc1ca79e559 [ 212.715676][T12218] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000007 [ 212.715688][T12218] RBP: 00007fc1c89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.715699][T12218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.715710][T12218] R13: 00007fc1caa26038 R14: 00007fc1caa25fa0 R15: 00007ffde511e738 [ 212.715748][T12218] [ 213.199477][T12244] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 213.236726][T12246] block nbd1: server does not support multiple connections per device. [ 213.238935][T12246] block nbd1: shutting down sockets [ 213.278407][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 213.397229][T12258] xt_l2tp: invalid flags combination: 8 [ 213.681007][T12268] __nla_validate_parse: 2 callbacks suppressed [ 213.681027][T12268] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2189'. [ 213.828129][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2196'. [ 213.837365][T12277] hsr_slave_0: left promiscuous mode [ 213.849871][T12277] hsr_slave_1: left promiscuous mode [ 213.879904][T12286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2193'. [ 214.099461][T12295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2199'. [ 214.110120][T12295] veth1_to_team: entered promiscuous mode [ 214.124651][T12295] veth1_to_team: left promiscuous mode [ 214.143056][T12302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2201'. [ 214.161003][T12298] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2203'. [ 214.559294][T12334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2214'. [ 214.669726][T12340] FAULT_INJECTION: forcing a failure. [ 214.669726][T12340] name failslab, interval 1, probability 0, space 0, times 0 [ 214.669756][T12340] CPU: 0 UID: 0 PID: 12340 Comm: syz.1.2216 Not tainted syzkaller #0 PREEMPT(full) [ 214.669776][T12340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.669787][T12340] Call Trace: [ 214.669795][T12340] [ 214.669803][T12340] dump_stack_lvl+0xe8/0x150 [ 214.669833][T12340] should_fail_ex+0x410/0x560 [ 214.669864][T12340] should_failslab+0xa8/0x100 [ 214.669891][T12340] __kmalloc_cache_noprof+0xa3/0x600 [ 214.669912][T12340] ? __raw_spin_lock_init+0x45/0x100 [ 214.669937][T12340] ? nbd_add_socket+0x6b7/0x1170 [ 214.669960][T12340] ? nbd_add_socket+0x6b7/0x1170 [ 214.669992][T12340] nbd_add_socket+0x6b7/0x1170 [ 214.670023][T12340] ? __pfx_nbd_add_socket+0x10/0x10 [ 214.670049][T12340] ? __nla_parse+0x40/0x60 [ 214.670082][T12340] nbd_genl_connect+0x1378/0x1cd0 [ 214.670115][T12340] ? __pfx_nbd_genl_connect+0x10/0x10 [ 214.670140][T12340] ? rcu_is_watching+0x16/0xb0 [ 214.670170][T12340] ? __kmalloc_noprof+0x38c/0x720 [ 214.670197][T12340] ? __nla_parse+0x40/0x60 [ 214.670228][T12340] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 214.670262][T12340] genl_family_rcv_msg_doit+0x233/0x340 [ 214.670294][T12340] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 214.670330][T12340] ? __lock_acquire+0x747/0x2de0 [ 214.670361][T12340] genl_rcv_msg+0x614/0x7a0 [ 214.670392][T12340] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.670415][T12340] ? __pfx_nbd_genl_connect+0x10/0x10 [ 214.670453][T12340] netlink_rcv_skb+0x226/0x4a0 [ 214.670475][T12340] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.670500][T12340] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.670536][T12340] ? down_read+0x2be/0x330 [ 214.670574][T12340] genl_rcv+0x28/0x40 [ 214.670595][T12340] netlink_unicast+0x8ef/0xa80 [ 214.670642][T12340] netlink_sendmsg+0x813/0xb40 [ 214.670672][T12340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.670701][T12340] ? apparmor_socket_sendmsg+0x98/0x360 [ 214.670728][T12340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.670746][T12340] sock_sendmsg_nosec+0x14e/0x190 [ 214.670769][T12340] ____sys_sendmsg+0x54e/0x850 [ 214.670799][T12340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.670834][T12340] ? import_iovec+0x73/0xa0 [ 214.670866][T12340] ___sys_sendmsg+0x2a5/0x360 [ 214.670889][T12340] ? __lock_acquire+0x747/0x2de0 [ 214.670913][T12340] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.670978][T12340] ? __fget_files+0x2a/0x420 [ 214.671003][T12340] ? __fget_files+0x3a2/0x420 [ 214.671041][T12340] __x64_sys_sendmsg+0x1b1/0x290 [ 214.671069][T12340] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.671117][T12340] do_syscall_64+0x166/0x520 [ 214.671139][T12340] ? trace_irq_disable+0x3b/0x140 [ 214.671159][T12340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.671178][T12340] ? clear_bhb_loop+0x70/0xc0 [ 214.671201][T12340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.671219][T12340] RIP: 0033:0x7fc1ca79e559 [ 214.671236][T12340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.671251][T12340] RSP: 002b:00007fc1c89f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.671272][T12340] RAX: ffffffffffffffda RBX: 00007fc1caa25fa0 RCX: 00007fc1ca79e559 [ 214.671286][T12340] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000007 [ 214.671298][T12340] RBP: 00007fc1c89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 214.671309][T12340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.671320][T12340] R13: 00007fc1caa26038 R14: 00007fc1caa25fa0 R15: 00007ffde511e738 [ 214.671353][T12340] [ 214.735550][T12344] netlink: 'syz.2.2218': attribute type 11 has an invalid length. [ 215.106890][T12359] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 215.147646][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2224'. [ 215.267443][T12371] No such timeout policy "syz1" [ 215.400514][T12375] netlink: 'syz.0.2230': attribute type 1 has an invalid length. [ 215.445690][T12375] 8021q: adding VLAN 0 to HW filter on device bond13 [ 215.577626][T12387] ip_tables: iptables: counters copy to user failed while replacing table [ 215.627610][T12390] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2235'. [ 215.669974][T12398] ip_tables: iptables: counters copy to user failed while replacing table [ 215.731319][T12402] openvswitch: netlink: IP tunnel dst address not specified [ 215.732644][T12402] netlink: 'syz.4.2240': attribute type 1 has an invalid length. [ 215.811557][T12402] 8021q: adding VLAN 0 to HW filter on device bond25 [ 215.837665][T12400] vlan4: entered promiscuous mode [ 215.837685][T12400] ip6gretap0: entered promiscuous mode [ 216.096777][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2247'. [ 216.099247][T12428] xt_l2tp: invalid flags combination: 8 [ 216.275180][T12434] bridge0: port 3(syz_tun) entered blocking state [ 216.275305][T12434] bridge0: port 3(syz_tun) entered forwarding state [ 216.287105][T12434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.289697][T12434] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.299927][T12434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.423278][T12434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.439184][T12434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.439206][T12434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.453431][T12434] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 216.479992][ T6754] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.481228][ T6754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.495627][ T6754] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.495738][ T6754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.731641][T12459] can: request_module (can-proto-0) failed. [ 216.788094][T12462] No such timeout policy "syz1" [ 216.872536][T12466] sctp: [Deprecated]: syz.3.2256 (pid 12466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.872536][T12466] Use struct sctp_sack_info instead [ 216.874431][T12466] sctp: [Deprecated]: syz.3.2256 (pid 12466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.874431][T12466] Use struct sctp_sack_info instead [ 216.923076][T12466] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 216.927018][T12466] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 216.963739][T12467] netlink: 'syz.4.2258': attribute type 1 has an invalid length. [ 217.008433][T12467] 8021q: adding VLAN 0 to HW filter on device bond26 [ 217.057114][T12467] bond26: (slave veth3): Enslaving as an active interface with a down link [ 217.070981][T12467] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 217.074696][T12467] bond26: (slave batadv1): making interface the new active one [ 217.082055][T12467] batadv1: entered promiscuous mode [ 217.085104][T12467] bond26: (slave batadv1): Enslaving as an active interface with an up link [ 217.143770][T12467] bond26 (unregistering): (slave veth3): Releasing active interface [ 217.154543][T12467] bond26 (unregistering): (slave batadv1): Releasing active interface [ 217.154567][T12467] batadv1: left promiscuous mode [ 217.191413][T12467] bond26 (unregistering): Released all slaves [ 217.276877][T12475] block nbd1: server does not support multiple connections per device. [ 217.287030][T12475] block nbd1: shutting down sockets [ 217.293809][T12472] 8021q: adding VLAN 0 to HW filter on device bond15 [ 217.364291][T12472] netlink: 'syz.2.2260': attribute type 1 has an invalid length. [ 217.367027][T12472] netlink: 'syz.2.2260': attribute type 1 has an invalid length. [ 217.567422][T12488] netlink: 'syz.4.2262': attribute type 1 has an invalid length. [ 217.621486][ C0] TC_ACT_REPEAT abuse ? [ 217.630292][ T6786] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.630331][ T6786] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.630361][ T6786] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.630391][ T6786] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.968940][T12510] veth1_to_team: entered promiscuous mode [ 217.970642][T12510] veth1_to_team: left promiscuous mode [ 218.177559][T12526] sctp: [Deprecated]: syz.1.2279 (pid 12526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.177559][T12526] Use struct sctp_sack_info instead [ 218.177835][T12526] sctp: [Deprecated]: syz.1.2279 (pid 12526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.177835][T12526] Use struct sctp_sack_info instead [ 218.220431][T12526] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 218.222656][T12526] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 218.355921][T12535] syzkaller0: entered promiscuous mode [ 218.355944][T12535] syzkaller0: entered allmulticast mode [ 219.151843][T12553] __nla_validate_parse: 13 callbacks suppressed [ 219.151863][T12553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2290'. [ 219.396428][T12562] can: request_module (can-proto-0) failed. [ 219.452541][T12565] netlink: 'syz.1.2296': attribute type 1 has an invalid length. [ 219.588434][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2296'. [ 221.234461][T12569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.307538][T12571] netlink: 'syz.2.2299': attribute type 1 has an invalid length. [ 221.307585][T12571] netlink: 'syz.2.2299': attribute type 2 has an invalid length. [ 221.512844][T12583] sctp: [Deprecated]: syz.3.2298 (pid 12583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.512844][T12583] Use struct sctp_sack_info instead [ 221.513145][T12583] sctp: [Deprecated]: syz.3.2298 (pid 12583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.513145][T12583] Use struct sctp_sack_info instead [ 221.559391][T12583] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 221.560125][T12583] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 221.933152][T12596] syzkaller0: entered promiscuous mode [ 221.933176][T12596] syzkaller0: entered allmulticast mode [ 222.104794][T12610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2314'. [ 222.311609][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 222.317821][T12612] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 222.339591][T12614] No such timeout policy "syz1" [ 223.104148][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2320'. [ 223.104282][T12626] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2320'. [ 223.205099][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2321'. [ 223.649515][T12610] veth1_to_team: entered promiscuous mode [ 223.651243][T12610] veth1_to_team: left promiscuous mode [ 223.800841][T12640] ip_tables: iptables: counters copy to user failed while replacing table [ 223.872424][T12649] rdma_rxe: rxe_newlink: failed to add bond0 [ 223.886951][T12648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2326'. [ 224.025546][T12656] xt_l2tp: invalid flags combination: 8 [ 224.367045][T12671] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 224.436631][T12675] netlink: 'syz.0.2331': attribute type 1 has an invalid length. [ 224.436651][T12675] netlink: 'syz.0.2331': attribute type 2 has an invalid length. [ 224.844144][T12688] ip6gre1: entered promiscuous mode [ 224.844165][T12688] ip6gre1: entered allmulticast mode [ 224.981902][T12690] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.2339'. [ 224.982016][T12690] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 225.017188][T12690] 0ªX¹¦Dö»: entered allmulticast mode [ 225.025445][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2340'. [ 225.328476][T12705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2343'. [ 225.361374][T12705] veth1_to_team: entered promiscuous mode [ 225.376622][T12705] veth1_to_team: left promiscuous mode [ 225.781750][T12733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2355'. [ 225.829350][T12738] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 225.945946][T12746] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 225.947388][T12746] netlink: 'syz.1.2359': attribute type 3 has an invalid length. [ 225.947406][T12746] netlink: 'syz.1.2359': attribute type 1 has an invalid length. [ 225.947417][T12746] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2359'. [ 225.947454][T12746] NCSI netlink: No device for ifindex 0 [ 226.796129][T12758] xt_bpf: check failed: parse error [ 226.911036][T12750] syzkaller0: entered promiscuous mode [ 226.911061][T12750] syzkaller0: entered allmulticast mode [ 226.944485][T12766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.948936][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2375'. [ 228.004663][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2375'. [ 228.685880][T12783] syzkaller0: entered promiscuous mode [ 228.685899][T12783] syzkaller0: entered allmulticast mode [ 228.720591][T12805] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2376'. [ 228.725712][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2376'. [ 228.938907][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2379'. [ 228.962697][T12812] bond26: option lacp_active: invalid value (5) [ 228.978221][T12812] bond26 (unregistering): Released all slaves [ 229.085446][T12824] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 229.219689][T12828] netlink: 'syz.3.2386': attribute type 1 has an invalid length. [ 229.286461][T12828] 8021q: adding VLAN 0 to HW filter on device bond9 [ 229.307049][T12832] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 229.342166][T12836] veth1_to_team: entered promiscuous mode [ 229.356476][T12836] veth1_to_team: left promiscuous mode [ 229.396980][T12828] macvlan2: entered promiscuous mode [ 229.397000][T12828] macvlan2: entered allmulticast mode [ 229.405451][T12828] bond9: entered promiscuous mode [ 229.408917][T12828] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.409499][T12828] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 229.425443][T12828] bond9: left promiscuous mode [ 229.682133][T12860] block nbd1: server does not support multiple connections per device. [ 229.682503][T12860] block nbd1: shutting down sockets [ 229.704274][T12839] syzkaller0: entered promiscuous mode [ 229.704296][T12839] syzkaller0: entered allmulticast mode [ 230.261252][T12879] No such timeout policy "syz1" [ 231.149775][T12898] __nla_validate_parse: 3 callbacks suppressed [ 231.149794][T12898] netlink: 404 bytes leftover after parsing attributes in process `syz.3.2402'. [ 232.273725][T12948] syzkaller0: entered promiscuous mode [ 232.273746][T12948] syzkaller0: entered allmulticast mode [ 232.778500][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2433'. [ 232.903778][T12984] block nbd1: server does not support multiple connections per device. [ 232.903896][T12984] FAULT_INJECTION: forcing a failure. [ 232.903896][T12984] name failslab, interval 1, probability 0, space 0, times 0 [ 232.903919][T12984] CPU: 0 UID: 0 PID: 12984 Comm: syz.2.2434 Not tainted syzkaller #0 PREEMPT(full) [ 232.903938][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.903947][T12984] Call Trace: [ 232.903954][T12984] [ 232.903962][T12984] dump_stack_lvl+0xe8/0x150 [ 232.903999][T12984] should_fail_ex+0x410/0x560 [ 232.904028][T12984] should_failslab+0xa8/0x100 [ 232.904050][T12984] ? skb_clone+0x212/0x3a0 [ 232.904072][T12984] kmem_cache_alloc_noprof+0xa1/0x600 [ 232.904093][T12984] ? skb_clone+0x212/0x3a0 [ 232.904122][T12984] skb_clone+0x212/0x3a0 [ 232.904143][T12984] ? netlink_broadcast_filtered+0x5a0/0x1070 [ 232.904172][T12984] netlink_broadcast_filtered+0x5ae/0x1070 [ 232.904214][T12984] netlink_broadcast+0x37/0x50 [ 232.904241][T12984] kobject_uevent_net_broadcast+0x378/0x560 [ 232.904267][T12984] kobject_uevent_env+0x566/0x9e0 [ 232.904292][T12984] nbd_config_put+0x2c8/0x7e0 [ 232.904320][T12984] ? __pfx_nbd_config_put+0x10/0x10 [ 232.904360][T12984] ? nbd_start_device+0xa29/0xb30 [ 232.904387][T12984] ? device_create_file+0xf4/0x1b0 [ 232.904411][T12984] nbd_genl_connect+0x19b8/0x1cd0 [ 232.904441][T12984] ? __pfx_nbd_genl_connect+0x10/0x10 [ 232.904465][T12984] ? rcu_is_watching+0x16/0xb0 [ 232.904492][T12984] ? __kmalloc_noprof+0x38c/0x720 [ 232.904514][T12984] ? __nla_parse+0x40/0x60 [ 232.904544][T12984] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 232.904575][T12984] genl_family_rcv_msg_doit+0x233/0x340 [ 232.904608][T12984] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 232.904641][T12984] ? __lock_acquire+0x747/0x2de0 [ 232.904670][T12984] genl_rcv_msg+0x614/0x7a0 [ 232.904699][T12984] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.904719][T12984] ? __pfx_nbd_genl_connect+0x10/0x10 [ 232.904755][T12984] netlink_rcv_skb+0x226/0x4a0 [ 232.904774][T12984] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.904797][T12984] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.904831][T12984] ? down_read+0x2be/0x330 [ 232.904859][T12984] genl_rcv+0x28/0x40 [ 232.904879][T12984] netlink_unicast+0x8ef/0xa80 [ 232.904922][T12984] netlink_sendmsg+0x813/0xb40 [ 232.904950][T12984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.904976][T12984] ? apparmor_socket_sendmsg+0x98/0x360 [ 232.905009][T12984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.905026][T12984] sock_sendmsg_nosec+0x14e/0x190 [ 232.905047][T12984] ____sys_sendmsg+0x54e/0x850 [ 232.905076][T12984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.905109][T12984] ? import_iovec+0x73/0xa0 [ 232.905137][T12984] ___sys_sendmsg+0x2a5/0x360 [ 232.905159][T12984] ? __lock_acquire+0x747/0x2de0 [ 232.905182][T12984] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.905243][T12984] ? __fget_files+0x2a/0x420 [ 232.905266][T12984] ? __fget_files+0x3a2/0x420 [ 232.905302][T12984] __x64_sys_sendmsg+0x1b1/0x290 [ 232.905328][T12984] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 232.905374][T12984] do_syscall_64+0x166/0x520 [ 232.905395][T12984] ? trace_irq_disable+0x3b/0x140 [ 232.905413][T12984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.905431][T12984] ? clear_bhb_loop+0x70/0xc0 [ 232.905452][T12984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.905469][T12984] RIP: 0033:0x7f380db9e559 [ 232.905485][T12984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.905500][T12984] RSP: 002b:00007f380ea78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.905519][T12984] RAX: ffffffffffffffda RBX: 00007f380de25fa0 RCX: 00007f380db9e559 [ 232.905531][T12984] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000007 [ 232.905542][T12984] RBP: 00007f380ea78090 R08: 0000000000000000 R09: 0000000000000000 [ 232.905552][T12984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.905562][T12984] R13: 00007f380de26038 R14: 00007f380de25fa0 R15: 00007ffee633a378 [ 232.905593][T12984] [ 233.121554][T12984] block nbd1: shutting down sockets [ 233.405439][T12993] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2435'. [ 233.495759][T13004] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 233.577209][T12987] syzkaller0: entered promiscuous mode [ 233.577233][T12987] syzkaller0: entered allmulticast mode [ 233.741024][T12995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.795742][T12995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.881260][T12995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.896498][T12995] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 233.932961][T13015] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2442'. [ 233.958623][T13016] netlink: 'syz.2.2441': attribute type 4 has an invalid length. [ 234.010236][T13017] netlink: 'syz.2.2441': attribute type 4 has an invalid length. [ 235.907781][T13020] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 235.993864][T13029] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2445'. [ 236.050405][T13033] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2445'. [ 236.295793][T13048] netlink: 'syz.1.2450': attribute type 3 has an invalid length. [ 236.315766][T13055] netlink: 'syz.4.2451': attribute type 1 has an invalid length. [ 236.390152][T13055] bond26: entered promiscuous mode [ 236.390557][T13055] 8021q: adding VLAN 0 to HW filter on device bond26 [ 236.560029][T13054] 8021q: adding VLAN 0 to HW filter on device bond26 [ 236.568575][T13054] bond26: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 236.568595][T13054] bond26: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 236.575219][T13054] bond26: (slave ip6gre2): making interface the new active one [ 236.575236][T13054] ip6gre2: entered promiscuous mode [ 236.595499][T13054] bond26: (slave ip6gre2): Enslaving as an active interface with an up link [ 236.749209][T13074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2458'. [ 236.761030][T13071] syzkaller0: entered promiscuous mode [ 236.761049][T13071] syzkaller0: entered allmulticast mode [ 236.762431][T13074] FAULT_INJECTION: forcing a failure. [ 236.762431][T13074] name failslab, interval 1, probability 0, space 0, times 0 [ 236.762457][T13074] CPU: 1 UID: 0 PID: 13074 Comm: syz.2.2458 Not tainted syzkaller #0 PREEMPT(full) [ 236.762477][T13074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.762487][T13074] Call Trace: [ 236.762494][T13074] [ 236.762502][T13074] dump_stack_lvl+0xe8/0x150 [ 236.762531][T13074] should_fail_ex+0x410/0x560 [ 236.762559][T13074] ? __alloc_skb+0x1db/0x7a0 [ 236.762579][T13074] should_failslab+0xa8/0x100 [ 236.762604][T13074] ? __alloc_skb+0x1db/0x7a0 [ 236.762623][T13074] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 236.762642][T13074] ? __alloc_skb+0x18d/0x7a0 [ 236.762669][T13074] ? __alloc_skb+0x1db/0x7a0 [ 236.762696][T13074] __alloc_skb+0x1db/0x7a0 [ 236.762721][T13074] netlink_sendmsg+0x5d4/0xb40 [ 236.762749][T13074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.762776][T13074] ? apparmor_socket_sendmsg+0x18b/0x360 [ 236.762803][T13074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.762821][T13074] sock_sendmsg_nosec+0x14e/0x190 [ 236.762841][T13074] ____sys_sendmsg+0x54e/0x850 [ 236.762871][T13074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.762903][T13074] ? import_iovec+0x73/0xa0 [ 236.762933][T13074] ___sys_sendmsg+0x2a5/0x360 [ 236.762954][T13074] ? __lock_acquire+0x747/0x2de0 [ 236.762978][T13074] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.763035][T13074] ? __fget_files+0x2a/0x420 [ 236.763060][T13074] ? __fget_files+0x3a2/0x420 [ 236.763094][T13074] __x64_sys_sendmsg+0x1b1/0x290 [ 236.763121][T13074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.763165][T13074] do_syscall_64+0x166/0x520 [ 236.763186][T13074] ? trace_irq_disable+0x3b/0x140 [ 236.763205][T13074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.763223][T13074] ? clear_bhb_loop+0x70/0xc0 [ 236.763244][T13074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.763261][T13074] RIP: 0033:0x7f380db9e559 [ 236.763278][T13074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.763292][T13074] RSP: 002b:00007f380ea78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.763313][T13074] RAX: ffffffffffffffda RBX: 00007f380de25fa0 RCX: 00007f380db9e559 [ 236.763326][T13074] RDX: 0000000020000000 RSI: 0000200000000600 RDI: 0000000000000009 [ 236.763338][T13074] RBP: 00007f380ea78090 R08: 0000000000000000 R09: 0000000000000000 [ 236.763348][T13074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.763358][T13074] R13: 00007f380de26038 R14: 00007f380de25fa0 R15: 00007ffee633a378 [ 236.763389][T13074] [ 236.841817][T13076] sctp: [Deprecated]: syz.3.2457 (pid 13076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.841817][T13076] Use struct sctp_sack_info instead [ 236.842511][T13076] sctp: [Deprecated]: syz.3.2457 (pid 13076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.842511][T13076] Use struct sctp_sack_info instead [ 236.919446][T13077] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 236.926010][T13077] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 237.340703][T13092] netlink: 'syz.2.2464': attribute type 1 has an invalid length. [ 237.407437][T13092] 8021q: adding VLAN 0 to HW filter on device bond16 [ 237.438573][T13095] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 237.466667][T13092] bond16: entered promiscuous mode [ 237.466687][T13092] bond16: entered allmulticast mode [ 237.723756][T13101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2466'. [ 237.817878][T13108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2469'. [ 237.922203][T13104] macsec1: entered promiscuous mode [ 237.926359][T13115] FAULT_INJECTION: forcing a failure. [ 237.926359][T13115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.926386][T13115] CPU: 1 UID: 0 PID: 13115 Comm: syz.3.2472 Not tainted syzkaller #0 PREEMPT(full) [ 237.926406][T13115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.926416][T13115] Call Trace: [ 237.926423][T13115] [ 237.926431][T13115] dump_stack_lvl+0xe8/0x150 [ 237.926461][T13115] should_fail_ex+0x410/0x560 [ 237.926489][T13115] _copy_from_user+0x2d/0xb0 [ 237.926516][T13115] smc_setsockopt+0x3c0/0xb40 [ 237.926543][T13115] ? __pfx_smc_setsockopt+0x10/0x10 [ 237.926577][T13115] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 237.926600][T13115] ? __pfx_smc_setsockopt+0x10/0x10 [ 237.926621][T13115] do_sock_setsockopt+0x17c/0x1b0 [ 237.926648][T13115] __x64_sys_setsockopt+0x13d/0x1b0 [ 237.926675][T13115] do_syscall_64+0x166/0x520 [ 237.926698][T13115] ? trace_irq_disable+0x3b/0x140 [ 237.926716][T13115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.926735][T13115] ? clear_bhb_loop+0x70/0xc0 [ 237.926757][T13115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.926775][T13115] RIP: 0033:0x7fd59c39e559 [ 237.926795][T13115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.926810][T13115] RSP: 002b:00007fd59d246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.926829][T13115] RAX: ffffffffffffffda RBX: 00007fd59c625fa0 RCX: 00007fd59c39e559 [ 237.926843][T13115] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 237.926853][T13115] RBP: 00007fd59d246090 R08: 0000000000000440 R09: 0000000000000000 [ 237.926864][T13115] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 237.926875][T13115] R13: 00007fd59c626038 R14: 00007fd59c625fa0 R15: 00007ffd98a28558 [ 237.926905][T13115] [ 238.216370][T13122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2475'. [ 238.233064][T13122] veth1_to_team: entered promiscuous mode [ 238.243861][T13122] veth1_to_team: left promiscuous mode [ 238.355584][T13129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2477'. [ 238.475650][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'. [ 238.740896][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2482'. [ 238.882201][T13135] netlink: 868 bytes leftover after parsing attributes in process `syz.2.2477'. [ 238.982179][T13153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2482'. [ 239.293466][T13163] netlink: 'syz.3.2484': attribute type 1 has an invalid length. [ 239.293488][T13163] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2484'. [ 239.472631][T13166] netlink: 'syz.0.2485': attribute type 1 has an invalid length. [ 239.725315][T13186] block nbd1: server does not support multiple connections per device. [ 239.725789][T13186] block nbd1: shutting down sockets [ 240.043541][T13196] No such timeout policy "syz1" [ 240.193076][T13204] ip_tables: iptables: counters copy to user failed while replacing table [ 240.228320][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 240.430414][T13204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.457588][T13213] siw: device registration error -23 [ 240.496878][T13210] geneve1: entered promiscuous mode [ 240.754219][T13211] syzkaller0: entered promiscuous mode [ 240.754242][T13211] syzkaller0: entered allmulticast mode [ 241.570013][T13252] xt_bpf: check failed: parse error [ 243.257975][T13225] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 243.378335][T13268] __nla_validate_parse: 3 callbacks suppressed [ 243.378355][T13268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2519'. [ 243.382865][T13264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2518'. [ 243.582833][T13274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2521'. [ 243.586062][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2524'. [ 243.633539][T13274] veth1_to_team: entered promiscuous mode [ 243.647174][T13274] veth1_to_team: left promiscuous mode [ 243.662487][T13280] ip_tables: iptables: counters copy to user failed while replacing table [ 243.764549][T13284] xt_l2tp: invalid flags combination: 8 [ 243.813670][T13286] xt_bpf: check failed: parse error [ 244.243137][ T5742] bridge0: entered promiscuous mode [ 244.622349][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'. [ 244.626408][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2535'. [ 244.958448][T13318] netlink: 'syz.3.2539': attribute type 1 has an invalid length. [ 245.025569][T13318] 8021q: adding VLAN 0 to HW filter on device bond10 [ 245.055921][T13325] bond9: (slave veth0_to_bond): Releasing active interface [ 245.109620][T13325] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 245.196843][T13318] bond10: entered promiscuous mode [ 245.196865][T13318] bond10: entered allmulticast mode [ 245.483699][T13344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2543'. [ 245.491205][T13344] netlink: 'syz.4.2543': attribute type 1 has an invalid length. [ 245.491224][T13344] netlink: 'syz.4.2543': attribute type 12 has an invalid length. [ 245.491235][T13344] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2543'. [ 245.731637][T13350] block nbd1: server does not support multiple connections per device. [ 245.734452][T13350] block nbd1: shutting down sockets [ 245.927779][T13363] xt_bpf: check failed: parse error [ 246.198379][T13378] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 246.261107][T13382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2558'. [ 246.630586][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2567'. [ 246.790661][T13410] xt_bpf: check failed: parse error [ 246.940680][T13420] netlink: 'syz.4.2575': attribute type 1 has an invalid length. [ 247.046825][T13420] 8021q: adding VLAN 0 to HW filter on device bond27 [ 247.072594][T13428] bond27: entered promiscuous mode [ 247.072615][T13428] bond27: entered allmulticast mode [ 247.134139][T13425] bond27: (slave veth0_to_bond): making interface the new active one [ 247.134164][T13425] veth0_to_bond: entered promiscuous mode [ 247.134349][T13425] veth0_to_bond: entered allmulticast mode [ 247.155342][T13425] bond27: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 247.321432][T13439] netlink: 'syz.3.2581': attribute type 1 has an invalid length. [ 247.358679][T13439] 8021q: adding VLAN 0 to HW filter on device bond11 [ 247.423143][T13439] bond10: (slave veth0_to_bond): Releasing active interface [ 247.455862][T13439] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 247.520678][T13444] bond11: entered promiscuous mode [ 247.520703][T13444] bond11: entered allmulticast mode [ 247.584581][T13445] netlink: 'syz.1.2582': attribute type 1 has an invalid length. [ 247.661808][T13445] 8021q: adding VLAN 0 to HW filter on device bond14 [ 247.755674][T13448] bond14: (slave veth3): Enslaving as a backup interface with a down link [ 247.786436][ T6752] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 247.792568][T13445] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 247.881933][T13461] Bluetooth: hci0: Invalid link key type 28 for 66:55:44:33:22:11 [ 247.889483][ T6752] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 247.917219][T13463] netlink: 'syz.2.2584': attribute type 21 has an invalid length. [ 248.040412][T13460] Bluetooth: MGMT ver 1.23 [ 248.074374][T13469] netlink: 'syz.1.2590': attribute type 1 has an invalid length. [ 248.173349][T13469] 8021q: adding VLAN 0 to HW filter on device bond15 [ 248.207217][T13473] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 248.220699][T13469] bond15: entered promiscuous mode [ 248.222006][T13469] bond15: entered allmulticast mode [ 248.527942][T13487] __nla_validate_parse: 3 callbacks suppressed [ 248.527961][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2594'. [ 248.527977][T13487] 0ªX¹¦Dö»: left allmulticast mode [ 248.528109][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2594'. [ 248.528123][T13487] A link change request failed with some changes committed already. Interface 00ªX¹¦Dö» may have been left with an inconsistent configuration, please check. [ 248.566668][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2595'. [ 248.850125][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2597'. [ 248.862782][T13494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.024371][T13499] can: request_module (can-proto-0) failed. [ 249.045239][T13503] ip_tables: iptables: counters copy to user failed while replacing table [ 249.067845][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2602'. [ 249.150631][T13508] netlink: 'syz.3.2603': attribute type 1 has an invalid length. [ 249.151521][T13503] bridge0: port 3(syz_tun) entered disabled state [ 249.160991][T13503] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.162354][T13503] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.275104][T13503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.380631][T13507] netlink: 'syz.3.2603': attribute type 1 has an invalid length. [ 249.482054][T13508] 8021q: adding VLAN 0 to HW filter on device bond12 [ 249.514814][T13509] bond11: (slave veth0_to_bond): Releasing active interface [ 249.538749][T13509] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 249.563335][T13513] bond12: entered promiscuous mode [ 249.563356][T13513] bond12: entered allmulticast mode [ 249.655037][T13520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2606'. [ 250.071317][T13543] ip6t_rt: too many addresses specified [ 250.247845][T13554] syzkaller1: entered promiscuous mode [ 250.247866][T13554] syzkaller1: entered allmulticast mode [ 250.305526][T13558] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 250.826768][T13580] No such timeout policy "syz1" [ 250.843033][T13579] syzkaller0: entered promiscuous mode [ 250.843053][T13579] syzkaller0: entered allmulticast mode [ 251.189899][T13590] xt_bpf: check failed: parse error [ 251.322743][T13598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2637'. [ 251.328055][T13599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2640'. [ 251.421915][T13600] pimreg1: tun_chr_ioctl cmd 1074025677 [ 251.422020][T13600] pimreg1: linktype set to 270 [ 251.776914][T13616] netlink: 'syz.3.2646': attribute type 1 has an invalid length. [ 251.880063][T13616] 8021q: adding VLAN 0 to HW filter on device bond13 [ 251.924562][T13619] bond13: entered promiscuous mode [ 251.924584][T13619] bond13: entered allmulticast mode [ 251.976007][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 251.985943][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 251.987279][T13618] bond12: (slave veth0_to_bond): Releasing active interface [ 251.987482][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.005351][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.020601][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.023586][T13616] netlink: 'syz.3.2646': attribute type 1 has an invalid length. [ 252.055536][T13618] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 252.089324][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 252.091476][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 252.091789][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.095811][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.097941][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.264561][T13632] netlink: 'syz.0.2651': attribute type 1 has an invalid length. [ 252.309475][T13632] 8021q: adding VLAN 0 to HW filter on device bond14 [ 252.481732][T13636] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2650'. [ 252.766978][T13651] block nbd1: server does not support multiple connections per device. [ 252.767314][T13651] block nbd1: shutting down sockets [ 253.050537][T13666] netlink: 'syz.3.2662': attribute type 1 has an invalid length. [ 253.135948][T13666] 8021q: adding VLAN 0 to HW filter on device bond14 [ 253.156285][T13674] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2664'. [ 253.171122][T13670] bond13: (slave veth0_to_bond): Releasing active interface [ 253.197770][T13670] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 253.200538][T13674] IPVS: Error connecting to the multicast addr [ 253.215120][T13666] bond14: entered promiscuous mode [ 253.215139][T13666] bond14: entered allmulticast mode [ 253.256902][T13666] macvlan2: entered promiscuous mode [ 253.256923][T13666] macvlan2: entered allmulticast mode [ 253.282767][T13623] rxe_eth0 speed is unknown, defaulting to 1000 [ 253.622674][T13657] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 253.622705][T13657] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 253.797185][T13685] openvswitch: netlink: Actions may not be safe on all matching packets [ 254.038511][T13694] __nla_validate_parse: 4 callbacks suppressed [ 254.038529][T13694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2670'. [ 254.083013][T13694] veth1_to_team: entered promiscuous mode [ 254.099762][T13694] veth1_to_team: left promiscuous mode [ 254.247509][T13687] netlink: 'syz.1.2668': attribute type 1 has an invalid length. [ 254.247531][T13687] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2668'. [ 254.660125][T13716] netlink: 'syz.0.2675': attribute type 1 has an invalid length. [ 254.713747][T13716] 8021q: adding VLAN 0 to HW filter on device bond15 [ 254.793453][T13716] bond15: (slave veth0_to_bond): making interface the new active one [ 254.807687][T13724] No such timeout policy "syz1" [ 254.818710][T13716] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 254.883167][T13719] bond15: entered promiscuous mode [ 254.883188][T13719] veth0_to_bond: entered promiscuous mode [ 254.883374][T13719] bond15: entered allmulticast mode [ 254.883386][T13719] veth0_to_bond: entered allmulticast mode [ 254.917774][T13721] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2676'. [ 254.943095][T13716] macvlan0: entered promiscuous mode [ 254.943115][T13716] macvlan0: entered allmulticast mode [ 255.198872][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2682'. [ 255.254340][T13722] syzkaller0: entered promiscuous mode [ 255.254362][T13722] syzkaller0: entered allmulticast mode [ 255.299502][T13739] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2680'. [ 255.487040][T13749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2684'. [ 255.592970][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.466593][T13750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2681'. [ 257.466616][T13750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2681'. [ 257.475656][T13753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.923297][T13780] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2690'. [ 257.959867][T13785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2691'. [ 257.996159][T13785] veth1_to_team: entered promiscuous mode [ 258.010334][T13785] veth1_to_team: left promiscuous mode [ 258.035951][T13623] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.036148][T13623] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.036276][T13623] bridge_slave_0: entered allmulticast mode [ 258.038068][T13623] bridge_slave_0: entered promiscuous mode [ 258.068112][T13623] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.068347][T13623] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.068473][T13623] bridge_slave_1: entered allmulticast mode [ 258.070282][T13623] bridge_slave_1: entered promiscuous mode [ 258.077862][T13791] ip_tables: iptables: counters copy to user failed while replacing table [ 258.315019][T13623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.329197][T13623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.386615][T13800] xt_bpf: check failed: parse error [ 258.460571][T13623] team0: Port device team_slave_0 added [ 258.475162][T13623] team0: Port device team_slave_1 added [ 261.391814][T13824] lo: entered allmulticast mode [ 261.423705][T13810] lo: left allmulticast mode [ 261.498711][T13828] syzkaller0: entered promiscuous mode [ 261.502163][T13828] syzkaller0: entered allmulticast mode [ 261.621894][T13623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.621912][T13623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.621936][T13623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.780135][T13623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.780151][T13623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.780173][T13623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.977104][T13623] hsr_slave_0: entered promiscuous mode [ 261.978053][T13623] hsr_slave_1: entered promiscuous mode [ 262.357477][T13861] xt_bpf: check failed: parse error [ 262.577101][T13869] netlink: 'syz.3.2713': attribute type 1 has an invalid length. [ 262.658858][T13623] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.770112][T13869] 8021q: adding VLAN 0 to HW filter on device bond15 [ 262.780936][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2713'. [ 262.838872][T13870] bond14: (slave veth0_to_bond): Releasing active interface [ 262.880489][T13870] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 262.921737][T13873] bond15: entered promiscuous mode [ 262.921760][T13873] bond15: entered allmulticast mode [ 262.973798][T13869] macvlan3: entered promiscuous mode [ 262.973819][T13869] macvlan3: entered allmulticast mode [ 263.096073][T13623] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.297826][T13623] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.320549][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'. [ 263.392960][T13898] netlink: 'syz.3.2719': attribute type 10 has an invalid length. [ 263.451551][T13898] team0: Port device dummy0 added [ 263.503986][T13623] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.674847][T13872] netlink: 'syz.4.2714': attribute type 1 has an invalid length. [ 263.762290][T13872] 8021q: adding VLAN 0 to HW filter on device bond28 [ 263.943044][T13922] sctp: [Deprecated]: syz.0.2724 (pid 13922) Use of int in max_burst socket option. [ 263.943044][T13922] Use struct sctp_assoc_value instead [ 263.954829][T13920] No such timeout policy "syz1" [ 264.233743][T13623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.243627][T13623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.247509][T13623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.406035][T13623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.406787][T13623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.435571][T13623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.440186][T13623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.448048][T13937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2730'. [ 264.490423][T13623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.626221][T13958] netlink: 'syz.3.2735': attribute type 3 has an invalid length. [ 264.797873][T13965] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 264.842967][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'. [ 264.881015][T13623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.910729][T13623] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.936358][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.936462][ T6786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.968671][T13970] can: request_module (can-proto-0) failed. [ 264.995221][ T6752] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.995321][ T6752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.184762][T13981] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 265.244028][T13982] syzkaller1: entered promiscuous mode [ 265.244048][T13982] syzkaller1: entered allmulticast mode [ 265.261634][T13982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2743'. [ 266.246817][T13623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.317073][T14022] openvswitch: netlink: IP tunnel dst address not specified [ 266.342855][T14022] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2754'. [ 266.403971][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2754'. [ 266.455495][T13623] veth0_vlan: entered promiscuous mode [ 266.502489][T13623] veth1_vlan: entered promiscuous mode [ 266.582272][T14026] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 266.624000][T13623] veth0_macvtap: entered promiscuous mode [ 266.647269][T13623] veth1_macvtap: entered promiscuous mode [ 266.734981][T13623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.774022][T13623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.792686][T14029] ip_tables: iptables: counters copy to user failed while replacing table [ 266.909456][ T6761] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.909498][ T6761] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.909528][ T6761] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.909558][ T6761] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.182858][ T6761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.182878][ T6761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.366334][ T6761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.366354][ T6761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.483468][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2763'. [ 267.549876][T14046] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2762'. [ 268.642878][T14080] syzkaller1: entered promiscuous mode [ 268.642898][T14080] syzkaller1: entered allmulticast mode [ 268.701437][T14080] syzkaller1: left promiscuous mode [ 268.701456][T14080] syzkaller1: left allmulticast mode [ 268.874143][T14089] FAULT_INJECTION: forcing a failure. [ 268.874143][T14089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.874174][T14089] CPU: 1 UID: 0 PID: 14089 Comm: syz.1.2774 Not tainted syzkaller #0 PREEMPT(full) [ 268.874194][T14089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.874206][T14089] Call Trace: [ 268.874213][T14089] [ 268.874221][T14089] dump_stack_lvl+0xe8/0x150 [ 268.874252][T14089] should_fail_ex+0x410/0x560 [ 268.874283][T14089] _copy_from_iter+0x1d3/0x1660 [ 268.874308][T14089] ? __alloc_skb+0x27a/0x7a0 [ 268.874332][T14089] ? __alloc_skb+0x27a/0x7a0 [ 268.874354][T14089] ? __alloc_skb+0x27a/0x7a0 [ 268.874376][T14089] ? __pfx__copy_from_iter+0x10/0x10 [ 268.874406][T14089] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 268.874425][T14089] ? __alloc_skb+0x27a/0x7a0 [ 268.874444][T14089] ? __alloc_skb+0x27a/0x7a0 [ 268.874474][T14089] ? netlink_sendmsg+0x650/0xb40 [ 268.874494][T14089] ? skb_put+0x112/0x210 [ 268.874518][T14089] netlink_sendmsg+0x6c0/0xb40 [ 268.874547][T14089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.874575][T14089] ? apparmor_socket_sendmsg+0x98/0x360 [ 268.874601][T14089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.874619][T14089] sock_sendmsg_nosec+0x14e/0x190 [ 268.874641][T14089] ____sys_sendmsg+0x54e/0x850 [ 268.874670][T14089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.874704][T14089] ? import_iovec+0x73/0xa0 [ 268.874733][T14089] ___sys_sendmsg+0x2a5/0x360 [ 268.874756][T14089] ? __lock_acquire+0x747/0x2de0 [ 268.874780][T14089] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.874840][T14089] ? __fget_files+0x2a/0x420 [ 268.874866][T14089] ? __fget_files+0x3a2/0x420 [ 268.874901][T14089] __x64_sys_sendmsg+0x1b1/0x290 [ 268.874929][T14089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.874975][T14089] do_syscall_64+0x166/0x520 [ 268.874999][T14089] ? trace_irq_disable+0x3b/0x140 [ 268.875018][T14089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.875037][T14089] ? clear_bhb_loop+0x70/0xc0 [ 268.875059][T14089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.875078][T14089] RIP: 0033:0x7fc1ca79e559 [ 268.875095][T14089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.875110][T14089] RSP: 002b:00007fc1c89f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.875130][T14089] RAX: ffffffffffffffda RBX: 00007fc1caa25fa0 RCX: 00007fc1ca79e559 [ 268.875143][T14089] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 268.875155][T14089] RBP: 00007fc1c89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 268.875165][T14089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.875176][T14089] R13: 00007fc1caa26038 R14: 00007fc1caa25fa0 R15: 00007ffde511e738 [ 268.875207][T14089] [ 268.998874][T14091] ip_tables: iptables: counters copy to user failed while replacing table [ 270.738347][T14058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.285479][T14128] No such timeout policy "syz1" [ 271.314609][T14130] xt_bpf: check failed: parse error [ 271.634628][T14145] ip_tables: iptables: counters copy to user failed while replacing table [ 271.975691][T14145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.993050][T14145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.089889][T14158] FAULT_INJECTION: forcing a failure. [ 272.089889][T14158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.089920][T14158] CPU: 1 UID: 0 PID: 14158 Comm: syz.2.2800 Not tainted syzkaller #0 PREEMPT(full) [ 272.089940][T14158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.089951][T14158] Call Trace: [ 272.089958][T14158] [ 272.089966][T14158] dump_stack_lvl+0xe8/0x150 [ 272.089997][T14158] should_fail_ex+0x410/0x560 [ 272.090027][T14158] _copy_from_user+0x2d/0xb0 [ 272.090055][T14158] do_ipv6_setsockopt+0x245/0x2960 [ 272.090081][T14158] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 272.090098][T14158] ? aa_inet_opt_perm+0xae4/0xcf0 [ 272.090123][T14158] ? get_pid_task+0x20/0x1f0 [ 272.090149][T14158] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 272.090190][T14158] ? ksys_write+0x1e6/0x270 [ 272.090219][T14158] ? lock_acquire+0x115/0x350 [ 272.090247][T14158] ? aa_sock_opt_perm+0xe1/0x1e0 [ 272.090278][T14158] ipv6_setsockopt+0x59/0x170 [ 272.090295][T14158] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 272.090319][T14158] do_sock_setsockopt+0x17c/0x1b0 [ 272.090346][T14158] __x64_sys_setsockopt+0x13d/0x1b0 [ 272.090375][T14158] do_syscall_64+0x166/0x520 [ 272.090397][T14158] ? trace_irq_disable+0x3b/0x140 [ 272.090416][T14158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.090435][T14158] ? clear_bhb_loop+0x70/0xc0 [ 272.090457][T14158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.090475][T14158] RIP: 0033:0x7f6ebd79e559 [ 272.090492][T14158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.090506][T14158] RSP: 002b:00007f6ebe5b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 272.090525][T14158] RAX: ffffffffffffffda RBX: 00007f6ebda25fa0 RCX: 00007f6ebd79e559 [ 272.090537][T14158] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 272.090548][T14158] RBP: 00007f6ebe5b2090 R08: 0000000000000560 R09: 0000000000000000 [ 272.090560][T14158] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000001 [ 272.090570][T14158] R13: 00007f6ebda26038 R14: 00007f6ebda25fa0 R15: 00007fffe0d9b228 [ 272.090608][T14158] [ 272.383747][T14164] block nbd1: server does not support multiple connections per device. [ 272.384089][T14164] block nbd1: shutting down sockets [ 272.388438][T14166] xt_bpf: check failed: parse error [ 272.486421][T14170] sctp: [Deprecated]: syz.4.2803 (pid 14170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.486421][T14170] Use struct sctp_sack_info instead [ 272.487873][T14170] sctp: [Deprecated]: syz.4.2803 (pid 14170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.487873][T14170] Use struct sctp_sack_info instead [ 272.730168][T14178] syzkaller0: entered promiscuous mode [ 272.730189][T14178] syzkaller0: entered allmulticast mode [ 272.754989][T14178] tc mirred to Houston: device batadv_slave_0 is down [ 272.843524][T14183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2808'. [ 272.891350][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2808'. [ 273.246683][T14195] siw: device registration error -23 [ 273.478568][T14207] No such timeout policy "syz1" [ 273.768948][T14217] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2821'. [ 274.106705][T14231] sctp: [Deprecated]: syz.3.2825 (pid 14231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.106705][T14231] Use struct sctp_sack_info instead [ 274.106943][T14231] sctp: [Deprecated]: syz.3.2825 (pid 14231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.106943][T14231] Use struct sctp_sack_info instead [ 274.154224][T14231] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 274.157703][T14231] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 274.161668][T14234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2826'. [ 274.296768][T14236] siw: device registration error -23 [ 274.696655][T14252] openvswitch: netlink: IP tunnel TTL not specified. [ 274.696686][T14252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.738998][T14254] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 274.742910][T14254] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 274.744272][T14254] netlink: 'syz.0.2834': attribute type 10 has an invalid length. [ 275.056236][T14268] siw: device registration error -23 [ 275.216782][T14275] FAULT_INJECTION: forcing a failure. [ 275.216782][T14275] name failslab, interval 1, probability 0, space 0, times 0 [ 275.216813][T14275] CPU: 0 UID: 0 PID: 14275 Comm: syz.3.2843 Not tainted syzkaller #0 PREEMPT(full) [ 275.216833][T14275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.216852][T14275] Call Trace: [ 275.216859][T14275] [ 275.216867][T14275] dump_stack_lvl+0xe8/0x150 [ 275.216898][T14275] should_fail_ex+0x410/0x560 [ 275.216928][T14275] should_failslab+0xa8/0x100 [ 275.216954][T14275] __kvmalloc_node_noprof+0x176/0x820 [ 275.216976][T14275] ? kasan_save_track+0x3e/0x80 [ 275.216997][T14275] ? __kvmalloc_node_noprof+0x50f/0x820 [ 275.217017][T14275] ? xt_alloc_table_info+0x40/0xb0 [ 275.217044][T14275] ? do_ip6t_set_ctl+0x96b/0xe30 [ 275.217068][T14275] ? translate_table+0x1a8/0x2110 [ 275.217090][T14275] ? translate_table+0x1a8/0x2110 [ 275.217121][T14275] translate_table+0x1a8/0x2110 [ 275.217144][T14275] ? __lock_acquire+0x747/0x2de0 [ 275.217183][T14275] ? __pfx_translate_table+0x10/0x10 [ 275.217207][T14275] ? lock_acquire+0x115/0x350 [ 275.217245][T14275] ? _copy_from_user+0x94/0xb0 [ 275.217276][T14275] do_ip6t_set_ctl+0xa5c/0xe30 [ 275.217309][T14275] ? rcu_is_watching+0x16/0xb0 [ 275.217332][T14275] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 275.217371][T14275] ? __mutex_unlock_slowpath+0x731/0x900 [ 275.217402][T14275] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.217440][T14275] nf_setsockopt+0x26f/0x290 [ 275.217467][T14275] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 275.217489][T14275] do_sock_setsockopt+0x17c/0x1b0 [ 275.217518][T14275] __x64_sys_setsockopt+0x13d/0x1b0 [ 275.217546][T14275] do_syscall_64+0x166/0x520 [ 275.217569][T14275] ? trace_irq_disable+0x3b/0x140 [ 275.217588][T14275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.217607][T14275] ? clear_bhb_loop+0x70/0xc0 [ 275.217628][T14275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.217646][T14275] RIP: 0033:0x7fd59c39e559 [ 275.217663][T14275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.217677][T14275] RSP: 002b:00007fd59d246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 275.217697][T14275] RAX: ffffffffffffffda RBX: 00007fd59c625fa0 RCX: 00007fd59c39e559 [ 275.217710][T14275] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 275.217721][T14275] RBP: 00007fd59d246090 R08: 0000000000000560 R09: 0000000000000000 [ 275.217732][T14275] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000001 [ 275.217743][T14275] R13: 00007fd59c626038 R14: 00007fd59c625fa0 R15: 00007ffd98a28558 [ 275.217772][T14275] [ 275.436142][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 275.583713][T14285] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20000 [ 275.617667][T14287] xt_bpf: check failed: parse error [ 275.639410][T14286] netlink: 'syz.2.2847': attribute type 1 has an invalid length. [ 275.700271][T14286] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.733913][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2847'. [ 275.795736][T14292] sctp: [Deprecated]: syz.1.2849 (pid 14292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.795736][T14292] Use struct sctp_sack_info instead [ 275.890158][T14292] sctp: [Deprecated]: syz.1.2849 (pid 14292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.890158][T14292] Use struct sctp_sack_info instead [ 275.952351][T14296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2852'. [ 275.981183][T14296] veth1_to_team: entered promiscuous mode [ 275.995723][T14296] veth1_to_team: left promiscuous mode [ 276.193314][T14298] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 276.193314][T14298] Please contact the netfilter-devel mailing list or update your nftables rules. [ 276.323799][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2859'. [ 276.394308][T14315] openvswitch: netlink: Flow actions attr not present in new flow. [ 276.396699][T14315] sctp: [Deprecated]: syz.0.2859 (pid 14315) Use of int in maxseg socket option. [ 276.396699][T14315] Use struct sctp_assoc_value instead [ 276.631807][T14327] No such timeout policy "syz1" [ 276.903573][T14336] geneve1: entered promiscuous mode [ 276.905289][T14336] siw: device registration error -23 [ 276.924970][T14338] netlink: 'syz.3.2867': attribute type 21 has an invalid length. [ 276.924988][T14338] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2867'. [ 276.925054][T14338] netlink: 'syz.3.2867': attribute type 4 has an invalid length. [ 276.925066][T14338] netlink: 'syz.3.2867': attribute type 5 has an invalid length. [ 276.925077][T14338] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2867'. [ 277.476050][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2874'. [ 277.893742][T14376] Bluetooth: hci0: Invalid link address type 1 for 66:55:44:23:22:11 [ 278.043001][T14386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2886'. [ 278.352002][T14401] siw: device registration error -23 [ 278.409731][T14409] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2893'. [ 278.702603][T14414] block nbd1: server does not support multiple connections per device. [ 278.702874][T14414] block nbd1: shutting down sockets [ 278.724421][T14418] sctp: [Deprecated]: syz.2.2896 (pid 14418) Use of int in maxseg socket option. [ 278.724421][T14418] Use struct sctp_assoc_value instead [ 278.982736][T14433] xt_bpf: check failed: parse error [ 279.226637][T14439] siw: device registration error -23 [ 279.381386][T14449] openvswitch: netlink: Flow actions attr not present in new flow. [ 279.707582][T14463] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.719941][ T5810] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 279.778697][ T5810] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 279.990945][T14472] bond16: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 279.998044][T14472] bond16 (unregistering): Released all slaves [ 280.085650][T14485] siw: device registration error -23 [ 280.183288][T14482] geneve1: entered promiscuous mode [ 280.558719][ T6786] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 280.558760][ T6786] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 280.558791][ T6786] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 280.558820][ T6786] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 281.137964][T14524] can: request_module (can-proto-0) failed. [ 281.216661][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.226747][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.228506][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.243703][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.246511][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.325793][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.327036][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.327334][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.348736][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.349351][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.580411][ T5613] bond0: (slave syz_tun): Releasing backup interface [ 281.585399][ T5613] syz_tun (unregistering): left allmulticast mode [ 281.976513][T14552] netlink: 'syz.4.2935': attribute type 1 has an invalid length. [ 282.005627][T14552] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 282.267327][T14567] siw: device registration error -23 [ 282.360741][T14569] pim6reg1: entered promiscuous mode [ 282.360762][T14569] pim6reg1: entered allmulticast mode [ 282.373462][T14529] rxe_eth0 speed is unknown, defaulting to 1000 [ 282.580589][T14578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2944'. [ 282.592161][T14573] ovs0: entered promiscuous mode [ 282.616507][T14578] veth1_to_team: entered promiscuous mode [ 282.643904][T14578] veth1_to_team: left promiscuous mode [ 282.753296][T14587] No such timeout policy "syz1" [ 282.765446][T14584] ip_tables: iptables: counters copy to user failed while replacing table [ 282.884593][T14590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2947'. [ 282.986728][T14584] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.214710][T14584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.222034][T14584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.373966][T14597] netlink: 'syz.4.2949': attribute type 1 has an invalid length. [ 283.428858][ T5616] Bluetooth: hci4: command tx timeout [ 283.531471][T14597] bond29: entered promiscuous mode [ 283.531546][T14597] bond29: entered allmulticast mode [ 283.531868][T14597] 8021q: adding VLAN 0 to HW filter on device bond29 [ 283.542672][ T6752] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.542701][ T6752] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 283.542737][ T6752] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.542759][ T6752] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 283.542790][ T6752] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.542812][ T6752] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 283.542844][ T6752] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.542865][ T6752] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 283.552423][T14609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2954'. [ 283.557703][T14609] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 283.650966][T14600] erspan1: entered allmulticast mode [ 283.654283][T14616] xt_bpf: check failed: parse error [ 283.670688][T14600] bond29: (slave erspan1): making interface the new active one [ 283.670709][T14600] erspan1: entered promiscuous mode [ 283.693491][T14600] bond29: (slave erspan1): Enslaving as an active interface with an up link [ 283.938506][T14619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2956'. [ 283.947326][T14620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2956'. [ 283.969925][T14619] ipvlan0: entered allmulticast mode [ 283.993951][T14624] ip_tables: iptables: counters copy to user failed while replacing table [ 284.085615][T14620] ipvlan0: entered allmulticast mode [ 284.265480][T14606] siw: device registration error -23 [ 284.707377][T14643] ip_tables: iptables: counters copy to user failed while replacing table [ 284.967993][T14529] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.968256][T14529] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.968631][T14529] bridge_slave_0: entered allmulticast mode [ 284.970384][T14529] bridge_slave_0: entered promiscuous mode [ 284.973233][T14529] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.973383][T14529] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.973499][T14529] bridge_slave_1: entered allmulticast mode [ 284.975165][T14529] bridge_slave_1: entered promiscuous mode [ 285.007432][T14529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.010961][T14529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.045224][T14529] team0: Port device team_slave_0 added [ 285.055122][T14529] team0: Port device team_slave_1 added [ 285.168455][T14529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.168472][T14529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.168501][T14529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.177271][T14529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.177285][T14529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.177307][T14529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.196573][T14664] siw: device registration error -23 [ 285.304307][T14668] No such timeout policy "syz1" [ 285.382440][T14529] hsr_slave_0: entered promiscuous mode [ 285.387216][T14529] hsr_slave_1: entered promiscuous mode [ 285.389786][T14529] debugfs: 'hsr0' already exists in 'hsr' [ 285.389802][T14529] Cannot create hsr debugfs directory [ 285.407193][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2974'. [ 285.407227][T14671] netlink: 'syz.2.2974': attribute type 1 has an invalid length. [ 285.508234][ T5616] Bluetooth: hci4: command tx timeout [ 285.853561][T14690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2979'. [ 286.065730][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.065752][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.065767][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.065777][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.065992][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.066004][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.066014][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.066024][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.066222][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.066233][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.066243][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.066253][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.066444][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.066455][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.066465][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.066475][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.066662][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.066673][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.066683][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.066692][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.066882][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.066893][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.066902][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.066912][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.067110][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.067120][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.067130][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.067140][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.202586][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.202605][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.202616][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.202626][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.202814][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.202825][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.202835][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.202844][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.203046][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.203057][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.203065][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.203075][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.203255][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.203265][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.203275][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.203284][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.203465][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.203475][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.203484][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.203495][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.203678][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.203688][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.203698][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.203707][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.203884][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.203895][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.203904][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.203914][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.232592][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.232610][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.232620][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.232630][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.232822][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.232832][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.232842][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.232851][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.233028][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.233038][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.233047][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.233057][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.235677][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.235692][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.235703][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.235713][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.235918][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.235929][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.235939][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.235948][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.236128][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.246451][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.246466][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.246476][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.246688][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.246700][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.246709][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.246719][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.246906][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.246916][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.246925][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.246935][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.253518][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.253533][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.253543][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.253552][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.253753][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.253764][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.253773][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.253783][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.253962][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.253973][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.253982][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.253991][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.254170][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.254180][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.254189][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.254199][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.265061][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.265077][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.265087][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.265096][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.265281][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.265291][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.265301][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.265310][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.265584][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.265596][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.265605][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.265614][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.265798][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.265808][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.265817][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.265826][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.266005][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.266015][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.266024][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.266033][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.266211][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.266221][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.266230][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.266239][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.266416][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.266426][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.266435][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.266445][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.279826][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.279841][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.279852][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.279861][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.280045][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.280056][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.280065][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.280072][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.280320][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.280331][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.280341][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.280351][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.280529][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.280539][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.280549][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.280565][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.280750][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.280760][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.280769][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.280779][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.280962][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.280972][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.280981][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.280991][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.281169][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.281179][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.286487][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.286502][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.287855][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.287867][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.287877][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.287887][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.288073][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.288084][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.288093][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.288103][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.291035][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.291050][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.291059][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.291068][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.291247][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.291258][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.291268][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.291277][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.291453][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.291463][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.291473][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.291482][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.291673][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.291684][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.291693][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.291703][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.300063][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.300078][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.300089][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.300099][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.300285][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.300297][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.300306][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.300315][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.300501][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.300512][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.300521][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.300531][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.300724][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.300733][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.300743][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.300753][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.300935][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.300945][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.300954][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.300964][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.304344][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.304357][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.304367][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.304376][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.306016][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.306030][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.306040][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.306049][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.306240][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.306251][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.306260][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.306270][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.306449][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.306461][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.306470][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.306479][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.306669][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.306680][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.306689][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.306699][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.310702][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.310717][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.310727][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.310737][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.310924][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.310934][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.310944][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.310953][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.311532][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.311544][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.311553][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.311570][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.311827][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.311837][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.311847][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.311856][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.312053][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.312063][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.312072][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.312082][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.312259][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.312270][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.312279][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.312288][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.312472][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.312482][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.312491][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.312500][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.316820][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.316835][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.316845][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.316855][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.322636][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.322651][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.322662][T14697] Bluetooth: hci0: unsupported parameter 5161 [ 286.322671][T14697] Bluetooth: hci0: unsupported parameter 8192 [ 286.672025][T14710] siw: device registration error -23 [ 287.299741][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2991'. [ 287.304516][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2988'. [ 287.330374][T14719] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 287.343526][T14719] nbd: couldn't find a device at index 0 [ 287.355653][T14721] netlink: 598 bytes leftover after parsing attributes in process `syz.4.2990'. [ 287.420593][T14721] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2990'. [ 287.591510][ T5616] Bluetooth: hci4: command tx timeout [ 287.785659][T14529] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 287.809431][T14529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 287.810179][T14529] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 287.816925][T14529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 287.847813][T14529] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 287.864071][T14529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 287.866403][T14529] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 287.884798][T14529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 288.046847][T14529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.080800][T14529] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.086149][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.086260][ T6761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.117046][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.117144][ T6786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.317632][T14744] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2997'. [ 288.329467][T14744] netlink: ct family unspecified [ 288.329502][T14744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.592797][T14758] xt_bpf: check failed: parse error [ 289.169597][T14791] block nbd1: server does not support multiple connections per device. [ 289.169912][T14791] block nbd1: shutting down sockets [ 289.170063][T14788] bridge3: entered allmulticast mode [ 289.385957][T14529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.570211][T14529] veth0_vlan: entered promiscuous mode [ 289.604563][T14529] veth1_vlan: entered promiscuous mode [ 289.657199][T14809] ip_tables: iptables: counters copy to user failed while replacing table [ 289.669395][ T5616] Bluetooth: hci4: command tx timeout [ 289.735985][T14529] veth0_macvtap: entered promiscuous mode [ 289.770107][T14529] veth1_macvtap: entered promiscuous mode [ 289.819882][T14529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.852983][T14529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.898687][ T6761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.898727][ T6761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.898758][ T6761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.898787][ T6761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.988051][T14820] No such timeout policy "syz1" [ 290.001377][T14797] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 290.001399][T14797] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 290.200223][T14824] netlink: 'syz.0.3027': attribute type 1 has an invalid length. [ 290.207955][T14824] __nla_validate_parse: 1 callbacks suppressed [ 290.207971][T14824] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3027'. [ 290.220847][ T6786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.220865][ T6786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.324080][T14826] ip_tables: iptables: counters copy to user failed while replacing table [ 290.348354][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3025'. [ 290.348383][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3025'. [ 290.442109][ T6752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.442128][ T6752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.883507][T14852] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3034'. [ 291.015493][T14859] netlink: NAT attribute has 5 unknown bytes [ 291.015533][T14859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.114171][T14862] No such timeout policy "syz1" [ 291.182500][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.186748][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.204680][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.221761][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.222367][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 291.471789][T14875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3043'. [ 291.483298][T14875] veth1_to_team: entered promiscuous mode [ 291.499126][T14875] veth1_to_team: left promiscuous mode [ 291.631865][T14859] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 291.740959][T14885] xt_bpf: check failed: parse error [ 291.750014][T14879] xt_CT: No such helper "snmp_trap" [ 292.005600][T14894] bridge1: entered promiscuous mode [ 292.132284][T14900] No such timeout policy "syz1" [ 292.237240][T14906] macsec0: entered promiscuous mode [ 292.246861][T14906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3054'. [ 292.261767][T14906] macsec0 (unregistering): left promiscuous mode [ 292.362936][T14912] xt_IDLETIMER: timeout value is zero [ 292.367883][T14915] xt_nat: multiple ranges no longer supported [ 292.498821][T14915] macsec3: entered promiscuous mode [ 292.498842][T14915] bridge0: entered promiscuous mode [ 292.520179][ T6761] [ 292.522534][ T6761] ============================================ [ 292.528679][ T6761] WARNING: possible recursive locking detected [ 292.534831][ T6761] syzkaller #0 Not tainted [ 292.539238][ T6761] -------------------------------------------- [ 292.545402][ T6761] kworker/u8:31/6761 is trying to acquire lock: [ 292.551632][ T6761] ffff88807a3a9158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 292.561476][ T6761] [ 292.561476][ T6761] but task is already holding lock: [ 292.568826][ T6761] ffff888027cf7d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 292.578666][ T6761] [ 292.578666][ T6761] other info that might help us debug this: [ 292.586730][ T6761] Possible unsafe locking scenario: [ 292.586730][ T6761] [ 292.594181][ T6761] CPU0 [ 292.597466][ T6761] ---- [ 292.600738][ T6761] lock(&qdisc_xmit_lock_key#4); [ 292.605766][ T6761] lock(&qdisc_xmit_lock_key#4); [ 292.610790][ T6761] [ 292.610790][ T6761] *** DEADLOCK *** [ 292.610790][ T6761] [ 292.618917][ T6761] May be due to missing lock nesting notation [ 292.618917][ T6761] [ 292.627230][ T6761] locks held by kworker/u8:31/6761: 11, last CPU#1: [ 292.633816][ T6761] #0: ffff88803b1e0140 ((wq_completion)bond29){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 292.644794][ T6761] #1: ffffc900036d7c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 292.657656][ T6761] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf0/0x1840 [ 292.667218][ T6761] #3: ffffffff8fd5c940 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 292.677144][ T6761] #4: ffff888042ede228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x114e/0x3920 [ 292.689753][ T6761] #5: ffff888027cf7d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 292.700010][ T6761] #6: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 292.708881][ T6761] #7: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 292.718612][ T6761] #8: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 292.727411][ T6761] #9: ffffffff8fd5c940 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 292.737327][ T6761] #10: ffff88807af39228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x114e/0x3920 [ 292.750021][ T6761] [ 292.750021][ T6761] stack backtrace: [ 292.755893][ T6761] CPU: 1 UID: 0 PID: 6761 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 292.765418][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.775457][ T6761] Workqueue: bond29 bond_alb_monitor [ 292.780736][ T6761] Call Trace: [ 292.784001][ T6761] [ 292.786922][ T6761] dump_stack_lvl+0xe8/0x150 [ 292.791505][ T6761] print_deadlock_bug+0x27a/0x290 [ 292.796520][ T6761] __lock_acquire+0x25db/0x2de0 [ 292.801369][ T6761] ? __pfx___netif_skb_features+0x10/0x10 [ 292.807086][ T6761] ? ret_from_fork_asm+0x1a/0x30 [ 292.812017][ T6761] ? __lock_acquire+0x747/0x2de0 [ 292.816947][ T6761] lock_acquire+0x115/0x350 [ 292.821436][ T6761] ? sch_direct_xmit+0x15f/0x4c0 [ 292.826370][ T6761] _raw_spin_lock+0x2e/0x40 [ 292.830858][ T6761] ? sch_direct_xmit+0x15f/0x4c0 [ 292.835782][ T6761] sch_direct_xmit+0x15f/0x4c0 [ 292.840536][ T6761] ? __pfx_sch_direct_xmit+0x10/0x10 [ 292.845823][ T6761] ? arp_solicit+0xbc0/0xe40 [ 292.850404][ T6761] __dev_queue_xmit+0x179a/0x3920 [ 292.855453][ T6761] ? __dev_queue_xmit+0x29b/0x3920 [ 292.860554][ T6761] ? lockdep_hardirqs_on+0x7b/0x110 [ 292.865742][ T6761] ? __lock_acquire+0x747/0x2de0 [ 292.870662][ T6761] ? arpt_do_table+0x25b/0x1f90 [ 292.875495][ T6761] ? __pfx___dev_queue_xmit+0x10/0x10 [ 292.880867][ T6761] ? __pfx_arpt_do_table+0x10/0x10 [ 292.885966][ T6761] ? NF_HOOK+0xa2/0x3c0 [ 292.890128][ T6761] NF_HOOK+0x33a/0x3c0 [ 292.894189][ T6761] ? __pfx_arp_xmit_finish+0x10/0x10 [ 292.899459][ T6761] ? NF_HOOK+0xa2/0x3c0 [ 292.903615][ T6761] ? __pfx_NF_HOOK+0x10/0x10 [ 292.908209][ T6761] ? lock_acquire+0x115/0x350 [ 292.912874][ T6761] ? __pfx_arp_xmit_finish+0x10/0x10 [ 292.918146][ T6761] ? inet_addr_type_dev_table+0x25/0x190 [ 292.923799][ T6761] arp_xmit+0x16c/0x270 [ 292.927955][ T6761] ? arp_xmit+0x23/0x270 [ 292.932185][ T6761] arp_solicit+0xbdc/0xe40 [ 292.936594][ T6761] ? __pfx_arp_solicit+0x10/0x10 [ 292.941520][ T6761] ? __neigh_event_send+0xea4/0x1510 [ 292.946791][ T6761] ? __pfx_arp_solicit+0x10/0x10 [ 292.951721][ T6761] __neigh_event_send+0xf0c/0x1510 [ 292.956830][ T6761] neigh_resolve_output+0x1a1/0x720 [ 292.962023][ T6761] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 292.967040][ T6761] ? ip_finish_output2+0x3de/0x10b0 [ 292.972225][ T6761] ip_finish_output2+0xc4b/0x10b0 [ 292.977265][ T6761] ? ip_skb_dst_mtu+0x811/0xa50 [ 292.982129][ T6761] ? ip_finish_output2+0x3de/0x10b0 [ 292.987329][ T6761] ? ip_finish_output+0x40b/0x530 [ 292.992346][ T6761] ip_output+0x29f/0x450 [ 292.996579][ T6761] ? ip_output+0x5a/0x450 [ 293.000908][ T6761] iptunnel_xmit+0x626/0xd10 [ 293.005491][ T6761] ip_tunnel_xmit+0x195b/0x2040 [ 293.010337][ T6761] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 293.015525][ T6761] ? __gre_xmit+0x106/0x1a0 [ 293.020013][ T6761] erspan_xmit+0xb6a/0x1620 [ 293.024511][ T6761] ? __pfx_erspan_xmit+0x10/0x10 [ 293.029437][ T6761] ? __lock_acquire+0x747/0x2de0 [ 293.034366][ T6761] dev_hard_start_xmit+0x2cd/0x830 [ 293.039503][ T6761] sch_direct_xmit+0x257/0x4c0 [ 293.044270][ T6761] ? __pfx_sch_direct_xmit+0x10/0x10 [ 293.049545][ T6761] ? __switch_to_asm+0x50/0x70 [ 293.054325][ T6761] __dev_queue_xmit+0x179a/0x3920 [ 293.059344][ T6761] ? __dev_queue_xmit+0x29b/0x3920 [ 293.064454][ T6761] ? __pfx___dev_queue_xmit+0x10/0x10 [ 293.069819][ T6761] ? __alloc_skb+0x27a/0x7a0 [ 293.074398][ T6761] ? rcu_is_watching+0x16/0xb0 [ 293.079151][ T6761] ? __alloc_skb+0x27a/0x7a0 [ 293.083728][ T6761] ? trace_kmem_cache_alloc+0x29/0xe0 [ 293.089106][ T6761] ? __alloc_skb+0x27a/0x7a0 [ 293.093680][ T6761] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 293.099734][ T6761] ? __alloc_skb+0x4d0/0x7a0 [ 293.104310][ T6761] ? alb_send_lp_vid+0x14e/0x550 [ 293.109235][ T6761] alb_send_lp_vid+0x348/0x550 [ 293.113996][ T6761] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 293.119289][ T6761] alb_send_learning_packets+0x12c/0x300 [ 293.124915][ T6761] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 293.131061][ T6761] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 293.137464][ T6761] bond_alb_monitor+0x3da/0x1840 [ 293.142392][ T6761] ? bond_alb_monitor+0xf0/0x1840 [ 293.147404][ T6761] ? lock_acquire+0x115/0x350 [ 293.152079][ T6761] ? __pfx_bond_alb_monitor+0x10/0x10 [ 293.157438][ T6761] ? rcu_is_watching+0x16/0xb0 [ 293.162192][ T6761] ? process_scheduled_works+0x97a/0x1630 [ 293.167902][ T6761] process_scheduled_works+0xc3d/0x1630 [ 293.173463][ T6761] ? __pfx_process_scheduled_works+0x10/0x10 [ 293.179436][ T6761] ? assign_work+0x3cf/0x5d0 [ 293.184031][ T6761] worker_thread+0xa47/0xfb0 [ 293.188640][ T6761] kthread+0x38b/0x480 [ 293.192703][ T6761] ? __pfx_worker_thread+0x10/0x10 [ 293.197812][ T6761] ? __pfx_kthread+0x10/0x10 [ 293.202389][ T6761] ret_from_fork+0x514/0xb70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 293.206978][ T6761] ? __pfx_ret_from_fork+0x10/0x10 [ 293.212083][ T6761] ? __switch_to+0xc89/0x1420 [ 293.216754][ T6761] ? __pfx_kthread+0x10/0x10 [ 293.221334][ T6761] ret_from_fork_asm+0x1a/0x30 [ 293.226099][ T6761] [ 293.256998][T14865] rxe_eth0 speed is unknown, defaulting to 1000 [ 293.269988][ T5625] Bluetooth: hci1: command tx timeout [ 293.900959][ T6786] bond5 (unregistering): (slave gretap1): Releasing active interface [ 293.922088][ T6786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.923165][ T6786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.923717][ T6786] bond0 (unregistering): Released all slaves [ 293.926513][ T6786] bond1 (unregistering): Released all slaves [ 293.938211][ T6786] bond2 (unregistering): Released all slaves [ 293.943025][ T6786] bond3 (unregistering): Released all slaves [ 293.947847][ T6786] bond4 (unregistering): Released all slaves [ 293.953678][ T6786] bond5 (unregistering): Released all slaves [ 293.960749][ T6786] bond6 (unregistering): Released all slaves [ 293.967607][ T6786] bond7 (unregistering): Released all slaves [ 293.974513][ T6786] bond8 (unregistering): Released all slaves [ 293.981884][ T6786] bond9 (unregistering): Released all slaves [ 293.990423][ T6786] bond10 (unregistering): Released all slaves [ 294.003797][ T6786] bond11 (unregistering): Released all slaves [ 294.022559][ T6786] bond12 (unregistering): Released all slaves [ 294.027397][ T6786] bond13 (unregistering): Released all slaves [ 294.046766][ T6786] bond14 (unregistering): Released all slaves [ 294.066928][ T6786] bond15 (unregistering): (slave veth0_to_bond): Releasing active interface [ 294.067436][ T6786] bond15 (unregistering): Released all slaves [ 294.116590][ T5614] syz_tun (unregistering): left allmulticast mode [ 294.116613][ T5614] syz_tun (unregistering): left promiscuous mode [ 294.116666][ T5614] bridge0: port 3(syz_tun) entered disabled state [ 294.873325][ T6754] smc: removing ib device syz0 [ 294.900742][ T6786] team0 (unregistering): Port device team_slave_1 removed [ 294.905396][ T6786] team0 (unregistering): Port device team_slave_0 removed [ 294.964362][ T6786] team0 (unregistering): Port device dummy0 removed [ 295.003076][ T6754] smbdirect: ib_dev[syz0] removed [ 295.348826][ T5625] Bluetooth: hci1: command tx timeout [ 295.680010][ T6786] IPVS: stop unused estimator thread 0... [ 295.909406][ T6786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.975530][ T6786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.024242][ T6786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.152814][ T6786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.222733][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.223937][ T6786] bridge_slave_0: left allmulticast mode [ 296.223955][ T6786] bridge_slave_0: left promiscuous mode [ 296.224082][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.252344][ T6786] bridge_slave_1: left allmulticast mode [ 296.252363][ T6786] bridge_slave_1: left promiscuous mode [ 296.252482][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.253919][ T6786] bridge_slave_0: left allmulticast mode [ 296.253935][ T6786] bridge_slave_0: left promiscuous mode [ 296.254042][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.391909][ T6786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.393690][ T6786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.394216][ T6786] bond0 (unregistering): Released all slaves [ 296.468486][ T6786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.471351][ T6786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.472269][ T6786] bond0 (unregistering): Released all slaves [ 296.999837][ T6786] hsr_slave_0: left promiscuous mode [ 297.013690][ T6786] hsr_slave_1: left promiscuous mode [ 297.023922][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.027614][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.044230][ T6786] hsr_slave_0: left promiscuous mode [ 297.044611][ T6786] hsr_slave_1: left promiscuous mode [ 297.045049][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.045064][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.045581][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.045595][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.055514][ T6786] veth1_macvtap: left promiscuous mode [ 297.055537][ T6786] veth0_macvtap: left promiscuous mode [ 297.055594][ T6786] veth1_vlan: left promiscuous mode [ 297.055633][ T6786] veth0_vlan: left promiscuous mode [ 297.258080][ T6786] team0 (unregistering): Port device team_slave_1 removed [ 297.273533][ T6786] team0 (unregistering): Port device team_slave_0 removed [ 297.414475][ T6786] team0 (unregistering): Port device team_slave_1 removed [ 297.425920][ T6786] team0 (unregistering): Port device team_slave_0 removed