last executing test programs: 3.071660779s ago: executing program 0 (id=9625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xfffffff7}]}}}]}, 0x3c}}, 0x28000000) 2.869159959s ago: executing program 4 (id=9628): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) setsockopt(r3, 0xc41, 0xdf, &(0x7f0000001100)="6a6be98bdac30affd205cdab26b0b43f5d9b0369dd060347078fb9a64e3f53fc72f3b93dfd2aa5d73a56cba270b84dc7a4f30d00fb7ff4e7296a7be39997e0fdabf08ec4ae49d2d79f14d0edd147185b6a07095334d6b38c4b6d15f10c79536fb337a7a21126ec9c6bf2526b0c55a22711dcc7e3a950deb5873873cbda3ef1d8a7c77dbf082fee95542f272b2917af2a9358a1ec443f099f397556cb31ac42b75dd9d423b23f31c74bade656cdc235", 0xaf) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000580)=0x6) write(r6, &(0x7f00000005c0)="0a00dc99ea47", 0x6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r8, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000200)={r6}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000001080)=0xffffffffffffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x68, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffe0, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x100000, 0x100000, 0xfffffffd, 0x1, 0x5, 0xf}, [@TCA_NETEM_RATE={0x14, 0x6, {0x200, 0x7, 0x7, 0xf1}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@loopback, @multicast1}, &(0x7f0000000240)=0xc) r10 = socket(0x10, 0x3, 0x9) connect$netlink(r10, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x200}}, 0x0) 2.215873729s ago: executing program 3 (id=9630): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.071418597s ago: executing program 3 (id=9632): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c0017800400010004000300040002000400020004000400040006"], 0x138}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2.040444723s ago: executing program 0 (id=9633): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$inet(0x2, 0x3, 0x8) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000002000010327bd7000ffdbdf2502000000000000051e000000080017004f204e20050016"], 0x2c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000400000d37f00000062010c00008080"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (rerun: 64) 1.903528443s ago: executing program 3 (id=9634): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f", 0x7d}], 0x1, 0x1) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c00000000000000100100000d000000", @ANYRES32=0x0, @ANYBLOB="01003600e0954d"], 0x30}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a0c000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000"], 0xa4}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000102030000001b000000000003000000f909641490bdce5fdce57f05f03382851f9021522561675b102bcfa57dfea89b18505e6c847fb74ec4d1f16bd667794074c55815158b43a941000cab6398d08879140a8678b695b7bfc62d332b1d97abc268ab0e71b2c55276a6973194854f19ea79a5e942300ab897fd37facdc60c21f0d48ebf1faa4dfdd3cfa26a86bf38bd0c7e187d3b3ebf136ff0"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 1.890084322s ago: executing program 4 (id=9636): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000181401"], 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x4880) 1.715194982s ago: executing program 3 (id=9638): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000001000a00000800040001000000", 0x24) (async) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000400)={{0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x5, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0xffffffffffffffff, {[0x2, 0x4, 0x1, 0x2, 0x3, 0xfffffffe, 0x1ff, 0x6]}}, 0x5c) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000002c0)=0x14) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x7, 0x2) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000003c0)={0x1f, 0x4, 0x4}, 0x6) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42100}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1.712363535s ago: executing program 4 (id=9639): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0x0, 0xb}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0xfffffffffffffc90}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000005) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000120000000000000000000100000000000000cc00000000000011000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d"], 0xfdef) 1.659067871s ago: executing program 0 (id=9642): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f1624"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.522423913s ago: executing program 3 (id=9645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000c1b4c8d29996ebfb320e52b89db8287efda019236f918c1b14b562fe11ab46f017565c39fe82d88d34961784d89badb33d109732b4d5a729c1045d834383075d6d9d48223741c2d13cdaadc86b52af61cf26a5a0f5d5d78c7af25f91e14805fafe044131dca959c89b0e59e9add2186382a746cf7db984217c34a72c9ccd9b97eaf93a0de24e7a0989f11fabe1e3e1f725d7a341d2c469"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x80000000) listen(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x0, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) shutdown(r0, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@map, 0xffffffffffffffff, 0xe, 0x4}, 0x20) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704", @ANYRES8=r6], 0xfdef) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x11, r5, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x2, r8, 0x80000001}, 0xc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) 1.429085438s ago: executing program 0 (id=9647): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt(r2, 0xc41, 0xdf, &(0x7f0000001100)="6a6be98bdac30affd205cdab26b0b43f5d9b0369dd060347078fb9a64e3f53fc72f3b93dfd2aa5d73a56cba270b84dc7a4f30d00fb7ff4e7296a7be39997e0fdabf08ec4ae49d2d79f14d0edd147185b6a07095334d6b38c4b6d15f10c79536fb337a7a21126ec9c6bf2526b0c55a22711dcc7e3a950deb5873873cbda3ef1d8a7c77dbf082fee95542f272b2917af2a9358a1ec443f099f397556cb31ac42b75dd9d423b23f31c74bade656cdc235", 0xaf) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000580)=0x6) write(r5, &(0x7f00000005c0)="0a00dc99ea47", 0x6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r7, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000200)={r5}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000001080)=0xffffffffffffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x68, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffe0, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x100000, 0x100000, 0xfffffffd, 0x1, 0x5, 0xf}, [@TCA_NETEM_RATE={0x14, 0x6, {0x200, 0x7, 0x7, 0xf1}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@loopback, @multicast1}, &(0x7f0000000240)=0xc) r9 = socket(0x10, 0x3, 0x9) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x200}}, 0x0) 1.375609789s ago: executing program 2 (id=9648): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0xfff2}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x10ad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x6, 0x4, 0xb2, 0x3, 0x200, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x0, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x1000009, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0xd, 0x8, 0x9, 0x9, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x6, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x10009, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x4, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x4, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0x8, 0xf, 0x800, 0x0, 0x2002e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0x401, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0xc, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10001, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0xa, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x9, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x9, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x7, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x3, 0x2cf, 0x6, 0xff, 0x1, 0x1, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @remote, 0x4}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa071}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.36796119s ago: executing program 4 (id=9649): r0 = socket(0x10, 0x80002, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000003c0)="dc8daf8d760c0b5d5c8caa98fa19c6a35a188a3775d272c579ff33a6effc0c49320ff86badc0d7f8b91fbc6ce4baa16de55d0ee6203b6db86008599c5d2f19dda7e34e3693cbb469728ec4005e4f00000000000053c282394f9f31d9210d4e736b769be32865f7dc70c5bdd6cdd0e82ac0e85e8ae59456bcda96de64e44f063dd60011126f90ef97069e", 0x8a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4", @ANYBLOB="40a9384824eabf84d30861196d24a3403ff04a", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x3, 0x3, 0xff) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "6ac4b8d77751b955511d441ba765f109"}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "8c8f14bcf2a335c42db253db5bd80461"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000812000001c0012800d0000000003000947ba4e37643ab2f1e5da16bbba7f2900"], 0x3c}}, 0x28000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 935.839842ms ago: executing program 2 (id=9651): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000140)={0xffffffffffffffff, r1}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='\x00\x00\x00\x00 \x00'/18, @ANYRES32=r5, @ANYBLOB="05002d0000000000080031000300000008000300", @ANYRES32=r6, @ANYBLOB="060028000400000005002f000200000008000b0005000000"], 0x4c}}, 0x4040080) 867.190351ms ago: executing program 3 (id=9652): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRESOCT=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0x94) 825.720697ms ago: executing program 1 (id=9653): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x200000100000011, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000030000000000d96e6c8d5e85080045f0"], 0x34}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = getuid() ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000000c0)=0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000d80)={{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x40044}}], 0x1, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000000}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000340)={0x100, 0x1e, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x6d, 0x0, 0x0, @pid}, @generic="947820ee4e7c4bbb1e490f1977228826c3c47f51b1786bc648e5f510af062032c8a79be13c15599de4d606e2fb546e6061b2939219ca4053ef9cc2ea21e3832089cdeaa6f5da758d28ee7acb970e5e9c666d9a6a94680b4c04a0eaf5bab80cfa4a9aec3d24efa698571058d90f0529b3fd82e2f43b2fdbffac9ba04bec0a92f4d25c254a345ceaaa8b3ace36edc61d46f11f5fed5417b1", @typed={0x8, 0x53, 0x0, 0x0, @fd=r4}, @generic="f4bd3e54dd042212bdb6d74210dcd39e9047d69a57d1ec2dbd15848de67c23165ba979c4c6f528380a4d904007343d18fa25c2d02b96af03d2", @nested={0xc, 0x130, 0x0, 0x1, [@nested={0x4, 0x10}, @nested={0x4, 0x100}]}, @typed={0x4, 0x136}]}, 0x100}, {&(0x7f0000000440)={0x21c, 0x23, 0x200, 0x70bd27, 0x25dfdbfd, "", [@nested={0x124, 0xf6, 0x0, 0x1, [@generic="6a166b082f2bb0f4d1fdee66dbc0e1aeec05689d59bbac031cfffd9402bda6284a1a9eb10f2bf00779eb5ed83145e537b211e104f9dd098bdd2d81fe9ba21e5652288f3e195ac70afcaf4822b89460006643470ddd440fd614f92825f119c84d8cfe35306cfbfe4777", @nested={0x4, 0x57}, @generic="e7ac9a52601d9a99ed8e3876e6a20c6a4fbb4bb5fd80c6c45529f22e5c454ab5352bf79847a954b4326161bd8de0923f2bc44ecaa9dbd6cfa58cc1bd9a0ba862e89299fcd4203c494c6536e1c908f396d9a92e6a9e18d8280aa9ca61767f7c7cc0452de948f93ca743a57285f38b07325f0e1cecbbbc635dc05b7530ef7dabf767ff653805dc9d265c8fdd3148e1796fd91e02b4ed0af485a19654d4ae34a6eacd4b48769486fa54e0d0fc685024bca2cbc67a"]}, @nested={0xc, 0x1f, 0x0, 0x1, [@typed={0x8, 0x10b, 0x0, 0x0, @ipv4=@remote}]}, @nested={0xd4, 0x11e, 0x0, 0x1, [@typed={0x2f, 0x1b, 0x0, 0x0, @binary="e03269ac857e07f641b8d436cbbfdb6e2258c58b5eb333e1f40981350de6f3022fbaf7470ca7828fab0383"}, @generic="7c141b1d7be2ca6752e64ea70a9ba85547f15222eaa05e4e1906d084846b18bdb68e9a741320b5786f98a72441329822f9f321514cd5dd441f1db2e156a5d0eed9d8434e07033d78f1a6db92272180c9c1700405e5202e5848f3a392d769bef1b03e2275b19036b28c27c91f2c85d1ed17526b662fca1d766ff07fc078cc747cd43fd961945f60c7e36c4f7ba300b693bdda7fc492ff09d668b47966f4a75e93"]}, @typed={0x8, 0xc, 0x0, 0x0, @uid=0xee00}]}, 0x21c}, {&(0x7f0000000700)={0x14c, 0x39, 0x400, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @typed={0x8, 0x30, 0x0, 0x0, @fd=r0}, @nested={0x14, 0xe3, 0x0, 0x1, [@nested={0x4, 0x67}, @typed={0xc, 0x47, 0x0, 0x0, @u64=0x4}]}, @nested={0x8, 0xf8, 0x0, 0x1, [@nested={0x4, 0x136}]}, @generic="8df1f8310c747131dd3f79241afe102b4d72d67d4987355a2fd84e8a9e92a8d8bece01069a04f255d6134ec3931e67f5e47a4f7bc8ee2111f3f187b8821753675311c8499d108826c7ca402acfd7022925d26a55ac9502896e5d608056e53039ab2191a68d6a79c107fe84421a558f22a17d2ed28b2fb97c48947506fd4a680ac0a3a928ea4da54822395cf5c787c6304c85a4dd5e8f5aab18", @generic="10cb83db29f26443a141620a5e30d35c829bb55ba9491a618e0e21be2a61c2d3e4a00ece26cadfebf1aac41ef4b720fef097cc4555281b8b1efd65edebe3e9753dd2205dc7dde77d59248505ba19939c7a92c10abbc8babd066f065b96a294276cdee879986ee8998d677855e94bb3364dad3adb5b49"]}, 0x14c}, {&(0x7f0000000900)={0x318, 0x2b, 0x300, 0x70bd25, 0x25dfdbfb, "", [@typed={0x8, 0x13, 0x0, 0x0, @u32}, @generic="496fea3f6de6d135a7d634f9aa0d2400a222e05f9029044232d0ab6a2a4ba59b2bc5b19ae8aa9cb6a973f97708a36a1341e5b0df2b523db1106ae374bca8736a4624f796e946660ae5f77d0be1d735207e67c4af39a78201406117036a30031961b7dd54edab21e2de2a89317783878591161fa3ee09adbf20ba462f159dc018e6be4afb3f0342e1614487604c4049d8906add3c2049a19d2f5548c64f", @typed={0xb6, 0x14a, 0x0, 0x0, @binary="be0e0e4bb0ca4b76f72e8b83b2b96fc67772af0a7590e69634711888a18d5ae4223a401a03fcd978cff185cb95bcaf7dbd6333ae17dbc44a86308bfc6106ba1f024c374a7f572111e6401ef54fcd71de33835edc4f71c4aa18705f3c983aa693773598eedfb0610712bdb51d51fb75199b82cca6ce879c05550c1793113ccfa3295d31e0d6b89c2222e5b3fa0bcac0f927543b1bd236d7a571ae46d705b63ea000442fd1d85937f7ee323446088adace1f8c"}, @typed={0x8, 0x80, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x107, 0x0, 0x0, @pid=r7}, @generic="0f265e59a59765b71c7812d5da22da45bbd497290328ced99127d9bcb0ba986fed8d11ea4223fa0e64661eda01f8c27f3a46ccef1cb806da4fe92ac6b963c19b49e98a73cf7badfa00f36d04dfd5a42ef1ea4ce9a494401f58a84634098e4065a3fb09e7047bae1620e70a3a7e671edf66972edc3bbbe3138068781e4aa0a0252d733b46294fe830068229d02e7a9b33aa8025e4766f33c6d7fb9cae644092815d1a0557e761b8c35147160d635d06e3bede7a42ca5e5b7f727affd5d4415e1d74b3ef5c1075f5c1f6f4f182f243a09dee80137b461b7d7c828e8cced8", @typed={0xba, 0xee, 0x0, 0x0, @binary="e52649fc8cf782e19bdfd927e2fe268c63263cd40a0283d912905f3981df7d1dfd8b2843b322dbaad5c0c99d1377b3d74126a789b824efa9b65258dfc3481db84dbf71743205b5d50fc626d86a2359efe990ee833fd73388b34a6b401a42781a7e9d68c13e5bca42d3c331436340a695191149914ebcb192944c51bf2c51803399744c756be649858092d10ca781ec4ab19b0b8c2cc4362fbcf6417075df1081324e16a317191acaa469c30a40c42dba530be32a31ac"}]}, 0x318}], 0x4, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9}}}], 0x20, 0x40}, 0x5) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 680.382738ms ago: executing program 1 (id=9654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xd36f659b1d831d3f}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000440)="8e36154f8822595e1a377524ad5f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000, 0xb}, 0x50) 555.504776ms ago: executing program 2 (id=9655): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000fc0), 0xc0880, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a"], 0x4c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r1) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x68, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x36}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40014) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001280)={{r0, &(0x7f0000001000)='\x18\xd50g\xaa', 0x942cbe8cdb6c5f2a, &(0x7f0000001040)={@_ha_fsid={[0x800, 0x9]}, {0xbff, 0x8001, 0xffffffff, 0x2}}, 0x0, &(0x7f0000001080)={@_ha_fsid}, &(0x7f00000010c0)=0x7f}, {[0x1e7, 0x2, 0x5e7b, 0x4]}, 0x43a, 0xde, &(0x7f0000001100)=""/222}) syz_emit_ethernet(0xf87, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "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"}}}}}, 0x0) 555.265185ms ago: executing program 1 (id=9656): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 462.698922ms ago: executing program 2 (id=9657): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f1624"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 403.447931ms ago: executing program 4 (id=9658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x7fff, 0x1, 0x2, 0x3, 0x3, 0x9}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) recvmmsg(r0, &(0x7f0000001c40), 0x0, 0x40000060, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="5400f650655cc446b400000806010100000000000000000200000105000100070000000900020073797a32000000000900020073797a30000000000500010007000000d10900020073797a31000400000900020073"], 0x54}, 0x1, 0x0, 0x0, 0x8000001}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x53, 0x4e22, 0x1, 0xa, 0x80, 0x0, 0x2e}, {0x9, 0x7, 0xfffffffffffffff8, 0x9, 0x20d80eb7, 0x7, 0x6, 0x1000}, {0x4, 0x0, 0xfffffffffffffffc, 0xab4}, 0xfffffff8, 0x6e6bb9, 0x1, 0x1}, {{@in6=@loopback, 0x4d7, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x2, 0x3, 0x1, 0x2, 0x6507, 0x5}}, 0xe8) ioctl(r1, 0x8b32, &(0x7f0000000040)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000001c40)={0x4, 0xe4, "5941af", 0x4, 0x9}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001cc0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d40)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000001bc0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r5, @ANYBLOB="020026bc7000fedbdf25030000000c00080001000000000000000c00040006000000000000000c0006000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40020) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d80)={0xffffffffffffffff}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000240)=""/83, 0x53}], 0x2}}], 0x1, 0x10101, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000001e80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e40)={&(0x7f0000001fc0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080026bd7000fcd1df2502000000340007800c14018008000100945312d810b2d9dd28bd201d54a9a6e868cf07ab840d28306dc995d61ddf73b97088bedd85ffca65839c6721c5ab94413aeb1aef4c86a40525798ccdd9beb2f734fdf233702938b2ce4b4954b9fe26647c427e8e9ede9a4a0c6c9d2ede69cb972b1d2ff90ae5184cfa00698efd5330e4971eca4506a64a", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00030005000000000000000c00060000000000000000000800010000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000810}, 0x804) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0005000000050000000000000000000000fffd0c00078008000800000000890500010006000000050005000200000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r10, 0x4048587b, &(0x7f0000001a80)={{r1, &(0x7f0000001380)='syzkaller\x00', 0x40280, &(0x7f00000013c0)={@_ha_fsid={[0x1, 0x80ab]}, {0xff, 0x2e, 0x2, 0x9}}, 0x6, &(0x7f0000001400)={@_ha_fsid}, &(0x7f0000001440)=0xffffffc8}, 0x6, &(0x7f00000019c0)=[{0x2, 0x5, &(0x7f0000001500)='GPL\x00', &(0x7f00000014c0)="62fd4e7dc1f6", 0x6, 0x18}, {0x2, 0x9, &(0x7f0000000100)='\x00', &(0x7f0000002200)="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", 0x12a, 0x28}, {0x2, 0x2b7, &(0x7f0000001600)=',\x00', &(0x7f0000001640)="c7d930e4412e3cacb911438279aaf6f4ac9035551830fcf3e3e7a6cb033d4ac3a567c7150c0a5a1ee3c49768b385b28ee692c14a3d97d5ba094a8f4da6c3813d8fc00b90e8a27d9fddbe128ff8a19043bea207917afeff9d0d62087d338700280cd025135f7140805970f9eb25aa2623ba82cba30ab76ad2e5fb635eed22b050a1be349131b0708c00f6f98dcd8121656ff6879dcf631f96408d98765661b11f5896829dab9a60f347604d043f6ea2a1a97668cb83654fb6ad575be7506eb119e644f83dab880948c07ad6439eb5e6772fa06f2de57ca11ea03ec6cd4c60372b518ef93de86e42a87c7178fe3972e0576fd77f2c4ade0bda78bfec7a051b16", 0xff}, {0x2, 0x132bef0b, &(0x7f0000001740)='-\x00', &(0x7f0000001780)="7005a60eab4090461ad08d5cb4fe69480de6fd984156c67813073f3d481d7733bc997030644b15dd31d34e352874ff86fbba8ce8b589fd4bd32310749c7165f0a662f54754cb7a4d1023797ca86a8ec87cc0941c9e9b970c15dcc3ef55d38db4ac3f8f67d47a223ca867cc0a988e59b6c3853a", 0x73, 0x8}, {0x3, 0x2, &(0x7f0000001800)='syzkaller\x00', &(0x7f0000001840)="c62e787981641c32a2cf0dff7bcc8fcf4bc3ec7bb857e5f2ff8ada9797d499a7772f4ec4358c451f4c3e7f3510ba52010d4ade0a6f135f2dc74e756ae4af97dfd26336123fef1c58e7d92eadcd955a63b26a1bc455ea7aa291ad3aed8321dc247820377d769e17ff1f6c5d2610dd0e50bc37cb79dd2dadb15de6dad34d29cb284d628e675438435f99a0348c78982c345a9db2a1acef0b5cb710249b25c018c41c5c615037ebd97a9d6446243cad5342d998c0", 0xb3, 0x30}, {0x1, 0x7, &(0x7f0000001900)='syzkaller\x00', &(0x7f0000001940)="7439cacd767042bdb3aed2c19a8abc5fa73ae7a2d8e2d0bb448b0562dde7d2900326d088ffd5cb8ef97554d5262e71cdcfca7004cf515c7fcfcccd9c1305ec2b525d296e487de55056cdc0f27781022a94ab4d40877cf59b9f71d74bedf8d7", 0x5f, 0x2a}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x10, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000008000000000000000800000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0xd3e, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000011c0)={0x4, 0xe, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001240), 0x10, 0x8}, 0x94) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r13, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) 402.935989ms ago: executing program 1 (id=9659): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 379.225069ms ago: executing program 0 (id=9660): unshare(0x22020600) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x800005, 0x1, 0xff, 0xc, 0xe, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000540)="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") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4092) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x1f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local, {[0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="84f19a8b62cc", @empty, @rand_addr=0x64010102, @multicast2, 0xa, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x1, {0x0, 0xff, 0x3}, 0x1}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) 290.486959ms ago: executing program 2 (id=9661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x12, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0xfeffffff, 0x200400a0}, 0x0) 170.979537ms ago: executing program 4 (id=9662): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000100)={'ip6gretap0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRESDEC=r2], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000fee393f0a4adc385abffffff00000000504828e9cd7fd7f19743c518ab304f79b8c31f20f660e5315f1ce7c4ed04bd9a2d2799", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r2) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x58, 0x10, 0x503, 0x50bd29, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7e9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_OKEY={0x8, 0x5, 0x3d}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x18, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00006842400400"], 0x18}, 0x404f444) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000380)={0xc04, 0x101, 0xfffffff9, 0x1, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0x10000008}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000200)={0x4000201c}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f0000000000)={r12, 0xf8}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd800000000000005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 135.665305ms ago: executing program 2 (id=9663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket(0x1e, 0x1, 0x0) shutdown(r2, 0x2) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x894) r5 = accept(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000240)={0x1, {0x4, 0x0, 0x4, 0xffffffffffffff1a, 0x7}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'team_slave_0\x00', {0x4}, 0x3}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 134.048719ms ago: executing program 0 (id=9664): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f0000009a40)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000002680)=[{&(0x7f00000003c0)=""/192, 0xc0}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000340)=""/61, 0x3d}], 0x8, &(0x7f0000002700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002780), 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002800)=""/157, 0x9d}, {&(0x7f00000028c0)=""/69, 0x45}, {&(0x7f0000002940)=""/84, 0x54}, {&(0x7f00000029c0)=""/158, 0x9e}, {&(0x7f0000002a80)=""/123, 0x7b}, {&(0x7f0000002b00)=""/246, 0xf6}, {&(0x7f0000002c00)=""/180, 0xb4}, {&(0x7f0000002cc0)=""/153, 0x99}, {&(0x7f0000002d80)=""/164, 0xa4}], 0x9}}, {{&(0x7f0000002f00)=@abs, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000002f80)=""/18, 0x12}, {&(0x7f0000009640)=""/43, 0x2b}, {&(0x7f0000003000)=""/1, 0x1}, {&(0x7f0000003040)=""/174, 0xae}, {&(0x7f0000003100)=""/171, 0xab}, {&(0x7f00000031c0)=""/150, 0x96}, {&(0x7f0000003280)=""/72, 0x48}, {&(0x7f0000003300)=""/74, 0x4a}, {&(0x7f0000003380)=""/63, 0x3f}], 0x9, &(0x7f0000003480)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f00000035c0)=[{&(0x7f0000003540)=""/126, 0x7e}], 0x1, &(0x7f0000003600)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003640)=@abs, 0x6e, &(0x7f0000004840)=[{&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/176, 0xb0}, {&(0x7f0000004780)=""/191, 0xbf}], 0x3}}, {{&(0x7f0000004880), 0x6e, &(0x7f0000005d40)=[{&(0x7f0000004900)=""/24, 0x18}, {&(0x7f0000004940)=""/129, 0x81}, {&(0x7f0000004a00)=""/151, 0x97}, {&(0x7f0000004cc0)=""/126, 0x7e}, {&(0x7f0000004b40)=""/72, 0x48}, {&(0x7f0000004bc0)=""/195, 0xc3}, {&(0x7f0000009680)=""/87, 0x57}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x8}}, {{&(0x7f0000005dc0)=@abs, 0x6e, &(0x7f0000007300)=[{&(0x7f0000005e40)=""/199, 0xc7}, {&(0x7f0000005f40)=""/143, 0x8f}, {&(0x7f0000006000)=""/150, 0x96}, {&(0x7f00000060c0)=""/4096, 0x1000}, {&(0x7f00000070c0)=""/170, 0xaa}, {&(0x7f0000007180)=""/127, 0x7f}, {&(0x7f0000007200)=""/155, 0x9b}, {&(0x7f00000072c0)=""/18, 0x12}], 0x8, &(0x7f0000007380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{0x0, 0x0, &(0x7f00000095c0)=[{&(0x7f0000007440)=""/105, 0x69}, {&(0x7f00000074c0)=""/62, 0x3e}, {&(0x7f0000007500)=""/186, 0xba}, {&(0x7f00000075c0)=""/4096, 0x1000}, {&(0x7f00000085c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002fc0)}}, {{0x0, 0x0, &(0x7f0000002fc0)}}, {{0x0, 0x0, 0x0}}], 0xa, 0x10000, &(0x7f0000009cc0)={0x0, 0x3938700}) 58.736393ms ago: executing program 1 (id=9665): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) 0s ago: executing program 1 (id=9666): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x38, 0x3a, 0xff, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0xe, '\x00', {0xe, 0x6, '\x00', 0x7fff, 0x2f, 0xff, @empty, @mcast2, [@srh={0xc, 0x0, 0x4, 0x0, 0x81, 0x0, 0xe}]}}}}}}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000fbffbfff000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b6020000000000008500000086000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@var={0x2, 0x0, 0x0, 0x11}, @func_proto={0x2, 0x1, 0x0, 0x13, 0x2, [{0x2}]}, @var]}, {0x0, [0x0, 0x61]}}, 0x0, 0x50}, 0x20) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x30004}], 0x2) kernel console output (not intermixed with test programs): tlink: 'syz.1.8681': attribute type 1 has an invalid length. [ 1240.534556][ T4955] bond11: entered promiscuous mode [ 1240.605603][ T4955] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1240.683690][ T4955] bridge0: Device is already in use. [ 1240.727162][ T4966] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1240.821713][ T4971] netlink: 'syz.2.8685': attribute type 5 has an invalid length. [ 1240.852626][ T4971] geneve0: entered promiscuous mode [ 1240.865428][ T4971] geneve0: entered allmulticast mode [ 1240.883938][T30265] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 51855 - 0 [ 1240.897714][T30265] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 51855 - 0 [ 1240.916265][T30265] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 51855 - 0 [ 1240.945312][ T4980] netlink: 'syz.0.8688': attribute type 1 has an invalid length. [ 1240.953303][T30265] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 51855 - 0 [ 1240.998659][ T4978] netlink: 'syz.2.8685': attribute type 3 has an invalid length. [ 1241.083680][ T4983] bond9: (slave bridge0): making interface the new active one [ 1241.110429][ T4983] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 1241.124691][ T4989] netlink: 'syz.1.8692': attribute type 4 has an invalid length. [ 1241.145625][ T4992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.274316][ T5002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1241.314520][ T5002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1241.322231][ T4989] nbd1: detected capacity change from 0 to 63 [ 1241.338994][T24996] block nbd1: Receive control failed (result -32) [ 1241.344563][ T3811] block nbd1: Send control failed (result -32) [ 1241.353912][ T3811] block nbd1: Request send failed, requeueing [ 1241.366412][ T1749] block nbd1: Dead connection, failed to find a fallback [ 1241.375462][ T1749] block nbd1: shutting down sockets [ 1241.381287][ T1749] blk_print_req_error: 138 callbacks suppressed [ 1241.381304][ T1749] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1241.399478][ T1749] buffer_io_error: 138 callbacks suppressed [ 1241.399495][ T1749] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1241.403778][ T3811] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1241.430868][ T3811] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1241.481413][ T3811] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1241.527227][ T3811] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1241.536130][ T5015] validate_nla: 1 callbacks suppressed [ 1241.536147][ T5015] netlink: 'syz.1.8697': attribute type 10 has an invalid length. [ 1241.544239][ T3811] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1241.568038][ T5015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.576382][ T5015] bond0: entered promiscuous mode [ 1241.582439][ T5015] bond_slave_0: entered promiscuous mode [ 1241.589943][ T5015] bond_slave_1: entered promiscuous mode [ 1241.598411][ T5015] team0: Port device bond0 added [ 1241.614224][ T5015] bond0: Caught tx_queue_len zero misconfig [ 1241.641051][ T3811] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1241.649261][ T3811] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1241.660653][ T3811] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1241.669527][ T3811] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1241.681260][ T3811] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1241.702559][ T3811] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1241.713347][ T3811] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1241.752972][ T3811] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1241.785431][ T3811] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1241.803524][ T3811] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1241.824756][ T3811] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1241.842474][ T3811] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1241.863846][ T3811] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1241.879623][ T3811] ldm_validate_partition_table(): Disk read failed. [ 1241.895581][ T3811] Dev nbd1: unable to read RDB block 0 [ 1241.912441][ T3811] nbd1: unable to read partition table [ 1241.951984][ T3811] ldm_validate_partition_table(): Disk read failed. [ 1241.988008][ T3811] Dev nbd1: unable to read RDB block 0 [ 1241.994091][ T3811] nbd1: unable to read partition table [ 1242.332083][ T5039] __nla_validate_parse: 10 callbacks suppressed [ 1242.332101][ T5039] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8706'. [ 1242.482215][ T5049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8710'. [ 1242.493249][ T5045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8708'. [ 1242.513087][ T5045] vlan3: entered promiscuous mode [ 1242.584832][ T5054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8709'. [ 1242.696575][ T5062] ip6tnl0: Caught tx_queue_len zero misconfig [ 1242.711780][ T5060] netlink: 'syz.0.8713': attribute type 13 has an invalid length. [ 1242.767088][ T5069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8714'. [ 1242.814528][ T5069] mac80211_hwsim hwsim110 wlan0: Caught tx_queue_len zero misconfig [ 1242.948899][ T5074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8716'. [ 1243.188914][ T5087] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8720'. [ 1243.211599][ T5096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1243.218983][ T5096] IPv6: NLM_F_CREATE should be set when creating new route [ 1243.226213][ T5096] IPv6: NLM_F_CREATE should be set when creating new route [ 1243.236481][ T5096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1243.350484][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8723'. [ 1243.398401][ T5103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8724'. [ 1243.637160][ T5114] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8725'. [ 1243.839033][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 1243.847141][ C1] lec:lec_tx_timeout: lec0 [ 1244.091821][ T5143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1244.115501][ T5125] syzkaller0: entered promiscuous mode [ 1244.124904][ T5125] syzkaller0: entered allmulticast mode [ 1244.150780][ T5091] lo speed is unknown, defaulting to 1000 [ 1244.176031][ T5091] ip6gretap0 speed is unknown, defaulting to 1000 [ 1245.106043][ T5190] xt_l2tp: wrong L2TP version: 0 [ 1245.112182][ T5190] netlink: 'syz.0.8751': attribute type 30 has an invalid length. [ 1245.413363][ T5214] netlink: 'syz.0.8757': attribute type 8 has an invalid length. [ 1245.476740][ T5215] netlink: 'syz.4.8756': attribute type 3 has an invalid length. [ 1245.746791][ T5222] 8021q: VLANs not supported on gre0 [ 1246.002128][ T5233] netlink: 'syz.1.8762': attribute type 5 has an invalid length. [ 1246.061055][ T5233] geneve3: entered promiscuous mode [ 1246.075413][ T5233] geneve3: entered allmulticast mode [ 1246.102332][ T3476] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1246.123981][ T3476] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1246.142726][ T3476] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1246.156791][ T3476] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1246.229246][ T5233] netlink: 'syz.1.8762': attribute type 4 has an invalid length. [ 1246.615625][ T5208] lo speed is unknown, defaulting to 1000 [ 1246.640017][ T5208] ip6gretap0 speed is unknown, defaulting to 1000 [ 1247.420031][ T5236] lo speed is unknown, defaulting to 1000 [ 1247.550611][ T5236] ip6gretap0 speed is unknown, defaulting to 1000 [ 1247.575414][ T5297] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.607871][ T5297] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1247.924578][ T5297] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.945471][ T5297] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1248.026804][ T5297] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1248.054223][ T5297] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1248.119599][ T5317] __nla_validate_parse: 30 callbacks suppressed [ 1248.119616][ T5317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8781'. [ 1248.148214][ T5317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8781'. [ 1248.158962][ T5297] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1248.174994][ T5297] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1248.234975][T30261] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.243896][T30261] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.260061][T30261] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.373736][T30261] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.464559][T30261] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.487602][T30261] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1248.526187][T30261] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.554136][T30261] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1248.627777][T30261] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.636001][T30261] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1248.662674][T30261] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.685678][T30261] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1248.756179][ T5330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8784'. [ 1248.792737][ T5330] netlink: 192 bytes leftover after parsing attributes in process `syz.2.8784'. [ 1249.629539][ T5352] netlink: 'syz.3.8793': attribute type 10 has an invalid length. [ 1249.637993][ T5352] batman_adv: batadv0: Interface deactivated: dummy0 [ 1249.645917][ T5350] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8790'. [ 1249.655110][ T5350] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8790'. [ 1249.667043][ T5352] batman_adv: batadv0: Removing interface: dummy0 [ 1249.691731][ T5353] netlink: 'syz.3.8793': attribute type 10 has an invalid length. [ 1249.727746][ T5352] dummy0: entered promiscuous mode [ 1249.744740][ T5355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1249.754502][ T5352] team0: Failed to send options change via netlink (err -105) [ 1249.768303][ T5352] team0: Port device dummy0 added [ 1249.791043][ T5353] dummy0: left promiscuous mode [ 1249.797033][ T5353] team0: Failed to send options change via netlink (err -105) [ 1249.811911][ T5353] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1249.830573][ T5353] team0: Port device dummy0 removed [ 1249.944589][ T5327] lo speed is unknown, defaulting to 1000 [ 1249.963382][ T5327] ip6gretap0 speed is unknown, defaulting to 1000 [ 1250.099611][ T5357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8794'. [ 1250.250727][ T5359] team1: Device gtp0 is up. Set it down before adding it as a team port [ 1250.430471][ T5345] lo speed is unknown, defaulting to 1000 [ 1250.442853][ T5345] ip6gretap0 speed is unknown, defaulting to 1000 [ 1250.459191][ T5369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8799'. [ 1250.544684][ T5375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1250.556141][ T5375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1250.804836][ T5384] tipc: Enabling of bearer rejected, failed to enable media [ 1251.261572][ T5399] batadv0: entered promiscuous mode [ 1251.288535][ T5399] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1251.697679][ T5417] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8809'. [ 1251.717987][ T5416] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8810'. [ 1251.795158][ T5419] netlink: 'syz.1.8811': attribute type 13 has an invalid length. [ 1252.146775][ T30] audit: type=1804 audit(1771262379.108:21): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8816" name="/newroot/559/memory.events" dev="tmpfs" ino=2849 res=1 errno=0 [ 1252.197351][ T30] audit: type=1800 audit(1771262379.108:22): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8816" name="memory.events" dev="tmpfs" ino=2849 res=0 errno=0 [ 1252.524389][ T5454] netlink: 'syz.0.8819': attribute type 5 has an invalid length. [ 1252.922163][ T5435] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1253.318080][ T5480] __nla_validate_parse: 9 callbacks suppressed [ 1253.318098][ T5480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8825'. [ 1254.159792][T24996] Bluetooth: hci1: command 0x0405 tx timeout [ 1254.526915][ T5459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8824'. [ 1254.736121][ T5492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8828'. [ 1254.860561][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8830'. [ 1255.164238][ T5510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8830'. [ 1255.221123][ T5445] lo speed is unknown, defaulting to 1000 [ 1255.272347][ T5445] ip6gretap0 speed is unknown, defaulting to 1000 [ 1255.366844][ T5513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1255.582270][ T5516] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8831'. [ 1255.599847][ T5499] lo speed is unknown, defaulting to 1000 [ 1255.608012][ T5516] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8831'. [ 1255.634211][ T5499] ip6gretap0 speed is unknown, defaulting to 1000 [ 1255.918538][ T5528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8838'. [ 1256.309696][ T5546] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8845'. [ 1256.349001][ T5544] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8844'. [ 1256.791383][ T5559] netlink: 'syz.0.8850': attribute type 21 has an invalid length. [ 1256.801557][ T5560] netlink: 'syz.0.8850': attribute type 21 has an invalid length. [ 1256.912983][ T5566] tipc: Enabling of bearer rejected, failed to enable media [ 1257.111772][ T5583] netlink: 'syz.0.8857': attribute type 3 has an invalid length. [ 1258.428508][ T5671] tipc: Enabling of bearer rejected, failed to enable media [ 1258.465595][T24996] Bluetooth: hci1: link tx timeout [ 1258.473886][T24996] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1258.521571][ T5679] lo: Caught tx_queue_len zero misconfig [ 1258.605388][ T5684] __nla_validate_parse: 7 callbacks suppressed [ 1258.605406][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8907'. [ 1258.689649][ T5692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1258.696966][ T5692] IPv6: NLM_F_CREATE should be set when creating new route [ 1258.704278][ T5692] IPv6: NLM_F_CREATE should be set when creating new route [ 1258.737983][ T5692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1258.827097][ T5691] syzkaller0: entered promiscuous mode [ 1258.840561][ T5691] syzkaller0: entered allmulticast mode [ 1259.052602][ T5704] syzkaller0: entered promiscuous mode [ 1259.063735][ T5704] syzkaller0: entered allmulticast mode [ 1259.258209][ T5714] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8913'. [ 1259.533310][ T5732] netlink: 'syz.1.8919': attribute type 2 has an invalid length. [ 1259.547625][ T5727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1259.559499][ T5732] wg1 speed is unknown, defaulting to 1000 [ 1259.575688][ T5732] wg1 speed is unknown, defaulting to 1000 [ 1259.590100][ T5732] wg1 speed is unknown, defaulting to 1000 [ 1259.595273][ T5727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8920'. [ 1259.634323][ T5732] infiniband sy+Û: RDMA CMA: cma_listen_on_dev, error -98 [ 1259.713896][ T5732] wg1 speed is unknown, defaulting to 1000 [ 1259.720484][ T5734] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:21 [ 1259.723717][ T5732] wg1 speed is unknown, defaulting to 1000 [ 1259.736383][ T5732] wg1 speed is unknown, defaulting to 1000 [ 1259.746939][ T5732] wg1 speed is unknown, defaulting to 1000 [ 1259.785034][ T5732] wg1 speed is unknown, defaulting to 1000 [ 1259.798147][ T5732] wg1 speed is unknown, defaulting to 1000 [ 1259.805920][ T5732] wg1 speed is unknown, defaulting to 1000 [ 1259.912648][ T5741] netlink: 'syz.1.8925': attribute type 1 has an invalid length. [ 1259.926028][ T5741] tipc: Enabling of bearer rejected, failed to enable media [ 1260.039722][ T5747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8927'. [ 1260.119778][ T5747] team_slave_0: left promiscuous mode [ 1260.133745][ T5747] team0 (unregistering): Port device team_slave_0 removed [ 1260.142440][ T5747] team_slave_1: left promiscuous mode [ 1260.153050][ T5747] team0 (unregistering): Port device team_slave_1 removed [ 1260.166406][ T5747] vlan2: left promiscuous mode [ 1260.172584][ T5747] veth0_to_bond: left promiscuous mode [ 1260.199362][ T5747] team0 (unregistering): Port device vlan2 removed [ 1260.206326][ T5747] bond0: left promiscuous mode [ 1260.219256][ T5747] bond_slave_0: left promiscuous mode [ 1260.229966][ T5747] bond_slave_1: left promiscuous mode [ 1260.253356][ T5747] team0 (unregistering): Port device bond0 removed [ 1260.457390][ T5776] FAULT_INJECTION: forcing a failure. [ 1260.457390][ T5776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1260.472049][ T5776] CPU: 1 UID: 0 PID: 5776 Comm: syz.2.8936 Not tainted syzkaller #0 PREEMPT(full) [ 1260.472087][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1260.472099][ T5776] Call Trace: [ 1260.472107][ T5776] [ 1260.472115][ T5776] dump_stack_lvl+0xe8/0x150 [ 1260.472144][ T5776] should_fail_ex+0x412/0x560 [ 1260.472174][ T5776] _copy_from_user+0x2d/0xb0 [ 1260.472194][ T5776] __sys_sendto+0x2af/0x7a0 [ 1260.472218][ T5776] ? __pfx___sys_sendto+0x10/0x10 [ 1260.472262][ T5776] ? exc_page_fault+0x6a/0xc0 [ 1260.472289][ T5776] ? do_user_addr_fault+0xc7c/0x1360 [ 1260.472314][ T5776] __x64_sys_sendto+0xde/0x100 [ 1260.472338][ T5776] do_syscall_64+0x14d/0xf80 [ 1260.472362][ T5776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.472379][ T5776] ? trace_irq_disable+0x37/0x100 [ 1260.472400][ T5776] ? clear_bhb_loop+0x40/0x90 [ 1260.472421][ T5776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.472439][ T5776] RIP: 0033:0x7faaebb5c84e [ 1260.472456][ T5776] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1260.472472][ T5776] RSP: 002b:00007faaeca47e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1260.472491][ T5776] RAX: ffffffffffffffda RBX: 00007faaeca496c0 RCX: 00007faaebb5c84e [ 1260.472504][ T5776] RDX: 0000000000000024 RSI: 00007faaeca48000 RDI: 0000000000000003 [ 1260.472516][ T5776] RBP: 0000000000000000 R08: 00007faaeca47f04 R09: 000000000000000c [ 1260.472528][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1260.472539][ T5776] R13: 00007faaeca47f58 R14: 00007faaeca48000 R15: 0000000000000000 [ 1260.472568][ T5776] [ 1260.651602][T24996] Bluetooth: hci1: command 0x0405 tx timeout [ 1260.744949][ T5772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8933'. [ 1260.781080][ T5789] x_tables: duplicate underflow at hook 1 [ 1260.973763][ T5793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8942'. [ 1261.200885][ T5812] syzkaller0: entered promiscuous mode [ 1261.219550][ T5812] syzkaller0: entered allmulticast mode [ 1261.511419][ T5840] netlink: 'syz.3.8957': attribute type 1 has an invalid length. [ 1261.573581][ T5845] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8959'. [ 1261.604991][ T5846] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1261.642389][ T5846] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 1261.674959][ T5840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8957'. [ 1261.728711][ T5856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8957'. [ 1261.783204][ T5840] bond11: (slave bridge13): Enslaving as an active interface with a down link [ 1261.855472][ T5860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1261.891942][ T5856] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1261.966550][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8962'. [ 1261.999590][ T5871] netlink: 'syz.4.8965': attribute type 3 has an invalid length. [ 1262.196935][ T5885] tipc: Enabling of bearer rejected, failed to enable media [ 1262.686534][ T5892] syzkaller0: entered promiscuous mode [ 1262.693242][ T5892] syzkaller0: entered allmulticast mode [ 1262.704838][ T5906] batadv_slave_1: entered promiscuous mode [ 1262.714542][ T5853] lo speed is unknown, defaulting to 1000 [ 1262.760437][ T5853] ip6gretap0 speed is unknown, defaulting to 1000 [ 1262.781175][ T5853] wg1 speed is unknown, defaulting to 1000 [ 1263.120932][ T5906] batadv_slave_1: left promiscuous mode [ 1263.294866][ T5945] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1263.527559][ T5950] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1263.645458][ T5950] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1263.980396][ T5968] 8021q: VLANs not supported on ip_vti0 [ 1264.123426][ T5980] netlink: 'syz.0.8997': attribute type 28 has an invalid length. [ 1264.265896][ T5980] dvmrp1: left allmulticast mode [ 1264.473141][ T6000] __nla_validate_parse: 8 callbacks suppressed [ 1264.473161][ T6000] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9006'. [ 1264.603124][ T6007] FAULT_INJECTION: forcing a failure. [ 1264.603124][ T6007] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.622836][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.1.9010 Not tainted syzkaller #0 PREEMPT(full) [ 1264.622860][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1264.622872][ T6007] Call Trace: [ 1264.622879][ T6007] [ 1264.622887][ T6007] dump_stack_lvl+0xe8/0x150 [ 1264.622917][ T6007] should_fail_ex+0x412/0x560 [ 1264.622948][ T6007] should_failslab+0xa8/0x100 [ 1264.622974][ T6007] ? vm_area_dup+0x2b/0x680 [ 1264.623016][ T6007] kmem_cache_alloc_noprof+0x87/0x650 [ 1264.623048][ T6007] vm_area_dup+0x2b/0x680 [ 1264.623077][ T6007] __split_vma+0x1d5/0xa50 [ 1264.623108][ T6007] ? __pfx___split_vma+0x10/0x10 [ 1264.623140][ T6007] ? mas_find+0xb0e/0xd30 [ 1264.623169][ T6007] vms_gather_munmap_vmas+0x4d0/0x1320 [ 1264.623217][ T6007] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1264.623236][ T6007] ? vm_unmapped_area+0xde/0x210 [ 1264.623259][ T6007] ? arch_get_unmapped_area_topdown+0x9ed/0xb60 [ 1264.623292][ T6007] do_vmi_align_munmap+0x2b4/0x4b0 [ 1264.623328][ T6007] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1264.623383][ T6007] do_vmi_munmap+0x252/0x2d0 [ 1264.623423][ T6007] __vm_munmap+0x22c/0x3d0 [ 1264.623446][ T6007] ? __pfx___vm_munmap+0x10/0x10 [ 1264.623464][ T6007] ? vm_mmap_pgoff+0x3b1/0x4f0 [ 1264.623507][ T6007] __x64_sys_munmap+0x60/0x70 [ 1264.623531][ T6007] do_syscall_64+0x14d/0xf80 [ 1264.623555][ T6007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.623574][ T6007] ? trace_irq_disable+0x37/0x100 [ 1264.623596][ T6007] ? clear_bhb_loop+0x40/0x90 [ 1264.623620][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.623639][ T6007] RIP: 0033:0x7f690bb9bda7 [ 1264.623656][ T6007] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.623672][ T6007] RSP: 002b:00007f690c979d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1264.623692][ T6007] RAX: ffffffffffffffda RBX: 00007f6904000000 RCX: 00007f690bb9bda7 [ 1264.623706][ T6007] RDX: 0000000000000000 RSI: 0000000002400000 RDI: 00007f6901c00000 [ 1264.623719][ T6007] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1264.623731][ T6007] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 1264.623743][ T6007] R13: 0000000000001000 R14: 00007f6908000000 R15: 0000000002400000 [ 1264.623776][ T6007] [ 1264.700946][ T6008] netlink: 'syz.3.9009': attribute type 10 has an invalid length. [ 1264.887655][ T6008] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9009'. [ 1264.901085][ T6011] netlink: 'syz.2.9011': attribute type 1 has an invalid length. [ 1264.950274][ T6011] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1264.991310][ T6014] bond17: (slave geneve3): making interface the new active one [ 1265.028751][ T6014] bond17: (slave geneve3): Enslaving as an active interface with an up link [ 1265.130399][T32246] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 1265.149212][T32246] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1265.171368][T32246] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1265.201377][ T6020] tipc: Enabling of bearer rejected, failed to enable media [ 1265.262482][T32246] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1265.311927][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9014'. [ 1265.358438][T25360] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1265.358800][ T5828] Bluetooth: hci2: command 0x0419 tx timeout [ 1265.456398][ T6027] vlan3: entered promiscuous mode [ 1265.563426][ T6031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9020'. [ 1265.630763][T25360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1265.640745][T25360] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1265.650173][T25360] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1265.669330][T25360] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1265.680181][T25360] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1265.982393][ T6042] sctp: [Deprecated]: syz.2.9025 (pid 6042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1265.982393][ T6042] Use struct sctp_sack_info instead [ 1266.300945][ T6048] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9021'. [ 1266.358543][ T6048] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9021'. [ 1266.410716][T30263] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1266.552446][T30263] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1266.643786][T30263] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1266.712026][ T6053] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9022'. [ 1266.767402][ T6053] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9022'. [ 1266.785085][T30263] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1267.163697][T14754] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.175470][T14754] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.202040][ T6032] lo speed is unknown, defaulting to 1000 [ 1267.239241][ T3476] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.248375][ T6032] ip6gretap0 speed is unknown, defaulting to 1000 [ 1267.256310][ T6032] wg1 speed is unknown, defaulting to 1000 [ 1267.262783][ T6057] tunl0: Caught tx_queue_len zero misconfig [ 1267.286693][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9028'. [ 1267.310908][T32244] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.328688][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9028'. [ 1267.361316][ T6057] netlink: 'syz.3.9028': attribute type 5 has an invalid length. [ 1267.390192][T30263] vlan0: left allmulticast mode [ 1267.408364][T30263] vlan0: left promiscuous mode [ 1267.413558][T30263] bridge0: port 3(vlan0) entered disabled state [ 1267.466969][T30263] bridge_slave_1: left allmulticast mode [ 1267.473990][T30263] bridge_slave_1: left promiscuous mode [ 1267.483249][T30263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.532678][T30263] bridge_slave_0: left allmulticast mode [ 1267.542334][T30263] bridge_slave_0: left promiscuous mode [ 1267.550506][T30263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.599721][T30263] ip6gretap2: left allmulticast mode [ 1267.614158][T30263] ip6gretap2: left promiscuous mode [ 1267.620669][T30263] bridge7: port 1(ip6gretap2) entered disabled state [ 1267.768466][T25360] Bluetooth: hci3: command tx timeout [ 1268.073523][T30263] dvmrp1 (unregistering): left allmulticast mode [ 1268.503704][T30263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.513812][T30263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.523222][T30263] bond0 (unregistering): Released all slaves [ 1268.535227][T30263] bond1 (unregistering): Released all slaves [ 1268.551857][T30263] bond2 (unregistering): Released all slaves [ 1268.565804][T30263] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 1268.575307][T30263] bond3 (unregistering): Released all slaves [ 1268.593569][T30263] bond4 (unregistering): Released all slaves [ 1268.611053][T30263] bond5 (unregistering): (slave wireguard1): Releasing backup interface [ 1268.621263][T30263] bond5 (unregistering): (slave wireguard2): Releasing backup interface [ 1268.630203][T30263] bond5 (unregistering): Released all slaves [ 1268.647126][T30263] bond6 (unregistering): (slave wireguard3): Releasing backup interface [ 1268.657551][T30263] bond6 (unregistering): (slave wireguard4): Releasing backup interface [ 1268.666749][T30263] bond6 (unregistering): Released all slaves [ 1268.682086][T30263] bond7 (unregistering): Released all slaves [ 1268.695510][T30263] bond8 (unregistering): Released all slaves [ 1268.710569][T30263] bond9 (unregistering): Released all slaves [ 1268.795668][ T6047] lo speed is unknown, defaulting to 1000 [ 1268.825924][T30263] tipc: Left network mode [ 1268.845831][ T6047] ip6gretap0 speed is unknown, defaulting to 1000 [ 1268.888937][ T6047] wg1 speed is unknown, defaulting to 1000 [ 1269.653609][ T6032] chnl_net:caif_netlink_parms(): no params data found [ 1269.768858][ T6126] syzkaller0: entered promiscuous mode [ 1269.791147][ T6126] syzkaller0: entered allmulticast mode [ 1269.838177][T25360] Bluetooth: hci3: command tx timeout [ 1270.051049][ T6148] netlink: 'syz.0.9041': attribute type 3 has an invalid length. [ 1270.117410][ T6147] netlink: 'syz.3.9042': attribute type 2 has an invalid length. [ 1270.150031][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.159009][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.166235][ T6032] bridge_slave_0: entered allmulticast mode [ 1270.174851][ T6032] bridge_slave_0: entered promiscuous mode [ 1270.182777][ T6149] netlink: 'syz.3.9042': attribute type 2 has an invalid length. [ 1270.193055][ T6147] : entered promiscuous mode [ 1270.199436][ T6149] : left promiscuous mode [ 1270.278905][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.286188][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.294764][ T6032] bridge_slave_1: entered allmulticast mode [ 1270.304566][ T6032] bridge_slave_1: entered promiscuous mode [ 1270.466500][ T6032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1270.510945][ T6032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.520703][ T6160] __nla_validate_parse: 2 callbacks suppressed [ 1270.520719][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9044'. [ 1270.568050][ T6160] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9044'. [ 1270.829937][ T6159] veth1_macvtap: left allmulticast mode [ 1270.847884][ T6159] macsec0: left allmulticast mode [ 1270.888919][ T6159] sit1: left allmulticast mode [ 1270.893837][ T6159] vlan2: left allmulticast mode [ 1270.927552][ T6159] veth0_to_bond: left allmulticast mode [ 1270.933993][ T6159] hsr0: left allmulticast mode [ 1270.941989][ T6159] hsr_slave_0: left allmulticast mode [ 1270.968876][ T6159] hsr_slave_1: left allmulticast mode [ 1270.984842][ T6159] macvlan2: left allmulticast mode [ 1271.006775][ T6159] bond1: left promiscuous mode [ 1271.018236][ T6159] bond2: left promiscuous mode [ 1271.030548][ T6159] wireguard0: left promiscuous mode [ 1271.078906][ T6159] team1: left promiscuous mode [ 1271.083781][ T6159] team1: left allmulticast mode [ 1271.101839][ T6159] team2: left promiscuous mode [ 1271.106641][ T6159] team2: left allmulticast mode [ 1271.133785][ T6159] bond4: left promiscuous mode [ 1271.148452][ T6159] wireguard2: left promiscuous mode [ 1271.170356][ T6159] bond5: left promiscuous mode [ 1271.186313][ T6159] wireguard3: left promiscuous mode [ 1271.212459][ T6159] bridge2: left promiscuous mode [ 1271.235537][ T6159] bond6: left promiscuous mode [ 1271.251965][ T6159] wireguard4: left promiscuous mode [ 1271.284760][ T6159] bond7: left promiscuous mode [ 1271.301830][ T6159] wireguard6: left promiscuous mode [ 1271.360445][ T6159] bond9: left promiscuous mode [ 1271.366308][ T6159] bond10: left promiscuous mode [ 1271.372967][ T6159] bond11: left promiscuous mode [ 1271.385224][ T6159] geneve3: left promiscuous mode [ 1271.390567][ T6159] geneve3: left allmulticast mode [ 1271.443761][ T29] ip6gretap0 speed is unknown, defaulting to 1000 [ 1271.460256][ T29] syz0: Port: 1 Link DOWN [ 1271.500122][T30263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.589925][T30263] pimreg3 (unregistering): left allmulticast mode [ 1271.606947][ T6201] netlink: 'syz.1.9051': attribute type 4 has an invalid length. [ 1271.912193][T14754] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1271.921320][T14754] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 1271.936462][T25360] Bluetooth: hci3: command tx timeout [ 1271.976722][T14754] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1271.985604][T14754] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 1271.996605][T32244] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1272.034037][T32244] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 1272.045461][ T6032] team0: Port device team_slave_0 added [ 1272.076235][ T6032] team0: Port device team_slave_1 added [ 1272.127206][T32244] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1272.152174][T32244] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 1272.249982][ T6032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.267150][ T6032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.367360][ T6032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.423495][ T6032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.447560][ T6032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.517360][ T6032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.750523][ T6032] hsr_slave_0: entered promiscuous mode [ 1272.757904][ T6032] hsr_slave_1: entered promiscuous mode [ 1273.038634][ T6256] hsr0: entered promiscuous mode [ 1273.049239][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9068'. [ 1273.104355][ T6256] hsr_slave_0: left promiscuous mode [ 1273.126635][ T6256] hsr_slave_1: left promiscuous mode [ 1273.191235][ T6256] hsr0 (unregistering): left promiscuous mode [ 1273.389349][T30263] IPVS: stop unused estimator thread 0... [ 1273.531516][ T6273] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9067'. [ 1273.550249][ T6273] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9067'. [ 1273.641095][ T6032] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.689509][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9075'. [ 1273.716008][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9075'. [ 1273.766103][ T6032] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.816331][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9076'. [ 1274.009968][T25360] Bluetooth: hci3: command tx timeout [ 1274.060344][ T6032] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.282840][ T6032] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.512271][ T6312] ip6gretap2: entered promiscuous mode [ 1274.646294][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9084'. [ 1274.686119][ T6321] tipc: Enabling of bearer rejected, failed to enable media [ 1274.778974][ T6032] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1274.804295][ T6032] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1274.831585][ T6032] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1274.972454][ T6340] netlink: 'syz.2.9089': attribute type 1 has an invalid length. [ 1275.014820][ T6032] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1275.305804][ T6032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.365037][ T6032] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.421284][T32244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.428485][T32244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.480069][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9094'. [ 1275.502893][T32244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.510116][T32244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.542545][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9094'. [ 1275.595675][ T6364] syzkaller0: entered promiscuous mode [ 1275.604833][ T6364] syzkaller0: entered allmulticast mode [ 1275.772772][ T6372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9095'. [ 1275.862827][ T6321] lo speed is unknown, defaulting to 1000 [ 1275.911779][ T6321] ip6gretap0 speed is unknown, defaulting to 1000 [ 1275.977080][ T6321] wg1 speed is unknown, defaulting to 1000 [ 1276.248794][ T6399] netlink: 'syz.0.9101': attribute type 3 has an invalid length. [ 1276.256576][ T6399] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9101'. [ 1276.313265][ T6032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.956563][ T6032] veth0_vlan: entered promiscuous mode [ 1276.999525][ T6032] veth1_vlan: entered promiscuous mode [ 1277.084877][ T6032] veth0_macvtap: entered promiscuous mode [ 1277.145706][ T6032] veth1_macvtap: entered promiscuous mode [ 1277.219668][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1277.240830][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1277.263132][T32220] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.278289][T32220] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.308264][T32220] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.355821][T32220] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.582876][T32244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.601363][T32244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.701920][ T6390] lo speed is unknown, defaulting to 1000 [ 1277.709227][T32220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.722474][T32220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.740442][ T6390] ip6gretap0 speed is unknown, defaulting to 1000 [ 1277.755152][ T6390] wg1 speed is unknown, defaulting to 1000 [ 1278.935449][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1278.946669][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1278.960160][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1278.968320][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1278.976029][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1279.080147][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9114'. [ 1279.511695][ T6511] netlink: 'syz.1.9119': attribute type 1 has an invalid length. [ 1279.631115][ T6516] netlink: 'syz.3.9124': attribute type 2 has an invalid length. [ 1279.670914][ T6516] netlink: 'syz.3.9124': attribute type 8 has an invalid length. [ 1279.703734][ T6516] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9124'. [ 1279.739120][ T6516] netlink: 'syz.3.9124': attribute type 2 has an invalid length. [ 1279.746883][ T6516] netlink: 'syz.3.9124': attribute type 8 has an invalid length. [ 1279.797451][ T6516] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9124'. [ 1279.807029][ T6516] netlink: 'syz.3.9124': attribute type 2 has an invalid length. [ 1279.831266][ T6516] netlink: 'syz.3.9124': attribute type 8 has an invalid length. [ 1279.867022][ T6516] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9124'. [ 1279.890783][T10479] lec:lec_start_xmit: lec0:No lecd attached [ 1279.894128][ T6516] netlink: 'syz.3.9124': attribute type 2 has an invalid length. [ 1279.921219][ T6516] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9124'. [ 1279.944396][ T6516] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9124'. [ 1279.958563][ T6516] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9124'. [ 1279.980666][ T6516] validate_nla: 5 callbacks suppressed [ 1279.980681][ T6516] netlink: 'syz.3.9124': attribute type 2 has an invalid length. [ 1280.015878][ T6516] netlink: 'syz.3.9124': attribute type 8 has an invalid length. [ 1280.047703][ T6516] netlink: 'syz.3.9124': attribute type 2 has an invalid length. [ 1280.063159][ T6516] netlink: 'syz.3.9124': attribute type 8 has an invalid length. [ 1280.087850][ T6516] netlink: 'syz.3.9124': attribute type 2 has an invalid length. [ 1280.112851][ T6516] netlink: 'syz.3.9124': attribute type 8 has an invalid length. [ 1280.145365][ T6516] netlink: 'syz.3.9124': attribute type 2 has an invalid length. [ 1280.180226][ T6516] netlink: 'syz.3.9124': attribute type 8 has an invalid length. [ 1280.197014][ T6516] netlink: 'syz.3.9124': attribute type 2 has an invalid length. [ 1280.252529][ T6516] netlink: 'syz.3.9124': attribute type 8 has an invalid length. [ 1280.272272][ T6484] lo speed is unknown, defaulting to 1000 [ 1280.280082][ T6484] ip6gretap0 speed is unknown, defaulting to 1000 [ 1280.300143][ T6484] wg1 speed is unknown, defaulting to 1000 [ 1280.593014][ T6484] chnl_net:caif_netlink_parms(): no params data found [ 1280.723690][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.731355][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.739063][ T6484] bridge_slave_0: entered allmulticast mode [ 1280.747041][ T6484] bridge_slave_0: entered promiscuous mode [ 1280.756339][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.764536][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.773263][ T6484] bridge_slave_1: entered allmulticast mode [ 1280.789072][ T6484] bridge_slave_1: entered promiscuous mode [ 1280.828871][ T6484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.841596][ T6484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1280.902450][ T6484] team0: Port device team_slave_0 added [ 1280.921845][ T6484] team0: Port device team_slave_1 added [ 1281.005950][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.035220][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.062079][ T5828] Bluetooth: hci4: command tx timeout [ 1281.068616][ T6484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.229007][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.246963][ T29] IPVS: starting estimator thread 0... [ 1281.255891][ T6574] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1281.275421][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.339956][ T6573] IPVS: using max 32 ests per chain, 76800 per kthread [ 1281.358213][ T6484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.493826][ T6484] hsr_slave_0: entered promiscuous mode [ 1281.500866][ T6484] hsr_slave_1: entered promiscuous mode [ 1281.507633][ T6484] debugfs: 'hsr0' already exists in 'hsr' [ 1281.513877][ T6484] Cannot create hsr debugfs directory [ 1281.625903][ T6588] FAULT_INJECTION: forcing a failure. [ 1281.625903][ T6588] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.640688][ T6588] CPU: 1 UID: 0 PID: 6588 Comm: syz.3.9149 Not tainted syzkaller #0 PREEMPT(full) [ 1281.640715][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1281.640728][ T6588] Call Trace: [ 1281.640737][ T6588] [ 1281.640746][ T6588] dump_stack_lvl+0xe8/0x150 [ 1281.640779][ T6588] should_fail_ex+0x412/0x560 [ 1281.640814][ T6588] should_failslab+0xa8/0x100 [ 1281.640845][ T6588] __kmalloc_noprof+0xe8/0x760 [ 1281.640873][ T6588] ? sk_prot_alloc+0xe7/0x210 [ 1281.640903][ T6588] sk_prot_alloc+0xe7/0x210 [ 1281.640925][ T6588] ? sk_alloc+0x27/0x390 [ 1281.640951][ T6588] sk_alloc+0x3a/0x390 [ 1281.640978][ T6588] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 1281.641012][ T6588] ? __fget_files+0x2a/0x420 [ 1281.641032][ T6588] ? __fget_files+0x3a0/0x420 [ 1281.641051][ T6588] ? __fget_files+0x2a/0x420 [ 1281.641080][ T6588] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1281.641102][ T6588] bpf_prog_test_run+0x2c7/0x340 [ 1281.641133][ T6588] __sys_bpf+0x643/0x950 [ 1281.641160][ T6588] ? __pfx___sys_bpf+0x10/0x10 [ 1281.641202][ T6588] ? ksys_write+0x242/0x270 [ 1281.641229][ T6588] ? __pfx_ksys_write+0x10/0x10 [ 1281.641262][ T6588] __x64_sys_bpf+0x7c/0x90 [ 1281.641285][ T6588] do_syscall_64+0x14d/0xf80 [ 1281.641311][ T6588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.641332][ T6588] ? trace_irq_disable+0x37/0x100 [ 1281.641355][ T6588] ? clear_bhb_loop+0x40/0x90 [ 1281.641379][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.641400][ T6588] RIP: 0033:0x7f264819bf79 [ 1281.641418][ T6588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.641434][ T6588] RSP: 002b:00007f2648fb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1281.641456][ T6588] RAX: ffffffffffffffda RBX: 00007f2648415fa0 RCX: 00007f264819bf79 [ 1281.641472][ T6588] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1281.641486][ T6588] RBP: 00007f2648fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.641500][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.641513][ T6588] R13: 00007f2648416038 R14: 00007f2648415fa0 R15: 00007ffcaf8a6eb8 [ 1281.641548][ T6588] [ 1281.905045][ T6590] __nla_validate_parse: 30 callbacks suppressed [ 1281.905065][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9150'. [ 1281.945751][ T6592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9151'. [ 1281.964164][ T6593] 8021q: VLANs not supported on xfrm0 [ 1281.976826][ T6590] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9150'. [ 1281.991169][ T6484] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1282.012164][ T6590] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9150'. [ 1282.110613][ T6484] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1282.145908][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9152'. [ 1282.182033][ T6600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1282.208593][ T6484] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1282.232738][ T30] audit: type=1800 audit(1771262409.198:23): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9151" name="memory.events" dev="tmpfs" ino=3224 res=0 errno=0 [ 1282.303445][ T6484] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1282.345570][ T6599] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1282.374679][ T6599] syzkaller1: linktype set to 768 [ 1282.496947][ T6605] vlan3: entered promiscuous mode [ 1282.503240][ T6605] erspan0: entered promiscuous mode [ 1282.548535][ T6484] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1282.568690][ T6484] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1282.585783][ T6484] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1282.614562][ T6484] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1282.730858][ T6623] FAULT_INJECTION: forcing a failure. [ 1282.730858][ T6623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1282.744802][ T6623] CPU: 0 UID: 0 PID: 6623 Comm: syz.2.9158 Not tainted syzkaller #0 PREEMPT(full) [ 1282.744827][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1282.744841][ T6623] Call Trace: [ 1282.744850][ T6623] [ 1282.744859][ T6623] dump_stack_lvl+0xe8/0x150 [ 1282.744893][ T6623] should_fail_ex+0x412/0x560 [ 1282.744928][ T6623] _copy_to_user+0x31/0xb0 [ 1282.744953][ T6623] simple_read_from_buffer+0xe1/0x170 [ 1282.744990][ T6623] proc_fail_nth_read+0x1bb/0x230 [ 1282.745023][ T6623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1282.745055][ T6623] ? rw_verify_area+0x2a6/0x4d0 [ 1282.745079][ T6623] ? tun_chr_write_iter+0xe0/0x200 [ 1282.745108][ T6623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1282.745138][ T6623] vfs_read+0x20c/0xa70 [ 1282.745160][ T6623] ? fdget_pos+0x246/0x320 [ 1282.745186][ T6623] ? __pfx___mutex_lock+0x10/0x10 [ 1282.745216][ T6623] ? __pfx_vfs_read+0x10/0x10 [ 1282.745243][ T6623] ? __fget_files+0x2a/0x420 [ 1282.745269][ T6623] ? __fget_files+0x3a0/0x420 [ 1282.745288][ T6623] ? __fget_files+0x2a/0x420 [ 1282.745319][ T6623] ksys_read+0x150/0x270 [ 1282.745347][ T6623] ? __pfx_ksys_read+0x10/0x10 [ 1282.745385][ T6623] do_syscall_64+0x14d/0xf80 [ 1282.745412][ T6623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.745432][ T6623] ? trace_irq_disable+0x37/0x100 [ 1282.745456][ T6623] ? clear_bhb_loop+0x40/0x90 [ 1282.745483][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.745504][ T6623] RIP: 0033:0x7faaebb5c84e [ 1282.745523][ T6623] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1282.745541][ T6623] RSP: 002b:00007faaeca48fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1282.745563][ T6623] RAX: ffffffffffffffda RBX: 00007faaeca496c0 RCX: 00007faaebb5c84e [ 1282.745580][ T6623] RDX: 000000000000000f RSI: 00007faaeca490a0 RDI: 0000000000000004 [ 1282.745593][ T6623] RBP: 00007faaeca49090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.745607][ T6623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.745619][ T6623] R13: 00007faaebe16038 R14: 00007faaebe15fa0 R15: 00007ffcc931cc68 [ 1282.745656][ T6623] [ 1282.983813][ T6484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.001755][ T6484] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.014731][T30261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.022030][T30261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.106821][T30263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.114005][T30263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.139221][ T5828] Bluetooth: hci4: command tx timeout [ 1283.250852][ T6632] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9163'. [ 1283.385356][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9166'. [ 1283.618467][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9170'. [ 1283.682467][ T6484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.786289][ T6484] veth0_vlan: entered promiscuous mode [ 1283.801318][ T6484] veth1_vlan: entered promiscuous mode [ 1283.847215][ T6484] veth0_macvtap: entered promiscuous mode [ 1283.863340][ T6668] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9172'. [ 1283.876049][ T6669] geneve1: entered promiscuous mode [ 1283.883687][ T6484] veth1_macvtap: entered promiscuous mode [ 1283.933722][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1283.973232][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.013858][T32220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.032966][T32220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.083850][T32220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.113355][T32220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.390384][T30261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.418029][T30261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.544638][ T6694] bond19: entered promiscuous mode [ 1284.550404][ T6694] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1284.588850][ T6694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1284.604562][ T6694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1284.738635][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.746498][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.803769][ T6706] syzkaller0: entered promiscuous mode [ 1284.833795][ T6706] syzkaller0: entered allmulticast mode [ 1284.862718][ T6706] TC_ACT_REPEAT abuse ? [ 1284.897947][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1284.906019][ C1] lec:lec_tx_timeout: lec0 [ 1285.035923][ T6708] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.9110'. [ 1285.057921][ T6708] bridge_slave_1: default FDB implementation only supports local addresses [ 1285.203559][ T5828] Bluetooth: hci4: command tx timeout [ 1285.305871][T25360] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1285.333053][T25360] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1285.350448][T25360] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1285.368285][T25360] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1285.383742][T25360] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1285.439907][ T3476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.501975][ T6681] lo speed is unknown, defaulting to 1000 [ 1285.519817][ T6681] ip6gretap0 speed is unknown, defaulting to 1000 [ 1285.539047][ T6681] wg1 speed is unknown, defaulting to 1000 [ 1286.011762][ T6745] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1286.078271][T30261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.159330][ T6751] tipc: MTU too low for tipc bearer [ 1286.361535][ T6764] validate_nla: 49 callbacks suppressed [ 1286.361555][ T6764] netlink: 'syz.1.9205': attribute type 2 has an invalid length. [ 1286.410600][ T6764] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1286.468442][ T6719] lo speed is unknown, defaulting to 1000 [ 1286.500626][ T6719] ip6gretap0 speed is unknown, defaulting to 1000 [ 1286.523575][ T6719] wg1 speed is unknown, defaulting to 1000 [ 1286.793306][ T6780] netlink: 'syz.4.9212': attribute type 1 has an invalid length. [ 1286.940183][ T6789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1286.947498][ T6789] IPv6: NLM_F_CREATE should be set when creating new route [ 1286.954750][ T6789] IPv6: NLM_F_CREATE should be set when creating new route [ 1286.979249][ T6790] netlink: 'syz.1.9214': attribute type 9 has an invalid length. [ 1286.998403][ T6789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1287.027568][ T6780] bond1: entered promiscuous mode [ 1287.034127][ T6780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1287.064076][ T6781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1287.073591][ T6781] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1287.086194][ T6781] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 1287.109806][ T6788] __nla_validate_parse: 8 callbacks suppressed [ 1287.109824][ T6788] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9213'. [ 1287.138482][ T6789] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1287.160567][ T6789] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 1287.283822][T25360] Bluetooth: hci4: command tx timeout [ 1287.437767][T25360] Bluetooth: hci5: command tx timeout [ 1287.498881][ T6719] chnl_net:caif_netlink_parms(): no params data found [ 1287.629100][ T6810] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.9221'. [ 1287.710908][ T6816] netlink: 'syz.1.9222': attribute type 1 has an invalid length. [ 1287.768729][ T6820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9222'. [ 1287.833362][ T6816] bond12: entered promiscuous mode [ 1287.846259][ T6816] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1287.868234][ T6719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.875455][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.894039][ T6816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1287.901307][ T6816] IPv6: NLM_F_CREATE should be set when creating new route [ 1287.908630][ T6816] IPv6: NLM_F_CREATE should be set when creating new route [ 1287.936946][ T6719] bridge_slave_0: entered allmulticast mode [ 1287.946041][ T6823] FAULT_INJECTION: forcing a failure. [ 1287.946041][ T6823] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.958708][ T6823] CPU: 0 UID: 0 PID: 6823 Comm: syz.4.9224 Not tainted syzkaller #0 PREEMPT(full) [ 1287.958733][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1287.958747][ T6823] Call Trace: [ 1287.958756][ T6823] [ 1287.958765][ T6823] dump_stack_lvl+0xe8/0x150 [ 1287.958796][ T6823] should_fail_ex+0x412/0x560 [ 1287.958831][ T6823] should_failslab+0xa8/0x100 [ 1287.958861][ T6823] ? skb_clone+0x212/0x3a0 [ 1287.958887][ T6823] kmem_cache_alloc_noprof+0x87/0x650 [ 1287.958913][ T6823] ? __bpf_redirect+0x9b4/0x12a0 [ 1287.958946][ T6823] skb_clone+0x212/0x3a0 [ 1287.958976][ T6823] bpf_clone_redirect+0x16a/0x4b0 [ 1287.959006][ T6823] ? bpf_test_run+0x1d1/0x830 [ 1287.959022][ T6816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1287.959026][ T6823] bpf_prog_e16758452f539c38+0x5f/0x68 [ 1287.959049][ T6823] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1287.959150][ T6823] ? arch_stack_walk+0xfb/0x150 [ 1287.959268][ T6823] ? ktime_get+0x45/0x200 [ 1287.959390][ T6823] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1287.959465][ T6823] ? lockdep_hardirqs_on+0x7a/0x110 [ 1287.959530][ T6823] ? ktime_get+0x45/0x200 [ 1287.959588][ T6823] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1287.959668][ T6823] ? bpf_test_timer_continue+0x10c/0x320 [ 1287.959728][ T6823] bpf_test_run+0x354/0x830 [ 1287.959841][ T6823] ? __pfx_bpf_test_run+0x10/0x10 [ 1287.959910][ T6823] ? rcu_is_watching+0x15/0xb0 [ 1287.959976][ T6823] ? __kasan_krealloc+0xeb/0x110 [ 1287.960044][ T6823] ? eth_type_trans+0x35e/0x6d0 [ 1287.960113][ T6823] ? bpf_prog_test_run_skb+0x889/0x1c90 [ 1287.960163][ T6823] ? convert___skb_to_skb+0x3d/0x5b0 [ 1287.960218][ T6823] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1287.960303][ T6823] ? __fget_files+0x2a/0x420 [ 1287.960346][ T6823] ? __fget_files+0x3a0/0x420 [ 1287.960393][ T6823] ? __fget_files+0x2a/0x420 [ 1287.960453][ T6823] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1287.960503][ T6823] bpf_prog_test_run+0x2c7/0x340 [ 1287.960614][ T6823] __sys_bpf+0x643/0x950 [ 1287.960685][ T6823] ? __pfx___sys_bpf+0x10/0x10 [ 1287.960783][ T6823] ? ksys_write+0x242/0x270 [ 1287.960844][ T6823] ? __pfx_ksys_write+0x10/0x10 [ 1287.960941][ T6823] __x64_sys_bpf+0x7c/0x90 [ 1287.960995][ T6823] do_syscall_64+0x14d/0xf80 [ 1287.961051][ T6823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.961096][ T6823] ? trace_irq_disable+0x37/0x100 [ 1287.961145][ T6823] ? clear_bhb_loop+0x40/0x90 [ 1287.961194][ T6823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.961234][ T6823] RIP: 0033:0x7f350a39bf79 [ 1287.961278][ T6823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.961327][ T6823] RSP: 002b:00007f350b2e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1287.961376][ T6823] RAX: ffffffffffffffda RBX: 00007f350a615fa0 RCX: 00007f350a39bf79 [ 1287.961412][ T6823] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1287.961445][ T6823] RBP: 00007f350b2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.961473][ T6823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.961509][ T6823] R13: 00007f350a616038 R14: 00007f350a615fa0 R15: 00007ffd0e6f0158 [ 1287.961583][ T6823] [ 1287.988508][ T6719] bridge_slave_0: entered promiscuous mode [ 1288.015703][ T6816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9222'. [ 1288.083011][T30261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.136838][ T6719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.312011][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.323951][ T6719] bridge_slave_1: entered allmulticast mode [ 1288.341738][ T6719] bridge_slave_1: entered promiscuous mode [ 1288.385964][ T6719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.404259][ T6719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.463435][ T6719] team0: Port device team_slave_0 added [ 1288.474135][ T6719] team0: Port device team_slave_1 added [ 1288.519580][ T6833] lo: MTU too low for tipc bearer [ 1288.524725][ T6833] tipc: Enabling of bearer rejected, failed to enable media [ 1288.551905][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.559261][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.586258][ T6719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.622119][ T6834] bond12: left promiscuous mode [ 1288.641630][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.655016][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.683079][ T6719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.744738][ T6835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1288.752163][ T6835] IPv6: NLM_F_CREATE should be set when creating new route [ 1288.766035][ T6719] hsr_slave_0: entered promiscuous mode [ 1288.802582][ T6719] hsr_slave_1: entered promiscuous mode [ 1288.823740][ T6719] debugfs: 'hsr0' already exists in 'hsr' [ 1288.830733][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9227'. [ 1288.837439][ T6719] Cannot create hsr debugfs directory [ 1288.864921][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9230'. [ 1288.895004][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9231'. [ 1288.921730][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9231'. [ 1288.934090][ T6846] netlink: 31 bytes leftover after parsing attributes in process `syz.4.9231'. [ 1288.943479][ T6846] netlink: 'syz.4.9231': attribute type 3 has an invalid length. [ 1288.960052][ T6846] netlink: 'syz.4.9231': attribute type 2 has an invalid length. [ 1288.968812][ T6846] netlink: 31 bytes leftover after parsing attributes in process `syz.4.9231'. [ 1288.977857][ T6846] netlink: 'syz.4.9231': attribute type 2 has an invalid length. [ 1289.175082][ T6719] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1289.191492][ T6719] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.203374][ T6719] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 51855 - 0 [ 1289.214355][ T6719] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1289.312998][ T6719] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1289.340156][ T6719] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.351350][ T6719] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 51855 - 0 [ 1289.362280][ T6719] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1289.398977][ T6858] bridge_slave_1: default FDB implementation only supports local addresses [ 1289.415322][ T6719] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1289.428448][ T6719] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.438651][ T6719] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 51855 - 0 [ 1289.471913][ T6719] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1289.520991][T25360] Bluetooth: hci5: command tx timeout [ 1289.541042][ T6719] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1289.559574][ T6719] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.572201][ T6719] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 51855 - 0 [ 1289.583777][ T6719] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1289.607897][ T6867] netlink: 'syz.4.9238': attribute type 13 has an invalid length. [ 1289.621908][ T6866] netlink: 'syz.0.9237': attribute type 1 has an invalid length. [ 1289.705589][ T6866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1289.712947][ T6866] IPv6: NLM_F_CREATE should be set when creating new route [ 1289.720249][ T6866] IPv6: NLM_F_CREATE should be set when creating new route [ 1289.736463][ T6866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1289.830620][ T6864] syzkaller0: entered promiscuous mode [ 1289.836162][ T6864] syzkaller0: entered allmulticast mode [ 1289.960644][ T6877] netlink: 'syz.0.9241': attribute type 10 has an invalid length. [ 1290.016612][ T6877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.076208][ T6877] team0: Port device bond0 added [ 1290.193365][ T6719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1290.249880][ T6719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1290.294790][ T6719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1290.339509][ T6719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1290.390328][ T6900] žÿ: renamed from team_slave_1 [ 1290.504369][ T6913] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1290.656059][ T6920] bridge_slave_1: left allmulticast mode [ 1290.679076][ T6920] bridge_slave_1: left promiscuous mode [ 1290.684977][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.701295][ T6920] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1290.759590][ T6923] vlan3: entered promiscuous mode [ 1290.832847][ T6719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.976715][ T6719] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.014005][T30263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.021180][T30263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.043801][T32246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.051015][T32246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.217084][T30261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.302312][ T6719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1291.432743][ T3476] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1291.497695][ T3476] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1291.547825][ T3476] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1291.556588][ T3476] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1291.605524][T25360] Bluetooth: hci5: command tx timeout [ 1291.642283][ T6959] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1291.806626][ T6719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1291.850082][ T3476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.878898][ T6961] syzkaller0: entered promiscuous mode [ 1291.884471][ T6961] syzkaller0: entered allmulticast mode [ 1291.974113][ T6971] netlink: 'syz.3.9261': attribute type 1 has an invalid length. [ 1292.020830][ T6970] pimreg: tun_chr_ioctl cmd 1074025677 [ 1292.028057][ T6970] pimreg: linktype set to 0 [ 1292.078264][ T6719] veth0_vlan: entered promiscuous mode [ 1292.118603][ T6921] lo speed is unknown, defaulting to 1000 [ 1292.128775][ T6719] veth1_vlan: entered promiscuous mode [ 1292.149578][ T6921] ip6gretap0 speed is unknown, defaulting to 1000 [ 1292.182539][ T6719] veth0_macvtap: entered promiscuous mode [ 1292.193227][ T6719] veth1_macvtap: entered promiscuous mode [ 1292.223180][ T6921] wg1 speed is unknown, defaulting to 1000 [ 1292.276075][ T6977] __nla_validate_parse: 10 callbacks suppressed [ 1292.276093][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9263'. [ 1292.313990][ T6976] vlan3: entered promiscuous mode [ 1292.321799][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9263'. [ 1292.358635][ T6979] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 1292.371968][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1292.412207][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1292.534567][T32220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.563131][T32220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.630184][T32220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.662727][T32220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.744638][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9265'. [ 1292.754709][ T6992] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 1292.818926][ T6987] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9265'. [ 1292.873853][ T7000] syzkaller0: entered promiscuous mode [ 1292.879817][ T7000] syzkaller0: entered allmulticast mode [ 1293.028407][ T7000] tipc: Started in network mode [ 1293.041774][ T7000] tipc: Node identity e6b4defaf323, cluster identity 4711 [ 1293.054740][ T7000] tipc: Enabled bearer , priority 0 [ 1293.119341][ T6996] tipc: Resetting bearer [ 1293.209850][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9269'. [ 1293.272757][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9269'. [ 1293.299500][ T6993] tipc: Resetting bearer [ 1293.338923][ T6993] tipc: Disabling bearer [ 1293.408610][T30262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1293.426934][T30262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1293.593951][ T7022] veth0_to_bond: Caught tx_queue_len zero misconfig [ 1293.615493][T32246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1293.632151][T32246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1293.679415][T25360] Bluetooth: hci5: command tx timeout [ 1293.769647][T30262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.806410][ T7029] netlink: 'syz.2.9186': attribute type 1 has an invalid length. [ 1293.925626][ T7036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1293.932960][ T7036] IPv6: NLM_F_CREATE should be set when creating new route [ 1293.940256][ T7036] IPv6: NLM_F_CREATE should be set when creating new route [ 1294.008015][ T7036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1294.034951][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1294.046173][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1294.061129][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1294.070288][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1294.082600][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1294.170240][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9278'. [ 1294.205910][ T7047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1294.213183][ T7047] IPv6: NLM_F_CREATE should be set when creating new route [ 1294.391307][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9279'. [ 1294.811503][ T7060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9283'. [ 1294.969806][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9285'. [ 1295.048834][ T7071] netlink: 'syz.2.9286': attribute type 7 has an invalid length. [ 1295.067150][ T7070] sctp: [Deprecated]: syz.4.9285 (pid 7070) Use of int in max_burst socket option deprecated. [ 1295.067150][ T7070] Use struct sctp_assoc_value instead [ 1295.107163][ T7069] syzkaller0: entered promiscuous mode [ 1295.135813][ T7069] syzkaller0: entered allmulticast mode [ 1295.157817][ T7040] lo speed is unknown, defaulting to 1000 [ 1295.175335][ T7040] ip6gretap0 speed is unknown, defaulting to 1000 [ 1296.158421][T25360] Bluetooth: hci1: command tx timeout [ 1296.831335][T32244] batman_adv: batadv0: Removing interface: gretap1 [ 1296.962805][T30263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.971059][T30263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.172205][T32244] bond9 (unregistering): (slave bridge0): Releasing active interface [ 1297.262655][T32244] bond1 (unregistering): Released all slaves [ 1297.291133][T32244] bond0 (unregistering): Released all slaves [ 1297.310592][T32244] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 1297.319720][T32244] wireguard0: left promiscuous mode [ 1297.325964][T32244] bond2 (unregistering): (slave wireguard1): Releasing backup interface [ 1297.362539][T32244] bond2 (unregistering): Released all slaves [ 1297.381606][T32244] bond3 (unregistering): Released all slaves [ 1297.410019][T32244] bond4 (unregistering): (slave wireguard2): Releasing backup interface [ 1297.419090][T32244] wireguard2: left promiscuous mode [ 1297.424836][T32244] bond4 (unregistering): Released all slaves [ 1297.443526][T32244] bond5 (unregistering): (slave wireguard3): Releasing backup interface [ 1297.451912][T32244] wireguard3: left promiscuous mode [ 1297.464543][T32244] bond5 (unregistering): Released all slaves [ 1297.481950][T32244] bond6 (unregistering): (slave wireguard4): Releasing backup interface [ 1297.490552][T32244] wireguard4: left promiscuous mode [ 1297.496878][T32244] bond6 (unregistering): (slave wireguard5): Releasing backup interface [ 1297.511110][T32244] bond6 (unregistering): Released all slaves [ 1297.527900][T32244] bond7 (unregistering): Released all slaves [ 1297.542761][T32244] bond8 (unregistering): Released all slaves [ 1297.556169][T32244] bond9 (unregistering): Released all slaves [ 1297.576748][ T7040] wg1 speed is unknown, defaulting to 1000 [ 1297.745577][T32244] tipc: Disabling bearer [ 1297.785332][ T7100] __nla_validate_parse: 5 callbacks suppressed [ 1297.785351][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9292'. [ 1297.816181][T32244] tipc: Left network mode [ 1297.971143][ T7105] netlink: 'syz.4.9294': attribute type 32 has an invalid length. [ 1297.999794][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9294'. [ 1298.135110][ T7105] bond2: option coupled_control: invalid value (7) [ 1298.150146][ T7105] bond2 (unregistering): Released all slaves [ 1298.241546][T25360] Bluetooth: hci1: command tx timeout [ 1298.354095][ T7040] chnl_net:caif_netlink_parms(): no params data found [ 1298.374779][ T7116] FAULT_INJECTION: forcing a failure. [ 1298.374779][ T7116] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.387476][ T7116] CPU: 0 UID: 0 PID: 7116 Comm: syz.1.9296 Not tainted syzkaller #0 PREEMPT(full) [ 1298.387499][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1298.387512][ T7116] Call Trace: [ 1298.387520][ T7116] [ 1298.387528][ T7116] dump_stack_lvl+0xe8/0x150 [ 1298.387559][ T7116] should_fail_ex+0x412/0x560 [ 1298.387592][ T7116] should_failslab+0xa8/0x100 [ 1298.387620][ T7116] ? skb_clone+0x212/0x3a0 [ 1298.387645][ T7116] kmem_cache_alloc_noprof+0x87/0x650 [ 1298.387670][ T7116] ? __bpf_redirect+0x9b4/0x12a0 [ 1298.387694][ T7116] skb_clone+0x212/0x3a0 [ 1298.387723][ T7116] bpf_clone_redirect+0x16a/0x4b0 [ 1298.387751][ T7116] ? bpf_test_run+0x1d1/0x830 [ 1298.387770][ T7116] bpf_prog_e16758452f539c38+0x5f/0x68 [ 1298.387792][ T7116] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1298.387820][ T7116] ? arch_stack_walk+0xfb/0x150 [ 1298.387855][ T7116] ? ktime_get+0x45/0x200 [ 1298.387895][ T7116] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1298.387922][ T7116] ? lockdep_hardirqs_on+0x7a/0x110 [ 1298.387946][ T7116] ? ktime_get+0x45/0x200 [ 1298.387969][ T7116] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1298.388001][ T7116] ? bpf_test_timer_continue+0x10c/0x320 [ 1298.388024][ T7116] bpf_test_run+0x354/0x830 [ 1298.388064][ T7116] ? __pfx_bpf_test_run+0x10/0x10 [ 1298.388093][ T7116] ? rcu_is_watching+0x15/0xb0 [ 1298.388117][ T7116] ? __kasan_krealloc+0xeb/0x110 [ 1298.388167][ T7116] ? eth_type_trans+0x35e/0x6d0 [ 1298.388211][ T7116] ? bpf_prog_test_run_skb+0x889/0x1c90 [ 1298.388230][ T7116] ? convert___skb_to_skb+0x3d/0x5b0 [ 1298.388252][ T7116] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1298.388283][ T7116] ? __fget_files+0x2a/0x420 [ 1298.388301][ T7116] ? __fget_files+0x3a0/0x420 [ 1298.388320][ T7116] ? __fget_files+0x2a/0x420 [ 1298.388343][ T7116] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1298.388363][ T7116] bpf_prog_test_run+0x2c7/0x340 [ 1298.388393][ T7116] __sys_bpf+0x643/0x950 [ 1298.388418][ T7116] ? __pfx___sys_bpf+0x10/0x10 [ 1298.388457][ T7116] ? ksys_write+0x242/0x270 [ 1298.388483][ T7116] ? __pfx_ksys_write+0x10/0x10 [ 1298.388514][ T7116] __x64_sys_bpf+0x7c/0x90 [ 1298.388536][ T7116] do_syscall_64+0x14d/0xf80 [ 1298.388561][ T7116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.388579][ T7116] ? trace_irq_disable+0x37/0x100 [ 1298.388600][ T7116] ? clear_bhb_loop+0x40/0x90 [ 1298.388624][ T7116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.388642][ T7116] RIP: 0033:0x7f690bb9bf79 [ 1298.388660][ T7116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.388677][ T7116] RSP: 002b:00007f690c97b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1298.388697][ T7116] RAX: ffffffffffffffda RBX: 00007f690be15fa0 RCX: 00007f690bb9bf79 [ 1298.388711][ T7116] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1298.388724][ T7116] RBP: 00007f690c97b090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.388737][ T7116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1298.388748][ T7116] R13: 00007f690be16038 R14: 00007f690be15fa0 R15: 00007ffd76233998 [ 1298.388781][ T7116] [ 1298.735121][ T7112] syzkaller0: entered promiscuous mode [ 1298.760805][ T7112] syzkaller0: entered allmulticast mode [ 1298.783713][ T7078] lo speed is unknown, defaulting to 1000 [ 1298.832466][ T7118] team_slave_0: entered promiscuous mode [ 1298.838263][ T7118] team_slave_1: entered promiscuous mode [ 1298.845054][ T7118] vlan2: entered promiscuous mode [ 1298.851220][ T7118] team0: entered promiscuous mode [ 1298.866320][ T7078] ip6gretap0 speed is unknown, defaulting to 1000 [ 1298.882623][T30262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.907129][ T7121] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1298.948584][ T7120] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9298'. [ 1298.975163][ T7078] wg1 speed is unknown, defaulting to 1000 [ 1299.239908][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.251451][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.261011][ T7040] bridge_slave_0: entered allmulticast mode [ 1299.271457][ T7040] bridge_slave_0: entered promiscuous mode [ 1299.322179][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.331481][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.338840][ T7040] bridge_slave_1: entered allmulticast mode [ 1299.349124][ T7040] bridge_slave_1: entered promiscuous mode [ 1299.446423][ T7143] netlink: 'syz.4.9304': attribute type 1 has an invalid length. [ 1299.501673][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9304'. [ 1299.553960][ T7149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1299.565813][ T7143] bond2: entered promiscuous mode [ 1299.572689][ T7143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1299.579862][ T7149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1299.635483][ T7149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9304'. [ 1299.725724][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.818156][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.157481][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.172019][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1300.254915][ T7040] team0: Port device team_slave_0 added [ 1300.279230][ T7169] wg1: entered promiscuous mode [ 1300.298250][ T7169] wg1: entered allmulticast mode [ 1300.315081][ T7040] team0: Port device team_slave_1 added [ 1300.321578][T25360] Bluetooth: hci1: command tx timeout [ 1300.678428][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.685415][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.784533][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1300.891575][T32244] hsr_slave_0: left promiscuous mode [ 1300.901758][T32244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1300.910864][T32244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.964722][ T7172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9308'. [ 1301.007382][ T7172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9308'. [ 1301.044766][T32244] vlan2 (unregistering): left promiscuous mode [ 1301.051212][T32244] veth0_to_bond (unregistering): left promiscuous mode [ 1301.066387][T32244] team0 (unregistering): Port device vlan2 removed [ 1301.164900][T32220] smc: removing ib device syz1 [ 1301.323755][T32244] team_slave_1 (unregistering): left promiscuous mode [ 1301.336913][T32244] team0 (unregistering): Port device team_slave_1 removed [ 1301.360308][T32244] team_slave_0 (unregistering): left promiscuous mode [ 1301.368075][T32244] team0 (unregistering): Port device team_slave_0 removed [ 1301.393608][ T3476] smc: removing ib device syû [ 1301.503124][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.510166][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.536770][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1301.906585][ T7040] hsr_slave_0: entered promiscuous mode [ 1301.980274][ T7040] hsr_slave_1: entered promiscuous mode [ 1302.008159][ T7040] debugfs: 'hsr0' already exists in 'hsr' [ 1302.013948][ T7040] Cannot create hsr debugfs directory [ 1302.081642][ T3019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.397967][T25360] Bluetooth: hci1: command tx timeout [ 1302.673511][ T7222] netlink: 'syz.2.9320': attribute type 1 has an invalid length. [ 1302.722541][T30263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.543340][ T7252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9323'. [ 1303.863011][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9324'. [ 1304.035611][T15802] IPVS: starting estimator thread 0... [ 1304.167726][ T7262] IPVS: using max 30 ests per chain, 72000 per kthread [ 1304.356355][ T7272] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1304.640402][T14754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.035828][ T7291] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.047938][ T7291] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.188851][ T7304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1305.233392][ T7304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1305.463806][ T7298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9335'. [ 1305.489244][ T7309] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9332'. [ 1305.498458][ T7309] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9332'. [ 1305.558016][ T7040] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.569503][ T7040] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1305.742026][ T7291] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.752673][ T7291] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.802387][ T7293] lo speed is unknown, defaulting to 1000 [ 1305.837269][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 1305.845364][ C1] lec:lec_tx_timeout: lec0 [ 1305.924335][ T7040] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.951727][ T7040] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1306.120900][ T7291] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1306.159141][ T7291] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.244642][ T7293] ip6gretap0 speed is unknown, defaulting to 1000 [ 1306.271879][ T7040] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1306.288998][ T7040] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1306.367874][ T7293] wg1 speed is unknown, defaulting to 1000 [ 1306.412522][ T7291] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1306.422877][ T7291] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.624145][ T7040] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1306.653672][ T7040] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1306.921246][ T7329] siw: device registration error -23 [ 1307.062858][T14754] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.094635][T14754] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.353197][T14754] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.379594][T14754] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.495464][T14754] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.504489][T14754] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.585573][T14754] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.614210][T14754] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.794673][ T7353] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9349'. [ 1307.849018][ T3476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.857152][ T3476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.896287][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.903829][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.989548][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1308.003204][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1308.104702][T30262] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.126639][T30262] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.156529][T30262] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.170043][T30262] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.199198][ T7040] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1308.230940][ T7040] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1308.267086][ T7040] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1308.294517][ T7040] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1308.308978][ T7363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9353'. [ 1308.628112][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9356'. [ 1308.634339][ T7040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.700771][ T7040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.740121][T32244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.747312][T32244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.811469][T30261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.818671][T30261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.889298][ T7390] syzkaller0: entered promiscuous mode [ 1308.894843][ T7390] syzkaller0: entered allmulticast mode [ 1308.942263][ T7393] netlink: 'syz.0.9363': attribute type 1 has an invalid length. [ 1308.996346][ T7393] bond1: entered promiscuous mode [ 1309.002095][ T7393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1309.043307][ T7399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1309.057800][ T7393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1309.065320][ T7393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1309.074260][ T7399] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1309.102502][ T7399] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 1309.114815][ T7406] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9366'. [ 1309.130145][ T7407] tunl0: Caught tx_queue_len zero misconfig [ 1309.156964][ T7393] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1309.169701][ T7393] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 1309.219949][ T7040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1309.246605][ T7403] lo speed is unknown, defaulting to 1000 [ 1309.260907][ T7403] ip6gretap0 speed is unknown, defaulting to 1000 [ 1309.271903][ T7403] wg1 speed is unknown, defaulting to 1000 [ 1309.577120][ T7040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.644652][ T7432] team_slave_0: entered promiscuous mode [ 1309.650403][ T7432] team_slave_1: entered promiscuous mode [ 1309.656309][ T7432] bond_slave_0: entered promiscuous mode [ 1309.662361][ T7432] bond_slave_1: entered promiscuous mode [ 1309.669565][ T7432] vlan2: entered promiscuous mode [ 1309.674713][ T7432] team0: entered promiscuous mode [ 1309.681018][ T7432] bond0: entered promiscuous mode [ 1309.690827][ T7434] netlink: 'syz.4.9372': attribute type 1 has an invalid length. [ 1309.724879][ T7434] bond3: entered promiscuous mode [ 1309.730419][ T7434] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1309.760437][ T7040] veth0_vlan: entered promiscuous mode [ 1309.772799][ T7434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1309.784891][ T7434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1309.809160][ T7040] veth1_vlan: entered promiscuous mode [ 1309.868691][ T7439] Unsupported ieee802154 address type: 0 [ 1310.091725][ T7040] veth0_macvtap: entered promiscuous mode [ 1310.110567][ T7040] veth1_macvtap: entered promiscuous mode [ 1310.123074][ T7452] netlink: 'syz.4.9378': attribute type 1 has an invalid length. [ 1310.215430][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9379'. [ 1310.221988][ T7452] bond4: entered promiscuous mode [ 1310.230379][ T7452] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1310.242423][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1310.251354][ T7452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1310.266761][ T7464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1310.267041][ T7452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1310.276536][ T7464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1310.300024][ T7463] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1310.307977][ T7463] bond4: (slave wireguard2): The slave device specified does not support setting the MAC address [ 1310.321363][ T7463] bond4: (slave wireguard2): Error -95 calling set_mac_address [ 1310.395757][ T7460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1310.423917][ T7452] bond4: (slave wireguard2): The slave device specified does not support setting the MAC address [ 1310.446625][ T7452] bond4: (slave wireguard2): Error -95 calling set_mac_address [ 1310.534224][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.555152][ T7477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1310.562455][ T7477] IPv6: NLM_F_CREATE should be set when creating new route [ 1310.569736][ T7477] IPv6: NLM_F_CREATE should be set when creating new route [ 1310.587082][ T7477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1310.706077][T30262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.731817][T30262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.773575][ T7470] syzkaller0: entered promiscuous mode [ 1310.779252][ T7470] syzkaller0: entered allmulticast mode [ 1310.839595][T14754] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.870201][T14754] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.072713][ T7496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9389'. [ 1311.128749][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.160982][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.193121][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9389'. [ 1311.228328][ T7503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9391'. [ 1311.269496][ T3019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.278431][ T3019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.459963][ T7508] lo speed is unknown, defaulting to 1000 [ 1311.496051][ T7508] ip6gretap0 speed is unknown, defaulting to 1000 [ 1311.558363][ T7508] wg1 speed is unknown, defaulting to 1000 [ 1311.781241][ T7527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9399'. [ 1311.829206][ T7531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1311.836812][ T7531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1311.899155][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1311.911061][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1311.931031][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1311.942369][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1311.950114][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1312.031505][ T7539] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9401'. [ 1312.199304][ T7529] syzkaller0: entered promiscuous mode [ 1312.215477][ T7529] syzkaller0: entered allmulticast mode [ 1312.256566][ T7533] lo speed is unknown, defaulting to 1000 [ 1312.328274][ T7533] ip6gretap0 speed is unknown, defaulting to 1000 [ 1312.370348][ T7552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9404'. [ 1312.381228][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9404'. [ 1312.404111][ T7533] wg1 speed is unknown, defaulting to 1000 [ 1312.621641][ T7562] bridge_slave_1: default FDB implementation only supports local addresses [ 1312.694959][ T7533] chnl_net:caif_netlink_parms(): no params data found [ 1312.850922][ T7568] syzkaller0: entered promiscuous mode [ 1312.857890][ T7568] syzkaller0: entered allmulticast mode [ 1312.967654][ T3019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.067464][ T7587] netlink: zone id is out of range [ 1313.084733][ T7587] netlink: zone id is out of range [ 1313.090058][ T7587] netlink: zone id is out of range [ 1313.107899][ T7587] netlink: zone id is out of range [ 1313.113178][ T7587] netlink: zone id is out of range [ 1313.120506][ T7587] netlink: zone id is out of range [ 1313.125749][ T7587] netlink: zone id is out of range [ 1313.144383][ T7587] netlink: zone id is out of range [ 1313.198144][ T7587] netlink: zone id is out of range [ 1314.010440][ T5828] Bluetooth: hci2: command tx timeout [ 1315.621719][ T7533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.640533][ T7533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.661314][ T7533] bridge_slave_0: entered allmulticast mode [ 1315.691354][ T7533] bridge_slave_0: entered promiscuous mode [ 1315.718460][ T7533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.734668][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.752734][ T7533] bridge_slave_1: entered allmulticast mode [ 1315.777800][ T7533] bridge_slave_1: entered promiscuous mode [ 1315.903226][ T7533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1315.928715][ T7604] syzkaller0: entered promiscuous mode [ 1315.934715][ T7604] syzkaller0: entered allmulticast mode [ 1315.957165][ T7533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1315.971124][ T7621] team_slave_1: Caught tx_queue_len zero misconfig [ 1316.078875][ T5828] Bluetooth: hci2: command tx timeout [ 1316.145153][ T7633] __nla_validate_parse: 3 callbacks suppressed [ 1316.145173][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9426'. [ 1316.199508][ T7636] xt_hashlimit: size too large, truncated to 1048576 [ 1316.206553][ T7636] xt_hashlimit: max too large, truncated to 1048576 [ 1316.222281][ T7533] team0: Port device team_slave_0 added [ 1316.239648][ T7633] vlan2: entered promiscuous mode [ 1316.245083][ T7633] team0: entered promiscuous mode [ 1316.272291][ T7633] team_slave_0: entered promiscuous mode [ 1316.279810][ T7633] team_slave_1: entered promiscuous mode [ 1316.303614][ T7533] team0: Port device team_slave_1 added [ 1316.388429][ T7533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.395501][ T7533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.454609][ T7533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.513047][ T7533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.528336][ T7533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.586717][ T7533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.780856][ T7533] hsr_slave_0: entered promiscuous mode [ 1316.801456][ T7533] hsr_slave_1: entered promiscuous mode [ 1316.808478][ T7533] debugfs: 'hsr0' already exists in 'hsr' [ 1316.818236][ T7533] Cannot create hsr debugfs directory [ 1317.003896][ T7663] netlink: 'syz.2.9437': attribute type 1 has an invalid length. [ 1317.194278][ T7667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1317.227690][ T7667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1317.240052][ T7644] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9431'. [ 1317.258689][ T7644] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9431'. [ 1317.643045][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9441'. [ 1317.658045][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9441'. [ 1317.680948][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9441'. [ 1317.681068][T30261] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1317.698758][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9441'. [ 1317.713425][T30261] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1317.723857][ T7672] syzkaller0: entered promiscuous mode [ 1317.729617][ T7672] syzkaller0: entered allmulticast mode [ 1317.752882][T30261] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1317.909791][ T7681] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20004 [ 1318.111491][ T7687] vlan2: entered promiscuous mode [ 1318.133625][ T7685] lo speed is unknown, defaulting to 1000 [ 1318.144931][ T7533] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1318.158423][ T5828] Bluetooth: hci2: command tx timeout [ 1318.184762][ T7685] ip6gretap0 speed is unknown, defaulting to 1000 [ 1318.194049][ T7533] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1318.223338][ T7685] wg1 speed is unknown, defaulting to 1000 [ 1318.225416][ T7533] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1318.257185][ T7533] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1318.719119][T14754] net_ratelimit: 46 callbacks suppressed [ 1318.719138][T14754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.742005][ T7702] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9449'. [ 1318.761547][ T7702] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9449'. [ 1318.837580][ T7709] syzkaller0: entered promiscuous mode [ 1318.843196][ T7709] syzkaller0: entered allmulticast mode [ 1319.007103][ T7533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.051757][ T7533] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.080651][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.087861][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.110384][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.117828][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.130394][ T7717] syzkaller0: entered promiscuous mode [ 1319.135910][ T7717] syzkaller0: entered allmulticast mode [ 1319.376811][ T3476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.631649][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9465'. [ 1319.806454][ T7533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1319.909668][ T7751] bond1 (unregistering): Released all slaves [ 1319.948040][ T7759] vlan2: entered promiscuous mode [ 1320.021992][ T7533] veth0_vlan: entered promiscuous mode [ 1320.042721][ T7533] veth1_vlan: entered promiscuous mode [ 1320.127047][ T7533] veth0_macvtap: entered promiscuous mode [ 1320.158742][ T7533] veth1_macvtap: entered promiscuous mode [ 1320.208852][ T7533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1320.238252][ T5828] Bluetooth: hci2: command tx timeout [ 1320.255123][ T7533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1320.300608][T30261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.325277][ T7766] netlink: 'syz.3.9473': attribute type 1 has an invalid length. [ 1320.333887][T30261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.353929][T30261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.369916][T30261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.413389][ T7770] netlink: 'syz.4.9474': attribute type 1 has an invalid length. [ 1320.438003][ T7764] syzkaller0: entered promiscuous mode [ 1320.443890][ T7764] syzkaller0: entered allmulticast mode [ 1320.515751][ T7770] bond5: entered promiscuous mode [ 1320.524841][ T7770] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1320.578980][ T7772] ip6gre1: entered allmulticast mode [ 1320.672179][T14754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.685307][T14754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.813358][T30261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.832265][T30261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.943219][ T7791] netlink: 'syz.2.9480': attribute type 1 has an invalid length. [ 1321.127850][ T7801] bond0: Caught tx_queue_len zero misconfig [ 1321.246690][ T7810] __nla_validate_parse: 9 callbacks suppressed [ 1321.246710][ T7810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9487'. [ 1321.494281][ T7799] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9483'. [ 1321.513854][ T7799] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9483'. [ 1321.778237][ T7827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1321.882254][ T7842] netlink: 'syz.1.9498': attribute type 1 has an invalid length. [ 1321.900572][ T7843] geneve2: entered promiscuous mode [ 1321.920904][ T7842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1321.928230][ T7842] IPv6: NLM_F_CREATE should be set when creating new route [ 1321.935472][ T7842] IPv6: NLM_F_CREATE should be set when creating new route [ 1321.946877][ T7842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1322.113649][ T7843] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.120874][ T7858] netlink: 'syz.2.9503': attribute type 1 has an invalid length. [ 1322.203784][ T7855] tipc: Started in network mode [ 1322.209500][ T7855] tipc: Node identity 86e10fbbcd78, cluster identity 4711 [ 1322.218793][ T7855] tipc: Enabled bearer , priority 0 [ 1322.226638][ T7858] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1322.342423][ T7843] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.552644][ T7871] syzkaller0: entered promiscuous mode [ 1322.560503][ T7871] syzkaller0: entered allmulticast mode [ 1322.609478][ T7843] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.652537][ T7888] netlink: 'syz.2.9513': attribute type 142 has an invalid length. [ 1322.663334][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9513'. [ 1322.703692][ T7890] netlink: 'syz.3.9514': attribute type 1 has an invalid length. [ 1322.771235][ T7891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1322.778500][ T7891] IPv6: NLM_F_CREATE should be set when creating new route [ 1322.785709][ T7891] IPv6: NLM_F_CREATE should be set when creating new route [ 1322.806371][ T7891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1323.841747][T30263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.199508][ T7835] tipc: Disabling bearer [ 1324.210765][T15807] tipc: Node number set to 1268322235 [ 1324.267212][ T7843] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.350727][ T7898] Unsupported ieee802154 address type: 0 [ 1324.375044][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9516'. [ 1324.447843][ T7905] netlink: 'syz.3.9517': attribute type 13 has an invalid length. [ 1324.473652][ T3476] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.482296][T30262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.729496][ T7913] netlink: 'syz.2.9521': attribute type 19 has an invalid length. [ 1324.779620][ T7916] syzkaller0: entered promiscuous mode [ 1324.803908][ T7916] syzkaller0: entered allmulticast mode [ 1324.830910][ T3019] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.846736][ T3019] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.898394][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9525'. [ 1324.978124][ T3019] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.992174][ T7918] lo speed is unknown, defaulting to 1000 [ 1325.006373][ T7919] lo speed is unknown, defaulting to 1000 [ 1325.014840][ T7919] ip6gretap0 speed is unknown, defaulting to 1000 [ 1325.038588][ T7918] ip6gretap0 speed is unknown, defaulting to 1000 [ 1325.046082][ T7919] wg1 speed is unknown, defaulting to 1000 [ 1325.080321][ T7918] wg1 speed is unknown, defaulting to 1000 [ 1325.117659][ T3019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.194097][ T7935] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1325.246394][ T7941] IPv6: addrconf: prefix option has invalid lifetime [ 1325.253166][ T7941] IPv6: addrconf: prefix option has invalid lifetime [ 1325.318422][ T7944] netlink: 'syz.3.9530': attribute type 1 has an invalid length. [ 1325.347893][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9529'. [ 1325.426819][ T7944] bond1: entered promiscuous mode [ 1325.435980][ T7944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1325.444843][ T7950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1325.509181][ T7950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1325.563676][ T7949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1325.574229][ T7949] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1325.606551][ T7949] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 1325.815216][ T7950] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1325.849884][ T7950] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 1325.973885][ T7978] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9536'. [ 1326.629500][ T8000] lo speed is unknown, defaulting to 1000 [ 1326.651824][ T8000] ip6gretap0 speed is unknown, defaulting to 1000 [ 1326.681410][ T8000] wg1 speed is unknown, defaulting to 1000 [ 1326.865375][ T7995] lo speed is unknown, defaulting to 1000 [ 1326.898890][T32244] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 1326.900486][ T8028] sctp: [Deprecated]: syz.3.9547 (pid 8028) Use of int in max_burst socket option. [ 1326.900486][ T8028] Use struct sctp_assoc_value instead [ 1326.954577][ T7995] ip6gretap0 speed is unknown, defaulting to 1000 [ 1327.030498][ T7995] wg1 speed is unknown, defaulting to 1000 [ 1327.681942][ T8070] xt_ipcomp: unknown flags 1D [ 1329.597874][T14754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.806262][ T8017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1330.188819][ T8100] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9568'. [ 1330.240249][T30262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.265855][ T8101] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.9567'. [ 1330.288185][ T8104] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9569'. [ 1330.449258][ T8114] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1330.661055][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9578'. [ 1330.674360][ T8131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9578'. [ 1330.887958][T32220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.134676][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9585'. [ 1331.181729][ T8152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.364071][ T8152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.470384][ T8152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.532197][ T8182] ip6tnl0: Caught tx_queue_len zero misconfig [ 1331.563370][ T8182] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 1331.582389][ T8152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.637019][ T8182] gretap1: entered allmulticast mode [ 1331.670119][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9592'. [ 1331.697115][ T8188] syzkaller1: entered promiscuous mode [ 1331.706927][ T8188] syzkaller1: entered allmulticast mode [ 1331.829956][T32220] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.967659][T30263] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.005890][T30263] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.018163][ T8196] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9597'. [ 1332.035672][T30262] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.087802][ T8198] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9596'. [ 1332.230203][ T8204] syzkaller0: entered promiscuous mode [ 1332.235728][ T8204] syzkaller0: entered allmulticast mode [ 1332.303022][ T8214] FAULT_INJECTION: forcing a failure. [ 1332.303022][ T8214] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.315730][ T8214] CPU: 1 UID: 0 PID: 8214 Comm: syz.1.9604 Not tainted syzkaller #0 PREEMPT(full) [ 1332.315756][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1332.315775][ T8214] Call Trace: [ 1332.315782][ T8214] [ 1332.315788][ T8214] dump_stack_lvl+0xe8/0x150 [ 1332.315813][ T8214] should_fail_ex+0x412/0x560 [ 1332.315838][ T8214] should_failslab+0xa8/0x100 [ 1332.315860][ T8214] ? skb_clone+0x212/0x3a0 [ 1332.315880][ T8214] kmem_cache_alloc_noprof+0x87/0x650 [ 1332.315899][ T8214] ? __bpf_redirect+0x9b4/0x12a0 [ 1332.315916][ T8214] skb_clone+0x212/0x3a0 [ 1332.315938][ T8214] bpf_clone_redirect+0x16a/0x4b0 [ 1332.315959][ T8214] ? bpf_test_run+0x1d1/0x830 [ 1332.315973][ T8214] bpf_prog_e16758452f539c38+0x5f/0x68 [ 1332.315990][ T8214] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1332.316012][ T8214] ? arch_stack_walk+0xfb/0x150 [ 1332.316038][ T8214] ? ktime_get+0x45/0x200 [ 1332.316066][ T8214] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1332.316087][ T8214] ? lockdep_hardirqs_on+0x7a/0x110 [ 1332.316105][ T8214] ? ktime_get+0x45/0x200 [ 1332.316123][ T8214] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1332.316147][ T8214] ? bpf_test_timer_continue+0x10c/0x320 [ 1332.316165][ T8214] bpf_test_run+0x354/0x830 [ 1332.316194][ T8214] ? __pfx_bpf_test_run+0x10/0x10 [ 1332.316215][ T8214] ? rcu_is_watching+0x15/0xb0 [ 1332.316233][ T8214] ? __kasan_krealloc+0xeb/0x110 [ 1332.316253][ T8214] ? eth_type_trans+0x35e/0x6d0 [ 1332.316274][ T8214] ? bpf_prog_test_run_skb+0x889/0x1c90 [ 1332.316288][ T8214] ? convert___skb_to_skb+0x3d/0x5b0 [ 1332.316304][ T8214] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1332.316329][ T8214] ? __fget_files+0x2a/0x420 [ 1332.316343][ T8214] ? __fget_files+0x3a0/0x420 [ 1332.316356][ T8214] ? __fget_files+0x2a/0x420 [ 1332.316374][ T8214] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1332.316389][ T8214] bpf_prog_test_run+0x2c7/0x340 [ 1332.316411][ T8214] __sys_bpf+0x643/0x950 [ 1332.316430][ T8214] ? __pfx___sys_bpf+0x10/0x10 [ 1332.316458][ T8214] ? ksys_write+0x242/0x270 [ 1332.316478][ T8214] ? __pfx_ksys_write+0x10/0x10 [ 1332.316501][ T8214] __x64_sys_bpf+0x7c/0x90 [ 1332.316517][ T8214] do_syscall_64+0x14d/0xf80 [ 1332.316536][ T8214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.316549][ T8214] ? trace_irq_disable+0x37/0x100 [ 1332.316571][ T8214] ? clear_bhb_loop+0x40/0x90 [ 1332.316589][ T8214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.316603][ T8214] RIP: 0033:0x7f86c839bf79 [ 1332.316616][ T8214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.316629][ T8214] RSP: 002b:00007f86c9240028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1332.316644][ T8214] RAX: ffffffffffffffda RBX: 00007f86c8615fa0 RCX: 00007f86c839bf79 [ 1332.316655][ T8214] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1332.316665][ T8214] RBP: 00007f86c9240090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.316674][ T8214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1332.316683][ T8214] R13: 00007f86c8616038 R14: 00007f86c8615fa0 R15: 00007fff0ad5ce38 [ 1332.316706][ T8214] [ 1332.696766][ T8217] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9605'. [ 1332.843561][ T8225] netlink: 'syz.3.9607': attribute type 1 has an invalid length. [ 1332.915105][ T8227] netlink: 'syz.4.9608': attribute type 1 has an invalid length. [ 1332.968203][ T8225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1332.978502][ T8225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1332.983149][ T8227] bond6: entered promiscuous mode [ 1332.992518][ T8227] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1333.002396][ T8236] netlink: 'syz.2.9609': attribute type 13 has an invalid length. [ 1333.069045][ T8235] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1333.076150][ T8235] bond6: (slave wireguard2): The slave device specified does not support setting the MAC address [ 1333.104657][ T8227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1333.118157][ T8235] bond6: (slave wireguard2): Error -95 calling set_mac_address [ 1333.126595][ T8227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1333.172228][ T8245] netlink: 'syz.0.9613': attribute type 1 has an invalid length. [ 1333.216123][ T8247] netlink: 'syz.1.9612': attribute type 1 has an invalid length. [ 1333.276703][ T8227] bond6: (slave wireguard2): The slave device specified does not support setting the MAC address [ 1333.292092][ T8227] bond6: (slave wireguard2): Error -95 calling set_mac_address [ 1333.473604][ T8256] syzkaller0: entered promiscuous mode [ 1333.490598][ T8256] syzkaller0: entered allmulticast mode [ 1333.610911][ T8256] dvmrp0: entered allmulticast mode [ 1333.638680][ T8263] netlink: 'syz.4.9619': attribute type 1 has an invalid length. [ 1333.768769][ T8268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1333.779861][ T8263] bond7: entered promiscuous mode [ 1333.785317][ T8263] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1333.795787][ T8268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1334.059715][ T8282] netlink: 'syz.3.9624': attribute type 21 has an invalid length. [ 1334.088767][ T8282] openvswitch: netlink: EtherType 50a is less than min 600 [ 1334.206482][ T8284] bond2: option miimon: invalid value (18446744073709551607) [ 1334.217871][ T8284] bond2: option miimon: allowed values 0 - 2147483647 [ 1334.262589][ T8295] netlink: 'syz.4.9628': attribute type 1 has an invalid length. [ 1334.401131][ T8297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1334.408864][ T8297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1334.720160][T32220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.856434][ T8284] bond2 (unregistering): Released all slaves [ 1334.987069][ T8312] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input21 [ 1335.117124][ T8317] : entered promiscuous mode [ 1335.280569][ T8330] __nla_validate_parse: 10 callbacks suppressed [ 1335.280589][ T8330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9636'. [ 1335.359090][T30261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.484869][ T8333] batadv0: entered promiscuous mode [ 1335.503406][ T8333] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1335.635590][ T8352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1335.711955][ T8351] syzkaller1: entered promiscuous mode [ 1335.721017][ T8351] syzkaller1: entered allmulticast mode [ 1335.786893][ T8365] netlink: 'syz.0.9647': attribute type 1 has an invalid length. [ 1335.900281][ T8368] ip6gretap0: entered promiscuous mode [ 1335.913274][ T8368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1335.922042][ T8368] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.931832][ T8373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1335.940590][ T8373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1335.957432][ T8368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1335.984905][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9649'. [ 1336.043058][ T8367] bridge_slave_0: left allmulticast mode [ 1336.092311][ T8367] bridge_slave_0: left promiscuous mode [ 1336.120885][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.294586][ T8367] bond0: (slave bond_slave_0): Releasing backup interface [ 1336.343661][ T8367] bond0: (slave bond_slave_1): Releasing backup interface [ 1336.364551][ T8367] team_slave_0: left promiscuous mode [ 1336.395575][ T8367] team0: Port device team_slave_0 removed [ 1336.411976][ T8367] team_slave_1: left promiscuous mode [ 1336.433231][ T8367] team0: Port device team_slave_1 removed [ 1336.457203][ T8367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1336.465054][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1336.480481][ T8367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1336.494300][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1336.506163][ T8367] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1336.566493][ T8394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9655'. [ 1336.641003][T32244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.759208][ T8402] netlink: 'syz.1.9659': attribute type 1 has an invalid length. [ 1336.778773][ T8402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1336.786320][ T8402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1336.991203][ T8412] bond8: entered promiscuous mode [ 1336.997184][ T8412] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1337.025604][ T8412] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1337.076416][ T8412] bond8: (slave gre1): The slave device specified does not support setting the MAC address [ 1337.105127][ T8412] bond8: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1337.132816][ T8412] bond8: (slave gre1): making interface the new active one [ 1337.154294][ T8412] gre1: entered promiscuous mode [ 1337.163913][ T8412] ------------[ cut here ]------------ [ 1337.169540][ T8412] kernel BUG at net/core/skbuff.c:2306! [ 1337.175613][ T8412] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1337.181882][ T8412] CPU: 0 UID: 0 PID: 8412 Comm: syz.4.9662 Not tainted syzkaller #0 PREEMPT(full) [ 1337.191187][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1337.201274][ T8412] RIP: 0010:pskb_expand_head+0x12da/0x1320 [ 1337.207117][ T8412] Code: f8 e9 81 f3 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e0 f3 ff ff 4c 89 ff e8 b1 e7 c4 f8 e9 d3 f3 ff ff e8 27 c1 5b f8 90 <0f> 0b e8 1f c1 5b f8 90 0f 0b 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1337.226742][ T8412] RSP: 0018:ffffc9000d21e350 EFLAGS: 00010283 [ 1337.232846][ T8412] RAX: ffffffff896879a9 RBX: ffff888033a78140 RCX: 0000000000080000 [ 1337.240850][ T8412] RDX: ffffc90015b72000 RSI: 000000000003d037 RDI: 000000000003d038 [ 1337.248857][ T8412] RBP: 0000000000000000 R08: ffff88805611e128 R09: 0000000000000018 [ 1337.256859][ T8412] R10: dffffc0000000000 R11: ffffffff8a263ad0 R12: dffffc0000000000 [ 1337.264864][ T8412] R13: 0000000000000820 R14: 0000000093c5bb60 R15: 0000000000000180 [ 1337.272878][ T8412] FS: 00007f350b2e76c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 1337.281835][ T8412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1337.288435][ T8412] CR2: 00007fec511e96c0 CR3: 0000000079768000 CR4: 00000000003526f0 [ 1337.296430][ T8412] Call Trace: [ 1337.299719][ T8412] [ 1337.302667][ T8412] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1337.308067][ T8412] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 1337.314167][ T8412] ipgre_header+0xd5/0x350 [ 1337.318606][ T8412] arp_create+0x41c/0xa00 [ 1337.322951][ T8412] ? __lock_acquire+0x6b5/0x2cf0 [ 1337.327912][ T8412] ? __pfx_arp_create+0x10/0x10 [ 1337.332797][ T8412] ? rcu_is_watching+0x15/0xb0 [ 1337.337579][ T8412] arp_send+0xa5/0x190 [ 1337.341671][ T8412] inetdev_event+0x11bd/0x1610 [ 1337.346470][ T8412] ? __pfx_inetdev_event+0x10/0x10 [ 1337.351604][ T8412] notifier_call_chain+0x19d/0x3a0 [ 1337.356740][ T8412] call_netdevice_notifiers+0x90/0xd0 [ 1337.362127][ T8412] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 1337.368238][ T8412] bond_peer_notify_may_events+0x370/0x5b0 [ 1337.374153][ T8412] bond_change_active_slave+0x2589/0x35f0 [ 1337.379913][ T8412] ? __pfx_bond_change_active_slave+0x10/0x10 [ 1337.386020][ T8412] ? try_to_wake_up+0x7fc/0x1390 [ 1337.391075][ T8412] ? __queue_work+0x1a1/0xf90 [ 1337.395765][ T8412] ? __queue_work+0xc42/0xf90 [ 1337.400467][ T8412] ? mod_delayed_work_on+0xdf/0x190 [ 1337.405686][ T8412] bond_select_active_slave+0x909/0xd40 [ 1337.411254][ T8412] ? __pfx_bond_select_active_slave+0x10/0x10 [ 1337.417333][ T8412] ? __pfx_bond_set_carrier+0x10/0x10 [ 1337.422733][ T8412] ? netdev_is_rx_handler_busy+0x56/0x120 [ 1337.428473][ T8412] ? __pfx_bond_handle_frame+0x10/0x10 [ 1337.433945][ T8412] bond_enslave+0x22a5/0x3c40 [ 1337.438651][ T8412] ? __pfx_bond_enslave+0x10/0x10 [ 1337.443709][ T8412] ? __pfx___dev_notify_flags+0x10/0x10 [ 1337.449292][ T8412] ? __dev_change_flags+0x4c6/0x690 [ 1337.454510][ T8412] ? mutex_is_locked+0x17/0x50 [ 1337.459298][ T8412] do_set_master+0x533/0x6d0 [ 1337.463904][ T8412] rtnl_newlink_create+0x6af/0xb70 [ 1337.469040][ T8412] ? __pfx___nla_validate_parse+0x10/0x10 [ 1337.474809][ T8412] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1337.480493][ T8412] ? __pfx___mutex_lock+0x10/0x10 [ 1337.485561][ T8412] ? ns_capable+0x89/0xe0 [ 1337.489904][ T8412] rtnl_newlink+0x1666/0x1be0 [ 1337.494607][ T8412] ? __pfx_rtnl_newlink+0x10/0x10 [ 1337.499660][ T8412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.505748][ T8412] ? kasan_quarantine_put+0xbb/0x1f0 [ 1337.511045][ T8412] ? lockdep_hardirqs_on+0x7a/0x110 [ 1337.516369][ T8412] ? nlmon_xmit+0xb0/0x100 [ 1337.520890][ T8412] ? kmem_cache_free+0x180/0x610 [ 1337.525868][ T8412] ? __lock_acquire+0x6b5/0x2cf0 [ 1337.530828][ T8412] ? __local_bh_enable_ip+0xd0/0x130 [ 1337.536125][ T8412] ? lockdep_hardirqs_on+0x7a/0x110 [ 1337.541333][ T8412] ? __dev_queue_xmit+0x274/0x3850 [ 1337.546471][ T8412] ? __local_bh_enable_ip+0xd0/0x130 [ 1337.551764][ T8412] ? __dev_queue_xmit+0x274/0x3850 [ 1337.556893][ T8412] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1337.562033][ T8412] ? __pfx_rtnl_newlink+0x10/0x10 [ 1337.567075][ T8412] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1337.572026][ T8412] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1337.577148][ T8412] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1337.582618][ T8412] ? ref_tracker_free+0x693/0x840 [ 1337.587663][ T8412] ? __copy_skb_header+0xa3/0x4a0 [ 1337.592791][ T8412] ? __pfx_ref_tracker_free+0x10/0x10 [ 1337.598210][ T8412] netlink_rcv_skb+0x232/0x4b0 [ 1337.602996][ T8412] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1337.608506][ T8412] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1337.613809][ T8412] ? netlink_deliver_tap+0x2e/0x1b0 [ 1337.619029][ T8412] netlink_unicast+0x80f/0x9b0 [ 1337.623839][ T8412] ? __pfx_netlink_unicast+0x10/0x10 [ 1337.629143][ T8412] ? netlink_sendmsg+0x650/0xb40 [ 1337.634092][ T8412] ? skb_put+0x11b/0x210 [ 1337.638355][ T8412] netlink_sendmsg+0x813/0xb40 [ 1337.643172][ T8412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1337.648476][ T8412] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1337.653456][ T8412] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1337.658768][ T8412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1337.664071][ T8412] ____sys_sendmsg+0xa68/0xad0 [ 1337.668847][ T8412] ? __might_fault+0xaf/0x130 [ 1337.673538][ T8412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1337.678849][ T8412] ? import_iovec+0x73/0xa0 [ 1337.683368][ T8412] ___sys_sendmsg+0x2a5/0x360 [ 1337.688066][ T8412] ? __lock_acquire+0x6b5/0x2cf0 [ 1337.693026][ T8412] ? __pfx____sys_sendmsg+0x10/0x10 [ 1337.698270][ T8412] ? futex_wait+0x29a/0x380 [ 1337.702803][ T8412] ? __fget_files+0x2a/0x420 [ 1337.707399][ T8412] ? __fget_files+0x3a0/0x420 [ 1337.712114][ T8412] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1337.717071][ T8412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1337.722560][ T8412] ? rcu_is_watching+0x15/0xb0 [ 1337.727346][ T8412] do_syscall_64+0x14d/0xf80 [ 1337.731950][ T8412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.738115][ T8412] ? trace_irq_disable+0x37/0x100 [ 1337.743178][ T8412] ? clear_bhb_loop+0x40/0x90 [ 1337.747878][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.753783][ T8412] RIP: 0033:0x7f350a39bf79 [ 1337.758223][ T8412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.777932][ T8412] RSP: 002b:00007f350b2e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1337.786368][ T8412] RAX: ffffffffffffffda RBX: 00007f350a615fa0 RCX: 00007f350a39bf79 [ 1337.794347][ T8412] RDX: 00000000000440b0 RSI: 0000200000000280 RDI: 0000000000000006 [ 1337.802324][ T8412] RBP: 00007f350a4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1337.810516][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1337.818493][ T8412] R13: 00007f350a616038 R14: 00007f350a615fa0 R15: 00007ffd0e6f0158 [ 1337.826483][ T8412] [ 1337.829522][ T8412] Modules linked in: [ 1337.836888][ T8412] ---[ end trace 0000000000000000 ]--- [ 1337.860095][ T8412] RIP: 0010:pskb_expand_head+0x12da/0x1320 [ 1337.866435][ T8412] Code: f8 e9 81 f3 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e0 f3 ff ff 4c 89 ff e8 b1 e7 c4 f8 e9 d3 f3 ff ff e8 27 c1 5b f8 90 <0f> 0b e8 1f c1 5b f8 90 0f 0b 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1337.892092][ T8412] RSP: 0018:ffffc9000d21e350 EFLAGS: 00010283 [ 1337.899785][ T8412] RAX: ffffffff896879a9 RBX: ffff888033a78140 RCX: 0000000000080000 [ 1337.908695][ T8412] RDX: ffffc90015b72000 RSI: 000000000003d037 RDI: 000000000003d038 [ 1337.916817][ T8412] RBP: 0000000000000000 R08: ffff88805611e128 R09: 0000000000000018 [ 1337.926117][ T8412] R10: dffffc0000000000 R11: ffffffff8a263ad0 R12: dffffc0000000000 [ 1337.935441][ T8412] R13: 0000000000000820 R14: 0000000093c5bb60 R15: 0000000000000180 [ 1337.944279][ T8412] FS: 00007f350b2e76c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 1337.960198][ T8412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1337.980748][ T8412] CR2: 000000110c2f8850 CR3: 0000000079768000 CR4: 00000000003526f0 [ 1337.989863][ T8412] Kernel panic - not syncing: Fatal exception [ 1337.996582][ T8412] Kernel Offset: disabled [ 1338.000908][ T8412] Rebooting in 86400 seconds..