last executing test programs: 3.622313866s ago: executing program 4 (id=10350): socket(0x1e, 0x0, 0xc18895e) 3.554428587s ago: executing program 4 (id=10351): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28000400) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) socket(0x23, 0x1, 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001a006d87"], 0xa0}}, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x14, 0x30, 0x48b, 0x70bd26, 0x40000000}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 3.475427862s ago: executing program 4 (id=10352): syz_init_net_socket$ax25(0x3, 0x2, 0xda6118dfbc15f4d) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800090300000000000000000000000000070000000008000400", @ANYRES32=r2, @ANYBLOB="0600150003000000100016800c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x14000084) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800090300000000000000000000000000070000000008000400", @ANYRES32=r2, @ANYBLOB="0600150003000000100016800c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x14000084) 3.421317659s ago: executing program 4 (id=10353): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x9}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x4c}}, 0x0) 1.685317969s ago: executing program 1 (id=10376): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/user\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000600"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006a00010021bd7000fbdbcf34853c0000000000000800010002000000"], 0x20}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, 0x0, &(0x7f00000003c0)=0x14) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c0, 0x0, 0x1c8, 0x98, 0x0, 0x98, 0x328, 0x328, 0x328, 0x328, 0x328, 0x6, 0x0, {[{{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xffffffff, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0xd, 0x3, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r9, 0x114, 0x5, &(0x7f0000000000), 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 1.442291813s ago: executing program 2 (id=10382): syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0xfffffeda) nanosleep(&(0x7f0000000000), &(0x7f0000000040)) (async) nanosleep(&(0x7f0000000000), &(0x7f0000000040)) 1.202730156s ago: executing program 3 (id=10388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x26ffc86098878bdf}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x20}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000380)=0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async, rerun: 64) ioctl$sock_netdev_private(r3, 0x89f0, &(0x7f0000000000)) (rerun: 64) r4 = socket$inet6(0xa, 0x5, 0xd53) (async, rerun: 64) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="a5e47023c078000000070a010200000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) (async, rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xe7}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) (async, rerun: 32) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004dc0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) poll(&(0x7f0000000000), 0x0, 0x5) r7 = accept(r4, &(0x7f0000000180)=@caif=@dbg, &(0x7f0000000040)=0x80) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0x401, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, 0x1c) 1.073360309s ago: executing program 3 (id=10390): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f400088050000080040009801400040002004e206401010100000000000000000600050001000000080003000200000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000002c0)=@hopopts={0x6}, 0x8) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@getlink={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100, 0xb59d27701cdff289}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x28}}, 0x90) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "14f847b5482c2836a81a2bd37c"}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "00000000de"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3ee1932777413a308097c188f1"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x7, 0x4, '7vp'}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "64a2291548"}, @NL80211_KEY_SEQ={0x11, 0x4, "185f7594a1f9992f249ff50e7c"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40044}, 0x44008010) (async) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "14f847b5482c2836a81a2bd37c"}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "00000000de"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3ee1932777413a308097c188f1"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x7, 0x4, '7vp'}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "64a2291548"}, @NL80211_KEY_SEQ={0x11, 0x4, "185f7594a1f9992f249ff50e7c"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40044}, 0x44008010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x8}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x400000, 0x7ff, 0xffffffff, 0x20000, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x4, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000140)='syzkaller\x00'}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 1.044644426s ago: executing program 3 (id=10391): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0xc400) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) 996.244925ms ago: executing program 3 (id=10392): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x4, 0xb, 0x9, 0x1, 0x4, @mcast2, @private2, 0x7, 0x10, 0x180f69d5, 0x14000000}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f00000001c0)=0x1, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) recvfrom(r4, &(0x7f0000000280)=""/109, 0x6d, 0x2000, &(0x7f0000000340)=@nfc={0x27, r5, 0xffffffffffffffff, 0x6}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="4bffcfa2146d888605392812435b17844c9e11e3ae2574e216408607e478cc0db74f17cb1576ba27cc77d3b424ed37da3bfcff103fe4e167461ca220872c9b21fc7528c7261c4005e3b59883580e1401571fc3b65643bfcd3e3960315c54bf38a90fa527c183131e0aaf1b93c450788809d38cc5062b95f9c3f9", 0x7a}, {&(0x7f0000000440)="6dbc2fcd4b1eb497f124aced40b0d8d7c1b1ed330dbe845e6c77e838d20c9a3ff9b7bbbe99fa44c28ee66455df5ebf7d930e45b00eae6f279aa203a29815c12d8dae37070dd23d5cc681eb8abbeed6615e913cfa5330e98d302e9fc10112ef35407536397ef01f2f5d74ba8488fe2f81b445e9345bf4bf5927d689d0052b0e6fda13f83965e98237a30c0bfc8e4f5e", 0x8f}], 0x2, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x98}, 0x4048840) r7 = accept$ax25(r3, 0x0, &(0x7f0000000640)) ioctl$SIOCAX25NOUID(r7, 0x89e3, &(0x7f0000000680)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000006c0)={r3}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r8, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000084) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000008c0)={'gre0\x00', &(0x7f0000000880)=@ethtool_eee={0x44, 0x9, 0x7fc3, 0x8, 0xc, 0x9, 0x5, 0x2, [0x9, 0x9]}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r8) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x144, r12, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x676}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xf0, 0xac, "b58183dfb8ccb0de41867fc6bf535576fe86484f0687a50f8a37980edf536dc402801b6a768d38306efbbed4934c9cc9d3b8e8b2d672ea02a5f5dca7fd15c7328ef01d95ef1de642930a4b3fb28860e53eb38f8016ef81d75969d896142b491c70f83b143f4dbfb9c8a842cb5af3923340ab17b9a789731a7b34edefd0ebb03ff0642191556e9337f120e811f21e547e2ae4d0e20a8b6f1b1c4d56927ebeb676aa9ab45f4fe37770593e2ef2c7c5f6f93fbc68ff45c7efc18ca35d267435857d378121dc0d6f26035400133e468c936bbaf2d8a8e29343aab3b1b8f45491a0df1b7510b65cfc67515c13ccf8"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x22, 0x13, [{0x2}, {}, {0x9}, {0x1b, 0x1}, {0x18}, {0x60, 0x1}, {0x4}, {0x5}, {0x36, 0x1}, {0x1, 0x1}, {0x24}, {0x36, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x34, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x18, 0x1}, {0x24}, {0x33, 0x1}, {0x4, 0x1}, {0xc}, {0xb}, {0x12, 0x1}, {0x6c, 0x1}, {0x60, 0x1}, {0x6, 0x1}, {0x30}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) getsockopt$sock_int(r8, 0x1, 0x2b, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) sendmsg$nl_route(r8, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=@newnexthop={0x2c, 0x68, 0x20, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x19}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r13, 0x11a, 0x1, &(0x7f0000000e40)=@gcm_256={{0x303}, "135951df9f7aa358", "dc820a412f642674ac2596cc79eed42f4b5d26a98cc1c3550441d987c49b72a3", "6f668827", "0277b5dae2c22fdc"}, 0x38) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r6) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r14, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x400c010) 906.246692ms ago: executing program 0 (id=10394): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f00000001c0)='GPL\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f00000005c0)=""/158, 0x9e}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x4, 0x9, 0x9) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r8, 0x0, 0xf, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1000001}]}}, 0x0, 0x26}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1000001}]}}, 0x0, 0x26}, 0x20) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r10, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d0800050000000000080005000000000008000500000000000800050000ebffff070005"], 0x134}}, 0x4048014) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r10, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d0800050000000000080005000000000008000500000000000800050000ebffff070005"], 0x134}}, 0x4048014) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10301000800034000000001140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt(r6, 0xc7d, 0x6, &(0x7f00000006c0)=""/120, &(0x7f0000000740)=0x78) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) 860.002028ms ago: executing program 2 (id=10395): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711235000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}}, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_VOICE(r4, 0x12, 0xb, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000ff8000"/18], 0x18}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@gettaction={0x14, 0x32, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) (async) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) (async) setsockopt$inet6_udp_int(r11, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) (async) bind$inet6(r11, &(0x7f00000001c0)={0xa, 0xe22, 0x5, @empty}, 0x1c) (async) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc01008c000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) (async, rerun: 32) r12 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) sendto$packet(r12, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @local}, &(0x7f00000000c0)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @multicast1}, &(0x7f0000000200)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="60010000", @ANYRES16=r3, @ANYBLOB="20002cbd7000fedbdf250f000000200001801400020070696d3672656730000000000000000008000300000000004800018008000100", @ANYRES32=r14, @ANYBLOB="140002006261746164763000000000000000000014000200766c616e3100000000000000000000001400020073797a6b616c6c657230000000000000180001801400020065727370616e300000000000000000001800018014000200766c616e3100000000000000000000005c000180080003000100000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="358d472253b615ac7c96a16618088fbd93c384e72a220fc2f0ee133fa5c844b977ec8be1fa2abe9f4fe88096d3104e10fd12e42f5aec2906056ac399c9d2ceaa5d82399256e7e022e46ef6b7fa3d8ec45388a412d35bfd3baae9b7e7ba952f8f4559a840288ba58f414714e5d1b94fd99853a955f2213431ae23be70b28779c77971d276d5e5437e7ab097f00331c23a195cd5b62d18eb0cd9a320ddda704555dc41cb6b876dd5abedd259", @ANYRES8=r10, @ANYBLOB="1400020076657468315f746f5f627269646765001400020076657468315f746f5f6261746164760008000100", @ANYRES32=r14, @ANYBLOB="4c000180140002006272696467655f736c6176655f31000008000100", @ANYRES32=r15, @ANYBLOB="1400020069700000000800030003000000080003000100000008000300000000000c00018008000300020000005000"/56], 0x160}, 0x1, 0x0, 0x0, 0x801}, 0x400c001) 805.805117ms ago: executing program 3 (id=10396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r5, 0x29, 0xc8, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r3}, 0x20) shutdown(r3, 0x1) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x804) 801.729854ms ago: executing program 1 (id=10397): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071109800000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 714.183812ms ago: executing program 2 (id=10398): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000040000100fcff07000400000002000008000100e90b00"/40], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000040000100fcff07000400000002000008000100e90b00"/40], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) 673.450042ms ago: executing program 3 (id=10399): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x4008040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x104, 0x117, 0x0, 0x1, [@typed={0x5, 0x18, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 614.283993ms ago: executing program 0 (id=10400): r0 = socket(0x22, 0x2, 0x2) accept$alg(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002063, 0x0) 556.292536ms ago: executing program 2 (id=10401): ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x3) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x23, 0x2, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x5c473bb7b4a4c0c7, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x64, 0x0, 0x0, 0xfffffffd}]}, 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) 515.454827ms ago: executing program 0 (id=10402): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) (async) setsockopt$packet_int(r1, 0x107, 0x18, &(0x7f0000000440)=0x1, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)=@newtaction={0x80, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x6c, 0x1, [@m_skbedit={0x68, 0x1, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xfff2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xf3c}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x56}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async) r5 = socket(0x2, 0x3, 0xff) sendto$inet(r5, &(0x7f0000000040)="b401fcc8070000090000008e052af9c34b7d7494", 0xffffffe1, 0x4085, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000480)=0x8) (async) socket$inet(0x2, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="2000000000a624b800000084000000020000000a000400280000000bb3aba7da7b3f5fde57c37d3490b811e305bff9628b88d0b3", @ANYRES32=r8], 0x20, 0x2400e044}, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000300)={r8, @in6={{0xa, 0x4e23, 0x9, @mcast1, 0x7fff}}}, &(0x7f0000000180)=0x84) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}}}]}, 0x50}}, 0x0) 445.526907ms ago: executing program 1 (id=10403): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x7, 0x10001, 0xc6d, 0x88000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x200004, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x5, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x80, 0x8, 0x6, 0xe2f3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x0, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x2005, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x81, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x1, 0x7, 0xb, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r6, 0x0, 0x4) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 371.340824ms ago: executing program 2 (id=10404): r0 = socket$inet(0x2, 0x2, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x4d) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x5, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, r3, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f00000002c0)="fcfa64f308654811fa80e801d3de04717392ce4f1aae4a3f561112eb1b722ad5b8a50288ed434421f94fd176f3ee0e9b919bea49d9bde6818aadebaacfd37245d8ef285ee77f8c53c112bb3c86c3d507ff888c4a365dbe1a2f190c62d2da803925f123926932c853b3ed67e1ed0db053ed1f47757cafd9d1021f34ad04a875ec667905fd479dca1aa5e1b6d68eedf7f24ef795aa314490f6c4959c18154f69f1a70c40a583454da1aeb714b937e96de8832e8d788413251050a06508bf6ad61f731ba9d58f11df53d4bc1afbd727", &(0x7f0000000080)=@tcp6=r1}, 0x20) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r1}]}, 0x1c}}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x35, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xadb093008d8e070b}, 0x20000000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x3, @remote}, 0xd) 311.477834ms ago: executing program 4 (id=10405): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000100)="af", 0x1}], 0x1) recvmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r5, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x0, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, r1}, 0xc) close(r4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[], 0x34}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x2000, 0x0, {0x7, 0x0, 0x0, r1, 0x8, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 241.421293ms ago: executing program 2 (id=10406): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r4, @ANYRES8=r1], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r7, r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000dee500000000000000000018010000696c6c2500000000002020247b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000864600008500000006000000000000"], &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) r9 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x3e, &(0x7f0000000100)=0x1fffff, 0x4) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @loopback, 0xf}, 0x1c) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000004) close(0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000014"], 0x30}}, 0x0) 225.929015ms ago: executing program 1 (id=10407): r0 = socket(0x10, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x6, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) 218.420404ms ago: executing program 0 (id=10408): syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1c, 0x6, 0xfc, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x48010}, 0x800) 97.883164ms ago: executing program 1 (id=10409): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c00010001"], 0x20}}, 0x80) 97.212068ms ago: executing program 0 (id=10410): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0x48}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="a402000010010104000000000000000000000000e6034c98bdb1c9755ae1860e7b1b96c5a19841344c4a050000009306000000a2cbbeed364ab2168ba226441dc741393022fa76aaaaacebd30acdf804804eb0d3039c3525e00c36da28cd117b4249bff94c9610296efbccef1c45b6792e00000b3fc8ab853f665600000000000000049b2046f2ce8dfc3f605760576e5cdf9b34fc257f1eaca3f10f678c53c7ec40dc9e18099bbe1ce29c90b0", @ANYBLOB="0827a12bf3bf65ccb948db8e519a0d20801360037c8ae08438429e0b8bba45d22be35d86723b68b5", @ANYBLOB="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"], 0x2a4}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) 95.389582ms ago: executing program 4 (id=10411): bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffd47, 0xb, 0x1800}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) 70.873477ms ago: executing program 1 (id=10412): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x4, 0x7, 0x9, 0x3, 0x8, @dev={0xfe, 0x80, '\x00', 0x1b}, @mcast2, 0x317, 0xf800, 0xfff, 0x1}}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_IFNAME={0x14}]}, 0x70}, 0x1, 0x0, 0x0, 0x40801}, 0x8000006) (async, rerun: 32) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x18, 0x1, 0x2, 0x0, 0x0, [{{r0}, 0x9}, {{r0}, 0x3}]}) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async, rerun: 64) r2 = socket(0x2a, 0x2, 0x0) (rerun: 64) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) sendto$rxrpc(r2, &(0x7f0000000240)="dcabe867d2e5543c1c26dc111640797e29fd8763184c5f254de899a02a78f9c6cf0f78f82c89dc73aa0b0886872843814d6d0ef14cb607280caf6c69dc0b2332e9393122383928cb9fe93446650d9dfe84a9fd436592816a4a291f434da02b42b1d4d2fec87efefd200695b5f7b7cc459648e75915f81df5a7a32c5d6a24e582436fd2045371aefa36019de4230606e4f764f4711b137b208d2e2c900f139882edc214c06655a9c287870ed5e6d7d393468fec4ee6078133f4183462ebf8b22c", 0xc0, 0x4000080, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) 0s ago: executing program 0 (id=10413): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): : interface not active [ 788.840742][ T5414] hsr_slave_0: entered promiscuous mode [ 788.865805][ T5414] hsr_slave_1: entered promiscuous mode [ 788.872319][ T5414] debugfs: 'hsr0' already exists in 'hsr' [ 788.882636][ T5414] Cannot create hsr debugfs directory [ 788.895160][ T5543] netlink: 'syz.4.8902': attribute type 6 has an invalid length. [ 788.903159][ T5543] netlink: 'syz.4.8902': attribute type 9 has an invalid length. [ 788.905358][ T5546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.913517][ T5543] netlink: 'syz.4.8902': attribute type 6 has an invalid length. [ 788.928595][ T5543] netlink: 'syz.4.8902': attribute type 9 has an invalid length. [ 789.044412][ T5549] syzkaller1: entered promiscuous mode [ 789.049925][ T5549] syzkaller1: entered allmulticast mode [ 789.120952][ T5553] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 789.234454][ T5414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.255532][ T5414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.266647][ T5414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 789.275651][T22672] Bluetooth: hci0: command tx timeout [ 789.313102][ T1167] net_ratelimit: 8 callbacks suppressed [ 789.313119][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 789.382192][ T5414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.399176][ T5414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.422847][ T5414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 789.478406][T10414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 789.691209][ T5414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.718216][ T5414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.758335][ T5414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 789.970610][ T5414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.982743][ T5414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.996125][ T5414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 790.047409][ T5597] syzkaller0: entered promiscuous mode [ 790.063338][ T5597] syzkaller0: entered allmulticast mode [ 790.147138][ T5622] syzkaller1: entered promiscuous mode [ 790.160092][ T5622] syzkaller1: entered allmulticast mode [ 790.174217][ T5602] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 790.180769][ T5622] netlink: 'syz.3.8921': attribute type 10 has an invalid length. [ 790.195547][ T5602] syzkaller1: Linktype set failed because interface is up [ 790.216655][ T5622] team0: Device ipvlan1 failed to register rx_handler [ 790.381284][T28608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 790.399305][ T5414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 790.439675][ T5414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 790.532527][ T5414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 790.547173][ T5647] tls_set_device_offload_rx: netdev not found [ 790.560780][ T5414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 790.624820][T28617] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 790.680188][ T5664] dvmrp6: entered allmulticast mode [ 790.752108][ T5665] wlan0 speed is unknown, defaulting to 1000 [ 790.779120][ T5665] lo speed is unknown, defaulting to 1000 [ 790.917663][ T5414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.933223][T28608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 790.970545][ T5414] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.989973][T28608] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.997237][T28608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.024990][T28608] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.032188][T28608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.086216][T10404] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 791.213067][T28617] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 791.333774][T28608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 791.356491][T22672] Bluetooth: hci0: command tx timeout [ 791.464620][ T5414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.636401][ T5718] wlan0 speed is unknown, defaulting to 1000 [ 791.643119][T17513] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 791.651081][ T5718] lo speed is unknown, defaulting to 1000 [ 791.677973][ T5724] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 791.696351][ T5726] __nla_validate_parse: 8 callbacks suppressed [ 791.696366][ T5726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8945'. [ 791.880570][ T5414] veth0_vlan: entered promiscuous mode [ 791.932881][T10404] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 791.947577][ T5414] veth1_vlan: entered promiscuous mode [ 792.030729][ T5414] veth0_macvtap: entered promiscuous mode [ 792.055926][ T5414] veth1_macvtap: entered promiscuous mode [ 792.097704][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.119470][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.148682][T10404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.172188][T10404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.181842][T10404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.196641][T10404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.282474][T10404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.291347][T10404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.368152][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.376495][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.627445][ T5767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8958'. [ 792.640648][ T5765] SET target dimension over the limit! [ 792.656674][ T5765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8875'. [ 792.700624][ T5765] syzkaller0: entered promiscuous mode [ 792.707322][ T5765] syzkaller0: entered allmulticast mode [ 793.210135][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 793.222533][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 793.233788][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 793.236025][ T5798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8964'. [ 793.250804][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 793.260034][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 793.318878][ T5797] wlan0 speed is unknown, defaulting to 1000 [ 793.328982][ T5797] lo speed is unknown, defaulting to 1000 [ 793.443351][T22672] Bluetooth: hci0: command tx timeout [ 793.491631][ T5804] sch_fq: defrate 0 ignored. [ 793.504101][ T5803] netlink: 19 bytes leftover after parsing attributes in process `syz.0.8966'. [ 793.551538][ T5804] sch_fq: defrate 0 ignored. [ 793.609069][ T5804] sch_fq: defrate 0 ignored. [ 793.632588][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8968'. [ 793.731402][ T5821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8970'. [ 793.746235][T10404] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.764436][T10404] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.792187][ T5825] ip6t_srh: unknown srh match flags 4000 [ 793.818237][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 793.938019][T10404] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.948822][T10404] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.091049][ T5841] netlink: 360 bytes leftover after parsing attributes in process `syz.4.8975'. [ 794.200586][T10404] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.210895][T10404] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.591299][ T5861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8978'. [ 795.357960][T22672] Bluetooth: hci1: command tx timeout [ 795.515085][T22672] Bluetooth: hci0: command tx timeout [ 795.663479][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.671018][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.681698][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.691445][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.756134][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.769263][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.780280][ T5797] bridge_slave_0: entered allmulticast mode [ 795.788453][ T5797] bridge_slave_0: entered promiscuous mode [ 795.837115][ T5868] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8981'. [ 795.938854][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.946625][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.957975][ T5797] bridge_slave_1: entered allmulticast mode [ 795.965906][ T5797] bridge_slave_1: entered promiscuous mode [ 795.984901][T28611] net_ratelimit: 13 callbacks suppressed [ 795.984919][T28611] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 796.119715][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.137843][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.271994][ T5797] team0: Port device team_slave_0 added [ 796.285560][T28608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 796.304785][ T5797] team0: Port device team_slave_1 added [ 796.582497][ T5863] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 796.592261][ T5863] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 796.701869][T10404] bond0 (unregistering): (slave gretap1): Releasing backup interface [ 796.716266][T10404] gretap1 (unregistering): left promiscuous mode [ 796.737319][T10404] bond4 (unregistering): (slave gretap2): Releasing active interface [ 796.865684][T10404] dvmrp6 (unregistering): left allmulticast mode [ 797.033305][ T11] block nbd3: Possible stuck request ffff888025a80000: control (read@0,1024B). Runtime 90 seconds [ 797.044138][ T11] block nbd3: Possible stuck request ffff888025a80200: control (read@1024,1024B). Runtime 90 seconds [ 797.055410][ T11] block nbd3: Possible stuck request ffff888025a80400: control (read@2048,1024B). Runtime 90 seconds [ 797.070302][ T11] block nbd3: Possible stuck request ffff888025a80600: control (read@3072,1024B). Runtime 90 seconds [ 797.083941][T10404] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 797.092021][T10404] bridge3 (unregistering): left promiscuous mode [ 797.310308][T10404] bond0 (unregistering): Released all slaves [ 797.405119][T10404] bond1 (unregistering): Released all slaves [ 797.420595][T10404] bond2 (unregistering): Released all slaves [ 797.443179][T22672] Bluetooth: hci1: command tx timeout [ 797.531521][T10404] bond3 (unregistering): Released all slaves [ 797.543974][T10404] bond4 (unregistering): Released all slaves [ 797.555914][T10404] bond5 (unregistering): Released all slaves [ 797.569123][T10404] bond6 (unregistering): Released all slaves [ 797.585851][T10404] bond7 (unregistering): (slave veth3): Releasing active interface [ 797.597200][T10404] bond7 (unregistering): (slave veth5): Releasing active interface [ 797.608537][T10404] bond7 (unregistering): Released all slaves [ 797.620182][T10404] bond8 (unregistering): Released all slaves [ 797.642173][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.655992][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.697496][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.785908][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8990'. [ 797.820931][ T5863] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 797.842722][ T5863] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 797.900812][T10404] tipc: Left network mode [ 797.907428][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.939941][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.973131][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.066581][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8994'. [ 798.143079][ T74] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 798.176256][ T5928] netlink: 'syz.2.8995': attribute type 8 has an invalid length. [ 798.221468][ T5797] hsr_slave_0: entered promiscuous mode [ 798.238083][ T5797] hsr_slave_1: entered promiscuous mode [ 798.254077][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 798.264233][ T5797] Cannot create hsr debugfs directory [ 798.323590][T28611] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 798.443780][ T5940] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 798.971524][ T5974] tipc: Started in network mode [ 798.992951][ T5974] tipc: Node identity 6221df12308, cluster identity 4711 [ 799.018655][ T5974] tipc: Enabled bearer , priority 0 [ 799.130163][T10404] hsr_slave_0: left promiscuous mode [ 799.152436][T10404] hsr_slave_1: left promiscuous mode [ 799.189078][T10404] vlan0: left allmulticast mode [ 799.194432][T10404] veth0_vlan: left allmulticast mode [ 799.199823][T10404] vlan0: left promiscuous mode [ 799.206489][T10404] veth0_macvtap: left promiscuous mode [ 799.212178][T10404] veth1_vlan: left promiscuous mode [ 799.217919][T10404] veth0_vlan: left promiscuous mode [ 799.303574][ T5990] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 799.766482][T10404] pimreg (unregistering): left allmulticast mode [ 800.337901][T10404] team0 (unregistering): Port device dummy0 removed [ 800.384362][ T5984] syzkaller0: MTU too low for tipc bearer [ 800.390726][ T5984] tipc: Disabling bearer [ 800.446731][ T5469] tipc: Node number set to 1386340114 [ 800.474656][ T6004] netlink: 'syz.3.9012': attribute type 1 has an invalid length. [ 800.485223][ T6004] netlink: 'syz.3.9012': attribute type 2 has an invalid length. [ 800.494068][ T6002] netlink: 'syz.3.9012': attribute type 1 has an invalid length. [ 800.504103][ T6002] netlink: 'syz.3.9012': attribute type 2 has an invalid length. [ 800.653159][T10405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 800.693334][ T6010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9017'. [ 800.712136][ T6017] x_tables: duplicate underflow at hook 4 [ 800.852875][T28608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 800.993322][T28608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 801.029825][T10404] IPVS: stop unused estimator thread 0... [ 801.155182][T28610] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 801.396742][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 801.416924][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 801.448125][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 801.479768][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 801.703818][T10414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 801.840464][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.906097][ T6090] netlink: 51 bytes leftover after parsing attributes in process `syz.2.9026'. [ 801.961293][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.015481][T28610] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.022667][T28610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.050886][ T6090] delete_channel: no stack [ 802.097808][T28616] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.104970][T28616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.159879][ T6108] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9032'. [ 805.122972][T28608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 805.237514][T10404] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 805.429929][T10404] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 805.583996][T10405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 805.814494][ T6137] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9038'. [ 805.915441][T10405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 805.964055][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.046850][ T6142] netlink: 'syz.2.9039': attribute type 29 has an invalid length. [ 806.074313][ T6142] netlink: 'syz.2.9039': attribute type 29 has an invalid length. [ 806.126679][ T6147] netlink: 500 bytes leftover after parsing attributes in process `syz.2.9039'. [ 806.260736][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9035'. [ 806.418126][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9035'. [ 806.444746][ T6161] netlink: 'syz.2.9042': attribute type 33 has an invalid length. [ 806.534652][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9035'. [ 806.970631][ T6150] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 807.065827][T28610] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.111682][ T5797] veth0_vlan: entered promiscuous mode [ 807.181155][ T5797] veth1_vlan: entered promiscuous mode [ 807.342987][T10404] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.399435][ T5797] veth0_macvtap: entered promiscuous mode [ 807.410723][ T5797] veth1_macvtap: entered promiscuous mode [ 807.457238][T10405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.508120][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.547443][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.588747][T10404] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.615501][T10404] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.637388][T10404] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.674047][T10404] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.792880][T10404] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.908283][ T6232] gretap1: left promiscuous mode [ 807.940202][ T6232] veth5: left promiscuous mode [ 807.946861][ T6232] erspan1: left promiscuous mode [ 807.952295][ T6232] ip6gre1: left promiscuous mode [ 807.958036][ T6232] gretap2: left promiscuous mode [ 807.963752][ T6232] bond4: left promiscuous mode [ 808.051457][T10403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.063377][T28610] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.077464][T10403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.188128][T10404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.201941][T10404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.213459][T28610] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.343214][T10404] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.462959][T10404] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.560023][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.568735][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 808.584625][T10405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.594501][ T6279] IPVS: length: 239 != 24 [ 808.646530][ T6286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9074'. [ 808.752748][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9077'. [ 808.753161][T10414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.903318][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9080'. [ 809.011262][ T6311] netlink: 'syz.0.9080': attribute type 10 has an invalid length. [ 809.028428][ T6309] IPVS: length: 8 != 1152 [ 809.087202][ T6311] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.126232][ T6311] bond0: (slave team0): Enslaving as an active interface with an up link [ 809.459270][ T6339] syzkaller0: entered promiscuous mode [ 809.473425][ T6339] syzkaller0: entered allmulticast mode [ 809.492656][ T6339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9092'. [ 810.543474][ T6386] netlink: 376 bytes leftover after parsing attributes in process `syz.2.9110'. [ 811.230244][ T6426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9120'. [ 811.276512][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9122'. [ 811.286146][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9120'. [ 811.315643][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9122'. [ 811.333228][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9120'. [ 811.378564][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 811.389418][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 811.400001][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 811.408839][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 811.417032][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 811.518791][ T6433] lo speed is unknown, defaulting to 1000 [ 811.597221][ T6443] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9126'. [ 811.792531][ T6457] netlink: 'syz.0.9129': attribute type 63 has an invalid length. [ 811.847730][ T6461] netlink: 'syz.0.9129': attribute type 63 has an invalid length. [ 811.871540][T27533] `: (slave syz_tun): Releasing backup interface [ 812.016975][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9131'. [ 812.029210][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9131'. [ 812.061654][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9131'. [ 812.090597][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9131'. [ 812.099741][ T74] net_ratelimit: 25 callbacks suppressed [ 812.099757][ T74] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 812.177254][ T6433] chnl_net:caif_netlink_parms(): no params data found [ 812.224632][ T6481] netlink: 'syz.1.9134': attribute type 33 has an invalid length. [ 812.312088][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 812.387503][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.395905][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.407164][ T6433] bridge_slave_0: entered allmulticast mode [ 812.414578][ T6433] bridge_slave_0: entered promiscuous mode [ 812.423398][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.431826][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.441852][ T6433] bridge_slave_1: entered allmulticast mode [ 812.449735][ T6433] bridge_slave_1: entered promiscuous mode [ 812.516263][ T6433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.566415][ T6433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.657608][ T6510] netlink: 'syz.3.9142': attribute type 3 has an invalid length. [ 812.673053][T28610] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 812.685699][ T6433] team0: Port device team_slave_0 added [ 812.691441][ T6510] netlink: 'syz.3.9142': attribute type 3 has an invalid length. [ 812.704545][ T6433] team0: Port device team_slave_1 added [ 812.777538][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.813632][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.886623][ T6433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.900360][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.915093][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.942344][ T6433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.962590][ T6532] Bluetooth: MGMT ver 1.23 [ 812.977015][T28608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 813.154639][ T6433] hsr_slave_0: entered promiscuous mode [ 813.187611][ T6433] hsr_slave_1: entered promiscuous mode [ 813.199974][ T6433] debugfs: 'hsr0' already exists in 'hsr' [ 813.213477][ T6433] Cannot create hsr debugfs directory [ 813.225890][ T6541] tipc: Started in network mode [ 813.230887][ T6541] tipc: Node identity 72be3313c4ab, cluster identity 4711 [ 813.241058][ T6541] tipc: Enabled bearer , priority 0 [ 813.250199][ T6538] syzkaller0: entered promiscuous mode [ 813.257459][ T6538] syzkaller0: entered allmulticast mode [ 813.281644][ T6550] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 813.332622][ T6535] tipc: Resetting bearer [ 813.364252][ T6535] tipc: Disabling bearer [ 813.514119][ T5833] Bluetooth: hci4: command tx timeout [ 813.762872][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 813.770927][ C0] lec:lec_tx_timeout: lec0 [ 813.778332][T28610] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 814.024621][T10414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 814.173548][T28611] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 814.231748][ T6598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 814.374650][T10403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 814.703172][ T6433] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 814.735945][ T6433] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 814.770091][ T6433] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 814.786561][ T6433] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 814.921734][ T6632] nbd: must specify at least one socket [ 814.991890][ T6433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.016756][ T6433] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.038502][T10403] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.045623][T10403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.082063][T10403] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.089183][T10403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.420640][ T6663] sctp: [Deprecated]: syz.1.9176 (pid 6663) Use of int in max_burst socket option deprecated. [ 815.420640][ T6663] Use struct sctp_assoc_value instead [ 815.504443][ T6433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.593175][ T5833] Bluetooth: hci4: command tx timeout [ 815.993806][ T6699] macvtap1: entered allmulticast mode [ 815.999226][ T6699] veth0_macvtap: entered allmulticast mode [ 816.124143][ T6433] veth0_vlan: entered promiscuous mode [ 816.130839][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.188395][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.247184][ T6717] __nla_validate_parse: 32 callbacks suppressed [ 816.247201][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9189'. [ 816.268821][ T6433] veth1_vlan: entered promiscuous mode [ 816.354504][ T6433] veth0_macvtap: entered promiscuous mode [ 816.378662][ T6433] veth1_macvtap: entered promiscuous mode [ 816.406626][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.422735][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.447069][T10404] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.460407][ T6726] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9192'. [ 816.476793][T10404] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.497062][T10404] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.511629][T10404] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.574033][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9191'. [ 816.587953][ T6725] netlink: 'syz.3.9191': attribute type 9 has an invalid length. [ 816.712097][ T3917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.745006][ T3917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.811648][T10405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.836000][T10405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.885423][ T6745] bond0: entered allmulticast mode [ 816.890857][ T6745] bond_slave_0: entered allmulticast mode [ 816.897172][ T6745] bond_slave_1: entered allmulticast mode [ 817.072754][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9201'. [ 817.354770][ T62] net_ratelimit: 18 callbacks suppressed [ 817.354790][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 817.445662][T22672] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 817.459273][T22672] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 817.467925][T22672] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 817.476971][T22672] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 817.492050][T22672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 817.517259][T28611] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 817.673468][T22672] Bluetooth: hci4: command tx timeout [ 817.719077][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9205'. [ 817.747707][T28610] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 817.767016][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9205'. [ 817.793481][ T6789] netlink: 5848 bytes leftover after parsing attributes in process `syz.0.9207'. [ 817.811034][ T6789] openvswitch: netlink: Flow key attr not present in new flow. [ 817.819964][T28177] syz_tun (unregistering): left allmulticast mode [ 817.835967][ T6773] lo speed is unknown, defaulting to 1000 [ 817.956400][ T6792] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 817.970730][ T6794] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 818.127637][ T6805] netlink: 'syz.4.9212': attribute type 11 has an invalid length. [ 818.164615][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 818.307515][ T6773] chnl_net:caif_netlink_parms(): no params data found [ 818.442886][T28608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 818.503824][ T6832] syzkaller0: entered promiscuous mode [ 818.509439][ T6832] syzkaller0: entered allmulticast mode [ 818.592979][T28617] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 818.617090][ T6773] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.628950][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.641352][ T6773] bridge_slave_0: entered allmulticast mode [ 818.651220][ T6773] bridge_slave_0: entered promiscuous mode [ 818.698631][ T6773] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.721346][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.734321][ T6773] bridge_slave_1: entered allmulticast mode [ 818.757983][ T6773] bridge_slave_1: entered promiscuous mode [ 818.819044][ T6841] syzkaller0: entered promiscuous mode [ 818.829238][ T6841] syzkaller0: entered allmulticast mode [ 818.882014][ T6773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.910458][ T6773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.924062][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9221'. [ 819.071950][ T6773] team0: Port device team_slave_0 added [ 819.089603][ T6773] team0: Port device team_slave_1 added [ 819.105604][ T6863] xt_bpf: check failed: parse error [ 819.148057][ T6773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.157817][ T6773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.186077][ T6773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.206674][ T6773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.207188][ T6866] sctp: [Deprecated]: syz.4.9228 (pid 6866) Use of int in maxseg socket option. [ 819.207188][ T6866] Use struct sctp_assoc_value instead [ 819.214119][ T6773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.214149][ T6773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.253882][ T6773] hsr_slave_0: entered promiscuous mode [ 819.314610][ T6773] hsr_slave_1: entered promiscuous mode [ 819.329275][ T6773] debugfs: 'hsr0' already exists in 'hsr' [ 819.339151][ T6773] Cannot create hsr debugfs directory [ 819.342711][ T6871] ip6t_srh: unknown srh invflags 4000 [ 819.376337][ T6871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9229'. [ 819.593355][T22672] Bluetooth: hci5: command tx timeout [ 819.753665][T22672] Bluetooth: hci4: command tx timeout [ 819.818328][ T6896] tipc: Cannot configure node identity twice [ 819.915949][ T6773] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.933984][ T6773] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 819.973907][T10414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 819.992478][ T6914] tipc: Enabling of bearer rejected, failed to enable media [ 820.065521][ T6773] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.102906][ T6773] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 820.133872][ T6917] tipc: Enabling of bearer rejected, failed to enable media [ 820.151439][ T6930] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 820.262372][ T6773] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.273436][ T6773] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 820.293246][T28611] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 820.307672][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9248'. [ 820.421058][ T6773] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.453634][ T6773] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 820.561846][ T6961] tipc: Enabled bearer , priority 0 [ 820.571533][ T6961] syzkaller0: entered promiscuous mode [ 820.577254][ T6961] syzkaller0: entered allmulticast mode [ 820.589230][ T5278] IPVS: starting estimator thread 0... [ 820.640918][ T6963] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 820.703350][ T6966] IPVS: using max 42 ests per chain, 100800 per kthread [ 820.725604][ T6968] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 820.794946][ T6959] tipc: Resetting bearer [ 820.853612][ T6959] tipc: Disabling bearer [ 820.895417][ T6982] netlink: 'syz.1.9259': attribute type 27 has an invalid length. [ 820.992079][ T6773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 821.010970][ T6985] sctp: [Deprecated]: syz.0.9260 (pid 6985) Use of int in max_burst socket option. [ 821.010970][ T6985] Use struct sctp_assoc_value instead [ 821.035173][ T6773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 821.057242][ T6773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 821.069147][ T6773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 821.385051][ T6773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.441775][ T6773] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.459591][ T7012] __nla_validate_parse: 4 callbacks suppressed [ 821.459609][ T7012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9268'. [ 821.475370][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.483081][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.542050][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.549260][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.676975][T22672] Bluetooth: hci5: command tx timeout [ 821.726127][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9272'. [ 821.738109][ T7034] x_tables: duplicate entry at hook 2 [ 821.751486][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9274'. [ 821.811035][ T7040] 8021q: VLANs not supported on ip_vti0 [ 822.199987][ T7062] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9281'. [ 822.219191][ T7056] syzkaller0: entered promiscuous mode [ 822.252920][ T7056] syzkaller0: entered allmulticast mode [ 822.267399][ T6773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.386724][ T7074] sctp: [Deprecated]: syz.0.9284 (pid 7074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 822.386724][ T7074] Use struct sctp_sack_info instead [ 823.754067][T22672] Bluetooth: hci5: command tx timeout [ 823.803142][T10404] net_ratelimit: 11 callbacks suppressed [ 823.803160][T10404] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 823.905946][ T7084] ip6erspan0: entered promiscuous mode [ 823.911758][ T7084] ip6erspan0: entered allmulticast mode [ 823.919609][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9286'. [ 823.919729][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9286'. [ 823.919817][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9286'. [ 823.919921][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9286'. [ 823.920019][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9286'. [ 823.920119][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9286'. [ 824.043573][T28608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 824.108365][ T6773] veth0_vlan: entered promiscuous mode [ 824.121508][ T6773] veth1_vlan: entered promiscuous mode [ 824.276270][ T7102] syz_tun: entered allmulticast mode [ 824.310376][ T7105] Can't find ip_set type [ 824.359403][ T7093] syz_tun: left allmulticast mode [ 824.409890][ T7112] tipc: Enabled bearer , priority 0 [ 824.427452][ T6773] veth0_macvtap: entered promiscuous mode [ 824.505273][ T7112] syzkaller0: entered promiscuous mode [ 824.510756][ T7112] syzkaller0: entered allmulticast mode [ 824.531816][ T7112] tipc: Resetting bearer [ 824.540535][ T6773] veth1_macvtap: entered promiscuous mode [ 824.563927][ T7110] tipc: Resetting bearer [ 825.835099][ T5833] Bluetooth: hci5: command tx timeout [ 826.231118][ T7110] tipc: Disabling bearer [ 826.259095][ T7123] syzkaller0: entered promiscuous mode [ 826.264625][ T7123] syzkaller0: entered allmulticast mode [ 826.274301][T17513] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 826.557543][ T7158] __nla_validate_parse: 68 callbacks suppressed [ 826.557564][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9308'. [ 827.122875][ T11] block nbd3: Possible stuck request ffff888025a80000: control (read@0,1024B). Runtime 120 seconds [ 827.133894][ T11] block nbd3: Possible stuck request ffff888025a80200: control (read@1024,1024B). Runtime 120 seconds [ 827.145027][ T11] block nbd3: Possible stuck request ffff888025a80400: control (read@2048,1024B). Runtime 120 seconds [ 827.156080][ T11] block nbd3: Possible stuck request ffff888025a80600: control (read@3072,1024B). Runtime 120 seconds [ 827.879194][ T5281] tipc: Node number set to 3054842643 [ 827.917838][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.966476][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.014514][T17513] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.034597][ T7171] netlink: 324 bytes leftover after parsing attributes in process `syz.4.9311'. [ 828.043227][T17513] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.097751][T17513] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.108129][T17513] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.120354][ T7174] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 828.143702][ T7177] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9313'. [ 828.174912][ T7177] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 828.203438][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9314'. [ 828.286242][ T7181] bond10: Invalid ad_actor_system MAC address. [ 828.293239][ T7181] bond10: option ad_actor_system: invalid value (1) [ 828.314643][ T7181] bond10 (unregistering): Released all slaves [ 828.373430][T10405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 828.381973][T17513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.417862][T17513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.479815][T10405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.496375][T10405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.533819][ T3938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 828.615254][ T49] nci: nci_rx_work: unknown MT 0x1 [ 828.643862][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 828.676942][ T7210] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 828.753984][T10405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 828.784779][ T7210] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9318'. [ 828.864331][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 828.973025][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 829.083111][T10404] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 829.193168][T10404] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 829.302908][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 829.419737][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 829.569930][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 829.613453][ T7248] xt_hashlimit: size too large, truncated to 1048576 [ 829.637817][ T7250] IPVS: Unknown mcast interface: vcan0 [ 829.651828][ T7250] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 829.745252][ T7255] –: renamed from vxcan1 (while UP) [ 829.792991][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 829.914515][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 830.098864][ T7280] IPv6: sit3: Disabled Multicast RS [ 830.207384][ T7289] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9343'. [ 830.238651][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9343'. [ 830.417495][ T7305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9348'. [ 830.429752][ T7307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9348'. [ 830.488892][ T7314] netlink: 'syz.4.9349': attribute type 18 has an invalid length. [ 830.590558][ T7321] syzkaller1: entered promiscuous mode [ 830.606612][ T7321] syzkaller1: entered allmulticast mode [ 830.872536][ T7338] syzkaller0: entered promiscuous mode [ 830.881641][ T7338] syzkaller0: entered allmulticast mode [ 831.657912][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9360'. [ 832.466175][ T7340] team0: Device gtp0 is up. Set it down before adding it as a team port [ 832.614642][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 832.760656][ T7379] netlink: 'syz.0.9367': attribute type 10 has an invalid length. [ 832.797697][ T7379] team0: Port device dummy0 added [ 833.534317][ T7405] netlink: 'syz.4.9379': attribute type 1 has an invalid length. [ 833.564325][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9376'. [ 833.650887][ T7414] bond1: (slave gretap1): making interface the new active one [ 833.660618][ T7414] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 833.731463][ T7410] bridge6: port 1(veth9) entered blocking state [ 833.742646][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9381'. [ 833.749060][ T7410] bridge6: port 1(veth9) entered disabled state [ 833.756510][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9381'. [ 833.771437][ T7410] veth9: entered allmulticast mode [ 833.779050][ T7410] veth9: entered promiscuous mode [ 833.793297][ T7422] x_tables: duplicate underflow at hook 1 [ 833.806200][ T7411] bond7: (slave veth0_to_bond): Releasing active interface [ 833.834756][ T7411] bridge6: port 2(veth0_to_bond) entered blocking state [ 833.851381][ T7411] bridge6: port 2(veth0_to_bond) entered disabled state [ 833.860034][ T7411] veth0_to_bond: entered allmulticast mode [ 833.890708][ T7411] veth0_to_bond: entered promiscuous mode [ 833.901134][ T7420] tipc: Enabling of bearer rejected, failed to enable media [ 833.943049][ T49] net_ratelimit: 19 callbacks suppressed [ 833.943067][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 834.079195][ T7442] netlink: 'syz.1.9388': attribute type 2 has an invalid length. [ 834.122873][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 834.226730][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9393'. [ 834.243572][T17513] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 834.353330][T10414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 834.505985][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9398'. [ 834.523898][T17513] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 834.852975][T10414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 834.968521][T10414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 835.046615][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9413'. [ 835.076098][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9413'. [ 835.088211][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 835.100747][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 835.108627][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 835.119172][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 835.127223][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9412'. [ 835.137775][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 835.145867][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 835.242897][T28611] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 835.297072][ T7520] lo speed is unknown, defaulting to 1000 [ 835.539575][ T3938] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.745999][ T3938] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.778761][ T7564] netlink: 'syz.3.9424': attribute type 1 has an invalid length. [ 835.795657][ T3938] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.851758][T17513] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 835.864577][ T3938] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.988916][T28616] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.007867][T28616] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.074020][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9428'. [ 836.175923][T28616] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.186968][T28616] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.358767][T28616] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.374188][T28616] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.500769][T28616] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.511715][T28616] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.565151][ T7520] chnl_net:caif_netlink_parms(): no params data found [ 836.581613][ T7613] netlink: 'syz.1.9435': attribute type 1 has an invalid length. [ 836.601253][ T7613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 836.694618][ T7616] x_tables: duplicate underflow at hook 1 [ 836.938952][ T7520] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.966664][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.975225][ T7638] __nla_validate_parse: 1 callbacks suppressed [ 836.975242][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9439'. [ 837.003991][ T7520] bridge_slave_0: entered allmulticast mode [ 837.032076][ T7520] bridge_slave_0: entered promiscuous mode [ 837.075071][ T7520] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.095540][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.113857][ T7520] bridge_slave_1: entered allmulticast mode [ 837.120542][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9441'. [ 837.121581][ T7520] bridge_slave_1: entered promiscuous mode [ 837.163601][ T7647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9441'. [ 837.194499][ T5833] Bluetooth: hci2: command tx timeout [ 837.208362][T28616] veth0_to_bond: left allmulticast mode [ 837.227102][T28616] veth0_to_bond: left promiscuous mode [ 837.247492][T28616] bridge6: port 2(veth0_to_bond) entered disabled state [ 837.276196][T28616] veth9: left allmulticast mode [ 837.281059][T28616] veth9: left promiscuous mode [ 837.292581][T28616] bridge6: port 1(veth9) entered disabled state [ 837.566350][ T7667] netlink: 'syz.0.9445': attribute type 1 has an invalid length. [ 837.722737][ T7679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9448'. [ 837.870004][T28616] bond3 (unregistering): (slave gretap1): Releasing active interface [ 837.880070][T28616] gretap1 (unregistering): left allmulticast mode [ 837.941180][T28616] dvmrp1 (unregistering): left allmulticast mode [ 837.983791][ T7685] netlink: 'syz.4.9449': attribute type 33 has an invalid length. [ 837.991754][ T7685] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9449'. [ 838.065596][T28616] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 838.074244][T28616] bridge2 (unregistering): left promiscuous mode [ 838.336893][T28616] bond1 (unregistering): (slave bond2): Releasing backup interface [ 838.345696][T28616] bond1 (unregistering): Released all slaves [ 838.449050][T28616] bond2 (unregistering): Released all slaves [ 838.551945][T28616] bond3 (unregistering): Released all slaves [ 838.574019][T28616] bond0 (unregistering): Released all slaves [ 838.586436][T28616] bond4 (unregistering): Released all slaves [ 838.693498][T28616] bond5 (unregistering): Released all slaves [ 838.793830][T28616] bond6 (unregistering): Released all slaves [ 838.891720][T28616] bond7 (unregistering): Released all slaves [ 838.989722][T28616] bond8 (unregistering): Released all slaves [ 839.001452][T28616] bond9 (unregistering): Released all slaves [ 839.022184][ T7645] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 839.023353][ T7647] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 839.052890][T17513] net_ratelimit: 4 callbacks suppressed [ 839.052907][T17513] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 839.128050][ T7520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.169652][ T7520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.277574][ T5833] Bluetooth: hci2: command tx timeout [ 839.288992][T28616] tipc: Disabling bearer [ 839.302997][T28616] tipc: Disabling bearer [ 839.317058][T28616] tipc: Left network mode [ 839.317241][ T7695] netlink: 'syz.3.9450': attribute type 4 has an invalid length. [ 839.352266][ T7520] team0: Port device team_slave_0 added [ 839.399082][ T7520] team0: Port device team_slave_1 added [ 839.545273][T28610] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 839.562670][ T7520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.592176][ T7520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.642163][ T7520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.669510][ T7713] syzkaller1: entered promiscuous mode [ 839.683088][ T7713] syzkaller1: entered allmulticast mode [ 839.691995][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 839.741254][ T7520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.767530][ T7520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.799557][ T7520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.999415][ T7747] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9458'. [ 840.033288][T28617] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 840.192232][ T7755] openvswitch: netlink: Tunnel attr 32 out of range max 16 [ 840.223893][ T7737] syzkaller0: entered promiscuous mode [ 840.229407][ T7737] syzkaller0: entered allmulticast mode [ 840.549233][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9463'. [ 841.356046][ T5833] Bluetooth: hci2: command tx timeout [ 841.913977][ T7520] hsr_slave_0: entered promiscuous mode [ 841.920474][ T7520] hsr_slave_1: entered promiscuous mode [ 841.927308][ T7520] debugfs: 'hsr0' already exists in 'hsr' [ 841.933128][ T7520] Cannot create hsr debugfs directory [ 842.046752][T28616] hsr_slave_0: left promiscuous mode [ 842.108686][T28616] veth1_macvtap: left promiscuous mode [ 842.133241][T28616] veth0_macvtap: left promiscuous mode [ 842.138924][T28616] veth1_vlan: left promiscuous mode [ 842.151379][T28616] veth0_vlan: left promiscuous mode [ 843.317816][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9474'. [ 843.433281][ T5833] Bluetooth: hci2: command tx timeout [ 843.577251][ T7773] infiniband : set down [ 843.633467][ T7773] infiniband : added ipvlan0 [ 843.645082][ T7773] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 843.655208][ T7773] infiniband : Couldn't open port 1 [ 843.693741][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 843.775043][ T7826] netlink: 'syz.0.9480': attribute type 83 has an invalid length. [ 843.822321][ T7773] RDS/IB: : added [ 843.831389][ T7773] smc: adding ib device  with port count 1 [ 843.869291][ T7773] smc: ib device  port 1 has no pnetid [ 843.913107][ T7826] netlink: 'syz.0.9480': attribute type 7 has an invalid length. [ 844.095225][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9483'. [ 844.108280][T28610] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 844.130662][ T7840] netlink: 'syz.4.9482': attribute type 1 has an invalid length. [ 844.130994][T28616] IPVS: stop unused estimator thread 0... [ 844.220281][ T7840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 844.309297][ T7845] bond2: (slave veth0_to_bond): making interface the new active one [ 844.353867][ T7845] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 844.465407][ T7840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 844.485815][ T7840] bond2: (slave bond3): Enslaving as an active interface with a down link [ 844.534676][ T7865] openvswitch: netlink: Key type 180 is out of range max 32 [ 844.565756][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 844.714175][T28616] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 844.733998][ T7865] nbd1: detected capacity change from 0 to 127 [ 844.771317][ T5833] block nbd1: Receive control failed (result -104) [ 844.834792][T28616] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 844.947445][ T7520] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 844.972648][ T7520] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 845.031528][ T7520] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 845.078446][ T7520] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 845.123569][ T7883] netlink: 'syz.3.9491': attribute type 1 has an invalid length. [ 845.131583][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9491'. [ 845.186611][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 845.220653][ T7894] netlink: 'syz.4.9492': attribute type 23 has an invalid length. [ 845.342899][T28610] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 845.472888][T28617] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 845.584444][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.591868][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.618297][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.653518][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.733948][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 845.781927][ T7913] syzkaller0: entered promiscuous mode [ 845.797259][ T7913] syzkaller0: entered allmulticast mode [ 845.865464][ T7520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.015549][ T7520] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.047883][T28617] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.055096][T28617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.107870][ T7935] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.9498'. [ 846.126939][T28611] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.134117][T28611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.172505][ T7935] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.9498'. [ 846.233055][ T6022] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 846.451491][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9500'. [ 846.522066][ T7991] lec:lec_start_xmit: lec0:No lecd attached [ 846.522550][ T7944] bridge3: entered promiscuous mode [ 846.569672][ T7944] bridge3: entered allmulticast mode [ 846.658425][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9502'. [ 846.931619][ T7968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9506'. [ 847.008120][ T7520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.144206][ T7520] veth0_vlan: entered promiscuous mode [ 847.179897][ T7520] veth1_vlan: entered promiscuous mode [ 847.267209][ T7520] veth0_macvtap: entered promiscuous mode [ 847.299477][ T7520] veth1_macvtap: entered promiscuous mode [ 847.347558][ T7520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.379049][ T7520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.418673][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.447096][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.466814][ T7993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9512'. [ 847.484074][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.505585][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.725482][ T3938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.754394][ T3938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.863556][ T6399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.886452][ T6399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.904449][ T8005] tipc: Started in network mode [ 847.909342][ T8005] tipc: Node identity ac14140f, cluster identity 4711 [ 847.940088][ T8005] tipc: New replicast peer: 255.255.255.255 [ 847.953974][ T8005] tipc: Enabled bearer , priority 10 [ 848.196819][ T8021] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9518'. [ 848.682676][ T8047] gre0: entered promiscuous mode [ 848.736072][ T30] audit: type=1800 audit(1769478708.966:8): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9526" name="memory.events" dev="tmpfs" ino=261 res=0 errno=0 [ 848.991070][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9528'. [ 849.228196][ T5445] tipc: Node number set to 2886997007 [ 849.270930][ T3917] net_ratelimit: 15 callbacks suppressed [ 849.270962][ T3917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 849.365828][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9529'. [ 849.461967][ T8097] netlink: 'syz.4.9534': attribute type 1 has an invalid length. [ 849.530357][ T8083] : entered promiscuous mode [ 849.557642][ T8099] bond4: (slave bridge2): making interface the new active one [ 849.566376][ T8099] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 849.575768][ T8101] netlink: 'syz.2.9535': attribute type 21 has an invalid length. [ 849.614032][ T3917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 849.616320][ T8101] IPv6: NLM_F_CREATE should be specified when creating new route [ 849.754038][ T6022] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 849.862152][ T8116] syzkaller0: entered promiscuous mode [ 849.868896][ T8116] syzkaller0: entered allmulticast mode [ 849.922899][T17513] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 850.042893][T17513] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 850.066515][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9544'. [ 850.078811][ T8125] netlink: 'syz.2.9544': attribute type 12 has an invalid length. [ 850.087375][ T8125] netlink: 'syz.2.9544': attribute type 29 has an invalid length. [ 850.095777][ T8125] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9544'. [ 850.106051][ T8125] netlink: 59 bytes leftover after parsing attributes in process `syz.2.9544'. [ 850.172871][T17513] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 850.186752][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9545'. [ 850.344402][ T6022] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 850.356642][ T8134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9548'. [ 850.367049][ T8134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9548'. [ 850.464067][ T8138] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9550'. [ 850.474383][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 850.494452][ T8138] syzkaller1: entered promiscuous mode [ 850.500334][ T8138] syzkaller1: entered allmulticast mode [ 850.511157][ T8138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9550'. [ 850.593714][ T6022] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 850.650613][ T8147] syzkaller0: entered promiscuous mode [ 850.659954][ T8147] syzkaller0: entered allmulticast mode [ 850.709618][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 850.910311][ T8164] netlink: 'syz.0.9559': attribute type 2 has an invalid length. [ 851.341216][ T8195] syzkaller0: entered promiscuous mode [ 851.347092][ T8195] syzkaller0: entered allmulticast mode [ 851.440333][ T8197] syzkaller0: entered promiscuous mode [ 851.447694][ T8197] syzkaller0: entered allmulticast mode [ 851.752880][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5230 ms [ 851.760951][ C0] lec:lec_tx_timeout: lec0 [ 852.790348][ T8233] netlink: 'syz.3.9579': attribute type 4 has an invalid length. [ 853.873836][ T8230] lo: entered promiscuous mode [ 853.888852][ T8230] netlink: 'syz.1.9578': attribute type 2 has an invalid length. [ 854.072174][ T8237] syzkaller0: entered promiscuous mode [ 854.083989][ T8237] syzkaller0: entered allmulticast mode [ 854.294892][ T8262] __nla_validate_parse: 8 callbacks suppressed [ 854.294903][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9586'. [ 854.346565][ T8263] netlink: 'syz.1.9586': attribute type 1 has an invalid length. [ 854.973606][ T8275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9587'. [ 855.829658][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9586'. [ 855.852556][ T8262] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 855.873417][ T3938] net_ratelimit: 9 callbacks suppressed [ 855.873435][ T3938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 856.044202][ T3938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 856.094074][ T8289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9591'. [ 856.183483][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 856.305097][ T8305] syzkaller1: entered promiscuous mode [ 856.324195][ T8305] syzkaller1: entered allmulticast mode [ 856.338559][ T8281] lo speed is unknown, defaulting to 1000 [ 856.423320][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 856.462065][ T8314] netlink: 'syz.0.9596': attribute type 1 has an invalid length. [ 856.543035][ T3938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 856.572106][ T8319] netlink: 'syz.2.9598': attribute type 10 has an invalid length. [ 856.610655][ T8319] syz_tun: entered promiscuous mode [ 856.636114][ T8319] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 856.666515][ T8323] netlink: 'syz.2.9598': attribute type 10 has an invalid length. [ 856.683960][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 856.761420][ T8323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.815047][ T8323] team0: Port device bond0 added [ 856.832067][ T8325] syzkaller0: entered allmulticast mode [ 856.865638][ T8323] bond0: (slave syz_tun): Releasing backup interface [ 856.892374][ T8338] netlink: 'syz.1.9604': attribute type 1 has an invalid length. [ 856.895064][ T8323] team0: Port device bond0 removed [ 856.902716][ T8338] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9604'. [ 856.910226][ T8323] bridge_slave_0: left allmulticast mode [ 856.917446][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9604'. [ 856.931171][ T8323] bridge_slave_0: left promiscuous mode [ 856.932537][ T8338] netlink: 'syz.1.9604': attribute type 1 has an invalid length. [ 856.945452][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.946774][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9604'. [ 856.963654][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9604'. [ 856.972592][ T8338] netlink: 'syz.1.9604': attribute type 1 has an invalid length. [ 856.980507][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9604'. [ 856.992046][ T8323] bridge_slave_1: left allmulticast mode [ 856.999351][ T8323] bridge_slave_1: left promiscuous mode [ 857.005629][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.021556][ T8323] bond0: (slave bond_slave_0): Releasing backup interface [ 857.035203][ T8323] bond0: (slave bond_slave_1): Releasing backup interface [ 857.051895][ T8323] team0: Port device team_slave_0 removed [ 857.066214][ T8323] team0: Port device team_slave_1 removed [ 857.073822][ T8323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.081217][ T8323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.090452][ T8323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.099711][ T8323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.108760][ T8323] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 857.191990][ T8347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9606'. [ 857.213117][ T11] block nbd3: Possible stuck request ffff888025a80000: control (read@0,1024B). Runtime 150 seconds [ 857.224257][ T11] block nbd3: Possible stuck request ffff888025a80200: control (read@1024,1024B). Runtime 150 seconds [ 857.235502][ T11] block nbd3: Possible stuck request ffff888025a80400: control (read@2048,1024B). Runtime 150 seconds [ 857.240179][ T8347] netlink: 'syz.2.9606': attribute type 11 has an invalid length. [ 857.246986][ T11] block nbd3: Possible stuck request ffff888025a80600: control (read@3072,1024B). Runtime 150 seconds [ 857.260713][T10405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 857.394069][ T74] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 857.514149][T10405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 857.559266][ T8355] netlink: 'syz.2.9609': attribute type 11 has an invalid length. [ 857.565413][ T8358] lo speed is unknown, defaulting to 1000 [ 857.597334][ T8362] tipc: Started in network mode [ 857.611577][ T8362] tipc: Node identity eeca7b2bfd13, cluster identity 4711 [ 857.620971][ T8362] tipc: Enabled bearer , priority 0 [ 857.656276][ T8362] syzkaller0: MTU too low for tipc bearer [ 857.662118][ T8362] tipc: Disabling bearer [ 858.023731][ T8380] netlink: 'syz.1.9616': attribute type 1 has an invalid length. [ 858.196724][ T8383] bond2: (slave ip6gretap1): making interface the new active one [ 858.205145][ T8383] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 858.214163][ T8383] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 858.222727][ T8383] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 858.657497][ T8414] sctp: [Deprecated]: syz.4.9623 (pid 8414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 858.657497][ T8414] Use struct sctp_sack_info instead [ 858.775435][ T8423] netlink: 'syz.2.9627': attribute type 64 has an invalid length. [ 858.783956][ T8424] netlink: 'syz.2.9627': attribute type 64 has an invalid length. [ 858.941929][ T8431] bond1: option mode: invalid value (133) [ 858.951332][ T8431] bond1 (unregistering): Released all slaves [ 859.602256][ T8477] __nla_validate_parse: 9 callbacks suppressed [ 859.602282][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9639'. [ 859.858587][ T8477] hsr_slave_1 (unregistering): left promiscuous mode [ 860.029081][ T8503] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9648'. [ 860.116024][ T8509] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9648'. [ 860.234950][ T8515] sch_fq: defrate 0 ignored. [ 860.378594][ T8531] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.9652'. [ 860.536075][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9658'. [ 860.572254][ T8540] netlink: 788 bytes leftover after parsing attributes in process `syz.0.9659'. [ 860.583575][ T8534] netlink: 'syz.3.9657': attribute type 18 has an invalid length. [ 860.591406][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9657'. [ 860.606564][ T8540] netlink: 788 bytes leftover after parsing attributes in process `syz.0.9659'. [ 860.624631][T10405] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.635588][T10405] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.647687][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9657'. [ 860.655574][ T8544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.657018][T10405] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.696937][T10405] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.714810][ T8550] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.9662'. [ 860.726935][ T8550] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20001 [ 860.815336][ T8553] : entered promiscuous mode [ 861.003027][ T6399] net_ratelimit: 25 callbacks suppressed [ 861.003047][ T6399] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 861.123709][ T3917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 861.248477][ T74] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 861.372971][ T74] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 861.513817][T10405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 861.623265][T10405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 861.700304][ T8611] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 861.719225][ T8608] vlan0: entered promiscuous mode [ 861.749985][ T8608] vlan0: entered allmulticast mode [ 861.768064][ T8608] hsr_slave_1: entered allmulticast mode [ 861.834884][ T3938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 862.074783][ T6399] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 862.193809][ T6022] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 862.237783][ T8633] validate_nla: 1 callbacks suppressed [ 862.237801][ T8633] netlink: 'syz.0.9687': attribute type 1 has an invalid length. [ 862.303534][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 862.497626][ T8651] IPVS: length: 239 != 24 [ 863.379863][ T8717] nbd: must specify a size in bytes for the device [ 863.478146][ T8724] xt_l2tp: unknown flags: 10 [ 863.642586][ T8731] xt_addrtype: ipv6 does not support BROADCAST matching [ 863.777756][ T8742] netlink: 'syz.1.9719': attribute type 22 has an invalid length. [ 863.814694][ T1167] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.815134][ T8742] netlink: 'syz.1.9719': attribute type 22 has an invalid length. [ 863.834184][ T1167] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.849683][ T1167] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.865126][ T1167] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.939803][ T8750] pim6reg1: entered promiscuous mode [ 863.955888][ T8750] pim6reg1: entered allmulticast mode [ 864.049566][ T8759] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 864.059211][ T8759] netlink: 'syz.3.9727': attribute type 64 has an invalid length. [ 864.235191][ T8769] mac80211_hwsim hwsim88 ÿ: renamed from wlan1 [ 864.275101][ T8719] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 864.284628][ T8719] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 864.345615][ T8775] netlink: 'syz.0.9732': attribute type 1 has an invalid length. [ 864.349503][ T8719] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 864.356470][ T8773] syzkaller0: entered promiscuous mode [ 864.365311][ T8719] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 864.365389][ T8773] syzkaller0: entered allmulticast mode [ 864.412722][ T8719] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 864.424135][ T8719] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 864.470957][ T8773] tipc: Started in network mode [ 864.476182][ T8773] tipc: Node identity 0eebf813d6a, cluster identity 4711 [ 864.483842][ T8773] tipc: Enabled bearer , priority 0 [ 864.505295][ T8772] tipc: Resetting bearer [ 864.548317][ T8772] tipc: Disabling bearer [ 864.621121][ T8780] __nla_validate_parse: 22 callbacks suppressed [ 864.621138][ T8780] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9735'. [ 864.713226][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9736'. [ 864.740624][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9738'. [ 864.762751][ T8792] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9738'. [ 864.775987][ T8799] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9740'. [ 864.813299][ T8799] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9740'. [ 864.915747][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9742'. [ 865.009923][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9746'. [ 865.059125][ T8812] syzkaller0: entered promiscuous mode [ 865.066001][ T8812] syzkaller0: entered allmulticast mode [ 865.620071][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9760'. [ 865.758415][ T8863] ieee802154 phy0 wpan0: encryption failed: -22 [ 865.764792][ T8863] ieee802154 phy0 wpan0: encryption failed: -22 [ 865.778739][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9762'. [ 866.013942][ T3917] net_ratelimit: 33 callbacks suppressed [ 866.013960][ T3917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 866.035609][ T8884] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20002 [ 866.035897][ T8882] tipc: Enabled bearer , priority 0 [ 866.062155][ T8882] syzkaller0: entered promiscuous mode [ 866.083247][ T8882] syzkaller0: entered allmulticast mode [ 866.092570][ T8882] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 866.140815][ T8882] tipc: Resetting bearer [ 866.164182][ T8881] tipc: Resetting bearer [ 866.232439][ T8881] tipc: Disabling bearer [ 866.263095][T10403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 866.377112][T28611] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 866.424322][ T8911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 866.506240][T10405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 866.625485][T10403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 866.664124][ T8922] macvtap1: entered allmulticast mode [ 866.673978][ T8922] veth0_macvtap: entered allmulticast mode [ 866.746568][T10403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 866.863386][T28611] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 866.982933][T10405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 867.001256][ T8942] vcan0: entered promiscuous mode [ 867.015355][ T8942] vcan0: entered allmulticast mode [ 867.122931][T10403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 867.239355][ T8958] netlink: 'syz.4.9786': attribute type 2 has an invalid length. [ 867.254575][ T8958] netlink: 'syz.4.9786': attribute type 1 has an invalid length. [ 867.264446][ T8958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.570889][ T8977] bridge0: port 3(ipvlan0) entered blocking state [ 867.603118][ T8977] bridge0: port 3(ipvlan0) entered disabled state [ 867.657872][ T8977] ipvlan0: entered allmulticast mode [ 867.672301][ T8977] bridge0: entered allmulticast mode [ 867.685644][ T8977] ipvlan0: left allmulticast mode [ 867.690857][ T8977] bridge0: left allmulticast mode [ 867.906940][ T9001] netlink: 'syz.0.9801': attribute type 11 has an invalid length. [ 868.146044][ T8999] tipc: Enabled bearer , priority 0 [ 868.239935][ T8994] tipc: Disabling bearer [ 868.584645][ T5278] IPVS: starting estimator thread 0... [ 868.675128][ T9038] IPVS: using max 31 ests per chain, 74400 per kthread [ 868.765299][ T9057] netlink: 'syz.3.9817': attribute type 1 has an invalid length. [ 868.858557][ T30] audit: type=1804 audit(1769478729.086:9): pid=9066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9820" name="/newroot/147/cgroup.controllers" dev="tmpfs" ino=766 res=1 errno=0 [ 868.894192][ T9067] bond1: (slave ip6gretap1): making interface the new active one [ 868.902510][ T9067] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 868.902635][ T30] audit: type=1800 audit(1769478729.086:10): pid=9066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9820" name="cgroup.controllers" dev="tmpfs" ino=766 res=0 errno=0 [ 869.096657][ T9087] netem: unknown loss type 0 [ 869.102006][ T9087] netem: change failed [ 869.408025][ T9112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 869.440616][ T9110] syzkaller1: entered promiscuous mode [ 869.456237][ T9110] syzkaller1: entered allmulticast mode [ 870.001139][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.009839][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 871.163109][T10403] net_ratelimit: 48 callbacks suppressed [ 871.163129][T10403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 871.223243][ T9144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 871.293420][T10403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 871.403469][T28616] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 871.414569][ T9156] __nla_validate_parse: 19 callbacks suppressed [ 871.414586][ T9156] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9847'. [ 871.513744][T28616] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 871.523934][ T9163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9849'. [ 871.603111][ T9170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 871.638591][ T9172] syzkaller0: entered promiscuous mode [ 871.646203][ T9172] syzkaller0: entered allmulticast mode [ 871.735580][ T9184] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.9856'. [ 871.782625][ T9184] netlink: Conntrack attr has 4 unknown bytes [ 871.801684][ T9187] syz.4.9858: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 871.819715][ T3917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 871.831291][ T9187] CPU: 0 UID: 0 PID: 9187 Comm: syz.4.9858 Not tainted syzkaller #0 PREEMPT(full) [ 871.831317][ T9187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 871.831329][ T9187] Call Trace: [ 871.831337][ T9187] [ 871.831346][ T9187] dump_stack_lvl+0xe8/0x150 [ 871.831376][ T9187] warn_alloc+0x249/0x340 [ 871.831406][ T9187] ? stack_trace_save+0xa9/0x100 [ 871.831433][ T9187] ? __pfx_warn_alloc+0x10/0x10 [ 871.831460][ T9187] ? kasan_save_track+0x4f/0x80 [ 871.831477][ T9187] ? kasan_save_track+0x3e/0x80 [ 871.831492][ T9187] ? __kasan_kmalloc+0x93/0xb0 [ 871.831511][ T9187] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 871.831529][ T9187] ? xskq_create+0x56/0x170 [ 871.831556][ T9187] ? xsk_setsockopt+0x54c/0x990 [ 871.831581][ T9187] ? do_sock_setsockopt+0x17c/0x1b0 [ 871.831604][ T9187] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 871.831625][ T9187] ? do_syscall_64+0xe2/0xf80 [ 871.831648][ T9187] __vmalloc_node_range_noprof+0x132/0x1730 [ 871.831702][ T9187] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 871.831730][ T9187] ? __kasan_kmalloc+0x93/0xb0 [ 871.831755][ T9187] vmalloc_user_noprof+0xad/0xe0 [ 871.831773][ T9187] ? xskq_create+0xbf/0x170 [ 871.831802][ T9187] xskq_create+0xbf/0x170 [ 871.831831][ T9187] xsk_init_queue+0xad/0x110 [ 871.831860][ T9187] xsk_setsockopt+0x54c/0x990 [ 871.831888][ T9187] ? __pfx_xsk_setsockopt+0x10/0x10 [ 871.831915][ T9187] ? __pfx_aa_sk_perm+0x10/0x10 [ 871.831939][ T9187] ? aa_sock_opt_perm+0xff/0x1a0 [ 871.831965][ T9187] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 871.831984][ T9187] ? __pfx_xsk_setsockopt+0x10/0x10 [ 871.832013][ T9187] do_sock_setsockopt+0x17c/0x1b0 [ 871.832042][ T9187] __x64_sys_setsockopt+0x13d/0x1b0 [ 871.832072][ T9187] do_syscall_64+0xe2/0xf80 [ 871.832092][ T9187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.832110][ T9187] ? trace_irq_disable+0x37/0x100 [ 871.832129][ T9187] ? clear_bhb_loop+0x60/0xb0 [ 871.832151][ T9187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.832171][ T9187] RIP: 0033:0x7f613d59aeb9 [ 871.832189][ T9187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.832206][ T9187] RSP: 002b:00007f613e46a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 871.832227][ T9187] RAX: ffffffffffffffda RBX: 00007f613d815fa0 RCX: 00007f613d59aeb9 [ 871.832242][ T9187] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 871.832254][ T9187] RBP: 00007f613d608c1f R08: 0000000000000004 R09: 0000000000000000 [ 871.832267][ T9187] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.832280][ T9187] R13: 00007f613d816038 R14: 00007f613d815fa0 R15: 00007ffd9b0fcc08 [ 871.832314][ T9187] [ 871.903523][ T9187] Mem-Info: [ 871.943111][ T3917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 872.020376][ T9187] active_anon:12240 inactive_anon:0 isolated_anon:0 [ 872.020376][ T9187] active_file:3086 inactive_file:40257 isolated_file:0 [ 872.020376][ T9187] unevictable:768 dirty:76 writeback:0 [ 872.020376][ T9187] slab_reclaimable:13268 slab_unreclaimable:155289 [ 872.020376][ T9187] mapped:29485 shmem:1363 pagetables:1675 [ 872.020376][ T9187] sec_pagetables:0 bounce:0 [ 872.020376][ T9187] kernel_misc_reclaimable:0 [ 872.020376][ T9187] free:1243335 free_pcp:18350 free_cma:0 [ 872.170935][ T9187] Node 0 active_anon:48960kB inactive_anon:0kB active_file:12344kB inactive_file:160820kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32024kB dirty:304kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16676kB pagetables:6332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 872.203879][ T9187] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86016kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 872.237451][ T9187] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 872.269169][ T9187] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 872.275767][ T9187] Node 0 DMA32 free:1340536kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48960kB inactive_anon:0kB active_file:12344kB inactive_file:160820kB unevictable:1536kB writepending:304kB zspages:0kB present:3129332kB managed:2554132kB mlocked:0kB bounce:0kB free_pcp:36316kB local_pcp:21180kB free_cma:0kB [ 872.309586][ T9187] lowmem_reserve[]: 0 0 1 1 1 [ 872.320863][ T9187] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 872.351581][ T9187] lowmem_reserve[]: 0 0 0 0 0 [ 872.356403][ T9187] Node 1 Normal free:3621428kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:37048kB local_pcp:19880kB free_cma:0kB [ 872.389212][ T9187] lowmem_reserve[]: 0 0 0 0 0 [ 872.394050][ T9187] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11248kB [ 872.409220][ T9187] Node 0 DMA32: 9109*4kB (UME) 8188*8kB (UME) 5105*16kB (UME) 305*32kB (UME) 789*64kB (UME) 665*128kB (UM) 575*256kB (UME) 454*512kB (UME) 329*1024kB (UM) 144*2048kB (UM) 0*4096kB = 1340452kB [ 872.462945][ T9187] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 872.504331][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 872.513160][ T9187] Node 1 Normal: 152*4kB (U) 45*8kB (UME) 34*16kB (UME) 110*32kB (UME) 29*64kB (UME) 11*128kB (UME) 6*256kB (UME) 6*512kB (UME) 4*1024kB (UME) 4*2048kB (UE) 878*4096kB (UM) = 3621480kB [ 872.570302][ T9187] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 872.573481][ T9205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9864'. [ 872.580357][ T9187] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 872.644671][ T9187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 872.663728][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9866'. [ 872.673331][ T9187] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 872.682642][ T9187] 45452 total pagecache pages [ 872.691767][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9866'. [ 872.714307][ T9187] 0 pages in swap cache [ 872.718497][ T9187] Free swap = 124996kB [ 872.731882][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9866'. [ 872.743294][ T9187] Total swap = 124996kB [ 872.747474][ T9187] 2097051 pages RAM [ 872.751281][ T9187] 0 pages HighMem/MovableOnly [ 872.777573][ T9187] 426620 pages reserved [ 872.787921][ T9187] 0 pages cma reserved [ 872.896144][ T9221] syzkaller0: entered promiscuous mode [ 872.909888][ T9221] syzkaller0: entered allmulticast mode [ 873.318441][ T9247] netlink: 'syz.4.9875': attribute type 12 has an invalid length. [ 873.333678][ T9247] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.9875'. [ 873.360399][ T9247] mac80211_hwsim hwsim91 wlan0: entered promiscuous mode [ 873.456561][ T9253] netlink: 'syz.1.9877': attribute type 61 has an invalid length. [ 873.480516][ T9260] tipc: New replicast peer: 255.255.255.255 [ 873.487401][ T9260] tipc: Enabled bearer , priority 10 [ 873.638541][ T9263] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 873.669360][ T9263] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 873.827960][ T9278] syzkaller0: entered promiscuous mode [ 873.835363][ T9278] syzkaller0: entered allmulticast mode [ 873.890598][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9884'. [ 873.923629][ T9280] netlink: 'syz.3.9884': attribute type 5 has an invalid length. [ 873.948398][ T9280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9884'. [ 873.963629][ T9281] IPv6: Can't replace route, no match found [ 874.119036][ T9288] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20004 [ 874.328244][ T9295] wireguard: wg2: Could not create IPv4 socket [ 874.543298][ T9305] syzkaller0: entered promiscuous mode [ 874.549036][ T9305] syzkaller0: entered allmulticast mode [ 874.561778][ T9307] tipc: Enabled bearer , priority 0 [ 874.570414][ T9306] tipc: Enabling of bearer rejected, already enabled [ 874.580712][ T9310] syzkaller0: entered promiscuous mode [ 874.586896][ T9310] syzkaller0: entered allmulticast mode [ 874.606171][ T9304] tipc: Resetting bearer [ 874.639360][ T9304] tipc: Disabling bearer [ 874.756114][ T9318] netlink: 'syz.0.9899': attribute type 1 has an invalid length. [ 874.796564][ T9323] netlink: 'syz.0.9899': attribute type 1 has an invalid length. [ 875.541873][ T9377] syzkaller0: entered promiscuous mode [ 875.550126][ T9377] syzkaller0: entered allmulticast mode [ 875.754625][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 875.762653][ C0] lec:lec_tx_timeout: lec0 [ 876.179318][ T9426] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 876.273657][ T49] net_ratelimit: 27 callbacks suppressed [ 876.273676][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 876.301333][ T9436] netlink: 'syz.3.9929': attribute type 1 has an invalid length. [ 876.322610][ T9435] netlink: 'syz.1.9930': attribute type 1 has an invalid length. [ 876.325443][ T9439] xt_l2tp: invalid flags combination: 8 [ 876.421479][ T9446] x_tables: duplicate underflow at hook 3 [ 876.432481][ T9436] 8021q: adding VLAN 0 to HW filter on device bond3 [ 876.509764][ T6399] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 876.617671][ T9460] delete_channel: no stack [ 876.645473][T28611] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 876.701707][ T9467] __nla_validate_parse: 5 callbacks suppressed [ 876.701724][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9943'. [ 876.803311][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 876.869570][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9945'. [ 876.956225][ T9482] bond4 (unregistering): Released all slaves [ 877.025090][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 877.050217][ T9490] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9948'. [ 877.071995][ T9495] syzkaller0: entered promiscuous mode [ 877.083163][ T9495] syzkaller0: entered allmulticast mode [ 877.333156][T28611] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 877.372395][ T9515] 8021q: VLANs not supported on ipvlan1 [ 877.455543][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 877.603218][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 877.645560][ T9541] sctp: [Deprecated]: syz.2.9958 (pid 9541) Use of int in maxseg socket option. [ 877.645560][ T9541] Use struct sctp_assoc_value instead [ 877.713044][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 877.835889][ T1167] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 877.930740][ T9562] lo: left promiscuous mode [ 877.987046][ T9562] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 878.377189][ T9595] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.9974'. [ 878.564162][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9979'. [ 878.691687][ T9620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9982'. [ 878.750637][ T9625] netlink: 'syz.0.9983': attribute type 17 has an invalid length. [ 878.760169][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9983'. [ 878.770000][ T9625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9983'. [ 878.785788][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9983'. [ 878.871278][ T9632] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 879.238702][ T9669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9994'. [ 879.545382][ T9688] bridge0: port 1(batadv1) entered blocking state [ 879.552207][ T9688] bridge0: port 1(batadv1) entered disabled state [ 879.564024][ T9688] batadv1: entered allmulticast mode [ 879.571302][ T9688] batadv1: entered promiscuous mode [ 879.686664][ T9698] x_tables: duplicate underflow at hook 1 [ 879.887768][ T9735] set match dimension is over the limit! [ 880.042877][ T1167] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 880.052160][ T1167] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 880.463797][ T9742] bond1: entered promiscuous mode [ 880.469236][ T9742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 880.482511][ T9749] bridge4: entered promiscuous mode [ 880.495696][ T9749] bridge4: entered allmulticast mode [ 880.556143][ T9757] netlink: 'syz.2.10008': attribute type 83 has an invalid length. [ 880.727775][ T9770] team0: Cannot enslave team device to itself [ 880.805763][ T9780] netlink: 'syz.4.10019': attribute type 11 has an invalid length. [ 880.841087][ T9780] netlink: 'syz.4.10019': attribute type 12 has an invalid length. [ 881.115363][ T9804] batadv1: left allmulticast mode [ 881.120637][ T9804] batadv1: left promiscuous mode [ 881.126568][ T9804] bridge0: port 1(batadv1) entered disabled state [ 881.307805][ T74] net_ratelimit: 22 callbacks suppressed [ 881.307825][ T74] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 881.377058][ T9817] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.384347][ T9817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.406379][ T9817] tipc: New replicast peer: 255.255.255.255 [ 881.414511][ T9817] tipc: Enabled bearer , priority 10 [ 881.442867][T28616] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 881.565806][T10405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 881.665037][ T9830] veth7: entered promiscuous mode [ 881.681030][ T9830] netlink: 'syz.0.10035': attribute type 9 has an invalid length. [ 881.689888][ T2131] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 881.708808][ T9830] netlink: 'syz.0.10035': attribute type 11 has an invalid length. [ 881.722225][ T9830] netlink: 'syz.0.10035': attribute type 12 has an invalid length. [ 881.738481][ T9830] __nla_validate_parse: 46 callbacks suppressed [ 881.738497][ T9830] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.10035'. [ 881.766482][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10035'. [ 881.797476][ T9836] netlink: 'syz.3.10038': attribute type 13 has an invalid length. [ 881.805809][ T3938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 881.813230][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10038'. [ 881.828747][ T9836] netlink: 'syz.3.10038': attribute type 13 has an invalid length. [ 881.847423][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10038'. [ 881.933292][ T74] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 881.987573][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10042'. [ 882.042076][ T9855] : entered promiscuous mode [ 882.059197][ T9855] netlink: 'syz.2.10045': attribute type 1 has an invalid length. [ 882.093231][ T9855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 882.113784][ T3938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 882.226008][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 882.454588][ T9895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.535420][ T5445] tipc: Node number set to 333019947 [ 882.550312][ T9898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10051'. [ 882.583631][T28616] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 882.743689][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10053'. [ 882.923920][ T9924] tls_set_device_offload_rx: netdev not found [ 882.976215][ T9917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10055'. [ 883.057365][ T9935] netlink: 38 bytes leftover after parsing attributes in process `syz.4.10059'. [ 883.089905][ T9938] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.10060'. [ 883.218356][ T9940] bond4: entered promiscuous mode [ 883.225409][ T9940] 8021q: adding VLAN 0 to HW filter on device bond4 [ 883.250723][ T9940] bond4: (slave xfrm1): refused to change device type [ 883.316962][ T9945] syzkaller0: entered promiscuous mode [ 883.322482][ T9945] syzkaller0: entered allmulticast mode [ 883.547606][ T9964] vlan1: entered promiscuous mode [ 883.563461][ T9964] geneve1: entered promiscuous mode [ 883.573459][ T9964] vlan1: entered allmulticast mode [ 883.578600][ T9964] geneve1: entered allmulticast mode [ 883.703747][ T9976] Cannot find del_set index 1 as target [ 883.951612][ T9995] team_slave_0: entered promiscuous mode [ 883.957367][ T9995] team_slave_1: entered promiscuous mode [ 883.971802][ T9995] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 884.057567][T10003] veth1_macvtap: left promiscuous mode [ 884.442528][T10027] validate_nla: 2 callbacks suppressed [ 884.442547][T10027] netlink: 'syz.1.10089': attribute type 10 has an invalid length. [ 884.473643][T10027] syz_tun: entered promiscuous mode [ 884.493686][T10027] syz_tun: entered allmulticast mode [ 884.504340][T10027] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 884.537653][T10028] delete_channel: no stack [ 884.548251][T10027] netlink: 'syz.1.10089': attribute type 10 has an invalid length. [ 884.581411][T10027] bond0: left allmulticast mode [ 884.586977][T10027] bond_slave_0: left allmulticast mode [ 884.598182][T10027] bond_slave_1: left allmulticast mode [ 884.612327][T10027] syz_tun: left allmulticast mode [ 884.625102][T10027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.637606][T10027] team0: Port device bond0 added [ 884.801353][T10058] syzkaller0: entered promiscuous mode [ 884.808089][T10058] syzkaller0: entered allmulticast mode [ 884.817673][T10055] lo speed is unknown, defaulting to 1000 [ 885.040263][T10058] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 885.042469][T10070] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 885.055511][T10070] bond2: option packets_per_slave: allowed values 0 - 65535 [ 885.065904][T10070] bond2 (unregistering): Released all slaves [ 885.385558][T10403] bridge_slave_0: left allmulticast mode [ 885.391269][T10403] bridge_slave_0: left promiscuous mode [ 885.409018][T10403] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.574734][T10095] netlink: 'syz.3.10110': attribute type 4 has an invalid length. [ 886.231138][T10403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.240307][T10403] bond_slave_0: left promiscuous mode [ 886.252313][T10403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.262099][T10403] bond_slave_1: left promiscuous mode [ 886.269868][T10403] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 886.278524][T10403] batadv0: left promiscuous mode [ 886.288817][T10403] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 886.298834][T10403] bridge_slave_1: left promiscuous mode [ 886.307192][T10403] bond0 (unregistering): Released all slaves [ 886.407551][T10403] bond1 (unregistering): (slave veth3): Releasing active interface [ 886.415900][T10403] veth0_to_bond: entered promiscuous mode [ 886.424184][T10403] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 886.439023][T10403] bond1 (unregistering): (slave veth5): Releasing active interface [ 886.448630][T10403] bond1 (unregistering): Released all slaves [ 886.553241][T10403] bond2 (unregistering): Released all slaves [ 886.566564][T10403] bond3 (unregistering): Released all slaves [ 886.671805][T10403] bond4 (unregistering): Released all slaves [ 886.684008][T10403] bond5 (unregistering): Released all slaves [ 886.787745][T10403] bond6 (unregistering): (slave veth7): Releasing active interface [ 886.797602][T10403] bond6 (unregistering): Released all slaves [ 886.929801][T10109] __nla_validate_parse: 14 callbacks suppressed [ 886.929820][T10109] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.10111'. [ 887.044345][T10403] tipc: Disabling bearer [ 887.147278][T10403] tipc: Left network mode [ 887.202576][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10112'. [ 887.268327][T10119] netlink: 'syz.0.10114': attribute type 83 has an invalid length. [ 887.269706][T10114] geneve3: entered promiscuous mode [ 887.283961][ T11] block nbd3: Possible stuck request ffff888025a80000: control (read@0,1024B). Runtime 180 seconds [ 887.303512][ T11] block nbd3: Possible stuck request ffff888025a80200: control (read@1024,1024B). Runtime 180 seconds [ 887.314833][ T11] block nbd3: Possible stuck request ffff888025a80400: control (read@2048,1024B). Runtime 180 seconds [ 887.325927][ T11] block nbd3: Possible stuck request ffff888025a80600: control (read@3072,1024B). Runtime 180 seconds [ 887.385428][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10115'. [ 887.395648][T10118] netlink: 'syz.1.10115': attribute type 1 has an invalid length. [ 887.406319][T10118] netlink: 'syz.1.10115': attribute type 2 has an invalid length. [ 887.532962][T10412] net_ratelimit: 20 callbacks suppressed [ 887.532982][T10412] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 887.639104][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10121'. [ 887.667648][T28616] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 887.703219][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10121'. [ 887.737957][T10148] netlink: 'syz.2.10122': attribute type 21 has an invalid length. [ 887.766421][T10149] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10122'. [ 887.849068][T10148] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10122'. [ 887.884757][T28616] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 887.981296][T10158] netlink: 'syz.2.10126': attribute type 64 has an invalid length. [ 888.012357][T10155] veth5: entered allmulticast mode [ 888.050466][T10156] veth7: entered allmulticast mode [ 888.090591][T10166] tipc: Enabling of bearer rejected, failed to enable media [ 888.127956][T10159] tipc: Enabling of bearer rejected, failed to enable media [ 888.153860][ T2131] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 888.201108][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10128'. [ 888.230484][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10128'. [ 888.300343][T10175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10129'. [ 888.349315][T10175] netlink: 'syz.2.10129': attribute type 2 has an invalid length. [ 888.393630][T28616] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 888.451176][T10403] hsr_slave_0: left promiscuous mode [ 888.458009][T10403] hsr_slave_1: left promiscuous mode [ 888.466093][T10403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.480373][T10403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.493877][T10403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.502322][T10403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.557420][T10403] vlan0: left allmulticast mode [ 888.562314][T10403] veth0_vlan: left allmulticast mode [ 888.569482][T10403] vlan0: left promiscuous mode [ 888.574966][T10403] veth1_macvtap: left promiscuous mode [ 888.580621][T10403] veth0_macvtap: left promiscuous mode [ 888.587492][T10403] veth1_vlan: left promiscuous mode [ 888.593388][T10403] veth0_vlan: left promiscuous mode [ 889.213615][T10206] IPVS: length: 207 != 24 [ 889.275145][T10210] netlink: 'syz.1.10134': attribute type 1 has an invalid length. [ 889.518260][T10403] pimreg (unregistering): left allmulticast mode [ 889.999038][T10403] team_slave_1 (unregistering): left allmulticast mode [ 890.008313][T10403] team0 (unregistering): Port device team_slave_1 removed [ 890.044738][T10403] team_slave_0 (unregistering): left allmulticast mode [ 890.052261][T10403] team0 (unregistering): Port device team_slave_0 removed [ 890.347784][T10403] dummy0 (unregistering): left allmulticast mode [ 890.359859][T10403] team0 (unregistering): Port device dummy0 removed [ 890.381050][T10403] team0 (unregistering): left allmulticast mode [ 890.410940][T10184] netlink: 'syz.4.10130': attribute type 1 has an invalid length. [ 890.502914][T10412] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 890.569985][T10230] veth0: entered promiscuous mode [ 890.587999][T10229] veth0: left promiscuous mode [ 890.597040][T10228] syzkaller0: entered promiscuous mode [ 890.602599][T10228] syzkaller0: entered allmulticast mode [ 890.611748][T10228] TC_ACT_REPEAT abuse ? [ 890.689944][T10237] xt_cgroup: xt_cgroup: no path or classid specified [ 890.833147][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 890.997108][T10255] syzkaller0: entered promiscuous mode [ 891.017511][T10255] syzkaller0: entered allmulticast mode [ 891.073214][T10405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 891.147287][ T5201] udevd[5201]: worker [4147] /devices/virtual/block/nbd3 timeout; kill it [ 891.176896][ T5201] udevd[5201]: seq 40114 '/devices/virtual/block/nbd3' killed [ 891.222948][T28611] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 891.290717][T10278] tipc: Enabled bearer , priority 0 [ 891.299462][T10278] syzkaller0: entered promiscuous mode [ 891.306767][T10278] syzkaller0: entered allmulticast mode [ 891.320746][T10278] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 891.355317][T10266] netlink: 'syz.1.10154': attribute type 1 has an invalid length. [ 891.411977][T10278] tipc: Resetting bearer [ 891.427935][T10278] netlink: 'syz.4.10158': attribute type 11 has an invalid length. [ 891.504706][T10276] bond5: (slave bridge5): making interface the new active one [ 891.512682][T10276] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 891.536825][T10277] tipc: Resetting bearer [ 891.607055][T10277] tipc: Disabling bearer [ 891.619441][T10294] netlink: 'syz.2.10161': attribute type 2 has an invalid length. [ 891.782387][T10304] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.789992][T10304] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.815778][T10302] dvmrp6: entered allmulticast mode [ 891.854486][T10301] syzkaller0: entered promiscuous mode [ 891.871681][T10301] syzkaller0: entered allmulticast mode [ 891.947013][T10301] tipc: Enabled bearer , priority 0 [ 892.021431][T10318] __nla_validate_parse: 16 callbacks suppressed [ 892.021450][T10318] netlink: 576 bytes leftover after parsing attributes in process `syz.1.10169'. [ 892.146560][T10324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10173'. [ 892.164676][T10299] tipc: Resetting bearer [ 892.440898][T10299] tipc: Disabling bearer [ 892.573031][T28616] net_ratelimit: 2 callbacks suppressed [ 892.573050][T28616] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 892.801556][T10336] syzkaller0: entered promiscuous mode [ 892.808154][T10336] syzkaller0: entered allmulticast mode [ 892.861198][T10361] gre0: left promiscuous mode [ 892.953665][T10361] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.961347][T10361] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.983809][T10371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.088632][T10361] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 894.736216][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10181'. [ 894.829500][T10412] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 894.868707][T10397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10185'. [ 894.977112][T28616] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 895.060824][T10420] openvswitch: netlink: IP tunnel dst address not specified [ 895.089061][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10191'. [ 895.103842][ T3938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 895.184279][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10193'. [ 895.232232][T10403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 895.363229][T10403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 895.385003][T10447] syzkaller0: entered promiscuous mode [ 895.400723][T10447] syzkaller0: entered allmulticast mode [ 895.483229][ T1158] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 896.051281][T10487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10208'. [ 896.138658][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10211'. [ 896.177678][T10494] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 896.200605][T10494] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 896.215067][T10494] gretap3: entered promiscuous mode [ 896.224468][T10494] gretap3: entered allmulticast mode [ 896.254112][T10505] netlink: 25 bytes leftover after parsing attributes in process `syz.1.10214'. [ 896.286656][T10505] netlink: 'syz.1.10214': attribute type 4 has an invalid length. [ 896.406333][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10217'. [ 896.454618][T10498] syzkaller0: entered promiscuous mode [ 896.462358][T10498] syzkaller0: entered allmulticast mode [ 896.606762][T10528] netlink: 'syz.0.10221': attribute type 33 has an invalid length. [ 898.063515][ T2131] net_ratelimit: 8 callbacks suppressed [ 898.063534][ T2131] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 898.198866][T10540] __nla_validate_parse: 1 callbacks suppressed [ 898.198883][T10540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10224'. [ 898.216282][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10226'. [ 898.223146][ T2131] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 898.251186][T10539] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.258382][T10539] bridge0: port 2(bridge_slave_1) entered listening state [ 898.265823][T10539] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.272983][T10539] bridge0: port 1(bridge_slave_0) entered listening state [ 898.364623][T28611] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 898.492920][T10403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 898.508380][T10563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10229'. [ 898.637533][T10576] netlink: 'syz.4.10233': attribute type 1 has an invalid length. [ 898.656586][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 898.680506][T10576] netlink: 'syz.4.10233': attribute type 1 has an invalid length. [ 898.706689][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10233'. [ 898.782994][ T74] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 898.857416][T10589] netlink: 'syz.1.10236': attribute type 32 has an invalid length. [ 898.879589][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10237'. [ 898.914962][ T1158] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 899.051261][T10594] bond5: entered promiscuous mode [ 899.071756][T10594] 8021q: adding VLAN 0 to HW filter on device bond5 [ 899.095404][ T1158] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 899.305966][T10622] sctp: [Deprecated]: syz.2.10242 (pid 10622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 899.305966][T10622] Use struct sctp_sack_info instead [ 899.322529][ T1158] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 899.383015][T10626] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 899.424670][ T2131] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 899.447666][T10627] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.454850][T10627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.483381][T10627] bridge0: entered allmulticast mode [ 899.518168][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10243'. [ 899.546062][T10630] lo speed is unknown, defaulting to 1000 [ 899.700779][T10650] IPVS: set_ctl: invalid protocol: 2 100.1.1.0:20004 [ 899.705476][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10249'. [ 899.741694][T10654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10251'. [ 899.784612][T10653] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.811743][T10653] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.014866][T10661] syzkaller1: entered promiscuous mode [ 900.020522][T10661] syzkaller1: entered allmulticast mode [ 900.573627][T10695] netlink: 'syz.1.10267': attribute type 1 has an invalid length. [ 900.623529][T10702] netlink: 'syz.4.10265': attribute type 1 has an invalid length. [ 900.645812][T10702] netlink: 'syz.4.10265': attribute type 2 has an invalid length. [ 900.655014][T10702] netlink: 'syz.4.10265': attribute type 1 has an invalid length. [ 900.664213][T10695] veth7: entered promiscuous mode [ 900.936472][T10724] syz_tun: entered allmulticast mode [ 900.968679][T10728] netlink: 'syz.0.10274': attribute type 1 has an invalid length. [ 900.994780][T10722] syz_tun: left allmulticast mode [ 901.029787][T10728] pimreg3: entered allmulticast mode [ 901.076500][T10732] sctp: [Deprecated]: syz.4.10275 (pid 10732) Use of int in maxseg socket option. [ 901.076500][T10732] Use struct sctp_assoc_value instead [ 901.150467][T10735] tipc: New replicast peer: 255.255.255.255 [ 901.156933][T10735] tipc: Enabled bearer , priority 10 [ 901.245989][T10738] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10277'. [ 901.303325][T10738] block nbd4: Unsupported socket: should be TCP or UNIX. [ 901.380548][T10738] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10277'. [ 901.466652][T10756] netlink: 'syz.0.10283': attribute type 1 has an invalid length. [ 901.519057][T10762] netlink: 'syz.1.10285': attribute type 1 has an invalid length. [ 901.527584][T10756] bond2: entered promiscuous mode [ 901.536084][T10756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 901.647189][T10771] tipc: Failed to remove unknown binding: 66,0,0/3054842643:283393736/283393737 [ 901.707756][T10771] tipc: Failed to remove unknown binding: 66,0,0/3054842643:283393736/283393737 [ 901.979420][T10797] netlink: 'syz.2.10295': attribute type 1 has an invalid length. [ 901.987792][T10797] netlink: 'syz.2.10295': attribute type 2 has an invalid length. [ 901.999507][T10797] netlink: 'syz.2.10295': attribute type 1 has an invalid length. [ 902.034886][T10797] netlink: 'syz.2.10295': attribute type 15 has an invalid length. [ 902.068459][T10801] ip6gre0: Master is either lo or non-ether device [ 902.166821][T10805] tap0: tun_chr_ioctl cmd 1074025673 [ 902.172355][T10807] tap0: tun_chr_ioctl cmd 1074025672 [ 902.178162][T10807] tap0: ignored: set checksum disabled [ 902.183998][T10808] tap0: tun_chr_ioctl cmd 1074025672 [ 902.189292][T10808] tap0: ignored: set checksum disabled [ 902.274876][ T5445] tipc: Node number set to 3628857363 [ 902.294719][T10819] netlink: 'syz.1.10302': attribute type 2 has an invalid length. [ 902.479652][T10829] sctp: [Deprecated]: syz.1.10305 (pid 10829) Use of int in max_burst socket option. [ 902.479652][T10829] Use struct sctp_assoc_value instead [ 902.643697][T10841] 8021q: VLANs not supported on ip6_vti0 [ 902.989810][T10862] tipc: Enabling of bearer rejected, failed to enable media [ 903.072882][T10412] net_ratelimit: 27 callbacks suppressed [ 903.072901][T10412] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 903.149081][T10879] netlink: 'syz.0.10315': attribute type 10 has an invalid length. [ 903.164615][T10877] vlan2: entered allmulticast mode [ 903.180320][T10877] gretap0: entered allmulticast mode [ 903.226398][T10879] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 903.304741][T10881] syzkaller1: entered promiscuous mode [ 903.310217][T10881] syzkaller1: entered allmulticast mode [ 903.329008][T10412] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 903.464038][T10893] __nla_validate_parse: 14 callbacks suppressed [ 903.464055][T10893] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10321'. [ 903.489320][T10893] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10321'. [ 903.554611][ T74] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 903.573943][T10901] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10324'. [ 903.684348][ T1158] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 903.803700][T28611] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 903.822159][T10921] syzkaller0: entered promiscuous mode [ 903.852661][T10921] syzkaller0: entered allmulticast mode [ 903.924689][ T1158] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 904.043562][ T2131] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 904.194728][ T2131] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 904.215906][T10952] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10337'. [ 904.319895][T10963] xt_hashlimit: overflow, rate too high: 0 [ 904.326935][ T2131] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 904.387450][T10965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10342'. [ 904.443126][ T3938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 904.457409][T10975] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20000 [ 904.521102][T10974] syzkaller0: entered promiscuous mode [ 904.537940][T10974] syzkaller0: entered allmulticast mode [ 904.687776][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10348'. [ 904.757526][ T5833] block nbd4: Receive control failed (result -1) [ 904.791895][T10996] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10351'. [ 904.803970][ T5201] udevd[5201]: worker [5418] /devices/virtual/block/nbd1 is taking a long time [ 904.813536][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10351'. [ 904.824662][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10348'. [ 904.838836][T10996] : entered promiscuous mode [ 904.867509][ T5833] block nbd5: Receive control failed (result -1) [ 905.024013][T11008] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 905.046103][T11008] bond6 (unregistering): Released all slaves [ 905.118478][T11009] syzkaller0: entered promiscuous mode [ 905.124006][T11009] syzkaller0: entered allmulticast mode [ 905.569019][T11024] syzkaller0: entered promiscuous mode [ 905.575072][T11024] syzkaller0: entered allmulticast mode [ 905.883904][T11029] netlink: 192 bytes leftover after parsing attributes in process `syz.1.10361'. [ 905.903378][T11029] IPVS: ip_vs_add_dest(): server weight less than zero [ 905.986018][T11037] netlink: 'syz.1.10363': attribute type 1 has an invalid length. [ 906.386849][T11065] syzkaller0: entered promiscuous mode [ 906.392454][T11065] syzkaller0: entered allmulticast mode [ 906.912061][T11098] netlink: 'syz.0.10381': attribute type 3 has an invalid length. [ 906.935107][T11101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.492140][T11147] netlink: 'syz.0.10394': attribute type 5 has an invalid length. [ 907.515607][T11146] netlink: 'syz.0.10394': attribute type 5 has an invalid length. [ 907.931656][T11176] syzkaller0: entered promiscuous mode [ 907.937787][T11176] syzkaller0: entered allmulticast mode [ 908.134092][T28611] net_ratelimit: 31 callbacks suppressed [ 908.134111][T28611] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 908.204386][T11163] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 908.262952][T10403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 908.329102][T11203] ================================================================== [ 908.337192][T11203] BUG: KASAN: slab-use-after-free in macvlan_forward_source+0x5d8/0x700 [ 908.345526][T11203] Read of size 2 at addr ffff88806b81adfc by task syz.1.10412/11203 [ 908.353507][T11203] [ 908.355840][T11203] CPU: 0 UID: 0 PID: 11203 Comm: syz.1.10412 Not tainted syzkaller #0 PREEMPT(full) [ 908.355863][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 908.355874][T11203] Call Trace: [ 908.355882][T11203] [ 908.355890][T11203] dump_stack_lvl+0xe8/0x150 [ 908.355916][T11203] print_report+0xba/0x230 [ 908.355937][T11203] ? macvlan_forward_source+0x5d8/0x700 [ 908.355960][T11203] kasan_report+0x117/0x150 [ 908.355979][T11203] ? unwind_next_frame+0xa5/0x23c0 [ 908.356000][T11203] ? macvlan_forward_source+0x5d8/0x700 [ 908.356027][T11203] macvlan_forward_source+0x5d8/0x700 [ 908.356054][T11203] macvlan_handle_frame+0x1ba/0x12e0 [ 908.356080][T11203] ? __pfx_macvlan_handle_frame+0x10/0x10 [ 908.356101][T11203] __netif_receive_skb_core+0x98f/0x30a0 [ 908.356123][T11203] ? __kernel_text_address+0xd/0x30 [ 908.356146][T11203] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 908.356172][T11203] ? __lock_acquire+0x6b5/0x2cf0 [ 908.356200][T11203] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 908.356221][T11203] ? stack_depot_save_flags+0x33/0x810 [ 908.356253][T11203] ? netif_receive_skb+0x102/0xbb0 [ 908.356278][T11203] ? netif_receive_skb+0x102/0xbb0 [ 908.356305][T11203] netif_receive_skb+0x1fe/0xbb0 [ 908.356334][T11203] ? __pfx_netif_receive_skb+0x10/0x10 [ 908.356363][T11203] ? tun_rx_batched+0x185/0x790 [ 908.356382][T11203] tun_rx_batched+0x1de/0x790 [ 908.356403][T11203] ? __pfx_tun_rx_batched+0x10/0x10 [ 908.356421][T11203] ? tun_get_user+0x2669/0x3dd0 [ 908.356439][T11203] ? tun_get_user+0x2669/0x3dd0 [ 908.356459][T11203] ? tun_get_user+0x2354/0x3dd0 [ 908.356476][T11203] ? __local_bh_enable_ip+0xd0/0x130 [ 908.356495][T11203] ? tun_get_user+0x2669/0x3dd0 [ 908.356511][T11203] tun_get_user+0x2a78/0x3dd0 [ 908.356545][T11203] ? aa_file_perm+0x440/0x1630 [ 908.356569][T11203] ? __pfx_tun_get_user+0x10/0x10 [ 908.356587][T11203] ? __lock_acquire+0x6b5/0x2cf0 [ 908.356618][T11203] ? ref_tracker_alloc+0x363/0x4d0 [ 908.356642][T11203] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 908.356665][T11203] ? tun_get+0x1c/0x2f0 [ 908.356682][T11203] ? tun_get+0x1c/0x2f0 [ 908.356701][T11203] ? tun_get+0x1c/0x2f0 [ 908.356718][T11203] ? tun_get+0x1c/0x2f0 [ 908.356737][T11203] tun_chr_write_iter+0x113/0x200 [ 908.356757][T11203] vfs_write+0x61d/0xb90 [ 908.356785][T11203] ? __pfx_vfs_write+0x10/0x10 [ 908.356814][T11203] ? __fget_files+0x2a/0x420 [ 908.356837][T11203] ksys_write+0x150/0x270 [ 908.356863][T11203] ? __pfx_ksys_write+0x10/0x10 [ 908.356892][T11203] do_syscall_64+0xe2/0xf80 [ 908.356911][T11203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.356930][T11203] ? trace_irq_disable+0x37/0x100 [ 908.356948][T11203] ? clear_bhb_loop+0x60/0xb0 [ 908.356968][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.356986][T11203] RIP: 0033:0x7f7ca055b78e [ 908.357003][T11203] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 908.357021][T11203] RSP: 002b:00007f7ca147bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 908.357041][T11203] RAX: ffffffffffffffda RBX: 00007f7ca147c6c0 RCX: 00007f7ca055b78e [ 908.357055][T11203] RDX: 0000000000000036 RSI: 0000200000000300 RDI: 00000000000000c8 [ 908.357069][T11203] RBP: 00007f7ca0608c1f R08: 0000000000000000 R09: 0000000000000000 [ 908.357081][T11203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.357093][T11203] R13: 00007f7ca0816218 R14: 00007f7ca0816180 R15: 00007ffc9ffdfc78 [ 908.357115][T11203] [ 908.357122][T11203] [ 908.698434][T11203] Allocated by task 11201: [ 908.702832][T11203] kasan_save_track+0x3e/0x80 [ 908.707508][T11203] __kasan_kmalloc+0x93/0xb0 [ 908.712079][T11203] __kvmalloc_node_noprof+0x59a/0x8d0 [ 908.717434][T11203] alloc_netdev_mqs+0xa6/0x11b0 [ 908.722271][T11203] rtnl_create_link+0x31f/0xd70 [ 908.727107][T11203] rtnl_newlink_create+0x277/0xb70 [ 908.732199][T11203] rtnl_newlink+0x1666/0x1be0 [ 908.736857][T11203] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 908.741773][T11203] netlink_rcv_skb+0x232/0x4b0 [ 908.746518][T11203] netlink_unicast+0x80f/0x9b0 [ 908.751267][T11203] netlink_sendmsg+0x813/0xb40 [ 908.756008][T11203] ____sys_sendmsg+0xa68/0xad0 [ 908.760758][T11203] ___sys_sendmsg+0x2a5/0x360 [ 908.765418][T11203] __x64_sys_sendmsg+0x1bd/0x2a0 [ 908.770339][T11203] do_syscall_64+0xe2/0xf80 [ 908.774821][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.780696][T11203] [ 908.783002][T11203] Freed by task 11201: [ 908.787045][T11203] kasan_save_track+0x3e/0x80 [ 908.791698][T11203] kasan_save_free_info+0x46/0x50 [ 908.796708][T11203] __kasan_slab_free+0x5c/0x80 [ 908.801450][T11203] kfree+0x1be/0x650 [ 908.805330][T11203] rtnl_newlink_create+0x394/0xb70 [ 908.810424][T11203] rtnl_newlink+0x1666/0x1be0 [ 908.815083][T11203] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 908.820001][T11203] netlink_rcv_skb+0x232/0x4b0 [ 908.824743][T11203] netlink_unicast+0x80f/0x9b0 [ 908.829491][T11203] netlink_sendmsg+0x813/0xb40 [ 908.834238][T11203] ____sys_sendmsg+0xa68/0xad0 [ 908.838988][T11203] ___sys_sendmsg+0x2a5/0x360 [ 908.843646][T11203] __x64_sys_sendmsg+0x1bd/0x2a0 [ 908.848573][T11203] do_syscall_64+0xe2/0xf80 [ 908.853057][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.858938][T11203] [ 908.861240][T11203] The buggy address belongs to the object at ffff88806b81a000 [ 908.861240][T11203] which belongs to the cache kmalloc-cg-4k of size 4096 [ 908.875532][T11203] The buggy address is located 3580 bytes inside of [ 908.875532][T11203] freed 4096-byte region [ffff88806b81a000, ffff88806b81b000) [ 908.889483][T11203] [ 908.891792][T11203] The buggy address belongs to the physical page: [ 908.898192][T11203] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6b818 [ 908.906934][T11203] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 908.915410][T11203] memcg:ffff888075c43401 [ 908.919624][T11203] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 908.927147][T11203] page_type: f5(slab) [ 908.931113][T11203] raw: 00fff00000000040 ffff88813fe30500 ffffea0000a62c00 dead000000000002 [ 908.939676][T11203] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888075c43401 [ 908.948238][T11203] head: 00fff00000000040 ffff88813fe30500 ffffea0000a62c00 dead000000000002 [ 908.956888][T11203] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888075c43401 [ 908.965539][T11203] head: 00fff00000000003 ffffea0001ae0601 00000000ffffffff 00000000ffffffff [ 908.974189][T11203] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 908.982834][T11203] page dumped because: kasan: bad access detected [ 908.989229][T11203] page_owner tracks the page as allocated [ 908.994918][T11203] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5201, tgid 5201 (udevd), ts 117670770855, free_ts 117664504236 [ 909.015818][T11203] post_alloc_hook+0x228/0x280 [ 909.020563][T11203] get_page_from_freelist+0x24dc/0x2580 [ 909.026092][T11203] __alloc_frozen_pages_noprof+0x18d/0x380 [ 909.031889][T11203] alloc_pages_mpol+0x232/0x4a0 [ 909.036722][T11203] allocate_slab+0x86/0x3a0 [ 909.041214][T11203] ___slab_alloc+0xd82/0x1760 [ 909.045871][T11203] __slab_alloc+0x65/0x100 [ 909.050268][T11203] __kvmalloc_node_noprof+0x673/0x8d0 [ 909.055617][T11203] seq_read_iter+0x202/0xe10 [ 909.060192][T11203] vfs_read+0x582/0xa70 [ 909.064329][T11203] ksys_read+0x150/0x270 [ 909.068558][T11203] do_syscall_64+0xe2/0xf80 [ 909.073040][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.078914][T11203] page last free pid 5201 tgid 5201 stack trace: [ 909.085216][T11203] __free_frozen_pages+0xbf8/0xd70 [ 909.090307][T11203] __put_partials+0x146/0x170 [ 909.094966][T11203] __slab_free+0x294/0x320 [ 909.099365][T11203] qlist_free_all+0x97/0x100 [ 909.103941][T11203] kasan_quarantine_reduce+0x148/0x160 [ 909.109383][T11203] __kasan_slab_alloc+0x22/0x80 [ 909.114213][T11203] kmem_cache_alloc_noprof+0x370/0x6e0 [ 909.119659][T11203] getname_flags+0xb7/0x540 [ 909.124154][T11203] do_sys_openat2+0xca/0x220 [ 909.128726][T11203] __x64_sys_openat+0x138/0x170 [ 909.133555][T11203] do_syscall_64+0xe2/0xf80 [ 909.138039][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.143912][T11203] [ 909.146215][T11203] Memory state around the buggy address: [ 909.151822][T11203] ffff88806b81ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 909.159864][T11203] ffff88806b81ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 909.167902][T11203] >ffff88806b81ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 909.175939][T11203] ^ [ 909.183891][T11203] ffff88806b81ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 909.191930][T11203] ffff88806b81ae80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 909.199966][T11203] ================================================================== [ 909.208155][T11203] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 909.215345][T11203] CPU: 0 UID: 0 PID: 11203 Comm: syz.1.10412 Not tainted syzkaller #0 PREEMPT(full) [ 909.224800][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 909.234853][T11203] Call Trace: [ 909.238120][T11203] [ 909.241035][T11203] vpanic+0x1e0/0x670 [ 909.245006][T11203] panic+0xc5/0xd0 [ 909.248716][T11203] ? __pfx_panic+0x10/0x10 [ 909.253118][T11203] ? macvlan_forward_source+0x5d8/0x700 [ 909.258651][T11203] ? macvlan_forward_source+0x5d8/0x700 [ 909.264180][T11203] check_panic_on_warn+0x89/0xb0 [ 909.269103][T11203] ? macvlan_forward_source+0x5d8/0x700 [ 909.274636][T11203] end_report+0x6f/0x140 [ 909.278862][T11203] kasan_report+0x128/0x150 [ 909.283351][T11203] ? unwind_next_frame+0xa5/0x23c0 [ 909.288458][T11203] ? macvlan_forward_source+0x5d8/0x700 [ 909.293996][T11203] macvlan_forward_source+0x5d8/0x700 [ 909.299360][T11203] macvlan_handle_frame+0x1ba/0x12e0 [ 909.304632][T11203] ? __pfx_macvlan_handle_frame+0x10/0x10 [ 909.310336][T11203] __netif_receive_skb_core+0x98f/0x30a0 [ 909.315950][T11203] ? __kernel_text_address+0xd/0x30 [ 909.321132][T11203] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 909.327276][T11203] ? __lock_acquire+0x6b5/0x2cf0 [ 909.332204][T11203] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 909.338255][T11203] ? stack_depot_save_flags+0x33/0x810 [ 909.343705][T11203] ? netif_receive_skb+0x102/0xbb0 [ 909.348803][T11203] ? netif_receive_skb+0x102/0xbb0 [ 909.353902][T11203] netif_receive_skb+0x1fe/0xbb0 [ 909.358836][T11203] ? __pfx_netif_receive_skb+0x10/0x10 [ 909.364283][T11203] ? tun_rx_batched+0x185/0x790 [ 909.369116][T11203] tun_rx_batched+0x1de/0x790 [ 909.373778][T11203] ? __pfx_tun_rx_batched+0x10/0x10 [ 909.378958][T11203] ? tun_get_user+0x2669/0x3dd0 [ 909.383791][T11203] ? tun_get_user+0x2669/0x3dd0 [ 909.388622][T11203] ? tun_get_user+0x2354/0x3dd0 [ 909.393459][T11203] ? __local_bh_enable_ip+0xd0/0x130 [ 909.398727][T11203] ? tun_get_user+0x2669/0x3dd0 [ 909.403558][T11203] tun_get_user+0x2a78/0x3dd0 [ 909.408224][T11203] ? aa_file_perm+0x440/0x1630 [ 909.412971][T11203] ? __pfx_tun_get_user+0x10/0x10 [ 909.417979][T11203] ? __lock_acquire+0x6b5/0x2cf0 [ 909.422909][T11203] ? ref_tracker_alloc+0x363/0x4d0 [ 909.428016][T11203] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 909.433463][T11203] ? tun_get+0x1c/0x2f0 [ 909.437600][T11203] ? tun_get+0x1c/0x2f0 [ 909.441736][T11203] ? tun_get+0x1c/0x2f0 [ 909.445873][T11203] ? tun_get+0x1c/0x2f0 [ 909.450013][T11203] tun_chr_write_iter+0x113/0x200 [ 909.455018][T11203] vfs_write+0x61d/0xb90 [ 909.459249][T11203] ? __pfx_vfs_write+0x10/0x10 [ 909.464003][T11203] ? __fget_files+0x2a/0x420 [ 909.468578][T11203] ksys_write+0x150/0x270 [ 909.472894][T11203] ? __pfx_ksys_write+0x10/0x10 [ 909.477734][T11203] do_syscall_64+0xe2/0xf80 [ 909.482221][T11203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.488268][T11203] ? trace_irq_disable+0x37/0x100 [ 909.493275][T11203] ? clear_bhb_loop+0x60/0xb0 [ 909.497933][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.503808][T11203] RIP: 0033:0x7f7ca055b78e [ 909.508207][T11203] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 909.527798][T11203] RSP: 002b:00007f7ca147bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 909.536196][T11203] RAX: ffffffffffffffda RBX: 00007f7ca147c6c0 RCX: 00007f7ca055b78e [ 909.544151][T11203] RDX: 0000000000000036 RSI: 0000200000000300 RDI: 00000000000000c8 [ 909.552105][T11203] RBP: 00007f7ca0608c1f R08: 0000000000000000 R09: 0000000000000000 [ 909.560058][T11203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.568008][T11203] R13: 00007f7ca0816218 R14: 00007f7ca0816180 R15: 00007ffc9ffdfc78 [ 909.575969][T11203] [ 909.579313][T11203] Kernel Offset: disabled [ 909.583616][T11203] Rebooting in 86400 seconds..