last executing test programs: 1.564072534s ago: executing program 2 (id=9284): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000680)={{r0, &(0x7f0000000100)='\'\\]^\x00', 0x200000, &(0x7f00000001c0)={@align=0x6, {0xe8e, 0x8, 0x6, 0xa}}, 0x0, &(0x7f0000000340)={@_ha_fsid}, &(0x7f00000005c0)=0x3}, {[0x0, 0x9, 0x3, 0x10001]}, 0xb8, 0xd, &(0x7f0000000640)=""/13}) connect$bt_sco(r1, &(0x7f0000000700), 0x8) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@generic="299a50bdc19377268b5707eafb"]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0xc001) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0xfe, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x8000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) (rerun: 32) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0xffffffffffffffd7, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20044020}, 0x20000014) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x90}}, 0x4000080) (async) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r8, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r8, &(0x7f0000000700)="480f27c3c3a70bdb84", 0x9, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r9, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008090}, 0x40016) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async, rerun: 64) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) listen(0xffffffffffffffff, 0x4000000) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x0, @mcast1, 0x30}}, 0x0, 0x0, 0x7, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) socket$netlink(0x10, 0x3, 0x8000000004) 1.486765102s ago: executing program 1 (id=9285): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.288589525s ago: executing program 0 (id=9289): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000000c0)={@nfc_llcp={0x27, r1, 0x1, 0x7, 0xc, 0x80, "3de3b47fbb4d5af21449806eaec0b50703954e94790ffab24d7d826c75f5aed94f07e95de71a62076710494a49730906af05066df4895fc9830966eb0224d4", 0x25}, {&(0x7f0000000040)=""/23, 0x17}, &(0x7f0000000080), 0x14}, 0xa0) r2 = socket$inet6_sctp(0xa, 0xbfbb944b8bba6648, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xb2, "5831ef2f451dd081635cf8efc6afa1f37bc90d6b9d9f4b501b7612d6405327e511499e7c02a6a96b73b509163e55f3db7e51b9bb511c4a4eb0939fcdaf17ee22a6ea50a7ff93c1a22249372dce35066761edac337ff282c161290f6916e1882436d28633ad83c06c3aab464317499747fd2ad64f28190587b6ea5abb0e47d25ace191d9c228978e48d11060254cbcccd4ed204039babcc90b7007579d8209269565f84b755e564540365aa491c45f0d7f322"}, &(0x7f0000000240)=0xba) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e24, 0x8000, @mcast2, 0x3}}, 0xc657, 0x8, 0x4000, 0x3, 0x8}, &(0x7f0000000340)=0x98) r5 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r5, 0xa89d7000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/pid_for_children\x00') r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r6) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r8, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24044050) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r5, 0xc040583f, &(0x7f0000000600)={{@_ha_fsid={[0x9, 0x8]}, {0xffff, 0x5, 0x54b93b9b, 0x10001}}, {{[0x7, 0x7, 0x0, 0x7]}, 0x0, 0x1, 0x776b, 0x0, &(0x7f0000000540)=[{{@_ha_fsid={[0x1, 0x8f1]}, {0x306, 0x4, 0x2daf, 0x1}}, 0x4, 0x0, 'nbd\x00'}, {{@align=0xe3, {0x968, 0x1, 0x67, 0x6}}, 0x1, 0x0, 'nbd\x00'}, {{@align=0xfffffffffffffffb, {0xc000, 0x9, 0x0, 0x7}}, 0x4, 0x0, 'ns/pid_for_children\x00'}, {{@align=0x800, {0x0, 0x661, 0xfffffffc, 0x4}}, 0x0, 0x0, '\x00'}]}}) ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, &(0x7f0000000640)) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x74, r9, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x74}}, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x10c, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}, @CTA_TUPLE_MASTER={0x28, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x4, 0x8, 0xfffffffb, 0x8, 0xfffffffc, 0x8001, 0x3, 0x3, 0x6]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000}, 0x24000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSGROWFSRT(r10, 0x40105870, &(0x7f0000000a00)={0x5e, 0x3}) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x25, 0x10, @void}, 0x10) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r11}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000000ac0)={r4, 0x5}, &(0x7f0000000b00)=0x8) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = openat$cgroup_ro(r12, &(0x7f0000000b40)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000d80)={'ip_vti0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x22, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8da, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0xd, 0x9, 0x9, 0xfffffffffffffff4, 0x800000000000000e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_val={0x18, 0x7, 0x2, 0x0, r15, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000d00)=""/105, 0x41000, 0x0, '\x00', r16, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000e00)={0x3, 0xe, 0x400, 0x9b1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r15, r15, r15, r12, r15], 0x0, 0x10, 0xace}, 0x94) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f0000000f40)={0x1, 0x9d}) sendmsg$IEEE802154_DISASSOCIATE_REQ(r14, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x78}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x300}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001080)={r13, 0x101, 0x6, 0x7000000, 0x0, 0x200}, &(0x7f00000010c0)=0x14) 1.278756992s ago: executing program 4 (id=9290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a010200e5000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c000140000000000000000808000540"], 0xf0}}, 0x24000080) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xe, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.228193042s ago: executing program 3 (id=9291): r0 = socket(0x10, 0x803, 0x9) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.168051085s ago: executing program 2 (id=9292): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf2d, 0x5f}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7d47a5d9f3df66130960c9269a"}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="380000000100be", 0x7) 1.143305125s ago: executing program 0 (id=9293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004091) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x53}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x24004000}, 0x8840) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x8080) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x108, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9e}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xbb}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20}, 0x840) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4044) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000980), &(0x7f00000009c0)=0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0], 0x0, 0x85, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e40)={'ip6_vti0\x00', &(0x7f0000000dc0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x3, 0x6, 0x9, @remote, @private1, 0x8, 0x40, 0x2, 0x9}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={0xffffffffffffffff, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000ec0)=[0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0], 0x0, 0xb5, &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0x12, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001200)={'ip6_vti0\x00', &(0x7f0000001180)={'ip6tnl0\x00', 0x0, 0x2f, 0x10, 0x2, 0x0, 0x3b, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x27, 0x40, 0xc, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000012c0)={'syztnl2\x00', &(0x7f0000001240)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x8, 0xfffffffc, 0x4, @loopback, @remote, 0x7, 0x8000, 0x401, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000001380)=[0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x12, &(0x7f0000001400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0xd7, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001640)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000016c0)={'syztnl0\x00', &(0x7f0000001680)={'syztnl0\x00', 0x0, 0x711, 0x8, 0x7, 0x1, {{0x8, 0x4, 0x1, 0x17, 0x20, 0x65, 0x0, 0xc, 0x2f, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xfb, 0x1, 0x3, [{@multicast2, 0xfffffd24}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001700)={'ip6_vti0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={0xffffffffffffffff, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000017c0)=[0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000001800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001840), &(0x7f0000001880), 0x8, 0x52, 0x8, 0x8, &(0x7f00000018c0)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000001cc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001a40)={0x23c, r9, 0x202, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x30}, 0x8000) 1.075633272s ago: executing program 1 (id=9294): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x34}, 0x1, 0x0, 0x500, 0x8000}, 0x8000) 1.020305156s ago: executing program 3 (id=9295): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x400c445}, 0x0) 1.019036115s ago: executing program 2 (id=9296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e22, @local}], 0x1) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x50bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x8, 0xfff2}, {0x1, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x894}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0x0, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x80}]}}]}, 0x4c}}, 0x800) 997.275295ms ago: executing program 0 (id=9297): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000280)={r5}, &(0x7f0000000340)=0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0x277, 0x100}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 992.915199ms ago: executing program 4 (id=9298): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85000000750000005df3030304c952e41318a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85000000750000005df3030304c952e41318a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x3, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012dbd700000dcdf254500000008000100706369001100020030d29fca86a3831b0946f23030303830303a3130a1d70cd099773b9585e61f172e300000000008008e0001000000f872d0b0f7f1256dfb3cc55a1e409571b0c03ad4985b"], 0x38}, 0x1, 0x0, 0x0, 0x4004084}, 0x24000850) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012dbd700000dcdf254500000008000100706369001100020030d29fca86a3831b0946f23030303830303a3130a1d70cd099773b9585e61f172e300000000008008e0001000000f872d0b0f7f1256dfb3cc55a1e409571b0c03ad4985b"], 0x38}, 0x1, 0x0, 0x0, 0x4004084}, 0x24000850) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800022a7ca761774ac286e914316ece2279f02b07c7941aeebd84df9ca41af7790718c3b5f87ff002eb8b5bd3"], 0x7c}}, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r3], 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000200), &(0x7f0000000140)=@udp6=r6, 0x3}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000200), &(0x7f0000000140)=@udp6=r6, 0x3}, 0x20) r7 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x24, &(0x7f0000000480)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x17}}, 0x8) (async) setsockopt$inet_mreq(r8, 0x0, 0x24, &(0x7f0000000480)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x17}}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x11, r9, 0x0) ioctl$TUNGETVNETBE(r9, 0x800454df, &(0x7f0000000440)) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xfffffffffffffe27, &(0x7f0000000000)={&(0x7f0000000280)=@deltclass={0x0, 0x29, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x8, 0xf}, {0x10, 0xc}, {0x8, 0x8}}, [@TCA_RATE={0x0, 0x5, {0xe7, 0xd}}, @tclass_kind_options=@c_red, @tclass_kind_options=@c_drr={{}, {0x0, 0x2, @TCA_DRR_QUANTUM={0x0, 0x1, 0xfffffffe}}}, @TCA_RATE={0x0, 0x5, {0xc0, 0x72}}, @TCA_RATE={0x0, 0x5, {0x0, 0x8}}, @TCA_RATE={0x0, 0x5, {0x40, 0xb}}, @TCA_RATE={0x0, 0x5, {0xdf, 0xc}}, @TCA_RATE={0x0, 0x5, {0xd4, 0x72}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x48090) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xfffffffffffffe27, &(0x7f0000000000)={&(0x7f0000000280)=@deltclass={0x0, 0x29, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x8, 0xf}, {0x10, 0xc}, {0x8, 0x8}}, [@TCA_RATE={0x0, 0x5, {0xe7, 0xd}}, @tclass_kind_options=@c_red, @tclass_kind_options=@c_drr={{}, {0x0, 0x2, @TCA_DRR_QUANTUM={0x0, 0x1, 0xfffffffe}}}, @TCA_RATE={0x0, 0x5, {0xc0, 0x72}}, @TCA_RATE={0x0, 0x5, {0x0, 0x8}}, @TCA_RATE={0x0, 0x5, {0x40, 0xb}}, @TCA_RATE={0x0, 0x5, {0xdf, 0xc}}, @TCA_RATE={0x0, 0x5, {0xd4, 0x72}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x48090) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0x7d4165c9) (async) listen(r10, 0x7d4165c9) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) 928.52825ms ago: executing program 1 (id=9299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 862.383972ms ago: executing program 3 (id=9300): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0xfffffff8, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x4}}, {{0xa, 0x0, 0xfffffffc, @loopback, 0x10}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r0) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvfrom(r2, 0x0, 0x0, 0x2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r5, &(0x7f0000000040)="df5b655a83fb17c0cf21ec112f972b7d1fe9181e26febe2e9fe499a985ab68e29db858fd6b6f5b3a1274ce1c2c177e2ffa0f0cad51aa69101c71c5130756a18f5cd6860a6f7ea64178e9be8d051b3ec4c952a191d2cbe069bb79c6dcae852d7b9efa872de635b524960a70a8038efbd3e938020ca1a641250d20cc24b579ae9b90c0eaf2b3a27d4fe82ac54a94de9d94111e5c16f914a49705177cfeb13daa28781e1f395fd4407b1cb1e82acb4c7d399c536168905d8915bfce34e30653ade98e87469a878a6699ea53275fa2a2678743b6d6e6046505a2b5bb97c4ac0e8a622b5c409524453f30f1", 0xe9, 0x24040010, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f00000001c0)='GPL\x00'}, 0x90) write$tun(r9, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xa, 0xfc0, 0x66, 0x0, 0xd, 0x88, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="24005a8020000180140003000000000000000000010000000000000004000200040001"], 0x40}}, 0x0) 822.195613ms ago: executing program 1 (id=9301): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) 795.012161ms ago: executing program 4 (id=9302): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) 735.492812ms ago: executing program 0 (id=9303): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="020d260b0a0002000500c200000c000045b1dc1c99831a7e1288f8f070142c8b3be41d59fb70928f59f959dc0ce3f56fc1e8b1776b9a7ac7601e189fd64f70cfe6991374e8a3fb87ad1cdf0585e61683eb09223f9baeb5130de5c001384281af63aecb2519ba5dc601b490d4e85d49b12ac808896a1d9e72d5226b4d800773d33ca66552772137e83277b04f73896438438215b18dabf47ed674b3d8be5c20ea407bf9b08ea45ecf05799f2ef8e7d596d63ef3367e89b0184739ca473bce933a0a8962d4264819ffc371f7e3aa3551a876d6e47bdd3666599f3dc3c2e48a9b020a384d0784d203ca4e7ae79b"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000000)="ff45679b012420893ba2a1fd1ee01ebc00000000a1a037b8f6bf96abd096b48908b61cb527072453f698f34d", 0xfffffc63}], 0x1}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, &(0x7f0000000080)) sendmsg$kcm(r4, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x200000c1) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) close(r4) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipmr_getroute={0x0, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x80, 0x14, 0x0, 0x4, 0xff, 0x3, 0xc8, 0x3, 0x3200}, [""]}, 0x98}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 523.090003ms ago: executing program 1 (id=9304): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 522.049542ms ago: executing program 4 (id=9305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x28, r2, 0x11, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 518.069465ms ago: executing program 3 (id=9306): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x1}, 0x14}}, 0x24000040) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}], 0x1c) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r3, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0xf, @remote, 0x81}], 0x1c) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x8, 0x0, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x2c, 0x66, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {0xfff1, 0x6}, {0x9, 0xe}}, [{0x8, 0xb, 0x701}]}, 0x2c}}, 0x40) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00750541b93056d1f79d0ce3ac010000000000000000008020000102000000ad6efe128939003f653b8c433f753fdd0f58"], 0x1c}}, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0xa, 0x3, 0x4) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x1}, 0x14}}, 0x24000040) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}], 0x1c) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) sendto$llc(r3, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10) (async) socket$inet6_sctp(0xa, 0x0, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0xf, @remote, 0x81}], 0x1c) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x8, 0x0, 0x0) (async) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10) (async) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x2c, 0x66, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {0xfff1, 0x6}, {0x9, 0xe}}, [{0x8, 0xb, 0x701}]}, 0x2c}}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00750541b93056d1f79d0ce3ac010000000000000000008020000102000000ad6efe128939003f653b8c433f753fdd0f58"], 0x1c}}, 0x0) (async) 517.200996ms ago: executing program 2 (id=9307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x60}, 0x94) 420.030049ms ago: executing program 4 (id=9308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x2, {0x2, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00', 0x3}, {0x0, 0x241}], 0x2}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {0x0}, {0x0}], 0x3}}], 0x2, 0x4000080) 394.700135ms ago: executing program 2 (id=9309): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x34}, 0x1, 0x0, 0x600, 0x8000}, 0x8000) 369.921718ms ago: executing program 1 (id=9310): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f0fa37d9b8d2fadb5cb8214b6d842edca9d9c1460dc18655a50473bd662415a77dc9a2e5c7012698ed28b7bc957bb90df77f74018725c7d28a28d1d8cb9501f5050f06d04ae8b83e5bb98394eccc32a38f100cc85d8688fc0493cfd491be177e54755cb645f1d9ddf03b618ed38d30d861d559c00849e73be6353db69447f764989cd6e84ae32f5bdb2f7ee4b7717716849bb5827e8a460ff8cc", 0x9a}, {&(0x7f0000000000)="651ac3b25f1f58ad8bbe94fa", 0xc}, {&(0x7f0000000280)="418cbee400e984e47ac3b6a5535d5010f5b2a4ec66c512df4b9d22f2059b49c3772bbdabaf813fcba6fa90ebdea0761f538a0703ebcee7d06c6da9c275b70269c3c917ce7e681b014e0f2c35228a80de5e77f98b79bf5ca4269e75a1707aac18d05057a40728123e98c405ae2286b84688d43dfecbd038898561bf5d9d02e3d6863272d707889bb51d509e240763abbb919d87fa2bb5afc2d870c27cb6b2bc7057fa45821ace1ee0401357837df111bfe16b6bb5becc1ed1edd8ad3f2acea918e1a827302d3dc35e2eb61069652f8f7f4811a65c553491b59ea0a3a5e83b795037cc1385fc71e6", 0xe7}], 0x3, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0xc6b1}}, @mark={{0x14, 0x1, 0x24, 0xae}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x8f}}], 0x90}, 0x400c044) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x15) socket(0x14, 0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="007200000000000018f0ceffffffffffffff70003900028008000100", @ANYRES32, @ANYBLOB="08001f0000000000"], 0x40}}, 0x0) 231.348966ms ago: executing program 0 (id=9311): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000d042dbd7000fdffff1f00000000", @ANYRES32=r3, @ANYBLOB="46000600000000002400126c09000100626f6e02000005000e0001df00"/44], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r5 = socket(0x1000000010, 0x80002, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@deltfilter={0x2c, 0x2d, 0x8, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0x10}, {0x0, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xc2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x80) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_deladdr={0x44, 0x15, 0x100, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x90, 0xfe, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xb, 0x8}}, @IFA_FLAGS={0x8, 0x8, 0x140}, @IFA_TARGET_NETNSID={0x8}]}, 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 217.252729ms ago: executing program 3 (id=9312): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000002400)={'veth0_virt_wifi\x00'}) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async, rerun: 64) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) shutdown(r6, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2, 0x3}]}, &(0x7f0000000180)=0x10) (rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x25, &(0x7f00000012c0)={r7, @in={{0x2, 0x4e20, @empty}}}, 0xff6b) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8d0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000b49901fd3f", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 196.55103ms ago: executing program 2 (id=9313): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x25, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x9c) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/9, 0x9}, {&(0x7f0000000740)=""/44}, {&(0x7f0000000880)=""/188}, {&(0x7f00000007c0)=""/64}, {&(0x7f0000000940)=""/96}], 0x1, 0x0, 0xffffffffffffffb0}, 0x0) r5 = socket(0x10, 0x9, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00250a00000438005b489c0000000004000b0000000000000000000000001ecf43cde16698cd13f6328c1b236f1c936c89ae9d41225ac175"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRESDEC=r4, @ANYBLOB="000126bd7000fddbdf25060000002500070073797374656d5f753a6f626a6563745f723a64627573645f6574635f743a733000000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r8, &(0x7f0000000600)=@ethernet={0x0, @broadcast}, &(0x7f0000000480)=0x80, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r11 = gettid() r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5000000010000304f9ff45bde1c9d3b73fa5fffffedbdf2500007400", @ANYRES32=r10, @ANYBLOB="089805000750050008001300", @ANYRES32=r11, @ANYBLOB="1400350076657468305f6d6163767461700000001400030076657468315f6d616376746170000000"], 0x50}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000140)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) syz_open_procfs$namespace(r15, &(0x7f0000001780)='ns/ipc\x00') getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x10}}], 0x10, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0), 0x0, 0x800}}], 0x2, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={r11, r13, r16}, 0xc) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ff0003ff0000000001000000340007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000"], 0x60}}, 0x20000000) 136.252293ms ago: executing program 4 (id=9314): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@deltclass={0x5c, 0x29, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x10, 0x7}, {0x5, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xc}}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x8a, 0x2}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f00000001c0)='bpf\x00', 0x4) pipe(&(0x7f00000000c0)) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0x6, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 29.958746ms ago: executing program 0 (id=9315): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00e\x00\a'], 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x24, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8}]}, 0x68}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x24, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8}]}, 0x68}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000740)={r0, &(0x7f00000002c0)='\\\x00', 0x47c204, &(0x7f0000000300)={@align=0x49b3, {0xd1, 0xae4, 0x6, 0xffffffffffff12b3}}, 0x4, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r8, 0x0, 0xe4, 0x3b, &(0x7f0000000780)="cf0dfa263383462e60ab494e2bd49f3d3cefce560b57bd8de4747b595771307d8af1f07d9167d6f864ae39d3d46058ab9c88d0a4430ba8c1d2c3f4334996de76025b33e52054f2e4b14036cb0f5e9dd8adde5a15322fe89634a77dd8d3d487d170edb69ee9f06855f4f200babb79f53cf5583b916bd617f41f51ee56eaafd692a3f0dcb0bf1c1d432f53185de032fb0e0ca32d4edddb7b62623530cd323259858efe0dd80466f9e8979245cbfc9c0a42a25808cd6639a397d055feede98ce8ed4be26eefd905d9c2c290a10bb0f06ec0dbdb37d49af86a4fb3ef0cc876f678f9a41ff327", &(0x7f0000000880)=""/59, 0x200, 0x0, 0x6a, 0x1000, &(0x7f00000008c0)="a7e47afab16ad6981f2452f030c0f8870d924893034624f7dbd7fdd547f2466d8de4c47a60300e63366069d24766026dbb5af9ba681ff1c1fa4c9b97fa14f0dc2d3ca6c40929ec86915666101bfbc9b495c8cd5f07fab0c2cefff9e8dca743f6b0e758c637b9a80e4cb0", &(0x7f0000000940)="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", 0x5, 0x0, 0x7fffffff}, 0x50) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0xfffd, 0x3, 0x3, 0x5, 0xca, 0x6]}}]}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r6, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040810}, 0x4001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="01002abd7000fe02000000000000c4ca36345dd83d463256fb4a09c008308b5cdeb896963453e0ccd594f78626bb58f498545ed83d29d8d4f9a7e508065475115d30dc84d18dbe9959063058b23cffd9051e550acc6fdbfeb52cdd784f57fbdb21944ac8f078c05cca1bcc85112346098f510561c6d3e20be8cfccd5fbd0cc000073eb47f7bf827efd5ee461a0002eb5188fe9c50c12320ed3a8df4c692e56ee9dd0e97c1eeb9739b7000bb2b349efa36b028dface0adb0f65bfd018a51a4a54ba317ae7"], 0x14}, 0x1, 0x0, 0x0, 0x200408c5}, 0x4004800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 0s ago: executing program 3 (id=9316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r2, 0x60b, 0x70bd28, 0x4000, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x80}]}, 0x38}, 0x1, 0x8000000, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37bc21cfdc8180c7d09c35d130d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56bd86acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6e19946b18a45333df51d78f735999aadfcda64488160c4ae6ba9dcef0c144e3de7be7fdc1ead6a425ff6128fab1517630c1d9507e0685488a57f85298b4e4382842c0730"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRESOCT=r3, @ANYBLOB="2f00000000000100"], 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) close(r3) kernel console output (not intermixed with test programs): 84/cgroup.controllers" dev="tmpfs" ino=1468 res=1 errno=0 [ 866.551941][ T29] audit: type=1800 audit(1771848803.199:12): pid=2447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7929" name="cgroup.controllers" dev="tmpfs" ino=1468 res=0 errno=0 [ 866.865172][ T2483] netlink: 316 bytes leftover after parsing attributes in process `syz.2.7938'. [ 866.936163][ T2485] netlink: 'syz.3.7939': attribute type 23 has an invalid length. [ 867.067691][ T2494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7941'. [ 868.002495][ T2563] bond4: entered promiscuous mode [ 868.025692][ T2563] bond4: entered allmulticast mode [ 868.049721][ T2563] 8021q: adding VLAN 0 to HW filter on device bond4 [ 868.729515][ T2624] netlink: 'syz.1.7973': attribute type 1 has an invalid length. [ 869.321739][ T2675] netlink: 'syz.4.7985': attribute type 21 has an invalid length. [ 869.332898][ T2679] netlink: 'syz.1.7986': attribute type 21 has an invalid length. [ 869.364775][ T8721] net_ratelimit: 200 callbacks suppressed [ 869.364801][ T8721] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 869.379558][ T13] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 869.387431][ T13] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 869.428046][ T8721] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 869.436061][ T8721] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 869.476890][ T2694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 869.519964][ T49] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 869.538269][ T49] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 869.578092][ T49] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 869.588890][ T2692] netlink: 'syz.3.7989': attribute type 2 has an invalid length. [ 869.596905][ T49] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 869.722078][ T2710] netlink: 'syz.4.7993': attribute type 7 has an invalid length. [ 869.831999][ T2719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 870.696484][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 870.849600][ T2788] __nla_validate_parse: 16 callbacks suppressed [ 870.849630][ T2788] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8010'. [ 870.874386][ T2788] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8010'. [ 870.885310][ T2785] xt_socket: unknown flags 0x50 [ 870.949090][ T2788] netlink: 'syz.2.8010': attribute type 16 has an invalid length. [ 870.958369][ T2788] netlink: 'syz.2.8010': attribute type 3 has an invalid length. [ 870.966164][ T2788] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8010'. [ 870.982946][ T2794] syzkaller0: entered promiscuous mode [ 870.994884][ T2794] syzkaller0: entered allmulticast mode [ 871.201648][ T2818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8019'. [ 871.309623][ T2822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8020'. [ 871.332016][ T2822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8020'. [ 871.338069][ T1631] block nbd3: Possible stuck request ffff888026b1d000: control (read@0,1024B). Runtime 60 seconds [ 871.351952][ T1631] block nbd3: Possible stuck request ffff888026b1d200: control (read@1024,1024B). Runtime 60 seconds [ 871.363236][ T1631] block nbd3: Possible stuck request ffff888026b1d400: control (read@2048,1024B). Runtime 60 seconds [ 871.374398][ T1631] block nbd3: Possible stuck request ffff888026b1d600: control (read@3072,1024B). Runtime 60 seconds [ 871.680582][ T2854] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 871.690999][ T2854] syzkaller0: entered promiscuous mode [ 871.696546][ T2854] syzkaller0: entered allmulticast mode [ 871.718915][ T2848] netlink: 'syz.2.8028': attribute type 61 has an invalid length. [ 871.747694][ T2848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8028'. [ 871.823430][ T2864] netlink: 212 bytes leftover after parsing attributes in process `syz.1.8031'. [ 871.835195][ T2862] pim6reg1: entered promiscuous mode [ 871.850442][ T2862] pim6reg1: entered allmulticast mode [ 871.869988][ T2862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8030'. [ 871.879308][ T2862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8030'. [ 872.120886][ T2876] veth0_macvtap: left allmulticast mode [ 872.248441][ T8717] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.295212][ T8717] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.321143][ T8717] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.383541][ T8717] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.655900][ T2918] netlink: 'syz.4.8047': attribute type 39 has an invalid length. [ 872.738792][ T2921] syzkaller1: entered promiscuous mode [ 872.744369][ T2921] syzkaller1: entered allmulticast mode [ 872.931944][ T2940] netlink: 'syz.4.8056': attribute type 4 has an invalid length. [ 873.089232][ T2947] netlink: 'syz.2.8058': attribute type 1 has an invalid length. [ 873.169727][ T2947] 8021q: adding VLAN 0 to HW filter on device bond4 [ 873.246454][ T2956] netlink: 'syz.1.8062': attribute type 1 has an invalid length. [ 873.255897][ T2956] netlink: 'syz.1.8062': attribute type 2 has an invalid length. [ 873.264591][ T2956] netlink: 'syz.1.8062': attribute type 1 has an invalid length. [ 873.286928][ T2958] netlink: 'syz.4.8063': attribute type 7 has an invalid length. [ 873.355401][ T2961] 8021q: adding VLAN 0 to HW filter on device bond5 [ 873.412622][ T2968] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 873.556673][ T2961] 8021q: adding VLAN 0 to HW filter on device bond6 [ 873.602572][ T2961] bond5: (slave bond6): Enslaving as an active interface with a down link [ 874.401458][ T3508] net_ratelimit: 225 callbacks suppressed [ 874.401511][ T3508] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 874.416112][ T8721] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 874.438570][ T8721] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 874.453659][ T3508] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 874.551737][ T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 874.566196][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 874.579120][ T3508] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 874.618671][ T3508] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 874.628700][ T3508] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 874.713520][ T8721] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 874.855713][ T3063] tipc: Started in network mode [ 874.870008][ T3063] tipc: Node identity ac141441, cluster identity 4711 [ 874.894920][ T3063] tipc: Enabled bearer , priority 10 [ 874.906765][ T3064] veth0: entered promiscuous mode [ 874.913884][ T3061] tipc: Enabling of bearer rejected, failed to enable media [ 875.220666][ T3063] veth0: left promiscuous mode [ 875.313419][ T8717] tipc: Subscription rejected, illegal request [ 875.758214][ T3116] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_virt_wifi, syncid = 4, id = 0 [ 875.784643][ T3120] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 875.884570][ T3127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.929660][ T3132] x_tables: duplicate underflow at hook 2 [ 875.956659][ T3132] syzkaller1: entered promiscuous mode [ 875.963387][ T3132] syzkaller1: entered allmulticast mode [ 876.044475][ T5892] tipc: Node number set to 2886997057 [ 876.411961][ T3155] ipt_ECN: cannot use operation on non-tcp rule [ 876.447983][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 876.456469][ C1] lec:lec_tx_timeout: lec0 [ 876.594817][ T3163] validate_nla: 5 callbacks suppressed [ 876.594835][ T3163] netlink: 'syz.2.8120': attribute type 32 has an invalid length. [ 876.638670][ T3163] __nla_validate_parse: 26 callbacks suppressed [ 876.638693][ T3163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8120'. [ 876.701558][ T3163] bond7: Setting coupled_control to off (0) [ 876.755153][ T3176] netlink: 'syz.1.8124': attribute type 1 has an invalid length. [ 876.764991][ T3176] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8124'. [ 876.774388][ T3176] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8124'. [ 876.784272][ T3176] netlink: 658 bytes leftover after parsing attributes in process `syz.1.8124'. [ 876.859652][ T3178] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8125'. [ 876.950418][ T3187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8127'. [ 877.003637][ T3190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8128'. [ 877.084050][ T3192] bond0: (slave rose0): Error: Device can not be enslaved while up [ 877.146373][ T3205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8131'. [ 877.320042][ T3205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8131'. [ 877.358828][ T5191] udevd[5191]: worker [31554] /devices/virtual/block/nbd3 is taking a long time [ 877.736111][ T3240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8140'. [ 877.771294][ T3240] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 877.884533][ T3256] veth1_macvtap: Device is already in use. [ 878.035735][ T3272] syzkaller0: entered promiscuous mode [ 878.042787][ T3272] syzkaller0: entered allmulticast mode [ 878.596259][ T3310] IPv6: NLM_F_CREATE should be specified when creating new route [ 879.101215][ T3348] xt_policy: too many policy elements [ 879.297331][ T3361] syzkaller0: entered promiscuous mode [ 879.303238][ T3361] syzkaller0: entered allmulticast mode [ 879.418876][ T8715] net_ratelimit: 230 callbacks suppressed [ 879.418903][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 879.418947][ T3199] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 879.452124][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 879.479094][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 879.490189][ T3200] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 879.522354][ T8715] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 879.530590][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 879.567963][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 879.576117][ T3199] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 879.595187][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 879.787637][ T3381] netlink: 'syz.3.8180': attribute type 2 has an invalid length. [ 879.796434][ T3381] netlink: 'syz.3.8180': attribute type 8 has an invalid length. [ 879.814801][ T3381] netlink: 'syz.3.8180': attribute type 2 has an invalid length. [ 879.844128][ T3381] netlink: 'syz.3.8180': attribute type 8 has an invalid length. [ 880.406738][ T3427] geneve2: entered promiscuous mode [ 880.413439][ T3427] geneve2: entered allmulticast mode [ 880.422595][ T8715] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.463676][ T8715] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.506206][ T8715] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.546230][ T8715] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.777599][ T3455] netlink: 'syz.3.8200': attribute type 1 has an invalid length. [ 880.814384][ T3455] 8021q: adding VLAN 0 to HW filter on device bond9 [ 880.829317][ T3451] kthread_run failed with err -4 [ 880.959434][ T3468] netlink: 'syz.1.8202': attribute type 4 has an invalid length. [ 881.053135][ T3463] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 881.260559][ T3488] netlink: 'syz.3.8210': attribute type 1 has an invalid length. [ 881.356554][ T3488] 8021q: adding VLAN 0 to HW filter on device bond10 [ 881.434719][ T3497] team0: Port device team_slave_0 removed [ 881.487373][ T3505] netlink: 'syz.2.8214': attribute type 1 has an invalid length. [ 881.534715][ T3485] 8021q: adding VLAN 0 to HW filter on device bond11 [ 881.599815][ T3485] bond10: (slave bond11): Enslaving as an active interface with a down link [ 881.752018][ T3525] __nla_validate_parse: 25 callbacks suppressed [ 881.752044][ T3525] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.8217'. [ 881.864463][ T3529] macvtap2: entered allmulticast mode [ 881.881450][ T3529] veth0_macvtap: entered allmulticast mode [ 882.084041][ T3555] validate_nla: 7 callbacks suppressed [ 882.084063][ T3555] netlink: 'syz.0.8222': attribute type 10 has an invalid length. [ 882.115081][ T3545] veth5: entered promiscuous mode [ 882.138798][ T3555] team0: Device ipvlan1 failed to register rx_handler [ 882.277274][ T3566] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8227'. [ 882.309699][ T3566] bond8 (unregistering): Released all slaves [ 884.438509][ T3200] net_ratelimit: 222 callbacks suppressed [ 884.438536][ T3200] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 884.452840][ T3200] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 884.468418][ T3196] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 884.476391][ T3196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 884.568439][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 884.576400][ T3199] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 884.588473][ T3199] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 884.596636][ T3199] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 884.688391][ T3241] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 884.696678][ T3241] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 884.895579][ T3546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 885.086414][ T3579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8231'. [ 885.098806][ T3575] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8229'. [ 885.109557][ T3576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8229'. [ 885.115251][ T3579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8231'. [ 885.282831][ T3581] syzkaller0: entered promiscuous mode [ 885.289743][ T3581] syzkaller0: entered allmulticast mode [ 885.297431][ T3582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8232'. [ 885.310872][ T3577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8232'. [ 885.330507][ T3591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8234'. [ 885.395811][ T3591] dvmrp8: entered allmulticast mode [ 885.453626][ T3591] dvmrp8: left allmulticast mode [ 886.272130][ T3646] No such timeout policy "syz0" [ 886.279180][ T3647] netlink: 211888 bytes leftover after parsing attributes in process `syz.0.8247'. [ 886.295871][ T3647] netlink: 'syz.0.8247': attribute type 1 has an invalid length. [ 888.404567][ T3594] ip6_vti0 speed is unknown, defaulting to 1000 [ 888.617347][ T3664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8251'. [ 888.678753][ T3664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8251'. [ 888.712856][ T3664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8251'. [ 888.729451][ T3664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8251'. [ 888.742276][ T3664] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:141 [ 888.802840][ T3674] netlink: 'syz.0.8252': attribute type 4 has an invalid length. [ 888.820512][ T3674] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8252'. [ 888.846604][ T3674] `: renamed from bond0 (while UP) [ 888.948381][ T3594] lo speed is unknown, defaulting to 1000 [ 889.081080][ T3688] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8255'. [ 889.256547][ T3695] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 889.388630][ T3697] FAULT_INJECTION: forcing a failure. [ 889.388630][ T3697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 889.419707][ T3697] CPU: 1 UID: 0 PID: 3697 Comm: syz.2.8260 Not tainted syzkaller #0 PREEMPT(full) [ 889.419737][ T3697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 889.419752][ T3697] Call Trace: [ 889.419761][ T3697] [ 889.419770][ T3697] dump_stack_lvl+0xe8/0x150 [ 889.419807][ T3697] should_fail_ex+0x412/0x560 [ 889.419850][ T3697] _copy_to_iter+0x404/0x17d0 [ 889.419880][ T3697] ? do_raw_spin_lock+0x12b/0x2f0 [ 889.419912][ T3697] ? __pfx__copy_to_iter+0x10/0x10 [ 889.419939][ T3697] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 889.419969][ T3697] ? lockdep_hardirqs_on+0x7a/0x110 [ 889.420000][ T3697] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 889.420029][ T3697] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 889.420068][ T3697] __skb_datagram_iter+0xf8/0x980 [ 889.420102][ T3697] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 889.420143][ T3697] skb_copy_datagram_iter+0xb5/0x270 [ 889.420180][ T3697] netlink_recvmsg+0x2c3/0xa50 [ 889.420216][ T3697] ? __pfx_netlink_recvmsg+0x10/0x10 [ 889.420239][ T3697] ? is_bpf_text_address+0x26/0x2b0 [ 889.420267][ T3697] ? aa_sock_msg_perm+0xf1/0x1b0 [ 889.420294][ T3697] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 889.420315][ T3697] ? security_socket_recvmsg+0x7e/0x2c0 [ 889.420344][ T3697] ? __pfx_netlink_recvmsg+0x10/0x10 [ 889.420370][ T3697] sock_recvmsg+0x22c/0x270 [ 889.420399][ T3697] ____sys_recvmsg+0x1e6/0x4a0 [ 889.420438][ T3697] ? __pfx_____sys_recvmsg+0x10/0x10 [ 889.420485][ T3697] ? import_iovec+0x73/0xa0 [ 889.420517][ T3697] ___sys_recvmsg+0x215/0x590 [ 889.420546][ T3697] ? get_pid_task+0x20/0x1f0 [ 889.420572][ T3697] ? __pfx____sys_recvmsg+0x10/0x10 [ 889.420629][ T3697] ? __fget_files+0x3a0/0x420 [ 889.420670][ T3697] __x64_sys_recvmsg+0x1ba/0x2a0 [ 889.420709][ T3697] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 889.420750][ T3697] ? __pfx_ksys_write+0x10/0x10 [ 889.420785][ T3697] do_syscall_64+0x14d/0xf80 [ 889.420821][ T3697] ? trace_irq_disable+0x3b/0x150 [ 889.420850][ T3697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.420872][ T3697] ? clear_bhb_loop+0x40/0x90 [ 889.420897][ T3697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.420919][ T3697] RIP: 0033:0x7f8d7af9c629 [ 889.420940][ T3697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.420960][ T3697] RSP: 002b:00007f8d7bde5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 889.420982][ T3697] RAX: ffffffffffffffda RBX: 00007f8d7b215fa0 RCX: 00007f8d7af9c629 [ 889.420998][ T3697] RDX: 0000000000002000 RSI: 0000200000000100 RDI: 0000000000000004 [ 889.421012][ T3697] RBP: 00007f8d7bde5090 R08: 0000000000000000 R09: 0000000000000000 [ 889.421025][ T3697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.421037][ T3697] R13: 00007f8d7b216038 R14: 00007f8d7b215fa0 R15: 00007ffe424b5458 [ 889.421071][ T3697] [ 889.466816][ T3701] SET target dimension over the limit! [ 889.548722][ T3241] net_ratelimit: 339 callbacks suppressed [ 889.548785][ T3241] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 889.560025][ T3201] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 889.569927][ T3241] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 889.698674][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 889.773488][ T3196] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 889.781603][ T3201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 889.909814][ T3201] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 889.918835][ T3201] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 889.938511][ T3201] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 889.949889][ T3201] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 890.031968][ T3714] IPVS: length: 68 != 24 [ 890.121754][ T3716] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8265'. [ 890.150362][ T3716] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8265'. [ 890.182244][ T3716] netlink: 'syz.3.8265': attribute type 5 has an invalid length. [ 890.236860][ T3725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8268'. [ 890.280489][ T3716] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8265'. [ 890.490269][ T3738] FAULT_INJECTION: forcing a failure. [ 890.490269][ T3738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.527078][ T3738] CPU: 1 UID: 0 PID: 3738 Comm: syz.2.8273 Not tainted syzkaller #0 PREEMPT(full) [ 890.527109][ T3738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 890.527123][ T3738] Call Trace: [ 890.527132][ T3738] [ 890.527143][ T3738] dump_stack_lvl+0xe8/0x150 [ 890.527178][ T3738] should_fail_ex+0x412/0x560 [ 890.527210][ T3738] _copy_to_iter+0x589/0x17d0 [ 890.527253][ T3738] ? __pfx__copy_to_iter+0x10/0x10 [ 890.527279][ T3738] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 890.527323][ T3738] ? lockdep_hardirqs_on+0x7a/0x110 [ 890.527356][ T3738] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 890.527387][ T3738] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 890.527427][ T3738] __skb_datagram_iter+0xf8/0x980 [ 890.527467][ T3738] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 890.527512][ T3738] skb_copy_datagram_iter+0xb5/0x270 [ 890.527551][ T3738] netlink_recvmsg+0x2c3/0xa50 [ 890.527590][ T3738] ? __pfx_netlink_recvmsg+0x10/0x10 [ 890.527615][ T3738] ? is_bpf_text_address+0x26/0x2b0 [ 890.527644][ T3738] ? aa_sock_msg_perm+0xf1/0x1b0 [ 890.527672][ T3738] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 890.527694][ T3738] ? security_socket_recvmsg+0x7e/0x2c0 [ 890.527726][ T3738] ? __pfx_netlink_recvmsg+0x10/0x10 [ 890.527760][ T3738] sock_recvmsg+0x22c/0x270 [ 890.527789][ T3738] ____sys_recvmsg+0x1e6/0x4a0 [ 890.527829][ T3738] ? __pfx_____sys_recvmsg+0x10/0x10 [ 890.527875][ T3738] ? import_iovec+0x73/0xa0 [ 890.527908][ T3738] ___sys_recvmsg+0x215/0x590 [ 890.527937][ T3738] ? get_pid_task+0x20/0x1f0 [ 890.527963][ T3738] ? __pfx____sys_recvmsg+0x10/0x10 [ 890.528022][ T3738] ? __fget_files+0x3a0/0x420 [ 890.528065][ T3738] __x64_sys_recvmsg+0x1ba/0x2a0 [ 890.528101][ T3738] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 890.528150][ T3738] ? __pfx_ksys_write+0x10/0x10 [ 890.528186][ T3738] do_syscall_64+0x14d/0xf80 [ 890.528217][ T3738] ? trace_irq_disable+0x3b/0x150 [ 890.528248][ T3738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.528270][ T3738] ? clear_bhb_loop+0x40/0x90 [ 890.528298][ T3738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.528320][ T3738] RIP: 0033:0x7f8d7af9c629 [ 890.528342][ T3738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.528362][ T3738] RSP: 002b:00007f8d7bde5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 890.528387][ T3738] RAX: ffffffffffffffda RBX: 00007f8d7b215fa0 RCX: 00007f8d7af9c629 [ 890.528403][ T3738] RDX: 0000000000002000 RSI: 0000200000000100 RDI: 0000000000000004 [ 890.528418][ T3738] RBP: 00007f8d7bde5090 R08: 0000000000000000 R09: 0000000000000000 [ 890.528431][ T3738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.528444][ T3738] R13: 00007f8d7b216038 R14: 00007f8d7b215fa0 R15: 00007ffe424b5458 [ 890.528480][ T3738] [ 891.061168][ T3753] syz.4.8275: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 891.120892][ T3753] CPU: 1 UID: 0 PID: 3753 Comm: syz.4.8275 Not tainted syzkaller #0 PREEMPT(full) [ 891.120925][ T3753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.120941][ T3753] Call Trace: [ 891.120950][ T3753] [ 891.120960][ T3753] dump_stack_lvl+0xe8/0x150 [ 891.120999][ T3753] warn_alloc+0x249/0x340 [ 891.121025][ T3753] ? stack_trace_save+0xa9/0x100 [ 891.121054][ T3753] ? __pfx_warn_alloc+0x10/0x10 [ 891.121087][ T3753] ? kasan_save_track+0x4f/0x80 [ 891.121107][ T3753] ? kasan_save_track+0x3e/0x80 [ 891.121128][ T3753] ? __kasan_kmalloc+0x93/0xb0 [ 891.121150][ T3753] ? __kmalloc_cache_noprof+0x31c/0x660 [ 891.121172][ T3753] ? xskq_create+0x56/0x170 [ 891.121201][ T3753] ? xsk_setsockopt+0x54c/0x990 [ 891.121227][ T3753] ? do_sock_setsockopt+0x17c/0x1b0 [ 891.121257][ T3753] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 891.121285][ T3753] ? do_syscall_64+0x14d/0xf80 [ 891.121415][ T3753] __vmalloc_node_range_noprof+0x132/0x1730 [ 891.121474][ T3753] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 891.121502][ T3753] ? __kasan_kmalloc+0x93/0xb0 [ 891.121530][ T3753] vmalloc_user_noprof+0xad/0xe0 [ 891.121552][ T3753] ? xskq_create+0xbf/0x170 [ 891.121580][ T3753] xskq_create+0xbf/0x170 [ 891.121611][ T3753] xsk_init_queue+0x8a/0xe0 [ 891.121642][ T3753] xsk_setsockopt+0x54c/0x990 [ 891.121673][ T3753] ? __pfx_xsk_setsockopt+0x10/0x10 [ 891.121701][ T3753] ? __pfx_aa_sk_perm+0x10/0x10 [ 891.121730][ T3753] ? aa_sock_opt_perm+0xff/0x1a0 [ 891.121757][ T3753] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 891.121779][ T3753] ? __pfx_xsk_setsockopt+0x10/0x10 [ 891.121806][ T3753] do_sock_setsockopt+0x17c/0x1b0 [ 891.121843][ T3753] __x64_sys_setsockopt+0x13d/0x1b0 [ 891.121879][ T3753] do_syscall_64+0x14d/0xf80 [ 891.121910][ T3753] ? trace_irq_disable+0x3b/0x150 [ 891.121959][ T3753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.121981][ T3753] ? clear_bhb_loop+0x40/0x90 [ 891.122037][ T3753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.122060][ T3753] RIP: 0033:0x7f1ce1d9c629 [ 891.122083][ T3753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.122101][ T3753] RSP: 002b:00007f1ce2c3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 891.122125][ T3753] RAX: ffffffffffffffda RBX: 00007f1ce2016090 RCX: 00007f1ce1d9c629 [ 891.122141][ T3753] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 891.122154][ T3753] RBP: 00007f1ce1e32b39 R08: 0000000000000004 R09: 0000000000000000 [ 891.122168][ T3753] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.122188][ T3753] R13: 00007f1ce2016128 R14: 00007f1ce2016090 R15: 00007ffc615ce388 [ 891.122224][ T3753] [ 891.122272][ T3753] Mem-Info: [ 891.376890][ T3763] netlink: 'syz.3.8277': attribute type 13 has an invalid length. [ 891.386647][ T3753] active_anon:6621 inactive_anon:0 isolated_anon:0 [ 891.386647][ T3753] active_file:3113 inactive_file:40646 isolated_file:0 [ 891.386647][ T3753] unevictable:768 dirty:162 writeback:0 [ 891.386647][ T3753] slab_reclaimable:13947 slab_unreclaimable:116450 [ 891.386647][ T3753] mapped:29867 shmem:1373 pagetables:1450 [ 891.386647][ T3753] sec_pagetables:0 bounce:0 [ 891.386647][ T3753] kernel_misc_reclaimable:0 [ 891.386647][ T3753] free:1287654 free_pcp:23359 free_cma:0 [ 891.468819][ T3765] ip6t_srh: unknown srh invflags 4000 [ 891.487760][ T3753] Node 0 active_anon:26672kB inactive_anon:0kB active_file:12452kB inactive_file:162380kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119512kB dirty:656kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15180kB pagetables:5588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 891.524094][ T3753] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 891.559114][ T3753] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 891.591133][ T3753] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 891.597072][ T3753] Node 0 DMA32 free:1243264kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26696kB inactive_anon:0kB active_file:12452kB inactive_file:162380kB unevictable:1536kB writepending:656kB zspages:0kB present:3129332kB managed:2552852kB mlocked:0kB bounce:0kB free_pcp:39444kB local_pcp:19788kB free_cma:0kB [ 891.633593][ T3753] lowmem_reserve[]: 0 0 0 0 0 [ 891.639136][ T3753] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 891.699068][ T3753] lowmem_reserve[]: 0 0 0 0 0 [ 891.708665][ T3753] Node 1 Normal free:3892112kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:54268kB local_pcp:23512kB free_cma:0kB [ 891.757435][ T3753] lowmem_reserve[]: 0 0 0 0 0 [ 891.763075][ T3753] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (UM) = 15344kB [ 891.779195][ T3753] Node 0 DMA32: 9456*4kB (UME) 7574*8kB (UME) 3781*16kB (UM) 246*32kB (UME) 136*64kB (UME) 576*128kB (UM) 609*256kB (UM) 447*512kB (UM) 295*1024kB (UME) 148*2048kB (UM) 1*4096kB (U) = 1243264kB [ 891.852703][ T3753] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 891.898458][ T3753] Node 1 Normal: 2*4kB (U) 7*8kB (UME) 13*16kB (UME) 16*32kB (UME) 12*64kB (UME) 7*128kB (UM) 6*256kB (UM) 6*512kB (UM) 6*1024kB (UME) 4*2048kB (UE) 945*4096kB (UM) = 3892112kB [ 891.950797][ T3753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 891.962693][ T3753] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 892.013458][ T3775] bridge0: port 2(gretap0) entered blocking state [ 892.020163][ T3775] bridge0: port 2(gretap0) entered forwarding state [ 892.027147][ T3775] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.034414][ T3775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.046216][ T3753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 892.059526][ T3775] bridge0: left allmulticast mode [ 892.072607][ T3753] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 892.097134][ T3753] 45128 total pagecache pages [ 892.114398][ T3753] 0 pages in swap cache [ 892.119974][ T3753] Free swap = 124996kB [ 892.124454][ T3753] Total swap = 124996kB [ 892.135526][ T3753] 2097051 pages RAM [ 892.140426][ T3753] 0 pages HighMem/MovableOnly [ 892.145370][ T3753] 427002 pages reserved [ 892.153037][ T3753] 0 pages cma reserved [ 892.262296][ T3788] tipc: Enabling of bearer rejected, failed to enable media [ 892.307182][ T3791] bridge7: entered promiscuous mode [ 892.318727][ T3791] bridge7: entered allmulticast mode [ 892.413815][ T3793] x_tables: duplicate entry at hook 3 [ 892.737547][ T3809] veth0_macvtap: left allmulticast mode [ 892.757334][ T8725] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.776388][ T8725] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.801768][ T3812] geneve3: entered promiscuous mode [ 892.807128][ T3812] geneve3: entered allmulticast mode [ 892.832640][ T8725] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.871664][ T8725] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.507655][ T3857] bond0: ARP target 1.0.0.0 is already present [ 893.517688][ T3857] bond0: option arp_ip_target: invalid value (1) [ 893.529528][ T3857] bond0 (unregistering): Released all slaves [ 893.612523][ T3863] xfrm1: entered allmulticast mode [ 893.658918][ T3861] bridge0: port 3(gretap0) entered blocking state [ 893.665735][ T3861] bridge0: port 3(gretap0) entered disabled state [ 893.697946][ T3861] gretap0: entered promiscuous mode [ 893.703857][ T3861] bridge0: port 3(gretap0) entered blocking state [ 893.710476][ T3861] bridge0: port 3(gretap0) entered forwarding state [ 894.011937][ T3878] netlink: 'syz.0.8314': attribute type 1 has an invalid length. [ 894.056979][ T3878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.473034][ T3904] __nla_validate_parse: 7 callbacks suppressed [ 894.473058][ T3904] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8322'. [ 894.495054][ T3904] netlink: 'syz.1.8322': attribute type 2 has an invalid length. [ 894.587244][ T3909] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.8325'. [ 894.615926][ T3909] net_ratelimit: 221 callbacks suppressed [ 894.615946][ T3909] openvswitch: netlink: Flow key attr not present in new flow. [ 894.638773][ T8719] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 894.638797][ T3201] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 894.638822][ T3201] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 894.668726][ T8725] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 894.700664][ T8725] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 894.777993][ T3201] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 894.786138][ T3201] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 894.818582][ T8725] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 894.837987][ T8725] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 894.868965][ T3918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8329'. [ 894.901411][ T3919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8329'. [ 894.992085][ T3926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8331'. [ 895.287592][ T3942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8336'. [ 895.414797][ T3949] lo: Caught tx_queue_len zero misconfig [ 896.040211][ T3989] netlink: 'syz.0.8348': attribute type 1 has an invalid length. [ 896.072052][ T3989] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 896.122955][ T4000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8350'. [ 896.148723][ T4000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8350'. [ 896.199413][ T4000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8350'. [ 896.223828][ T4003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8351'. [ 896.339747][ T4000] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 896.420709][ T4000] bond0 (unregistering): Released all slaves [ 897.166044][T23408] lec:lec_start_xmit: lec0:No lecd attached [ 898.091060][ T4123] ip6tnl0: Caught tx_queue_len zero misconfig [ 898.409824][ T4139] tipc: Enabling of bearer rejected, already enabled [ 898.460625][ T4141] smc: removing net device team0 with user defined pnetid SYZ2 [ 898.751484][ T4161] sctp: [Deprecated]: syz.0.8389 (pid 4161) Use of int in max_burst socket option. [ 898.751484][ T4161] Use struct sctp_assoc_value instead [ 899.452765][ T4197] tipc: Enabled bearer , priority 0 [ 899.669846][ T4217] __nla_validate_parse: 10 callbacks suppressed [ 899.669872][ T4217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8403'. [ 899.718754][ T4221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8405'. [ 899.727316][ T3196] net_ratelimit: 257 callbacks suppressed [ 899.727379][ T3196] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 899.742804][ T8719] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 899.768105][ T3196] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 899.776230][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 899.798221][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 899.818184][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 899.838228][ T3196] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 899.860347][ T4232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8408'. [ 899.870600][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 899.879784][ T3199] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 899.907962][ T3199] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.231773][ T4253] netlink: 'syz.2.8414': attribute type 4 has an invalid length. [ 900.280527][ T4253] netlink: 'syz.2.8414': attribute type 13 has an invalid length. [ 900.285580][ T4260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8416'. [ 900.316761][ T4260] veth0: entered promiscuous mode [ 900.336456][ T4254] veth0: left promiscuous mode [ 900.353517][ T4259] netlink: 'syz.4.8415': attribute type 2 has an invalid length. [ 900.566001][ T4268] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8420'. [ 900.631592][ T4277] netlink: 'syz.0.8424': attribute type 1 has an invalid length. [ 900.632469][ T4275] bridge0: port 2(gretap0) entered disabled state [ 900.646228][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.661483][ T4274] lo: entered allmulticast mode [ 900.705754][ T4277] bond5: entered promiscuous mode [ 900.713713][ T4277] 8021q: adding VLAN 0 to HW filter on device bond5 [ 900.723705][ T4274] lo: left allmulticast mode [ 900.746938][ T4281] bond5: (slave bridge4): making interface the new active one [ 900.793477][ T4281] bridge4: entered promiscuous mode [ 900.830486][ T4281] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 900.850411][ T4287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8425'. [ 901.272090][ T4307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8432'. [ 901.323565][ T4309] netlink: 'syz.1.8434': attribute type 16 has an invalid length. [ 901.337369][ T4309] netlink: 'syz.1.8434': attribute type 17 has an invalid length. [ 901.356067][ T4309] bridge0: port 3(gretap0) entered disabled state [ 901.413609][ T1631] block nbd3: Possible stuck request ffff888026b1d000: control (read@0,1024B). Runtime 90 seconds [ 901.424754][ T1631] block nbd3: Possible stuck request ffff888026b1d200: control (read@1024,1024B). Runtime 90 seconds [ 901.436668][ T1631] block nbd3: Possible stuck request ffff888026b1d400: control (read@2048,1024B). Runtime 90 seconds [ 901.447134][ T4314] tunl0: Caught tx_queue_len zero misconfig [ 901.453096][ T1631] block nbd3: Possible stuck request ffff888026b1d600: control (read@3072,1024B). Runtime 90 seconds [ 901.708822][ T4330] netlink: 212 bytes leftover after parsing attributes in process `syz.0.8438'. [ 901.880609][ T4339] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8441'. [ 902.015710][ T4345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8442'. [ 902.370937][ T4368] netlink: 'syz.3.8452': attribute type 1 has an invalid length. [ 902.394173][ T4367] netlink: 'syz.3.8452': attribute type 1 has an invalid length. [ 902.447896][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 902.456295][ C1] lec:lec_tx_timeout: lec0 [ 902.460970][ T4367] bridge0: port 1(ipvlan3) entered blocking state [ 902.470539][ T4367] bridge0: port 1(ipvlan3) entered disabled state [ 902.477494][ T4367] ipvlan3: entered allmulticast mode [ 902.498640][ T4367] bridge0: entered allmulticast mode [ 902.507263][ T4367] ipvlan3: left allmulticast mode [ 902.513557][ T4367] bridge0: left allmulticast mode [ 902.811808][ T4398] netlink: 'syz.0.8462': attribute type 1 has an invalid length. [ 903.141544][ T4431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 903.150261][ T4430] netlink: 'syz.2.8473': attribute type 4 has an invalid length. [ 903.227746][ T4435] IPv6: NLM_F_CREATE should be specified when creating new route [ 903.334583][ T4442] dummy0: entered promiscuous mode [ 903.347351][ T4442] bridge0: port 4(dummy0) entered blocking state [ 903.355712][ T4442] bridge0: port 4(dummy0) entered disabled state [ 903.363046][ T4442] dummy0: entered allmulticast mode [ 903.411386][ T4445] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 904.184432][ T4495] bond4: Removing last ns target with arp_interval on [ 904.199926][ T4493] vlan3: entered allmulticast mode [ 904.216173][ T4500] geneve1: Caught tx_queue_len zero misconfig [ 904.730063][ T8715] net_ratelimit: 229 callbacks suppressed [ 904.730089][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 904.743804][ T3196] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 904.752839][ T3196] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 904.788097][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 904.822653][ T3196] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 904.868553][ T3201] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 904.893108][ T3201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 904.958489][ T8725] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 904.966310][ T8725] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 905.022760][ T8725] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.053983][ T4551] bridge8: entered promiscuous mode [ 905.096270][ T4551] bridge8: entered allmulticast mode [ 905.133458][ T4551] team0: Port device bridge8 added [ 905.140035][ T4556] bridge0: port 5(team0) entered blocking state [ 905.156739][ T4556] bridge0: port 5(team0) entered disabled state [ 905.187185][ T4556] team0: entered allmulticast mode [ 905.209398][ T4556] team_slave_1: entered allmulticast mode [ 905.227754][ T4556] team0: entered promiscuous mode [ 905.234878][ T4556] team_slave_1: entered promiscuous mode [ 905.381363][ T4571] __nla_validate_parse: 12 callbacks suppressed [ 905.381388][ T4571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8513'. [ 905.450789][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8515'. [ 905.848252][ T4594] FAULT_INJECTION: forcing a failure. [ 905.848252][ T4594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.874630][ T4594] CPU: 1 UID: 0 PID: 4594 Comm: syz.1.8521 Not tainted syzkaller #0 PREEMPT(full) [ 905.874663][ T4594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 905.874678][ T4594] Call Trace: [ 905.874687][ T4594] [ 905.874698][ T4594] dump_stack_lvl+0xe8/0x150 [ 905.874744][ T4594] should_fail_ex+0x412/0x560 [ 905.874775][ T4594] _copy_from_user+0x2d/0xb0 [ 905.874807][ T4594] ___sys_recvmsg+0x175/0x590 [ 905.874839][ T4594] ? get_pid_task+0x20/0x1f0 [ 905.874857][ T4594] ? get_pid_task+0x20/0x1f0 [ 905.874882][ T4594] ? __pfx____sys_recvmsg+0x10/0x10 [ 905.874939][ T4594] ? __fget_files+0x3a0/0x420 [ 905.874980][ T4594] __x64_sys_recvmsg+0x1ba/0x2a0 [ 905.875017][ T4594] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 905.875058][ T4594] ? __pfx_ksys_write+0x10/0x10 [ 905.875093][ T4594] do_syscall_64+0x14d/0xf80 [ 905.875126][ T4594] ? trace_irq_disable+0x3b/0x150 [ 905.875158][ T4594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.875182][ T4594] ? clear_bhb_loop+0x40/0x90 [ 905.875208][ T4594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.875230][ T4594] RIP: 0033:0x7f436ab9c629 [ 905.875251][ T4594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.875270][ T4594] RSP: 002b:00007f436bad8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 905.875293][ T4594] RAX: ffffffffffffffda RBX: 00007f436ae15fa0 RCX: 00007f436ab9c629 [ 905.875309][ T4594] RDX: 0000000000002000 RSI: 0000200000000100 RDI: 0000000000000003 [ 905.875323][ T4594] RBP: 00007f436bad8090 R08: 0000000000000000 R09: 0000000000000000 [ 905.875336][ T4594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.875349][ T4594] R13: 00007f436ae16038 R14: 00007f436ae15fa0 R15: 00007fffa84f0eb8 [ 905.875385][ T4594] [ 906.189347][ T4601] validate_nla: 2 callbacks suppressed [ 906.189368][ T4601] netlink: 'syz.2.8526': attribute type 1 has an invalid length. [ 906.207429][ T4604] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8524'. [ 906.271259][ T4601] bond0: entered promiscuous mode [ 906.277254][ T4601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.313109][ T4601] bond0: (slave bridge3): making interface the new active one [ 906.321794][ T4601] bridge3: entered promiscuous mode [ 906.332515][ T4601] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 906.403142][ T4619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8530'. [ 906.468796][ T4601] bond0: (slave gretap2): Enslaving as a backup interface with an up link [ 906.537525][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8526'. [ 906.630200][ T4601] macvlan2: entered promiscuous mode [ 906.635734][ T4601] macvlan2: entered allmulticast mode [ 906.656261][ T4601] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 906.707667][ T4634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8533'. [ 906.728056][ T4634] netlink: 'syz.3.8533': attribute type 7 has an invalid length. [ 906.741712][ T4634] netlink: 'syz.3.8533': attribute type 8 has an invalid length. [ 906.764325][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8533'. [ 906.828412][ T4638] netlink: 'syz.4.8534': attribute type 2 has an invalid length. [ 906.846699][ T4638] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8534'. [ 907.481835][ T4670] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8543'. [ 907.531671][ T4672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8544'. [ 908.216354][ T4709] bridge0: port 1(syz_tun) entered blocking state [ 908.259746][ T4709] bridge0: port 1(syz_tun) entered disabled state [ 908.281538][ T4709] syz_tun: entered allmulticast mode [ 908.289844][ T4709] syz_tun: entered promiscuous mode [ 908.313076][ T4719] syzkaller0: entered promiscuous mode [ 908.318830][ T4719] syzkaller0: entered allmulticast mode [ 909.156406][ T4774] sit0: Caught tx_queue_len zero misconfig [ 909.203529][ T4774] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 909.227125][ T4774] bond12 (unregistering): Released all slaves [ 909.768770][ T3199] net_ratelimit: 218 callbacks suppressed [ 909.768794][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 909.774498][ T3201] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 909.798184][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 909.810178][ T3201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 909.829404][ T3201] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 909.842959][ T3201] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 909.928250][ T3201] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 909.948123][ T3201] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 909.972157][ T3201] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 909.986493][ T3201] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 910.011869][ T4817] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 910.036423][ T4817] netlink: 'syz.0.8589': attribute type 1 has an invalid length. [ 910.156081][ T4823] tipc: Started in network mode [ 910.161270][ T4823] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 910.169973][ T4823] tipc: Enabled bearer , priority 2 [ 910.185255][ T4824] vlan3: entered allmulticast mode [ 910.193407][ T4824] hsr0: entered allmulticast mode [ 910.199806][ T4824] hsr_slave_0: entered allmulticast mode [ 910.205615][ T4824] hsr_slave_1: entered allmulticast mode [ 910.295222][ T4830] FAULT_INJECTION: forcing a failure. [ 910.295222][ T4830] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 910.311399][ T4830] CPU: 0 UID: 0 PID: 4830 Comm: syz.1.8594 Not tainted syzkaller #0 PREEMPT(full) [ 910.311431][ T4830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 910.311446][ T4830] Call Trace: [ 910.311455][ T4830] [ 910.311465][ T4830] dump_stack_lvl+0xe8/0x150 [ 910.311504][ T4830] should_fail_ex+0x412/0x560 [ 910.311535][ T4830] prepare_alloc_pages+0x22a/0x650 [ 910.311571][ T4830] __alloc_frozen_pages_noprof+0x12f/0x380 [ 910.311604][ T4830] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 910.311634][ T4830] ? __pfx_policy_nodemask+0x10/0x10 [ 910.311667][ T4830] ? __lock_acquire+0x6b5/0x2cf0 [ 910.311699][ T4830] alloc_pages_mpol+0x232/0x4a0 [ 910.311733][ T4830] vma_alloc_folio_noprof+0xea/0x210 [ 910.311764][ T4830] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 910.311805][ T4830] do_pte_missing+0x1656/0x3750 [ 910.311850][ T4830] handle_mm_fault+0x1bec/0x3310 [ 910.311897][ T4830] ? handle_mm_fault+0xee/0x3310 [ 910.311937][ T4830] ? __pfx_handle_mm_fault+0x10/0x10 [ 910.311992][ T4830] ? lock_mm_and_find_vma+0xa7/0x340 [ 910.312017][ T4830] do_user_addr_fault+0x75b/0x1340 [ 910.312065][ T4830] exc_page_fault+0x6a/0xc0 [ 910.312100][ T4830] asm_exc_page_fault+0x26/0x30 [ 910.312121][ T4830] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 910.312148][ T4830] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 910.312167][ T4830] RSP: 0018:ffffc9000644f638 EFLAGS: 00050202 [ 910.312188][ T4830] RAX: ffff8880773d4e01 RBX: ffff8880773d4f55 RCX: 0000000000000f2f [ 910.312205][ T4830] RDX: 0000000000000000 RSI: ffff8880773d4f55 RDI: 0000200000001780 [ 910.312219][ T4830] RBP: ffffc9000644f7b0 R08: ffff8880773d5e83 R09: 1ffff1100ee7abd0 [ 910.312236][ T4830] R10: dffffc0000000000 R11: ffffed100ee7abd1 R12: dffffc0000000000 [ 910.312251][ T4830] R13: 0000000000000f2f R14: 00007ffffffff000 R15: 00002000000026af [ 910.312287][ T4830] _copy_to_iter+0x60a/0x17d0 [ 910.312340][ T4830] ? __pfx__copy_to_iter+0x10/0x10 [ 910.312366][ T4830] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 910.312404][ T4830] ? lockdep_hardirqs_on+0x7a/0x110 [ 910.312447][ T4830] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 910.312478][ T4830] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 910.312521][ T4830] __skb_datagram_iter+0xf8/0x980 [ 910.312556][ T4830] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 910.312601][ T4830] skb_copy_datagram_iter+0xb5/0x270 [ 910.312639][ T4830] netlink_recvmsg+0x2c3/0xa50 [ 910.312679][ T4830] ? __pfx_netlink_recvmsg+0x10/0x10 [ 910.312703][ T4830] ? is_bpf_text_address+0x26/0x2b0 [ 910.312732][ T4830] ? aa_sock_msg_perm+0xf1/0x1b0 [ 910.312760][ T4830] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 910.312784][ T4830] ? security_socket_recvmsg+0x7e/0x2c0 [ 910.312813][ T4830] ? __pfx_netlink_recvmsg+0x10/0x10 [ 910.312838][ T4830] sock_recvmsg+0x22c/0x270 [ 910.312866][ T4830] ____sys_recvmsg+0x1e6/0x4a0 [ 910.312907][ T4830] ? __pfx_____sys_recvmsg+0x10/0x10 [ 910.312954][ T4830] ? import_iovec+0x73/0xa0 [ 910.312989][ T4830] ___sys_recvmsg+0x215/0x590 [ 910.313018][ T4830] ? get_pid_task+0x20/0x1f0 [ 910.313045][ T4830] ? __pfx____sys_recvmsg+0x10/0x10 [ 910.313104][ T4830] ? __fget_files+0x3a0/0x420 [ 910.313149][ T4830] __x64_sys_recvmsg+0x1ba/0x2a0 [ 910.313184][ T4830] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 910.313229][ T4830] ? __pfx_ksys_write+0x10/0x10 [ 910.313271][ T4830] do_syscall_64+0x14d/0xf80 [ 910.313304][ T4830] ? trace_irq_disable+0x3b/0x150 [ 910.313335][ T4830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.313358][ T4830] ? clear_bhb_loop+0x40/0x90 [ 910.313396][ T4830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.313418][ T4830] RIP: 0033:0x7f436ab9c629 [ 910.313438][ T4830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.313457][ T4830] RSP: 002b:00007f436bad8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 910.313480][ T4830] RAX: ffffffffffffffda RBX: 00007f436ae15fa0 RCX: 00007f436ab9c629 [ 910.313496][ T4830] RDX: 0000000000002000 RSI: 0000200000000100 RDI: 0000000000000003 [ 910.313510][ T4830] RBP: 00007f436bad8090 R08: 0000000000000000 R09: 0000000000000000 [ 910.313524][ T4830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.313537][ T4830] R13: 00007f436ae16038 R14: 00007f436ae15fa0 R15: 00007fffa84f0eb8 [ 910.313572][ T4830] [ 910.321791][ T4832] tipc: Enabled bearer , priority 0 [ 910.767059][ T4833] ip6_vti0: entered allmulticast mode [ 910.790960][ T4831] tipc: Disabling bearer [ 910.941152][ T4845] __nla_validate_parse: 15 callbacks suppressed [ 910.941174][ T4845] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.8600'. [ 910.960480][ T4845] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.8600'. [ 911.238724][ T4866] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8605'. [ 911.308529][T25976] tipc: Node number set to 10463914 [ 911.417263][ T4883] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8608'. [ 911.431122][ T4880] lo: entered promiscuous mode [ 911.435983][ T4880] lo: entered allmulticast mode [ 911.454681][ T4880] tunl0: entered promiscuous mode [ 911.462573][ T4880] tunl0: entered allmulticast mode [ 911.468126][ T4880] gre0: entered promiscuous mode [ 911.473211][ T4880] gre0: entered allmulticast mode [ 911.482362][ T4880] gretap0: entered promiscuous mode [ 911.488162][ T4880] gretap0: entered allmulticast mode [ 911.493829][ T4880] erspan0: entered promiscuous mode [ 911.525467][ T4880] erspan0: entered allmulticast mode [ 911.531537][ T4880] ip_vti0: entered promiscuous mode [ 911.537673][ T4880] ip_vti0: entered allmulticast mode [ 911.549205][ T4880] ip6_vti0: entered promiscuous mode [ 911.554768][ T4880] ip6_vti0: entered allmulticast mode [ 911.562643][ T4880] sit0: entered promiscuous mode [ 911.568047][ T4880] sit0: entered allmulticast mode [ 911.573399][ T4880] ip6tnl0: entered promiscuous mode [ 911.579871][ T4880] ip6tnl0: entered allmulticast mode [ 911.585564][ T4880] ip6gre0: entered promiscuous mode [ 911.591219][ T4880] ip6gre0: entered allmulticast mode [ 911.596809][ T4880] ip6gretap0: entered promiscuous mode [ 911.603164][ T4880] ip6gretap0: entered allmulticast mode [ 911.635273][ T4880] bridge0: entered promiscuous mode [ 911.641563][ T4880] bridge0: entered allmulticast mode [ 911.647212][ T4880] vcan0: entered promiscuous mode [ 911.662910][ T4880] vcan0: entered allmulticast mode [ 911.668965][ T4880] `: entered promiscuous mode [ 911.674179][ T4880] `: entered allmulticast mode [ 911.680220][ T4880] dummy0: entered promiscuous mode [ 911.687640][ T4880] dummy0: entered allmulticast mode [ 911.694591][ T4880] nlmon0: entered promiscuous mode [ 911.700678][ T4880] nlmon0: entered allmulticast mode [ 911.706417][ T4880] caif0: entered promiscuous mode [ 911.712032][ T4880] caif0: entered allmulticast mode [ 911.718754][ T4880] batadv0: entered promiscuous mode [ 911.724220][ T4880] batadv0: entered allmulticast mode [ 911.730491][ T4880] veth0: entered promiscuous mode [ 911.735764][ T4880] veth0: entered allmulticast mode [ 911.742410][ T4880] veth1: entered promiscuous mode [ 911.747721][ T4880] veth1: entered allmulticast mode [ 911.753702][ T4880] wg0: entered promiscuous mode [ 911.759462][ T4880] wg0: entered allmulticast mode [ 911.767503][ T4880] wg2: entered promiscuous mode [ 911.776149][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8614'. [ 911.785807][ T4880] wg2: entered allmulticast mode [ 911.791600][ T4880] veth0_to_bridge: entered promiscuous mode [ 911.798485][ T4880] veth0_to_bridge: entered allmulticast mode [ 911.804953][ T4880] bridge_slave_0: entered promiscuous mode [ 911.821320][ T4880] bridge_slave_0: entered allmulticast mode [ 911.827637][ T4880] veth1_to_bridge: entered promiscuous mode [ 911.835070][ T4880] veth1_to_bridge: entered allmulticast mode [ 911.841736][ T4880] bridge_slave_1: entered promiscuous mode [ 911.847721][ T4880] bridge_slave_1: entered allmulticast mode [ 911.854482][ T4880] veth0_to_bond: entered promiscuous mode [ 911.860361][ T4880] veth0_to_bond: entered allmulticast mode [ 911.866424][ T4880] bond_slave_0: entered promiscuous mode [ 911.872659][ T4880] bond_slave_0: entered allmulticast mode [ 911.880546][ T4880] veth1_to_bond: entered promiscuous mode [ 911.886313][ T4880] veth1_to_bond: entered allmulticast mode [ 911.892656][ T4880] bond_slave_1: entered promiscuous mode [ 911.898406][ T4880] bond_slave_1: entered allmulticast mode [ 911.904401][ T4880] veth1_to_team: entered promiscuous mode [ 911.910535][ T4880] veth1_to_team: entered allmulticast mode [ 911.916643][ T4880] : entered promiscuous mode [ 911.921521][ T4880] : entered allmulticast mode [ 911.926626][ T4880] veth0_to_batadv: entered promiscuous mode [ 911.932876][ T4880] veth0_to_batadv: entered allmulticast mode [ 911.940270][ T4880] batadv_slave_0: entered promiscuous mode [ 911.946182][ T4880] batadv_slave_0: entered allmulticast mode [ 911.952755][ T4880] xfrm0: entered promiscuous mode [ 911.957917][ T4880] xfrm0: entered allmulticast mode [ 911.963342][ T4880] veth0_to_hsr: entered promiscuous mode [ 911.969416][ T4880] veth0_to_hsr: entered allmulticast mode [ 911.975551][ T4880] hsr_slave_0: entered allmulticast mode [ 912.012689][ T4887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8610'. [ 912.026969][ T4889] mac80211_hwsim hwsim73 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 912.334407][ T4912] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 912.456629][ T4924] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 912.942057][ T4951] dvmrp1: entered allmulticast mode [ 913.354667][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8635'. [ 913.532057][ T4979] veth1: Caught tx_queue_len zero misconfig [ 913.758914][ T5006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8644'. [ 913.863335][ T5006] xfrm1: entered promiscuous mode [ 913.870339][ T5006] xfrm1: entered allmulticast mode [ 914.032786][ T5021] bridge0: port 1(gretap0) entered blocking state [ 914.046695][ T5021] bridge0: port 1(gretap0) entered disabled state [ 914.054496][ T5021] gretap0: entered allmulticast mode [ 914.063872][ T5021] gretap0: entered promiscuous mode [ 914.072354][ T5020] tipc: MTU too low for tipc bearer [ 914.208847][ T797] IPVS: starting estimator thread 0... [ 914.298301][ T5032] IPVS: using max 25 ests per chain, 60000 per kthread [ 914.346764][ T5040] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8653'. [ 914.613299][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 914.630127][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 914.639261][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 914.657702][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 914.699483][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 914.714285][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 914.738624][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 914.750598][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 914.770790][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 914.788654][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 914.803458][ T5050] netlink: 'syz.1.8656': attribute type 29 has an invalid length. [ 914.817206][ T5048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8655'. [ 914.829052][ T3199] net_ratelimit: 300 callbacks suppressed [ 914.829073][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 914.843690][ T8725] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 914.854539][ T5053] netlink: 'syz.1.8656': attribute type 29 has an invalid length. [ 914.893160][ T3199] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 914.902363][ T3201] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 914.979747][ T3200] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.038590][ T3200] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.046673][ T3200] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 915.068613][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 915.107893][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 915.115837][ T3199] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 915.638208][ T5840] block nbd0: Receive control failed (result -32) [ 915.692643][ T5045] ip6_vti0 speed is unknown, defaulting to 1000 [ 915.907132][ T5086] netlink: 'syz.2.8664': attribute type 10 has an invalid length. [ 916.403573][ T3196] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 916.545941][ T3196] bond1 (unregistering): (slave gretap1): Releasing active interface [ 916.822752][ T3196] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 916.831278][ T3196] bridge4 (unregistering): left promiscuous mode [ 916.848237][ T5840] Bluetooth: hci0: command tx timeout [ 916.882330][ T3196] ` (unregistering): Released all slaves [ 916.892969][ T3196] bond1 (unregistering): Released all slaves [ 916.908414][ T3196] bond2 (unregistering): Released all slaves [ 916.929417][ T3196] bond3 (unregistering): Released all slaves [ 916.945555][ T3196] bond4 (unregistering): Released all slaves [ 916.968069][ T3196] bond0 (unregistering): Released all slaves [ 916.985461][ T3196] bond5 (unregistering): Released all slaves [ 917.001586][ T3196] bond6 (unregistering): Released all slaves [ 917.078498][ T5045] lo speed is unknown, defaulting to 1000 [ 917.089756][ T3199] smc: removing ib device syz2 [ 917.220542][ T5123] __nla_validate_parse: 1 callbacks suppressed [ 917.220563][ T5123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8670'. [ 917.402217][ T5123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8670'. [ 917.891158][ T5160] netlink: 'syz.1.8679': attribute type 39 has an invalid length. [ 918.021866][ T5160] syz_tun (unregistering): left allmulticast mode [ 918.930606][ T5840] Bluetooth: hci0: command tx timeout [ 919.045023][ T5205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8688'. [ 919.069483][ T5045] chnl_net:caif_netlink_parms(): no params data found [ 919.212067][ T5214] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 919.235400][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8688'. [ 919.849060][ T8715] net_ratelimit: 205 callbacks suppressed [ 919.849081][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 919.895294][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 919.931315][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 919.979624][ T49] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 920.018934][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 920.052850][ T8715] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 920.194022][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.209312][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 920.241502][ T5045] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.249505][ T3200] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 920.268992][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 920.287743][ T5045] bridge_slave_0: entered allmulticast mode [ 920.300609][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 920.421872][ T5045] bridge_slave_0: entered promiscuous mode [ 920.495442][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.518777][ T5045] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.546531][ T5045] bridge_slave_1: entered allmulticast mode [ 920.623090][ T5045] bridge_slave_1: entered promiscuous mode [ 920.844988][ T5267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8702'. [ 920.975871][ T5045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.022073][ T5840] Bluetooth: hci0: command tx timeout [ 921.032325][ T5045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.113051][ T5045] team0: Port device team_slave_0 added [ 921.167187][ T5045] team0: Port device team_slave_1 added [ 921.348579][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.388079][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.460576][ T5045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.517560][ T3196] tipc: Left network mode [ 921.528840][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.554346][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.650842][ T5045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.702893][ T5309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8709'. [ 921.842087][ T5314] veth9: entered allmulticast mode [ 921.946075][ T5045] hsr_slave_0: entered promiscuous mode [ 921.955003][ T5045] hsr_slave_1: entered promiscuous mode [ 922.217690][ T5327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8716'. [ 922.554915][ T5344] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 922.836723][ T5358] macvlan0: entered promiscuous mode [ 923.089240][ T5840] Bluetooth: hci0: command tx timeout [ 923.316920][ T5382] netlink: 252 bytes leftover after parsing attributes in process `syz.2.8728'. [ 923.346265][ T5385] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8729'. [ 923.516027][ T5390] netlink: 'syz.2.8730': attribute type 16 has an invalid length. [ 923.548528][ T5390] netlink: 'syz.2.8730': attribute type 17 has an invalid length. [ 923.700353][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.707653][ T5390] bridge0: port 1(bridge_slave_0) entered listening state [ 924.020293][ T3196] hsr_slave_1: left promiscuous mode [ 924.773797][ T5045] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 924.858383][ T3200] net_ratelimit: 254 callbacks suppressed [ 924.858414][ T3200] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 924.881930][ T5045] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 924.938495][ T3200] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 924.946425][ T3200] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 924.977613][ T5045] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 925.075743][ T5452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8740'. [ 925.110404][ T49] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 925.141909][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 925.156749][ T5045] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 925.169554][ T5455] netlink: zone id is out of range [ 925.193303][ T5455] netlink: zone id is out of range [ 925.203010][ T49] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 925.213380][ T5455] netlink: zone id is out of range [ 925.232439][ T5455] netlink: zone id is out of range [ 925.495705][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8744'. [ 925.636512][ T5045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.679505][ T5494] netlink: 'syz.1.8748': attribute type 11 has an invalid length. [ 925.718505][ T5494] netlink: 'syz.1.8748': attribute type 11 has an invalid length. [ 925.731994][ T5494] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8748'. [ 925.880125][ T5505] netlink: 'syz.1.8751': attribute type 1 has an invalid length. [ 925.894275][ T5505] netlink: 'syz.1.8751': attribute type 1 has an invalid length. [ 925.919024][ T5505] netlink: 'syz.1.8751': attribute type 1 has an invalid length. [ 925.926838][ T5505] netlink: 'syz.1.8751': attribute type 2 has an invalid length. [ 925.940829][ T5505] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8751'. [ 926.053588][ T5045] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.137266][ T3241] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.144623][ T3241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.154885][ T3196] IPVS: stop unused estimator thread 0... [ 926.207011][ T3241] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.214268][ T3241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.233190][ T5517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8752'. [ 926.391326][ T5045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 926.511588][ T5531] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8755'. [ 926.531021][ T5535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8756'. [ 926.727145][ T5545] netlink: 'syz.4.8757': attribute type 10 has an invalid length. [ 927.210724][ T5045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.299662][ T5579] nbd4: detected capacity change from 0 to 63 [ 927.340991][ T5045] veth0_vlan: entered promiscuous mode [ 927.359424][ T5581] nbd5: detected capacity change from 0 to 63 [ 927.372047][ T5586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8767'. [ 927.384763][ T5045] veth1_vlan: entered promiscuous mode [ 927.405566][ T5840] block nbd4: Receive control failed (result -104) [ 927.418906][ T5142] block nbd5: Receive control failed (result -32) [ 927.585099][ T5045] veth0_macvtap: entered promiscuous mode [ 927.612925][ T5045] veth1_macvtap: entered promiscuous mode [ 927.694681][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 927.737639][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 927.835892][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.865211][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.904596][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.931988][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.116991][ T8725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.152738][ T8725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.182850][ T5623] syzkaller0: entered promiscuous mode [ 928.190016][ T5623] syzkaller0: entered allmulticast mode [ 928.331173][ T3196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.360942][ T5623] __nla_validate_parse: 1 callbacks suppressed [ 928.360964][ T5623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8775'. [ 928.381542][ T3196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.823223][ T5659] netlink: 'syz.4.8782': attribute type 11 has an invalid length. [ 929.273724][ T5688] netlink: 'syz.0.8790': attribute type 11 has an invalid length. [ 929.458815][ T5693] syzkaller0: entered promiscuous mode [ 929.464366][ T5693] syzkaller0: entered allmulticast mode [ 929.792773][ T5728] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8794'. [ 929.849924][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8798'. [ 929.861035][ T5695] syzkaller0: entered promiscuous mode [ 929.866777][ T5695] syzkaller0: entered allmulticast mode [ 929.873782][ T3200] net_ratelimit: 179 callbacks suppressed [ 929.873801][ T3200] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 929.895452][ T5718] tipc: Enabled bearer , priority 0 [ 929.911545][ T3200] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 929.968478][ T5694] tipc: Resetting bearer [ 929.988238][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 930.008589][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 930.028048][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 930.048876][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 930.079884][ T5694] tipc: Disabling bearer [ 930.087960][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 930.134613][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 930.170382][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 930.228207][ T49] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 931.076528][ T5787] xt_socket: unknown flags 0x50 [ 931.499808][ T1631] block nbd3: Possible stuck request ffff888026b1d000: control (read@0,1024B). Runtime 120 seconds [ 931.510841][ T1631] block nbd3: Possible stuck request ffff888026b1d200: control (read@1024,1024B). Runtime 120 seconds [ 931.522283][ T1631] block nbd3: Possible stuck request ffff888026b1d400: control (read@2048,1024B). Runtime 120 seconds [ 931.533512][ T1631] block nbd3: Possible stuck request ffff888026b1d600: control (read@3072,1024B). Runtime 120 seconds [ 932.134645][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 933.070835][ T5743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 933.637719][ T5846] netlink: 'syz.0.8824': attribute type 3 has an invalid length. [ 933.913281][ T5875] bond12: option lp_interval: invalid value (0) [ 933.919701][ T5875] bond12: option lp_interval: allowed values 1 - 2147483647 [ 933.940175][ T5875] bond12 (unregistering): Released all slaves [ 933.985817][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8834'. [ 934.252187][ T5902] syzkaller0: entered promiscuous mode [ 934.257742][ T5902] syzkaller0: entered allmulticast mode [ 934.654529][ T5928] wg1: Caught tx_queue_len zero misconfig [ 934.675546][ T5928] netlink: 'syz.3.8845': attribute type 2 has an invalid length. [ 934.704996][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8845'. [ 934.732269][ T5930] syzkaller0: entered promiscuous mode [ 934.748111][ T5930] syzkaller0: entered allmulticast mode [ 934.748522][ T5928] IPv6: NLM_F_CREATE should be specified when creating new route [ 934.773707][ T5930] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 934.783292][ T5928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 934.790882][ T5928] IPv6: NLM_F_CREATE should be set when creating new route [ 934.798311][ T5928] IPv6: NLM_F_CREATE should be set when creating new route [ 934.805577][ T5928] IPv6: NLM_F_CREATE should be set when creating new route [ 934.906353][ T5940] net_ratelimit: 123 callbacks suppressed [ 934.906377][ T5940] netlink: zone id is out of range [ 934.931074][ T5940] netlink: zone id is out of range [ 934.937466][ T5940] netlink: zone id is out of range [ 934.944199][ T5940] netlink: zone id is out of range [ 934.950606][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 934.950639][ T3196] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 934.995311][ T5940] netlink: zone id is out of range [ 935.003124][ T5940] netlink: zone id is out of range [ 935.009307][ T5940] netlink: zone id is out of range [ 935.014732][ T5940] netlink: set zone limit has 4 unknown bytes [ 935.029052][ T3200] tipc: Subscription rejected, illegal request [ 935.193088][ T5953] netlink: 'syz.2.8854': attribute type 1 has an invalid length. [ 935.419284][ T5973] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8861'. [ 935.493006][ T5979] gre0: entered promiscuous mode [ 935.499609][ T5979] gre0: entered allmulticast mode [ 935.733335][ T5996] tipc: Enabled bearer , priority 10 [ 935.756060][ T5997] tipc: Enabling of bearer rejected, already enabled [ 935.899648][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8870'. [ 935.916315][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8870'. [ 935.933433][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8870'. [ 935.968106][ T6001] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8870'. [ 936.000718][ T6001] syzkaller0: entered promiscuous mode [ 936.006371][ T6001] syzkaller0: entered allmulticast mode [ 936.606489][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 936.631314][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 936.641533][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 936.652616][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 936.660583][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 936.811257][ T6050] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8884'. [ 936.956827][ T6052] netlink: 'syz.1.8885': attribute type 1 has an invalid length. [ 937.061124][ T6052] 8021q: adding VLAN 0 to HW filter on device bond6 [ 937.216917][T27213] syz_tun (unregistering): left allmulticast mode [ 937.253895][T27213] syz_tun (unregistering): left promiscuous mode [ 937.279770][T27213] bridge0: port 1(syz_tun) entered disabled state [ 937.291132][ T6071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8889'. [ 937.309252][ T6071] netlink: 13 bytes leftover after parsing attributes in process `syz.3.8889'. [ 937.407968][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 937.416117][ C1] lec:lec_tx_timeout: lec0 [ 937.451938][ T6071] veth11: entered promiscuous mode [ 937.462170][ T6040] lo speed is unknown, defaulting to 1000 [ 937.594055][ T8715] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 937.643915][ T8715] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.721800][ T6085] : entered promiscuous mode [ 937.770035][ T8715] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 937.814601][ T8715] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.933819][ T8715] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.006693][ T8715] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.021394][ T6108] nbd: socks must be embedded in a SOCK_ITEM attr [ 938.122610][ T8715] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.133350][ T8715] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.654061][ T6040] chnl_net:caif_netlink_parms(): no params data found [ 938.690449][ T5840] Bluetooth: hci2: command tx timeout [ 939.226777][ T6186] __nla_validate_parse: 4 callbacks suppressed [ 939.226798][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8916'. [ 939.280434][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8916'. [ 939.312987][ T8715] bond3 (unregistering): (slave vti0): Releasing backup interface [ 939.321418][ T8715] vti0 (unregistering): left promiscuous mode [ 939.447667][ T6190] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8916'. [ 939.464944][ T8715] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 939.473875][ T8715] bond2 (unregistering): (slave bridge1): the permanent HWaddr of slave - da:b8:17:95:76:a2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 939.522859][ T8715] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 939.563019][ T8715] bond4 (unregistering): (slave bridge3): Removing an active aggregator [ 939.572845][ T8715] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 939.581758][ T8715] bond4 (unregistering): (slave bridge3): the permanent HWaddr of slave - 3a:e1:15:52:1b:02 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 939.601371][ T8715] bridge3 (unregistering): left promiscuous mode [ 939.607745][ T8715] bridge3 (unregistering): left allmulticast mode [ 939.653772][ T8715] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 939.662938][ T8715] bridge4 (unregistering): left promiscuous mode [ 939.670076][ T8715] bridge4 (unregistering): left allmulticast mode [ 939.843835][ T8715] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 939.853927][ T8715] bond0 (unregistering): Released all slaves [ 939.865950][ T8715] bond1 (unregistering): Released all slaves [ 939.882675][ T8715] bond2 (unregistering): Released all slaves [ 939.904319][ T8715] bond3 (unregistering): Released all slaves [ 939.918430][ T3201] net_ratelimit: 178 callbacks suppressed [ 939.918464][ T3201] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 939.933897][ T8715] bond4 (unregistering): Released all slaves [ 939.949501][ T8725] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 939.964074][ T8715] bond5 (unregistering): Released all slaves [ 939.978162][ T3201] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 939.989875][ T8715] bond6 (unregistering): Released all slaves [ 940.007043][ T8715] bond7 (unregistering): Released all slaves [ 940.025355][ T8715] bond8 (unregistering): Released all slaves [ 940.031569][ T3201] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 940.048013][ T3201] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 940.059494][ T8715] bond9 (unregistering): Released all slaves [ 940.068442][ T3201] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 940.083186][ T8715] bond10 (unregistering): Released all slaves [ 940.089576][ T3201] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 940.108009][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 940.110570][ T8715] bond11 (unregistering): Released all slaves [ 940.128438][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 940.153171][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 940.163876][ T6166] tipc: Resetting bearer [ 940.212554][ T6186] xfrm1: entered promiscuous mode [ 940.217671][ T6186] xfrm1: entered allmulticast mode [ 940.465341][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.490845][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.508074][ T6040] bridge_slave_0: entered allmulticast mode [ 940.517409][ T6202] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8919'. [ 940.542733][ T6205] netlink: 'syz.3.8917': attribute type 8 has an invalid length. [ 940.558025][ T6202] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8919'. [ 940.574224][ T6040] bridge_slave_0: entered promiscuous mode [ 940.582343][ T8715] tipc: Disabling bearer [ 940.666204][ T8715] tipc: Left network mode [ 940.702241][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.723581][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.756365][ T6040] bridge_slave_1: entered allmulticast mode [ 940.780248][ T5840] Bluetooth: hci2: command tx timeout [ 940.794406][ T6040] bridge_slave_1: entered promiscuous mode [ 940.991992][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.055164][ T6226] netlink: 'syz.0.8924': attribute type 1 has an invalid length. [ 941.070797][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.238151][ T6226] bond2: entered promiscuous mode [ 941.243667][ T6226] 8021q: adding VLAN 0 to HW filter on device bond2 [ 941.337547][ T6227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 941.402646][ T6227] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 941.458132][ T6227] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 941.496092][ T6227] bond2: (slave vti0): making interface the new active one [ 941.513412][ T6240] netlink: 'syz.2.8927': attribute type 32 has an invalid length. [ 941.548197][ T6227] vti0: entered promiscuous mode [ 941.554766][ T6227] bond2: (slave vti0): Enslaving as an active interface with an up link [ 941.580537][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8927'. [ 941.651175][ T6240] bond9: Setting coupled_control to off (0) [ 941.685246][ T6040] team0: Port device team_slave_0 added [ 941.702371][ T6040] team0: Port device team_slave_1 added [ 941.818925][ T6244] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.8928'. [ 941.880368][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.899614][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.980000][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.036678][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.051465][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.090637][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.144521][ T6249] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.161214][ T6249] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.292644][ T6263] SET target dimension over the limit! [ 942.343179][ T6249] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.359109][ T6249] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.521213][ T6249] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.534511][ T6249] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.686757][ T6249] batman_adv: batadv0: Removing interface: netdevsim0 [ 942.706299][ T6249] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.753339][ T6249] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.799292][ T6040] hsr_slave_0: entered promiscuous mode [ 942.820029][ T6040] hsr_slave_1: entered promiscuous mode [ 942.840641][ T6040] debugfs: 'hsr0' already exists in 'hsr' [ 942.846625][ T6040] Cannot create hsr debugfs directory [ 942.852310][ T5840] Bluetooth: hci2: command tx timeout [ 942.959696][ T6294] netlink: 'syz.0.8939': attribute type 39 has an invalid length. [ 943.089837][ T3200] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.101235][ T3200] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.298976][ T3201] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.310589][ T3201] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.404351][ T3201] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.417999][ T3201] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.603905][ T8725] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.625787][ T8725] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.843410][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8950'. [ 943.879184][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8950'. [ 943.902132][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8950'. [ 944.050145][ T8715] hsr_slave_0: left promiscuous mode [ 944.086669][ T8715] hsr_slave_1: left promiscuous mode [ 944.094841][ T8715] batman_adv: batadv0: Interface deactivated: dummy0 [ 944.102208][ T8715] batman_adv: batadv0: Removing interface: dummy0 [ 944.136967][ T8715] veth1_macvtap: left promiscuous mode [ 944.153217][ T8715] veth0_macvtap: left promiscuous mode [ 944.161644][ T8715] veth1_vlan: left promiscuous mode [ 944.246944][ T6373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8957'. [ 944.933719][ T5840] Bluetooth: hci2: command tx timeout [ 944.940809][ T3200] net_ratelimit: 203 callbacks suppressed [ 944.940831][ T3200] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 944.978499][ T3200] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 945.005138][ T3200] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 945.038694][ T3200] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 945.062200][ T6384] veth0: entered promiscuous mode [ 945.079122][ T49] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 945.109909][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 945.139113][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 945.159368][ T6405] nbd: must specify at least one socket [ 945.187944][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 945.210922][ T6384] veth0: left promiscuous mode [ 945.219860][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 945.278717][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 945.403255][ T6413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8962'. [ 945.418482][ T6411] gre1: entered promiscuous mode [ 945.447636][ T6411] gre1: entered allmulticast mode [ 945.510220][ T6419] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8965'. [ 945.535835][ T6419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8965'. [ 945.546943][ T6419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8965'. [ 945.624442][ T8715] IPVS: stop unused estimator thread 0... [ 945.759012][ T6426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8967'. [ 946.173931][ T6445] netlink: 'syz.0.8971': attribute type 4 has an invalid length. [ 946.285496][ T6040] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 946.338376][ T6040] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 946.382660][ T6040] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 946.435225][ T6040] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 946.828818][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.890978][ T6040] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.932195][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.939420][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.990505][ T3201] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.997696][ T3201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.036504][ T6485] syz.0.8979: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 947.100168][ T6485] CPU: 0 UID: 0 PID: 6485 Comm: syz.0.8979 Not tainted syzkaller #0 PREEMPT(full) [ 947.100197][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 947.100210][ T6485] Call Trace: [ 947.100218][ T6485] [ 947.100227][ T6485] dump_stack_lvl+0xe8/0x150 [ 947.100262][ T6485] warn_alloc+0x249/0x340 [ 947.100287][ T6485] ? stack_trace_save+0xa9/0x100 [ 947.100313][ T6485] ? __pfx_warn_alloc+0x10/0x10 [ 947.100342][ T6485] ? kasan_save_track+0x4f/0x80 [ 947.100361][ T6485] ? kasan_save_track+0x3e/0x80 [ 947.100379][ T6485] ? __kasan_kmalloc+0x93/0xb0 [ 947.100399][ T6485] ? __kmalloc_cache_noprof+0x31c/0x660 [ 947.100419][ T6485] ? xskq_create+0x56/0x170 [ 947.100447][ T6485] ? xsk_setsockopt+0x54c/0x990 [ 947.100470][ T6485] ? do_sock_setsockopt+0x17c/0x1b0 [ 947.100496][ T6485] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 947.100523][ T6485] ? do_syscall_64+0x14d/0xf80 [ 947.100559][ T6485] __vmalloc_node_range_noprof+0x132/0x1730 [ 947.100617][ T6485] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 947.100645][ T6485] ? __kasan_kmalloc+0x93/0xb0 [ 947.100673][ T6485] vmalloc_user_noprof+0xad/0xe0 [ 947.100695][ T6485] ? xskq_create+0xbf/0x170 [ 947.100724][ T6485] xskq_create+0xbf/0x170 [ 947.100755][ T6485] xsk_init_queue+0x8a/0xe0 [ 947.100785][ T6485] xsk_setsockopt+0x54c/0x990 [ 947.100815][ T6485] ? __pfx_xsk_setsockopt+0x10/0x10 [ 947.100842][ T6485] ? __pfx_aa_sk_perm+0x10/0x10 [ 947.100870][ T6485] ? aa_sock_opt_perm+0xff/0x1a0 [ 947.100896][ T6485] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 947.100918][ T6485] ? __pfx_xsk_setsockopt+0x10/0x10 [ 947.100946][ T6485] do_sock_setsockopt+0x17c/0x1b0 [ 947.100979][ T6485] __x64_sys_setsockopt+0x13d/0x1b0 [ 947.101013][ T6485] do_syscall_64+0x14d/0xf80 [ 947.101041][ T6485] ? trace_irq_disable+0x3b/0x150 [ 947.101072][ T6485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.101093][ T6485] ? clear_bhb_loop+0x40/0x90 [ 947.101118][ T6485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.101139][ T6485] RIP: 0033:0x7f89ae79c629 [ 947.101169][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.101186][ T6485] RSP: 002b:00007f89af6bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 947.101209][ T6485] RAX: ffffffffffffffda RBX: 00007f89aea15fa0 RCX: 00007f89ae79c629 [ 947.101224][ T6485] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 947.101237][ T6485] RBP: 00007f89ae832b39 R08: 0000000000000004 R09: 0000000000000000 [ 947.101250][ T6485] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.101264][ T6485] R13: 00007f89aea16038 R14: 00007f89aea15fa0 R15: 00007ffddc425178 [ 947.101299][ T6485] [ 947.101308][ T6485] Mem-Info: [ 947.388166][ T6485] active_anon:10050 inactive_anon:0 isolated_anon:0 [ 947.388166][ T6485] active_file:3113 inactive_file:40673 isolated_file:0 [ 947.388166][ T6485] unevictable:768 dirty:131 writeback:0 [ 947.388166][ T6485] slab_reclaimable:13434 slab_unreclaimable:111480 [ 947.388166][ T6485] mapped:32113 shmem:3575 pagetables:1479 [ 947.388166][ T6485] sec_pagetables:0 bounce:0 [ 947.388166][ T6485] kernel_misc_reclaimable:0 [ 947.388166][ T6485] free:1292783 free_pcp:21826 free_cma:0 [ 947.506923][ T6485] Node 0 active_anon:42000kB inactive_anon:0kB active_file:12452kB inactive_file:162488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105748kB dirty:524kB writeback:0kB shmem:14464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14696kB pagetables:5764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 947.642104][ T6485] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24576kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 947.692210][ T6485] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 947.778382][ T6485] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 947.811689][ T6485] Node 0 DMA32 free:1331604kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43236kB inactive_anon:0kB active_file:12452kB inactive_file:162488kB unevictable:1536kB writepending:524kB zspages:0kB present:3129332kB managed:2552852kB mlocked:0kB bounce:0kB free_pcp:31568kB local_pcp:17880kB free_cma:0kB [ 947.946270][ T6485] lowmem_reserve[]: 0 0 0 0 0 [ 947.986861][ T6485] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 948.068561][ T6485] lowmem_reserve[]: 0 0 0 0 0 [ 948.074759][ T6485] Node 1 Normal free:3825804kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:55040kB local_pcp:28408kB free_cma:0kB [ 948.108251][ T6509] netlink: 'syz.1.8982': attribute type 12 has an invalid length. [ 948.186883][ T6485] lowmem_reserve[]: 0 0 0 0 0 [ 948.210957][ T6485] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11248kB [ 948.247473][ T6509] bond7: option primary_reselect: invalid value (255) [ 948.286291][ T6485] Node 0 DMA32: 10179*4kB (UME) 7776*8kB (UME) 4293*16kB (UME) 502*32kB (UME) 267*64kB (UME) 653*128kB (UM) 647*256kB (UME) 466*512kB (UM) 306*1024kB (UM) 159*2048kB (UM) 0*4096kB = 1331548kB [ 948.315814][ T6485] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 948.327680][ T6485] Node 1 Normal: 3*4kB (U) 6*8kB (UME) 15*16kB (UME) 17*32kB (UME) 11*64kB (UME) 7*128kB (UM) 7*256kB (UM) 4*512kB (UM) 4*1024kB (UME) 5*2048kB (UE) 929*4096kB (UM) = 3825804kB [ 948.360064][ T6509] bond7 (unregistering): Released all slaves [ 948.391585][ T6485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 948.410431][ T6485] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 948.442848][ T6485] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 948.464343][ T29] audit: type=1107 audit(1771848885.159:13): pid=6515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='mh*X٤ǪߝSڝM' [ 948.498241][ T6485] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 948.531617][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.544244][ T6485] 45157 total pagecache pages [ 948.565769][ T6485] 0 pages in swap cache [ 948.589246][ T6485] Free swap = 124996kB [ 948.614259][ T6485] Total swap = 124996kB [ 948.632508][ T6485] 2097051 pages RAM [ 948.645393][ T6485] 0 pages HighMem/MovableOnly [ 948.673138][ T6485] 427002 pages reserved [ 948.694678][ T6485] 0 pages cma reserved [ 949.584631][ T6040] veth0_vlan: entered promiscuous mode [ 949.669361][ T6040] veth1_vlan: entered promiscuous mode [ 949.950062][ T3201] net_ratelimit: 123 callbacks suppressed [ 949.950085][ T3201] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 949.972716][ T6040] veth0_macvtap: entered promiscuous mode [ 949.997194][ T3201] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 950.024973][ T6040] veth1_macvtap: entered promiscuous mode [ 950.121305][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.164529][ T3201] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 950.217901][ T3200] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 950.226637][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.249185][ T3201] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 950.301595][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 950.339538][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 950.360070][ T3201] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.387700][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 950.412148][ T3201] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.462847][ T3196] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 950.487877][ T3196] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 950.531010][ T3201] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.564773][ T3201] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.773847][ T3201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.785986][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8995'. [ 950.807908][ T3201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.915718][ T6599] batadv_slave_0: entered promiscuous mode [ 950.968788][ T8715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.976770][ T8715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.987681][ T6591] batadv_slave_0: left promiscuous mode [ 951.429071][ T6621] netlink: 'syz.4.9004': attribute type 1 has an invalid length. [ 951.462494][ T6621] netlink: 'syz.4.9004': attribute type 18 has an invalid length. [ 951.483801][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9004'. [ 951.528558][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9005'. [ 951.562473][ T6621] netlink: 'syz.4.9004': attribute type 18 has an invalid length. [ 951.570879][ T3200] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 951.602983][ T3200] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 951.614081][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9004'. [ 951.633299][ T6628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9006'. [ 951.642611][ T3200] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 951.642660][ T3200] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 951.824457][ T6633] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9007'. [ 951.838274][ T5142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 951.859287][ T5142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 951.882545][ T5142] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 951.898647][ T5142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 951.909141][ T5142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 952.187536][ T6650] netlink: 'syz.3.9010': attribute type 1 has an invalid length. [ 952.296576][ T6650] 8021q: adding VLAN 0 to HW filter on device bond12 [ 952.464698][ T6653] bond12: (slave geneve5): making interface the new active one [ 952.495160][ T6653] bond12: (slave geneve5): Enslaving as an active interface with an up link [ 952.809942][ T6632] lo speed is unknown, defaulting to 1000 [ 952.897528][ T6671] veth0_to_bond: entered allmulticast mode [ 953.168414][ T3201] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.177521][ T3200] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.229149][ T3200] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.275054][ T6632] chnl_net:caif_netlink_parms(): no params data found [ 953.313788][ T3200] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.373898][ T6693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9019'. [ 953.470336][ T6696] macvtap1: entered allmulticast mode [ 953.486228][ T6696] veth0_macvtap: entered allmulticast mode [ 953.650643][ T6704] syz_tun: entered promiscuous mode [ 953.656580][ T6704] macvtap1: entered promiscuous mode [ 953.688942][ T6704] syz_tun: left promiscuous mode [ 953.738996][ T6632] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.746694][ T6632] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.764370][ T6632] bridge_slave_0: entered allmulticast mode [ 953.779874][ T6632] bridge_slave_0: entered promiscuous mode [ 953.789416][ T6632] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.796749][ T6632] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.805903][ T6632] bridge_slave_1: entered allmulticast mode [ 953.815078][ T6632] bridge_slave_1: entered promiscuous mode [ 953.830419][ T6715] netlink: 'syz.0.9024': attribute type 8 has an invalid length. [ 953.887894][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 953.952160][ T6632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.968366][ T5840] Bluetooth: hci5: command tx timeout [ 953.987193][ T6632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.032130][ T6716] vlan2: entered promiscuous mode [ 954.037395][ T6716] bridge0: entered promiscuous mode [ 954.170102][ T6632] team0: Port device team_slave_0 added [ 954.194683][ T6632] team0: Port device team_slave_1 added [ 954.384496][ T6632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.396502][ T6632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.425583][ T6632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.462308][ T6632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.477969][ T6632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.522894][ T6632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.683332][ T6632] hsr_slave_0: entered promiscuous mode [ 954.709750][ T6632] hsr_slave_1: entered promiscuous mode [ 954.716802][ T6632] debugfs: 'hsr0' already exists in 'hsr' [ 954.723889][ T6632] Cannot create hsr debugfs directory [ 954.969107][ T8725] net_ratelimit: 141 callbacks suppressed [ 954.969130][ T8725] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 955.018354][ T8725] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 955.089937][ T8725] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 955.130010][ T8725] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 955.171083][ T8715] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 955.222082][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 955.236396][ T3199] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 955.303746][ T6632] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.348478][ T6632] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.368352][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 955.389742][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 955.401737][ T6772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 955.450256][ T6632] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.460772][ T6632] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.480851][ T6777] netlink: 'syz.0.9038': attribute type 1 has an invalid length. [ 955.548484][ T6777] netlink: 'syz.0.9038': attribute type 2 has an invalid length. [ 955.592861][ T6777] netlink: 'syz.0.9038': attribute type 1 has an invalid length. [ 955.617939][ T6777] netlink: 'syz.0.9038': attribute type 2 has an invalid length. [ 955.636300][ T6777] netlink: 'syz.0.9038': attribute type 1 has an invalid length. [ 955.682713][ T6632] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.714293][ T6632] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.856815][ T6794] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9042'. [ 955.873645][ T6632] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.895171][ T6632] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.048456][ T5840] Bluetooth: hci5: command tx timeout [ 956.073237][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9044'. [ 956.242738][ T5486] veth0_macvtap: left promiscuous mode [ 956.257521][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9045'. [ 956.306747][ T6815] team_slave_1: entered promiscuous mode [ 956.325552][ T6815] team_slave_1: left promiscuous mode [ 956.489468][ T6820] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9047'. [ 956.520381][ T6632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 956.554280][ T6632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 956.565954][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9047'. [ 956.600389][ T6632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 956.660826][ T6632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 956.926195][ T6846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9051'. [ 956.959846][ T6846] nbd: must specify at least one socket [ 956.972810][ T6632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.065039][ T6632] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.110839][ T3200] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.118260][ T3200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.177605][ T3199] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.184963][ T3199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.244752][ T6632] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 957.291437][ T6632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 957.608515][ T10] IPVS: starting estimator thread 0... [ 957.718268][ T6876] IPVS: using max 26 ests per chain, 62400 per kthread [ 957.739584][ T1653] block nbd4: Possible stuck request ffff888026b8a800: control (read@0,1024B). Runtime 30 seconds [ 957.751065][ T1653] block nbd4: Possible stuck request ffff888026b8aa00: control (read@1024,1024B). Runtime 30 seconds [ 957.763247][ T11] block nbd5: Possible stuck request ffff888026bb0000: control (read@0,1024B). Runtime 30 seconds [ 957.775360][ T11] block nbd5: Possible stuck request ffff888026bb0200: control (read@1024,1024B). Runtime 30 seconds [ 957.787170][ T1653] block nbd4: Possible stuck request ffff888026b8ac00: control (read@2048,1024B). Runtime 30 seconds [ 957.799406][ T11] block nbd5: Possible stuck request ffff888026bb0400: control (read@2048,1024B). Runtime 30 seconds [ 957.811592][ T1653] block nbd4: Possible stuck request ffff888026b8ae00: control (read@3072,1024B). Runtime 30 seconds [ 957.823084][ T11] block nbd5: Possible stuck request ffff888026bb0600: control (read@3072,1024B). Runtime 30 seconds [ 957.858032][ T6881] x_tables: duplicate underflow at hook 1 [ 958.071709][ T6900] IPVS: length: 24 != 163578360 [ 958.128425][ T5840] Bluetooth: hci5: command tx timeout [ 958.339102][ T6632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.342155][ T6907] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 958.482851][ T6632] veth0_vlan: entered promiscuous mode [ 958.527037][ T6632] veth1_vlan: entered promiscuous mode [ 958.670589][ T6632] veth0_macvtap: entered promiscuous mode [ 958.712328][ T6632] veth1_macvtap: entered promiscuous mode [ 958.771943][ T6632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.794670][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9070'. [ 958.813771][ T6926] x_tables: duplicate underflow at hook 1 [ 958.836556][ T6632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.871444][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9070'. [ 958.921321][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9070'. [ 958.959021][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9070'. [ 958.987481][ T3200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.024340][ T3200] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.099353][ T3200] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.131381][ T3200] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.371591][ T3200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.404164][ T3200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.485662][ T3196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.523052][ T3196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.986553][ T6986] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20001 [ 960.026286][ T8725] net_ratelimit: 140 callbacks suppressed [ 960.026311][ T8725] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 960.074882][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 960.108110][ T3236] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 960.137879][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 960.158097][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 960.165933][ T3199] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 960.209028][ T5840] Bluetooth: hci5: command tx timeout [ 960.297936][ T49] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 960.319814][ T49] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 960.438151][ T8725] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 960.445977][ T8725] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 960.865398][ T7034] __nla_validate_parse: 3 callbacks suppressed [ 960.865419][ T7034] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9093'. [ 961.143015][ T7053] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 961.389097][ T7068] IPv6: NLM_F_REPLACE set, but no existing node found! [ 961.523663][ T7073] bridge4: entered promiscuous mode [ 961.554352][ T7073] bridge4: entered allmulticast mode [ 961.574087][ T7073] team0: Port device bridge4 added [ 961.582657][ T1631] block nbd3: Possible stuck request ffff888026b1d000: control (read@0,1024B). Runtime 150 seconds [ 961.595140][ T1631] block nbd3: Possible stuck request ffff888026b1d200: control (read@1024,1024B). Runtime 150 seconds [ 961.607237][ T1631] block nbd3: Possible stuck request ffff888026b1d400: control (read@2048,1024B). Runtime 150 seconds [ 961.618512][ T1631] block nbd3: Possible stuck request ffff888026b1d600: control (read@3072,1024B). Runtime 150 seconds [ 961.816130][ T7090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9107'. [ 961.854017][ T7085] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9106'. [ 961.868470][ T7085] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9106'. [ 961.903037][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9108'. [ 962.024150][ T7098] netlink: 348 bytes leftover after parsing attributes in process `syz.1.9109'. [ 962.342258][T23408] lec:lec_start_xmit: lec0:No lecd attached [ 962.526971][ T7128] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.9119'. [ 962.602169][ T7125] syzkaller0: entered promiscuous mode [ 962.607741][ T7125] syzkaller0: entered allmulticast mode [ 963.461174][ T7178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 963.957015][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9127'. [ 964.013880][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9127'. [ 964.046881][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9127'. [ 964.543140][ T7217] syzkaller0: entered promiscuous mode [ 964.560713][ T7217] syzkaller0: entered allmulticast mode [ 964.570042][ T7224] validate_nla: 126 callbacks suppressed [ 964.570065][ T7224] netlink: 'syz.0.9136': attribute type 1 has an invalid length. [ 964.597970][ T7224] netlink: 'syz.0.9136': attribute type 2 has an invalid length. [ 965.037995][ T3241] net_ratelimit: 134 callbacks suppressed [ 965.038018][ T3241] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 965.098046][ T3241] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 965.128804][ T49] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 965.159923][ T8725] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 965.209910][ T8725] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 965.247964][ T8719] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 965.259494][ T8725] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 965.318135][ T8725] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 965.338752][ T3241] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 965.359827][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 967.336912][ T7228] pim6reg: left allmulticast mode [ 967.408199][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5060 ms [ 967.416305][ C1] lec:lec_tx_timeout: lec0 [ 969.216241][ T7329] NFSD: Failed to start, no listeners configured. [ 969.833847][ T7379] __nla_validate_parse: 3 callbacks suppressed [ 969.833871][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9167'. [ 969.925762][ T7384] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9168'. [ 969.956098][ T7388] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9169'. [ 970.021836][ T7390] netlink: 'syz.1.9170': attribute type 10 has an invalid length. [ 970.088330][ T8719] net_ratelimit: 154 callbacks suppressed [ 970.088355][ T8719] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 970.109565][ T8719] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 970.227939][ T49] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 970.238914][ T49] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 970.378017][ T8725] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 970.386016][ T8725] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 970.476530][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9180'. [ 970.539917][ T8719] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 970.593952][ T8719] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 970.638046][ T8719] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 970.678411][ T8719] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 970.996970][ T7446] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9189'. [ 971.056199][ T7449] syzkaller1: entered promiscuous mode [ 971.062886][ T7449] syzkaller1: entered allmulticast mode [ 971.145829][ T7453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9190'. [ 971.455610][ T7466] netlink: 'syz.1.9195': attribute type 1 has an invalid length. [ 971.483408][ T7466] netlink: 'syz.1.9195': attribute type 2 has an invalid length. [ 971.720753][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9200'. [ 972.154350][ T7500] syzkaller0: entered promiscuous mode [ 972.162924][ T7500] syzkaller0: entered allmulticast mode [ 972.200412][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9208'. [ 972.415267][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9210'. [ 974.881521][ T7569] netlink: 'syz.0.9220': attribute type 1 has an invalid length. [ 974.919463][ T7574] netlink: 'syz.1.9222': attribute type 1 has an invalid length. [ 974.999518][ T7574] bond1: (slave gretap1): making interface the new active one [ 975.007744][ T7574] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 975.022936][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9222'. [ 975.034925][ T7574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 975.142987][ T49] net_ratelimit: 164 callbacks suppressed [ 975.143011][ T49] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 975.186356][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9225'. [ 975.210264][ T49] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 975.339987][ T49] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 975.388545][ T3236] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 975.422329][ T3236] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 975.458792][ T3236] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 975.477528][ T3236] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 975.631175][ T8719] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 975.642606][ T8719] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 975.691555][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9234'. [ 975.798225][ T3236] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 975.852908][ T7624] team2: entered promiscuous mode [ 975.894180][ T7624] team2: entered allmulticast mode [ 975.971672][ T7636] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 976.037551][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9237'. [ 976.070284][ T7639] netlink: 'syz.0.9237': attribute type 6 has an invalid length. [ 976.087469][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9237'. [ 976.119592][ T7628] syzkaller0: entered promiscuous mode [ 976.125296][ T7628] syzkaller0: entered allmulticast mode [ 976.173835][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9237'. [ 976.193856][ T7639] netlink: 'syz.0.9237': attribute type 6 has an invalid length. [ 976.243263][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9237'. [ 976.469826][ T7662] netlink: 'syz.4.9242': attribute type 1 has an invalid length. [ 978.498268][ T7657] veth0: entered promiscuous mode [ 978.600167][ T7657] veth0: left promiscuous mode [ 978.791051][ T7693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9250'. [ 978.822787][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9250'. [ 979.004970][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9255'. [ 979.348017][ T7741] bridge0: Caught tx_queue_len zero misconfig [ 979.366665][ T7743] netlink: 'syz.0.9261': attribute type 1 has an invalid length. [ 979.395738][ T7743] netlink: 'syz.0.9261': attribute type 1 has an invalid length. [ 979.715470][ T7754] bond1: entered allmulticast mode [ 979.726349][ T7754] vti1: entered allmulticast mode [ 980.032931][ T7771] syzkaller0: entered promiscuous mode [ 980.043216][ T7771] syzkaller0: entered allmulticast mode [ 980.178259][ T3241] net_ratelimit: 160 callbacks suppressed [ 980.178282][ T3241] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.210855][ T3241] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 980.321704][ T7785] netlink: 'syz.0.9278': attribute type 1 has an invalid length. [ 980.329777][ T3241] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.337563][ T3241] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 980.470427][ T3236] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.520460][ T3241] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.550203][ T3241] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 980.688715][ T49] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.716014][ T7809] veth3: entered allmulticast mode [ 980.721830][ T49] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 980.745029][ T49] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 981.135880][ T7835] Bluetooth: MGMT ver 1.23 [ 981.456552][ T7858] syzkaller1: entered promiscuous mode [ 981.477983][ T7858] syzkaller1: entered allmulticast mode [ 981.571554][ T7863] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 981.945441][ T7884] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 982.120497][ T7899] __nla_validate_parse: 4 callbacks suppressed [ 982.120519][ T7899] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9313'. [ 982.310723][ T7899] [ 982.313135][ T7899] ====================================================== [ 982.320273][ T7899] WARNING: possible circular locking dependency detected [ 982.327360][ T7899] syzkaller #0 Not tainted [ 982.331818][ T7899] ------------------------------------------------------ [ 982.338882][ T7899] syz.2.9313/7899 is trying to acquire lock: [ 982.344897][ T7899] ffff888026bf3ed0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 982.354369][ T7899] [ 982.354369][ T7899] but task is already holding lock: [ 982.361775][ T7899] ffff888026bf3990 (&q->q_usage_counter(io)#56){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 982.372043][ T7899] [ 982.372043][ T7899] which lock already depends on the new lock. [ 982.372043][ T7899] [ 982.382737][ T7899] [ 982.382737][ T7899] the existing dependency chain (in reverse order) is: [ 982.391774][ T7899] [ 982.391774][ T7899] -> #6 (&q->q_usage_counter(io)#56){++++}-{0:0}: [ 982.400414][ T7899] blk_alloc_queue+0x546/0x680 [ 982.405758][ T7899] __blk_mq_alloc_disk+0x197/0x390 [ 982.411410][ T7899] nbd_dev_add+0x499/0xb50 [ 982.416374][ T7899] nbd_init+0x168/0x1f0 [ 982.421254][ T7899] do_one_initcall+0x250/0x8d0 [ 982.426577][ T7899] do_initcall_level+0x104/0x190 [ 982.432067][ T7899] do_initcalls+0x59/0xa0 [ 982.436947][ T7899] kernel_init_freeable+0x2a6/0x3e0 [ 982.442786][ T7899] kernel_init+0x1d/0x1d0 [ 982.447663][ T7899] ret_from_fork+0x51e/0xb90 [ 982.452801][ T7899] ret_from_fork_asm+0x1a/0x30 [ 982.458108][ T7899] [ 982.458108][ T7899] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 982.465342][ T7899] fs_reclaim_acquire+0x71/0x100 [ 982.470832][ T7899] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 982.477188][ T7899] __alloc_skb+0x1d0/0x7d0 [ 982.482146][ T7899] __ip6_append_data+0x2a44/0x3c50 [ 982.487798][ T7899] ip6_append_data+0x10f/0x280 [ 982.493103][ T7899] rawv6_sendmsg+0x12d3/0x18e0 [ 982.498409][ T7899] ____sys_sendmsg+0x894/0xad0 [ 982.503715][ T7899] ___sys_sendmsg+0x2a5/0x360 [ 982.508932][ T7899] __x64_sys_sendmsg+0x1bd/0x2a0 [ 982.514409][ T7899] do_syscall_64+0x14d/0xf80 [ 982.519637][ T7899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.526161][ T7899] [ 982.526161][ T7899] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 982.533918][ T7899] lock_sock_nested+0x48/0x100 [ 982.539224][ T7899] inet_shutdown+0x6a/0x390 [ 982.544274][ T7899] nbd_mark_nsock_dead+0x2e9/0x560 [ 982.549937][ T7899] recv_work+0x1c7f/0x1d90 [ 982.554910][ T7899] process_scheduled_works+0xb02/0x1830 [ 982.560999][ T7899] worker_thread+0xa50/0xfc0 [ 982.566133][ T7899] kthread+0x388/0x470 [ 982.570837][ T7899] ret_from_fork+0x51e/0xb90 [ 982.575984][ T7899] ret_from_fork_asm+0x1a/0x30 [ 982.581304][ T7899] [ 982.581304][ T7899] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 982.588979][ T7899] __mutex_lock+0x19f/0x1300 [ 982.594113][ T7899] nbd_queue_rq+0x37b/0x1100 [ 982.599253][ T7899] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 982.605349][ T7899] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 982.612228][ T7899] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 982.618770][ T7899] blk_mq_run_hw_queue+0x348/0x4f0 [ 982.624449][ T7899] blk_mq_dispatch_list+0xd16/0xe10 [ 982.630197][ T7899] blk_mq_flush_plug_list+0x48d/0x570 [ 982.636115][ T7899] __blk_flush_plug+0x3ed/0x4d0 [ 982.641510][ T7899] __submit_bio+0x28d/0x580 [ 982.646556][ T7899] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 982.652746][ T7899] block_read_full_folio+0x599/0x830 [ 982.658595][ T7899] filemap_read_folio+0x137/0x3b0 [ 982.664170][ T7899] do_read_cache_folio+0x358/0x590 [ 982.669910][ T7899] read_part_sector+0xb6/0x2b0 [ 982.675224][ T7899] adfspart_check_ICS+0xa5/0xa40 [ 982.680713][ T7899] bdev_disk_changed+0x7ba/0x1550 [ 982.686291][ T7899] blkdev_get_whole+0x380/0x510 [ 982.691749][ T7899] bdev_open+0x31e/0xd30 [ 982.696544][ T7899] blkdev_open+0x470/0x610 [ 982.701501][ T7899] do_dentry_open+0x785/0x14e0 [ 982.706814][ T7899] vfs_open+0x3b/0x340 [ 982.711803][ T7899] path_openat+0x2e08/0x3860 [ 982.716944][ T7899] do_file_open+0x23e/0x4a0 [ 982.722005][ T7899] do_sys_openat2+0x113/0x200 [ 982.727323][ T7899] __x64_sys_openat+0x138/0x170 [ 982.732744][ T7899] do_syscall_64+0x14d/0xf80 [ 982.737902][ T7899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.744344][ T7899] [ 982.744344][ T7899] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 982.751621][ T7899] __mutex_lock+0x19f/0x1300 [ 982.756759][ T7899] nbd_queue_rq+0xc6/0x1100 [ 982.761817][ T7899] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 982.767942][ T7899] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 982.774838][ T7899] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 982.781476][ T7899] blk_mq_run_hw_queue+0x348/0x4f0 [ 982.787136][ T7899] blk_mq_dispatch_list+0xd16/0xe10 [ 982.792883][ T7899] blk_mq_flush_plug_list+0x48d/0x570 [ 982.798892][ T7899] __blk_flush_plug+0x3ed/0x4d0 [ 982.804293][ T7899] __submit_bio+0x28d/0x580 [ 982.809393][ T7899] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 982.815579][ T7899] block_read_full_folio+0x599/0x830 [ 982.821410][ T7899] filemap_read_folio+0x137/0x3b0 [ 982.826992][ T7899] do_read_cache_folio+0x358/0x590 [ 982.832646][ T7899] read_part_sector+0xb6/0x2b0 [ 982.837960][ T7899] adfspart_check_ICS+0xa5/0xa40 [ 982.843444][ T7899] bdev_disk_changed+0x7ba/0x1550 [ 982.849028][ T7899] blkdev_get_whole+0x380/0x510 [ 982.854431][ T7899] bdev_open+0x31e/0xd30 [ 982.859232][ T7899] blkdev_open+0x470/0x610 [ 982.864187][ T7899] do_dentry_open+0x785/0x14e0 [ 982.869503][ T7899] vfs_open+0x3b/0x340 [ 982.874206][ T7899] path_openat+0x2e08/0x3860 [ 982.879370][ T7899] do_file_open+0x23e/0x4a0 [ 982.884418][ T7899] do_sys_openat2+0x113/0x200 [ 982.889642][ T7899] __x64_sys_openat+0x138/0x170 [ 982.895058][ T7899] do_syscall_64+0x14d/0xf80 [ 982.900194][ T7899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.906631][ T7899] [ 982.906631][ T7899] -> #1 (set->srcu){.+.+}-{0:0}: [ 982.913776][ T7899] __synchronize_srcu+0xca/0x3e0 [ 982.919284][ T7899] elevator_switch+0x1e8/0x7a0 [ 982.924772][ T7899] elevator_change+0x2cc/0x450 [ 982.930117][ T7899] elevator_set_default+0x36c/0x430 [ 982.935860][ T7899] blk_register_queue+0x366/0x430 [ 982.941424][ T7899] __add_disk+0x677/0xd50 [ 982.946299][ T7899] add_disk_fwnode+0xfb/0x480 [ 982.951525][ T7899] nbd_dev_add+0x72c/0xb50 [ 982.956493][ T7899] nbd_init+0x168/0x1f0 [ 982.961204][ T7899] do_one_initcall+0x250/0x8d0 [ 982.966520][ T7899] do_initcall_level+0x104/0x190 [ 982.972779][ T7899] do_initcalls+0x59/0xa0 [ 982.978228][ T7899] kernel_init_freeable+0x2a6/0x3e0 [ 982.984355][ T7899] kernel_init+0x1d/0x1d0 [ 982.989519][ T7899] ret_from_fork+0x51e/0xb90 [ 982.994690][ T7899] ret_from_fork_asm+0x1a/0x30 [ 983.000169][ T7899] [ 983.000169][ T7899] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 983.008043][ T7899] __lock_acquire+0x15a5/0x2cf0 [ 983.013477][ T7899] lock_acquire+0xf0/0x2e0 [ 983.018465][ T7899] __mutex_lock+0x19f/0x1300 [ 983.023612][ T7899] elevator_change+0x1b3/0x450 [ 983.028947][ T7899] elevator_set_none+0xb5/0x140 [ 983.034363][ T7899] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 983.040716][ T7899] nbd_start_device+0x17f/0xb10 [ 983.046121][ T7899] nbd_genl_connect+0x165b/0x1cf0 [ 983.051694][ T7899] genl_family_rcv_msg_doit+0x22a/0x330 [ 983.057800][ T7899] genl_rcv_msg+0x61c/0x7a0 [ 983.062865][ T7899] netlink_rcv_skb+0x232/0x4b0 [ 983.068280][ T7899] genl_rcv+0x28/0x40 [ 983.072866][ T7899] netlink_unicast+0x80f/0x9b0 [ 983.078179][ T7899] netlink_sendmsg+0x813/0xb40 [ 983.083492][ T7899] ____sys_sendmsg+0xa68/0xad0 [ 983.088818][ T7899] ___sys_sendmsg+0x2a5/0x360 [ 983.094043][ T7899] __x64_sys_sendmsg+0x1bd/0x2a0 [ 983.099559][ T7899] do_syscall_64+0x14d/0xf80 [ 983.104785][ T7899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.111230][ T7899] [ 983.111230][ T7899] other info that might help us debug this: [ 983.111230][ T7899] [ 983.121565][ T7899] Chain exists of: [ 983.121565][ T7899] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#56 [ 983.121565][ T7899] [ 983.135336][ T7899] Possible unsafe locking scenario: [ 983.135336][ T7899] [ 983.142893][ T7899] CPU0 CPU1 [ 983.148279][ T7899] ---- ---- [ 983.153684][ T7899] lock(&q->q_usage_counter(io)#56); [ 983.159091][ T7899] lock(fs_reclaim); [ 983.165611][ T7899] lock(&q->q_usage_counter(io)#56); [ 983.173531][ T7899] lock(&q->elevator_lock); [ 983.178156][ T7899] [ 983.178156][ T7899] *** DEADLOCK *** [ 983.178156][ T7899] [ 983.186317][ T7899] 6 locks held by syz.2.9313/7899: [ 983.191458][ T7899] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 983.199780][ T7899] #1: ffffffff8fc39288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 983.208784][ T7899] #2: ffff88801dbb61d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 983.220217][ T7899] #3: ffff88801dbb60d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 983.231486][ T7899] #4: ffff888026bf3990 (&q->q_usage_counter(io)#56){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 983.242246][ T7899] #5: ffff888026bf39c8 (&q->q_usage_counter(queue)#40){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 983.253173][ T7899] [ 983.253173][ T7899] stack backtrace: [ 983.259113][ T7899] CPU: 0 UID: 0 PID: 7899 Comm: syz.2.9313 Not tainted syzkaller #0 PREEMPT(full) [ 983.259141][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 983.259155][ T7899] Call Trace: [ 983.259163][ T7899] [ 983.259173][ T7899] dump_stack_lvl+0xe8/0x150 [ 983.259206][ T7899] print_circular_bug+0x2e1/0x300 [ 983.259239][ T7899] check_noncircular+0x12e/0x150 [ 983.259272][ T7899] __lock_acquire+0x15a5/0x2cf0 [ 983.259308][ T7899] lock_acquire+0xf0/0x2e0 [ 983.259331][ T7899] ? elevator_change+0x1b3/0x450 [ 983.259365][ T7899] __mutex_lock+0x19f/0x1300 [ 983.259382][ T7899] ? elevator_change+0x1b3/0x450 [ 983.259411][ T7899] ? rcu_is_watching+0x15/0xb0 [ 983.259454][ T7899] ? elevator_change+0x1b3/0x450 [ 983.259481][ T7899] ? __pfx___mutex_lock+0x10/0x10 [ 983.259497][ T7899] ? enable_work+0x17f/0x230 [ 983.259524][ T7899] ? lockdep_hardirqs_on+0x7a/0x110 [ 983.259562][ T7899] ? __cancel_work_sync+0xf7/0x110 [ 983.259591][ T7899] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 983.259611][ T7899] elevator_change+0x1b3/0x450 [ 983.259642][ T7899] elevator_set_none+0xb5/0x140 [ 983.259668][ T7899] ? __pfx_elevator_set_none+0x10/0x10 [ 983.259697][ T7899] ? xa_load+0x1db/0x210 [ 983.259717][ T7899] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 983.259744][ T7899] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 983.259772][ T7899] ? kernfs_add_one+0x477/0x5c0 [ 983.259800][ T7899] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 983.259825][ T7899] ? sysfs_add_file_mode_ns+0x259/0x300 [ 983.259849][ T7899] nbd_start_device+0x17f/0xb10 [ 983.259878][ T7899] ? device_create_file+0xf4/0x1b0 [ 983.259907][ T7899] nbd_genl_connect+0x165b/0x1cf0 [ 983.259937][ T7899] ? __pfx_nbd_genl_connect+0x10/0x10 [ 983.259965][ T7899] ? rcu_is_watching+0x15/0xb0 [ 983.259994][ T7899] ? __nla_parse+0x40/0x60 [ 983.260020][ T7899] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 983.260054][ T7899] genl_family_rcv_msg_doit+0x22a/0x330 [ 983.260085][ T7899] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 983.260119][ T7899] ? __lock_acquire+0x6b5/0x2cf0 [ 983.260144][ T7899] genl_rcv_msg+0x61c/0x7a0 [ 983.260174][ T7899] ? __pfx_genl_rcv_msg+0x10/0x10 [ 983.260200][ T7899] ? __pfx_nbd_genl_connect+0x10/0x10 [ 983.260224][ T7899] ? __lock_acquire+0x6b5/0x2cf0 [ 983.260252][ T7899] netlink_rcv_skb+0x232/0x4b0 [ 983.260273][ T7899] ? __pfx_genl_rcv_msg+0x10/0x10 [ 983.260300][ T7899] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 983.260328][ T7899] ? down_read+0x272/0x2e0 [ 983.260345][ T7899] ? genl_rcv+0xd/0x40 [ 983.260371][ T7899] genl_rcv+0x28/0x40 [ 983.260395][ T7899] netlink_unicast+0x80f/0x9b0 [ 983.260417][ T7899] ? __pfx_netlink_unicast+0x10/0x10 [ 983.260436][ T7899] ? netlink_sendmsg+0x650/0xb40 [ 983.260457][ T7899] ? skb_put+0x11b/0x210 [ 983.260492][ T7899] netlink_sendmsg+0x813/0xb40 [ 983.260518][ T7899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.260547][ T7899] ? trace_sched_set_need_resched_tp+0x3e/0x160 [ 983.260574][ T7899] ? aa_sock_msg_perm+0xf1/0x1b0 [ 983.260597][ T7899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 983.260617][ T7899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.260638][ T7899] ____sys_sendmsg+0xa68/0xad0 [ 983.260669][ T7899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 983.260699][ T7899] ? import_iovec+0x73/0xa0 [ 983.260726][ T7899] ___sys_sendmsg+0x2a5/0x360 [ 983.260755][ T7899] ? __pfx____sys_sendmsg+0x10/0x10 [ 983.260786][ T7899] ? futex_wake+0x4ac/0x580 [ 983.260825][ T7899] ? __fget_files+0x2a/0x420 [ 983.260851][ T7899] ? __fget_files+0x3a0/0x420 [ 983.260880][ T7899] __x64_sys_sendmsg+0x1bd/0x2a0 [ 983.260909][ T7899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 983.260940][ T7899] ? rcu_is_watching+0x15/0xb0 [ 983.260970][ T7899] do_syscall_64+0x14d/0xf80 [ 983.260998][ T7899] ? trace_irq_disable+0x3b/0x150 [ 983.261025][ T7899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.261044][ T7899] ? clear_bhb_loop+0x40/0x90 [ 983.261065][ T7899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.261084][ T7899] RIP: 0033:0x7f8d7af9c629 [ 983.261102][ T7899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.261118][ T7899] RSP: 002b:00007f8d7bde5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 983.261140][ T7899] RAX: ffffffffffffffda RBX: 00007f8d7b215fa0 RCX: 00007f8d7af9c629 [ 983.261154][ T7899] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 983.261167][ T7899] RBP: 00007f8d7b032b39 R08: 0000000000000000 R09: 0000000000000000 [ 983.261179][ T7899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.261190][ T7899] R13: 00007f8d7b216038 R14: 00007f8d7b215fa0 R15: 00007ffe424b5458 [ 983.261212][ T7899] [ 983.738305][ T7914] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9317'. [ 983.757304][ T7890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9310'. [ 983.809669][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9316'. [ 983.823533][ T5840] block nbd7: Receive control failed (result -32) [ 983.831079][ T5840] block nbd7: Receive control failed (result -32) [ 983.837609][ T5840] block nbd7: Receive control failed (result -32) [ 983.844835][ T5840] block nbd7: Receive control failed (result -32) [ 983.878682][ T7899] nbd7: detected capacity change from 0 to 63 [ 983.898653][T31867] block nbd7: Dead connection, failed to find a fallback [ 983.905846][T31867] block nbd7: shutting down sockets [ 983.915639][T31867] blk_print_req_error: 138 callbacks suppressed [ 983.915660][T31867] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 983.943216][T31867] buffer_io_error: 138 callbacks suppressed [ 983.943233][T31867] Buffer I/O error on dev nbd7, logical block 0, async page read [ 983.957410][T31867] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 983.967847][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.975122][ C0] bridge0: topology change detected, propagating [ 983.982725][T31867] Buffer I/O error on dev nbd7, logical block 1, async page read [ 983.991946][T31867] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 984.002200][T31867] Buffer I/O error on dev nbd7, logical block 2, async page read [ 984.010486][T31867] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 984.020634][T31867] Buffer I/O error on dev nbd7, logical block 3, async page read [ 984.029402][T31867] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 984.039645][T31867] Buffer I/O error on dev nbd7, logical block 0, async page read [ 984.047617][T31867] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 984.059936][T31867] Buffer I/O error on dev nbd7, logical block 1, async page read [ 984.067845][T31867] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 984.078658][T31867] Buffer I/O error on dev nbd7, logical block 2, async page read [ 984.086479][T31867] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 984.096057][T31867] Buffer I/O error on dev nbd7, logical block 3, async page read [ 984.104274][T31867] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 984.114118][T31867] Buffer I/O error on dev nbd7, logical block 0, async page read [ 984.122185][T31867] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 984.131740][T31867] Buffer I/O error on dev nbd7, logical block 1, async page read [ 984.140194][T31867] ldm_validate_partition_table(): Disk read failed. [ 984.147068][T31867] Dev nbd7: unable to read RDB block 0 [ 984.153175][T31867] nbd7: unable to read partition table [ 984.170182][T31867] ldm_validate_partition_table(): Disk read failed. [ 984.178458][T31867] Dev nbd7: unable to read RDB block 0 [ 984.184361][T31867] nbd7: unable to read partition table [ 985.269735][ T3241] net_ratelimit: 63 callbacks suppressed [ 985.269760][ T3241] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.286272][ T3241] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 985.398390][ T3236] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.407176][ T3236] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 985.518341][ T8719] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.526113][ T8719] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 985.638395][ T3236] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.646188][ T3236] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 985.758079][ T8719] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 985.765992][ T8719] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 987.809458][ T1653] block nbd5: Possible stuck request ffff888026bb0000: control (read@0,1024B). Runtime 60 seconds [ 987.820451][ T1653] block nbd5: Possible stuck request ffff888026bb0200: control (read@1024,1024B). Runtime 60 seconds [ 987.831479][ T11] block nbd4: Possible stuck request ffff888026b8a800: control (read@0,1024B). Runtime 60 seconds [ 987.842704][ T11] block nbd4: Possible stuck request ffff888026b8aa00: control (read@1024,1024B). Runtime 60 seconds [ 987.853975][ T1653] block nbd5: Possible stuck request ffff888026bb0400: control (read@2048,1024B). Runtime 60 seconds [ 987.865445][ T11] block nbd4: Possible stuck request ffff888026b8ac00: control (read@2048,1024B). Runtime 60 seconds [ 987.876982][ T1653] block nbd5: Possible stuck request ffff888026bb0600: control (read@3072,1024B). Runtime 60 seconds [ 987.898441][ T1653] block nbd4: Possible stuck request ffff888026b8ae00: control (read@3072,1024B). Runtime 60 seconds [ 990.199199][ T5191] udevd[5191]: worker [32421] /devices/virtual/block/nbd4 is taking a long time [ 990.208808][ T5191] udevd[5191]: worker [2532] /devices/virtual/block/nbd5 is taking a long time [ 990.307934][ T8725] net_ratelimit: 80 callbacks suppressed [ 990.308021][ T8725] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.321909][ T8725] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 990.437923][ T8725] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.445876][ T8725] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 990.558546][ T3236] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.566465][ T3236] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 990.678973][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.686781][ T3199] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 990.797883][ T3199] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 990.805669][ T3199] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 991.649859][ T1631] block nbd3: Possible stuck request ffff888026b1d000: control (read@0,1024B). Runtime 180 seconds [ 991.661754][ T1631] block nbd3: Possible stuck request ffff888026b1d200: control (read@1024,1024B). Runtime 180 seconds [ 991.673125][ T1631] block nbd3: Possible stuck request ffff888026b1d400: control (read@2048,1024B). Runtime 180 seconds [ 991.684530][ T1631] block nbd3: Possible stuck request ffff888026b1d600: control (read@3072,1024B). Runtime 180 seconds