last executing test programs: 3.983126008s ago: executing program 2 (id=8882): r0 = socket(0x23, 0x80805, 0x0) listen(r0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}}, 0x0) 3.652814959s ago: executing program 2 (id=8889): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x128}, 0x48011) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0200000c000000fa000000000000000000000d000000000000"], 0x0, 0x26}, 0x28) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r15], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r16, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r16, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 2.66555449s ago: executing program 2 (id=8902): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="19010001", @ANYRES16=r2, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x20008010}, 0x509be7a9dba1edcb) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100003040000000600000000000000043798a4d83e6f5122490a05bc47c43f321b26f3103541be48b274b6a1a6f33357ebace386e5d0c0d2d74b3fb04be133dac64392244c6c915e8af3fb1c05cbc28b1ca7d372e5823139fc8b0f2a73abddb27e0c02ea2ea2f41ba0fcee1c929b4b0fd4a39cad13415053b153565161ed672f49fcd0d7d7cba0ab640d316ec6a069a6b36f68d445fc9f4ab281da", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 2.457718253s ago: executing program 2 (id=8906): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) write$nci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="7100800000"], 0x25) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000307b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.30470447s ago: executing program 3 (id=8909): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x1, 0x2, {0xa, 0x4e24, 0x6, @empty, 0x64}}}, 0x32) (async) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.16613455s ago: executing program 2 (id=8911): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r2, 0xcb}, 0x8) recvmsg$can_j1939(r1, &(0x7f0000002540)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000000140)=""/239, 0xef}, {&(0x7f0000000240)=""/102, 0x66}, {&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000003c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/31, 0x1f}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/207, 0xcf}], 0x7, &(0x7f00000024c0)=""/98, 0x62}, 0x0) socket$kcm(0x21, 0x2, 0xa) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r2, 0xcb}, 0x8) (async) recvmsg$can_j1939(r1, &(0x7f0000002540)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000000140)=""/239, 0xef}, {&(0x7f0000000240)=""/102, 0x66}, {&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000003c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/31, 0x1f}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/207, 0xcf}], 0x7, &(0x7f00000024c0)=""/98, 0x62}, 0x0) (async) 2.0710453s ago: executing program 3 (id=8912): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a0000000000000000000000804000000000000000000001000003000000004400050000deffffff0000000400000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300004900"/180], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x12, 0x10001, 0x6b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)={{0x0, 0x7f, 0x9, 0x3, 0x1, 0x6, 0x5ed8, 0xff, 0x8, 0x1, 0x10, 0x4, 0x81, 0x10000000, 0x81}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000b40)={{r5, 0x7, 0x0, 0x0, 0x4, 0x8, 0x72, 0x401, 0x5, 0x2, 0x9, 0x10000, 0x5, 0x5, 0x6}}) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c0000", 0x17}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x48, 0x30, 0xeaa3ef926154e70d, 0x0, 0x5dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec587547"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.969796205s ago: executing program 4 (id=8914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x1, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 1.969319799s ago: executing program 2 (id=8915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127000000000000005a000000080003004c3a5ab951e103312dbbfe618c28c0323b073499d4b4a2986d417fc7644e4302f5ea9387b04f17dc975dbbdd99f900806e934b06fc091c3f577001537b0a87a4d32a00c0bfecf45f8dc59309688591bed64beb061b6b94b08d5807409b3dfd0167fab6954a061e3a746dcccc0958d41e277fe47dfdc8307718bfc8139311eb9f6a0d67f486ee189b", @ANYRES32=r4, @ANYBLOB="0c0099000600000061000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x4ae) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r5, @ANYRES16=r2, @ANYRESDEC=r3, @ANYRES32=r5, @ANYBLOB="04005b"], 0x28}, 0x1, 0x0, 0x0, 0x4048050}, 0x0) close(r6) 1.480163041s ago: executing program 1 (id=8917): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$inet(0x2, 0x2, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, 0x0, 0x0) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x54, &(0x7f0000000100), 0x4) sendmmsg$inet(r3, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x24, 0x0, 0x7, {[@cipso={0x86, 0xe, 0xffffffffffffffff, [{0x2, 0x8, "2755f8bebdaf"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14}}], 0x40}}], 0x1, 0x804) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xcac, 0x0, 0x0, 0x9, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x11, 0x8, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 1.45337715s ago: executing program 0 (id=8918): syz_emit_ethernet(0x87a2f, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r8], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f00000005c0)=ANY=[@ANYRESHEX], 0x9) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x7, 0x100, 0x9b, 0xfffa, 0xe, 0x401]}}]}]}]}, 0x38}}, 0x2400c090) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)={0x344, r3, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}, [@NL80211_ATTR_IE={0x322, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x3c, 0xe}}, @perr={0x84, 0xc1, {0x1e, 0xb, [{{0x0, 0x1}, @device_a, 0x10001, @value, 0x39}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x10}, {{}, @device_b, 0x7df, @void, 0x2c}, {{0x0, 0x1}, @device_a, 0x100, @value, 0x21}, {{}, @device_a, 0x101, @void, 0x12}, {{0x0, 0x1}, @device_b, 0xffffffff, @value, 0x3}, {{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0x12}, {{0x0, 0x1}, @broadcast, 0x26, @value, 0x40}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x29}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x33}, {{}, @device_a, 0x101, @void, 0x39}]}}, @random_vendor={0xdd, 0x42, "e83a95b1f573cef36bab28c33b8a150b1f6ae9520fa9f96d3ba2c2adb48a47cd628e0291b1b88bc742a1b7d7a743918a9053387791a216606657a5bef15a79700237"}, @tim={0x5, 0xf5, {0xd6, 0xac, 0x80, "ebdb84c86ad73f08db4ad236df94d17da5ed0f6a3ff52e477e804ec46455f3a52981258a49d97565a6c19ada65c81aecd3d2483c08e941cfbb73ea292bb824f6e7eb74ab645e8d8d965579205860fe35f24d0157870ddf7cc896961be08ec3620e9b58ca5b511d49046df4e6ef73f3b8eb122a67bfe08bcc733a14fba77529f94f90b8fb88513e232e3e64e34800da266e50e6921ed135e65556c3e38b5a3045f9d140193d3da2a70404bdc905c7663299b16dae594218c238fc4a9c0b52abcfb1eff9e8a5498935514182ea1265c23931df0bf200ef6e89ee95b087d65347bf8fb39980dc227277b22e520f1330b4ad7160"}}, @preq={0x82, 0x6d, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x9, 0x6, 0x8, @broadcast, 0x3, @value, 0x4, 0x2, 0x7, [{{0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, @broadcast, 0xfff}, {{0x0, 0x0, 0x1}, @device_a, 0x5c9a}, {{0x1}, @broadcast, 0x3b4cfb34}, {{0x1}, @broadcast, 0x3}, {{0x1}, @broadcast, 0x7}, {{0x1}, @device_a, 0x1539}]}}, @measure_req={0x26, 0xaa, {0x2, 0x2, 0x6, "c554e9818e0726b5f90adb161691ba7a21ba08cd3d78e8cc53a914a5a41e749adbfc96e2d7304984a9cf9bca4d42bc5b7279b8e92476c9d514ec71d643dcd7d9914c6555729c580a25a4ae45c608c65eafa8a16a080d1cb5c2a56adbdff703e13863ded69de5df0d59d9ead224312007a9387caabca0c11abffd872ad45fc8a8ab6b0c6782e03592326f81315b4feb25da60ce8f719825833549df7bc8c859a21cf04a792b1dbb"}}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x20054015}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000040000100fcff07000400000001000000040048800c0001800800108004000a8008000200", @ANYRES32=r12, @ANYBLOB="e85b927086d9e5bc7c93d7ec22cc3e28f26d1b5c20571d3d8c6221275a39f708cc3ca516aaf47266d8b55cd78bac18ca9d3dcb5ceb50e84e4eb84b350fa8d4b56bf692a23d924a4ce3b5898c242933fbb9dd665e57d4d412d1ab4eaa93bc865e6b87514c75fc7f028940645d4871ee80fb2c5db666b9d2040e38a63a0ebb59191d296b04d7b88abd364049964c664acfc9f53dcb86ae1e1dadfc8cf208e4dffdca5bcee1345fee2843acf6e7dde6733daf183b8e62cc5d1871ee51eb8cc0d3bd3800b87365a1583c5848191390"], 0x2c}, 0x1, 0x0, 0x0, 0x4008801}, 0x4008094) 1.246009149s ago: executing program 1 (id=8919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000e850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.104839655s ago: executing program 1 (id=8920): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000540)="a6243f161d22074447ad5f15a106c7d4041fd265ee6c1f7205", 0x19) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x5}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x8004) (async) socket(0x9, 0x4, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60046, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x30}}, 0x0) 1.10109155s ago: executing program 3 (id=8921): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="480500001500", 0x6}], 0x1) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000210000000000000005000000000000005f"], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r4, 0x58, &(0x7f0000000580)}, 0x10) 905.645081ms ago: executing program 4 (id=8922): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) write$nbd(r2, &(0x7f0000000400)=ANY=[], 0xb4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000001c0)={'tunl0\x00', r3, 0x40, 0x20, 0x1e, 0x5, {{0xc, 0x4, 0x0, 0x3e, 0x30, 0x65, 0x0, 0x38, 0x4, 0x0, @loopback, @empty, {[@timestamp_addr={0x44, 0x1c, 0xf1, 0x1, 0x7, [{@loopback, 0x1}, {@multicast2, 0x3}, {@private=0xa010101, 0x8}]}]}}}}}) close(r0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) accept4$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @loopback}, &(0x7f0000000300)=0x10, 0x800) 905.343663ms ago: executing program 1 (id=8923): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000000000, 0x40}}, 0x40) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r1, 0x20, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/17, 0x11}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 891.843427ms ago: executing program 0 (id=8924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000130426bd700040000000ac1414bb00000000000000000001010000000000000000000000004e2000074e1f00000a00202067000000000014290822d8c439051de4bb9e6b0fe8eb1a78bc1883b0cabc0df3ef5af237c67611d3c5567811dc3254137baebea51fad667e14b143d640903e98", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000040"], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg$alg(r5, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000006c0)=""/68, 0x44}], 0x1}, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r7, 0x3, 0x6, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r8, 0x1, 0x6, @broadcast}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7ffedbdf250a00"/20], 0x14}}, 0xc804) 830.524619ms ago: executing program 3 (id=8925): r0 = socket(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r2, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6}}}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xfffffffe, 0xffffffffffffffce) r5 = epoll_create1(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000100)) r8 = epoll_create(0x11ffffe) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0x40000001}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r0, &(0x7f0000000080)={0x2000a212}) 693.691189ms ago: executing program 4 (id=8926): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x0, 0x400, 0x9, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x4, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0xffffff59, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x29}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x1a8, 0x0, 0x1a8, 0x90, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x58}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)={0x108, r4, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc}, {0xc, 0x90, 0x8000000000000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xc54}, {0xc, 0x90, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x7}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4010090}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'xfrm0\x00'}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x48, 0x3, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) epoll_pwait(r2, 0x0, 0x0, 0x45, &(0x7f0000000280)={[0x8]}, 0x8) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x8c, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000080) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) 659.49963ms ago: executing program 1 (id=8927): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x5, 0x1, 0x0, 0x0, 0xc, 0xffff}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 592.858491ms ago: executing program 3 (id=8928): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001600)={'wpan3\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x40) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="020028bd7000fedbfb611f0000000a000200", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4c081}, 0x4044000) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x88, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x308d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa85a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6654548b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bfd}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c4f944}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a08}, @NLBL_CIPSOV4_A_MLSCATLOC={0xffffff5e, 0x9, 0x2a71e8ad}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6880f567}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5711112d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69a19d04}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb4a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x163cbc6f}]}]}]}, 0x88}}, 0x402c894) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'bond_slave_1\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000001740), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x3, 0x8, &(0x7f0000002a80)=ANY=[@ANYBLOB="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", @ANYRES8=r2, @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', r8, @sched_cls}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0xe0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r1) r11 = accept4(r6, 0x0, &(0x7f0000000440), 0x80000) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, r10, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c000) 538.318618ms ago: executing program 0 (id=8929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000f850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 388.529232ms ago: executing program 4 (id=8930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="4647b4f3", 0x4}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080), 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, r2, 0x1f, 0x4}, 0x20) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000002c000880280000022400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000000000000000000000000008000700ff00000014000200776732"], 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 382.30532ms ago: executing program 1 (id=8931): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r0, 0xa) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 324.653346ms ago: executing program 0 (id=8932): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x7c, 0x10, 0x820, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010102}]}}}, @IFLA_PORT_SELF={0x44, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fdcbefd4b194bb3fd63d33fe258f6bd0"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ca7f77f99c85c16de298c9604c10d640"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x19a9efd7}]}]}, 0x7c}}, 0x40440a5) 268.138812ms ago: executing program 3 (id=8933): r0 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f00000019c0)=[{0x0}, {&(0x7f0000000740)=""/144, 0x90}], 0x2}, 0x7}], 0x1, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x6) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @mcast1, 0x6}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000240)="2ae0e710", 0x4, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESHEX=r5], 0x10) pipe(&(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001a"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000027c0)={0x20, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x20}}, 0x4) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fa056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160040fa0a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 195.367708ms ago: executing program 4 (id=8934): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r1, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x21, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000100039040100"/20, @ANYRES32=0x0, @ANYBLOB="627269646765000004000280"], 0x34}}, 0x0) 33.906188ms ago: executing program 0 (id=8935): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='GPL\x00', 0xc102, &(0x7f0000000080)={@align=0xfffffffffffffff8, {0x3, 0x1, 0x0, 0x100}}, 0x610, &(0x7f00000000c0), &(0x7f0000000100)=0x6}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180)=0x200240, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf0, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x11}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x0) 18.715954ms ago: executing program 4 (id=8936): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0x0, 0x9}, {0xb, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x85}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090127bd7000ffdbdf250600000008000d000000000008000100ff"], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) 0s ago: executing program 0 (id=8937): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000000054bf888ba5ba40a01fc71595315731debcd79f4e3397ecc5a3cb3ce3", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000f"], 0x3c}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}}, 0x20}}, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000240)=0x2001, 0x4) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) kernel console output (not intermixed with test programs): 6][T31594] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7167'. [ 665.574990][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 665.577690][T31594] FAULT_INJECTION: forcing a failure. [ 665.577690][T31594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.618817][T31594] CPU: 0 UID: 0 PID: 31594 Comm: syz.4.7167 Not tainted syzkaller #0 PREEMPT(full) [ 665.618848][T31594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 665.618862][T31594] Call Trace: [ 665.618871][T31594] [ 665.618880][T31594] dump_stack_lvl+0xe8/0x150 [ 665.618913][T31594] should_fail_ex+0x40c/0x560 [ 665.618940][T31594] _copy_from_user+0x2d/0xb0 [ 665.618970][T31594] ___sys_sendmsg+0x1c6/0x360 [ 665.619005][T31594] ? rcu_is_watching+0x15/0xb0 [ 665.619028][T31594] ? get_pid_task+0x20/0x1f0 [ 665.619050][T31594] ? __pfx____sys_sendmsg+0x10/0x10 [ 665.619083][T31594] ? rcu_is_watching+0x15/0xb0 [ 665.619123][T31594] ? __fget_files+0x2a/0x420 [ 665.619148][T31594] ? __fget_files+0x3a2/0x420 [ 665.619179][T31594] __x64_sys_sendmsg+0x1b1/0x290 [ 665.619217][T31594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 665.619254][T31594] ? rcu_is_watching+0x15/0xb0 [ 665.619276][T31594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.619300][T31594] do_syscall_64+0x174/0x580 [ 665.619331][T31594] ? trace_irq_disable+0x3b/0x140 [ 665.619362][T31594] ? clear_bhb_loop+0x40/0x90 [ 665.619387][T31594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.619409][T31594] RIP: 0033:0x7f862dd9ce59 [ 665.619431][T31594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.619450][T31594] RSP: 002b:00007f862eb9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.619474][T31594] RAX: ffffffffffffffda RBX: 00007f862e015fa0 RCX: 00007f862dd9ce59 [ 665.619490][T31594] RDX: 00000000240280d1 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 665.619506][T31594] RBP: 00007f862eb9f090 R08: 0000000000000000 R09: 0000000000000000 [ 665.619520][T31594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.619533][T31594] R13: 00007f862e016038 R14: 00007f862e015fa0 R15: 00007fff0d5edaa8 [ 665.619557][T31594] [ 665.727032][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 665.895727][T31599] netlink: 'syz.1.7168': attribute type 1 has an invalid length. [ 665.940796][T31599] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7168'. [ 665.998229][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 666.123609][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 666.234699][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 666.383844][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 666.419312][T31633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7177'. [ 666.573038][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 666.670244][T31649] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 666.692029][T27820] IPVS: starting estimator thread 0... [ 666.693280][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 666.794716][T31654] IPVS: using max 41 ests per chain, 98400 per kthread [ 666.832721][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 666.924842][T31665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7189'. [ 667.061693][T31675] netlink: 'syz.2.7193': attribute type 2 has an invalid length. [ 667.098938][T31675] netlink: 'syz.2.7193': attribute type 2 has an invalid length. [ 667.129211][T31680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7195'. [ 667.139312][T31675] netlink: 'syz.2.7193': attribute type 2 has an invalid length. [ 667.172495][T31675] netlink: 'syz.2.7193': attribute type 2 has an invalid length. [ 667.218929][T31675] netlink: 'syz.2.7193': attribute type 2 has an invalid length. [ 667.235269][T31675] netlink: 'syz.2.7193': attribute type 2 has an invalid length. [ 667.337343][T31693] netlink: 'syz.0.7199': attribute type 1 has an invalid length. [ 667.500773][T31697] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 667.533620][T31697] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 667.562762][T31703] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7202'. [ 667.582184][T31697] bond2: (slave ip6gre2): making interface the new active one [ 667.591478][T31697] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 668.006243][T31735] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 668.039487][T31739] FAULT_INJECTION: forcing a failure. [ 668.039487][T31739] name failslab, interval 1, probability 0, space 0, times 0 [ 668.071294][T31739] CPU: 0 UID: 0 PID: 31739 Comm: syz.2.7214 Not tainted syzkaller #0 PREEMPT(full) [ 668.071326][T31739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 668.071340][T31739] Call Trace: [ 668.071349][T31739] [ 668.071359][T31739] dump_stack_lvl+0xe8/0x150 [ 668.071388][T31739] should_fail_ex+0x40c/0x560 [ 668.071414][T31739] should_failslab+0xa8/0x100 [ 668.071447][T31739] __kmalloc_cache_noprof+0x88/0x660 [ 668.071477][T31739] ? sctp_add_bind_addr+0x8c/0x370 [ 668.071651][T31739] ? __pfx_sctp_get_port_local+0x10/0x10 [ 668.071697][T31739] sctp_add_bind_addr+0x8c/0x370 [ 668.071721][T31739] ? sctp_auto_asconf_init+0x14d/0x1d0 [ 668.071753][T31739] sctp_do_bind+0x597/0x9a0 [ 668.071788][T31739] sctp_connect_new_asoc+0x270/0x6b0 [ 668.071819][T31739] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 668.071848][T31739] ? rcu_is_watching+0x15/0xb0 [ 668.071881][T31739] ? rcu_is_watching+0x15/0xb0 [ 668.071902][T31739] ? trace_irq_enable+0x3b/0x140 [ 668.071930][T31739] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 668.071961][T31739] ? security_sctp_bind_connect+0x7e/0x2c0 [ 668.072047][T31739] sctp_sendmsg+0x159b/0x2d00 [ 668.072081][T31739] ? rcu_is_watching+0x15/0xb0 [ 668.072104][T31739] ? __pfx_sctp_sendmsg+0x10/0x10 [ 668.072134][T31739] ? aa_sk_perm+0x6d5/0x900 [ 668.072170][T31739] ? __pfx_aa_sk_perm+0x10/0x10 [ 668.072202][T31739] ? rcu_is_watching+0x15/0xb0 [ 668.072222][T31739] ? sock_rps_record_flow+0x19/0x350 [ 668.072303][T31739] ? inet_sendmsg+0x298/0x320 [ 668.072329][T31739] ? __pfx_inet_sendmsg+0x10/0x10 [ 668.072355][T31739] ____sys_sendmsg+0x853/0xa20 [ 668.072392][T31739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 668.072426][T31739] ? import_iovec+0x73/0xa0 [ 668.072485][T31739] ___sys_sendmsg+0x2a5/0x360 [ 668.072515][T31739] ? rcu_is_watching+0x15/0xb0 [ 668.072536][T31739] ? get_pid_task+0x20/0x1f0 [ 668.072556][T31739] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.072589][T31739] ? rcu_is_watching+0x15/0xb0 [ 668.072625][T31739] ? __fget_files+0x2a/0x420 [ 668.072660][T31739] ? __fget_files+0x3a2/0x420 [ 668.072688][T31739] __x64_sys_sendmsg+0x1b1/0x290 [ 668.072719][T31739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 668.072756][T31739] ? rcu_is_watching+0x15/0xb0 [ 668.072777][T31739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.072799][T31739] do_syscall_64+0x174/0x580 [ 668.072827][T31739] ? trace_irq_disable+0x3b/0x140 [ 668.072853][T31739] ? clear_bhb_loop+0x40/0x90 [ 668.072888][T31739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.072907][T31739] RIP: 0033:0x7f8a9e39ce59 [ 668.072926][T31739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.072944][T31739] RSP: 002b:00007f8a9f293028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.072966][T31739] RAX: ffffffffffffffda RBX: 00007f8a9e615fa0 RCX: 00007f8a9e39ce59 [ 668.072980][T31739] RDX: 00000000240280d1 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 668.072994][T31739] RBP: 00007f8a9f293090 R08: 0000000000000000 R09: 0000000000000000 [ 668.073007][T31739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.073019][T31739] R13: 00007f8a9e616038 R14: 00007f8a9e615fa0 R15: 00007ffc3163af68 [ 668.073044][T31739] [ 668.421541][T31741] geneve4: entered promiscuous mode [ 668.429974][T31741] geneve4: entered allmulticast mode [ 668.437425][ T8387] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 668.477461][ T8404] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 668.488742][ T8397] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 668.529388][ T8397] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 668.679097][T31747] tipc: Enabled bearer , priority 0 [ 668.791948][T31754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 668.801655][T31755] xt_CT: You must specify a L4 protocol and not use inversions on it [ 668.823891][T31747] tipc: Resetting bearer [ 668.850437][T31746] tipc: Disabling bearer [ 669.247903][T31777] __nla_validate_parse: 1 callbacks suppressed [ 669.247939][T31777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7227'. [ 669.265478][T31777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7227'. [ 670.503636][ T8400] net_ratelimit: 27 callbacks suppressed [ 670.503660][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 670.624884][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 670.734272][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 670.844238][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 670.954383][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 671.064265][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 671.174405][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 671.284446][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 671.394575][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 671.503166][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 671.712747][T31752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 672.082522][T31819] netlink: 'syz.0.7240': attribute type 12 has an invalid length. [ 672.100119][T31819] netlink: 'syz.0.7240': attribute type 29 has an invalid length. [ 672.114467][T31819] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7240'. [ 672.441082][T31840] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 672.526416][T31837] IPVS: Scheduler module ip_vs_sip not found [ 672.586997][T31849] IPVS: Scheduler module ip_vs_sip not found [ 673.027844][T31877] netlink: 'syz.4.7258': attribute type 11 has an invalid length. [ 673.062597][T31881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7259'. [ 673.161904][T31883] netlink: 'syz.0.7260': attribute type 1 has an invalid length. [ 673.199289][T31883] netlink: 'syz.0.7260': attribute type 2 has an invalid length. [ 673.257113][T31893] netlink: 'syz.4.7262': attribute type 10 has an invalid length. [ 673.267059][T31893] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7262'. [ 673.611588][T31915] syzkaller0: entered promiscuous mode [ 673.633138][T31915] syzkaller0: entered allmulticast mode [ 673.746684][T31925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7272'. [ 673.792240][T31925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7272'. [ 673.921174][T31933] netlink: 236 bytes leftover after parsing attributes in process `syz.3.7275'. [ 673.931682][T31933] netlink: 236 bytes leftover after parsing attributes in process `syz.3.7275'. [ 674.096707][T31945] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7278'. [ 674.282303][T31951] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.7281'. [ 674.301968][T31956] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 674.342810][T31957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7280'. [ 674.458899][T31959] veth1_to_bond: entered allmulticast mode [ 674.508037][T31959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7283'. [ 674.534024][T31964] xt_connbytes: Forcing CT accounting to be enabled [ 674.544946][T31959] veth1_to_bond (unregistering): left allmulticast mode [ 674.567790][T31964] xt_bpf: check failed: parse error [ 675.613863][ T8402] net_ratelimit: 37 callbacks suppressed [ 675.613901][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 675.733753][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 675.843649][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 675.953520][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 676.063164][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 676.173500][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 676.283006][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 676.393752][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 676.503516][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 676.613462][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 680.683795][ T8387] net_ratelimit: 35 callbacks suppressed [ 680.683824][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 680.804643][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 680.913654][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 681.023589][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 681.133843][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 681.243489][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 681.353555][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 681.463750][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 681.573536][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 681.683537][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 685.733688][ T8402] net_ratelimit: 35 callbacks suppressed [ 685.733714][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 685.853225][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 685.934921][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.973161][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 686.084439][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 686.193734][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 686.303563][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 686.413803][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 686.523555][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 686.633521][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 686.743325][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 690.783151][ T8400] net_ratelimit: 35 callbacks suppressed [ 690.783175][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 690.903804][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 691.013524][ T8399] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 691.123227][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 691.233643][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 691.353468][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 691.463588][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 691.573798][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 691.684238][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 691.793515][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 695.803737][ T8402] net_ratelimit: 35 callbacks suppressed [ 695.803762][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 695.924313][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 696.033505][ T8399] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 696.153136][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 696.273548][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 696.383520][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 696.493788][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 696.603095][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 696.713508][ T8387] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 696.823811][ T8399] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 698.596960][T31991] netlink: 'syz.3.7296': attribute type 1 has an invalid length. [ 698.621499][T31991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7296'. [ 698.662630][T31993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7294'. [ 698.851376][T32011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7301'. [ 698.876623][T32011] bridge_slave_1 (unregistering): left allmulticast mode [ 698.893579][T32011] bridge_slave_1 (unregistering): left promiscuous mode [ 698.916439][T32011] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.239029][T32023] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7302'. [ 699.285595][T32031] netlink: 'syz.4.7305': attribute type 11 has an invalid length. [ 699.307141][T32031] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7305'. [ 699.465710][T32031] syzkaller0: entered promiscuous mode [ 699.480331][T32031] syzkaller0: entered allmulticast mode [ 699.499587][T32050] netlink: 'syz.3.7308': attribute type 83 has an invalid length. [ 699.815935][T32060] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7313'. [ 700.019619][T32065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 700.057709][T32085] netlink: 'syz.1.7320': attribute type 1 has an invalid length. [ 700.145753][T32085] bond6: entered promiscuous mode [ 700.151233][T32085] 8021q: adding VLAN 0 to HW filter on device bond6 [ 700.175370][T32085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7320'. [ 700.186940][T32085] bond6: entered allmulticast mode [ 700.197691][T32086] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 700.213867][T32086] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 700.354188][T32093] bond6: (slave bridge9): making interface the new active one [ 700.390079][T32093] bridge9: entered promiscuous mode [ 700.409176][T32093] bridge9: entered allmulticast mode [ 700.426800][T32093] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 700.450472][T32099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7324'. [ 700.740009][T32117] hsr0: entered allmulticast mode [ 700.745972][T32117] hsr_slave_0: entered allmulticast mode [ 700.752167][T32117] hsr_slave_1: entered allmulticast mode [ 700.913658][ T8400] net_ratelimit: 30 callbacks suppressed [ 700.913679][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 701.079639][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 701.213587][ T8400] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 701.319801][T32145] syzkaller0: entered promiscuous mode [ 701.343496][T32145] syzkaller0: entered allmulticast mode [ 701.373762][ T8399] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 701.434391][T32149] netlink: 'syz.2.7344': attribute type 8 has an invalid length. [ 701.462660][T32149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7344'. [ 701.501070][T32153] netlink: 'syz.0.7340': attribute type 1 has an invalid length. [ 701.514072][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 701.543243][T32153] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7340'. [ 701.642706][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 701.836614][T32159] bond6: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 701.848697][T32168] sctp: [Deprecated]: syz.3.7350 (pid 32168) Use of int in max_burst socket option deprecated. [ 701.848697][T32168] Use struct sctp_assoc_value instead [ 701.849057][T32167] IPv6: NLM_F_CREATE should be specified when creating new route [ 701.878850][T32159] bond6 (unregistering): Released all slaves [ 701.943890][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 702.073659][ T8402] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 702.205077][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 702.325326][ T8397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 702.430568][T32197] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 702.459441][T32197] tipc: Enabled bearer , priority 9 [ 702.636897][T32194] syzkaller0: entered promiscuous mode [ 702.657349][T32194] syzkaller0: entered allmulticast mode [ 702.921161][T32234] netlink: 'syz.4.7372': attribute type 1 has an invalid length. [ 703.065435][T32242] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.286199][T32249] netlink: 'syz.3.7375': attribute type 2 has an invalid length. [ 703.769550][T32293] __nla_validate_parse: 10 callbacks suppressed [ 703.769594][T32293] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7387'. [ 703.968799][T32306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7392'. [ 704.086041][T32308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7393'. [ 704.112677][T32313] vlan3: left promiscuous mode [ 704.131383][T32313] bridge_slave_0: left promiscuous mode [ 704.147380][T32309] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7393'. [ 704.178331][T32317] xt_l2tp: missing protocol rule (udp|l2tpip) [ 704.429994][T32332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7401'. [ 705.073972][T32405] netlink: 'syz.4.7418': attribute type 4 has an invalid length. [ 705.171456][T32412] netlink: 'syz.4.7419': attribute type 23 has an invalid length. [ 705.351601][T32420] netlink: 'syz.2.7423': attribute type 12 has an invalid length. [ 705.387945][T32420] bond6: option primary_reselect: invalid value (255) [ 705.399037][T32420] bond6 (unregistering): Released all slaves [ 705.418441][T32412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7419'. [ 705.488984][T32424] netlink: 312 bytes leftover after parsing attributes in process `syz.0.7422'. [ 705.644151][T32432] netlink: 'syz.1.7426': attribute type 16 has an invalid length. [ 705.652674][T32432] netlink: 'syz.1.7426': attribute type 17 has an invalid length. [ 705.662188][T32432] tunl0: left promiscuous mode [ 705.736138][T32432] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.743396][T32432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.750897][T32432] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.758092][T32432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.765399][T32435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7427'. [ 705.887757][T32445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7430'. [ 705.957489][T32432] veth5: left allmulticast mode [ 705.970865][T32432] gretap1: left promiscuous mode [ 705.979777][T32432] gretap1: left allmulticast mode [ 705.997611][T32432] bridge0: port 4(batadv1) entered blocking state [ 706.004258][T32432] bridge0: port 4(batadv1) entered forwarding state [ 706.015333][T32432] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 706.029762][T32432] vlan2: left allmulticast mode [ 706.036262][T32432] bond0: left allmulticast mode [ 706.041278][T32432] bond_slave_0: left allmulticast mode [ 706.048701][T32432] bond_slave_1: left allmulticast mode [ 706.060860][T32432] bond3: left promiscuous mode [ 706.067435][T32432] ip6gre1: left promiscuous mode [ 706.076957][T32432] wireguard0: left promiscuous mode [ 706.082336][T32432] wireguard0: left allmulticast mode [ 706.128297][T32432] bond5: left promiscuous mode [ 706.142318][T32432] ip6gre2: left promiscuous mode [ 706.167797][T32432] geneve4: left promiscuous mode [ 706.176090][T32452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7427'. [ 706.186902][T32432] geneve4: left allmulticast mode [ 706.197912][T32432] bond6: left promiscuous mode [ 706.204861][T32432] bridge9: left promiscuous mode [ 706.210274][T32432] bond6: left allmulticast mode [ 706.217057][T32432] bridge9: left allmulticast mode [ 706.273976][T32393] net_ratelimit: 23 callbacks suppressed [ 706.274001][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 706.304580][T32440] syzkaller1: entered promiscuous mode [ 706.310349][T32440] syzkaller1: entered allmulticast mode [ 706.883641][T32398] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 707.023980][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 707.211684][T32474] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 707.291570][T32398] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 707.504557][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 707.624493][T32498] netlink: 'syz.1.7447': attribute type 17 has an invalid length. [ 707.644279][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 707.670431][T32500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.764319][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 707.814339][T32506] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 707.894761][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 708.005058][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 708.091961][T32528] veth5: entered promiscuous mode [ 708.123180][T32532] netlink: 'syz.4.7457': attribute type 12 has an invalid length. [ 708.131248][T32532] netlink: 'syz.4.7457': attribute type 29 has an invalid length. [ 709.167869][T32606] netlink: 'syz.1.7480': attribute type 1 has an invalid length. [ 709.215899][T32606] bond7: entered promiscuous mode [ 709.227509][T32606] 8021q: adding VLAN 0 to HW filter on device bond7 [ 709.281872][T32606] 8021q: adding VLAN 0 to HW filter on device bond7 [ 709.291989][T32606] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 709.303599][T32606] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 709.321067][T32606] bond7: (slave vti0): making interface the new active one [ 709.329880][T32606] vti0: entered promiscuous mode [ 709.337935][T32606] bond7: (slave vti0): Enslaving as an active interface with an up link [ 709.514762][T32622] netlink: 'syz.4.7483': attribute type 83 has an invalid length. [ 709.658442][T32634] __nla_validate_parse: 8 callbacks suppressed [ 709.658463][T32634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7488'. [ 709.764999][T32636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7487'. [ 710.398598][T32686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7503'. [ 710.549095][T32697] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7508'. [ 710.568814][T32697] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7508'. [ 710.891446][T32720] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7514'. [ 710.906753][T32722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7515'. [ 711.049291][T32729] syzkaller0: entered promiscuous mode [ 711.056236][T32729] syzkaller0: entered allmulticast mode [ 711.170716][T32734] validate_nla: 2 callbacks suppressed [ 711.170764][T32734] netlink: 'syz.0.7519': attribute type 10 has an invalid length. [ 711.185817][T32734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7519'. [ 711.235716][T32734] team0: Port device geneve1 added [ 711.262002][T32382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.279642][T32382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.294552][T32382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.304909][T32382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.335482][T32382] net_ratelimit: 29 callbacks suppressed [ 711.335507][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 711.513865][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 711.542641][T32756] netlink: 'syz.2.7527': attribute type 21 has an invalid length. [ 711.557876][T32756] netlink: 'syz.2.7527': attribute type 6 has an invalid length. [ 711.588986][T32756] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7527'. [ 711.624040][T32757] team0: Device ipvlan2 is already an upper device of the team interface [ 711.679961][T32762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7528'. [ 711.713811][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 711.833477][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 711.973654][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 712.103484][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 712.219139][ T320] netlink: 'syz.2.7536': attribute type 1 has an invalid length. [ 712.232428][ T317] bond8: Invalid ad_actor_system MAC address. [ 712.239205][ T317] bond8: option ad_actor_system: invalid value (1) [ 712.270134][ T317] bond8 (unregistering): Released all slaves [ 712.344609][ T320] 8021q: adding VLAN 0 to HW filter on device bond7 [ 712.391943][ T325] bond7: (slave syz_tun): Enslaving as a backup interface with an up link [ 712.448367][ T324] syz_tun: entered allmulticast mode [ 712.531275][ T320] bond8: option lp_interval: invalid value (0) [ 712.539281][ T320] bond8: option lp_interval: allowed values 1 - 2147483647 [ 712.552081][ T320] bond8 (unregistering): Released all slaves [ 712.636165][ T323] pimreg: entered allmulticast mode [ 712.649994][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 712.737138][ T347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.810800][ T324] syz_tun: left allmulticast mode [ 712.823043][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 712.963968][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 713.089323][ T365] netlink: 'syz.0.7546': attribute type 7 has an invalid length. [ 713.320749][ T374] netlink: 'syz.0.7551': attribute type 1 has an invalid length. [ 713.329726][ T374] netlink: 'syz.0.7551': attribute type 2 has an invalid length. [ 713.354626][ T382] syzkaller1: entered promiscuous mode [ 713.361412][ T382] syzkaller1: entered allmulticast mode [ 713.538011][ T394] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 713.743800][ T412] netlink: 'syz.1.7559': attribute type 1 has an invalid length. [ 713.828139][ T412] 8021q: adding VLAN 0 to HW filter on device bond8 [ 713.882298][ T420] bond8: (slave gretap2): making interface the new active one [ 713.930380][ T420] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 714.112199][ T429] IPVS: length: 1152 != 8 [ 714.848356][ T483] __nla_validate_parse: 13 callbacks suppressed [ 714.848378][ T483] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7583'. [ 714.864485][ T482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7582'. [ 714.864529][ T482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7582'. [ 715.019997][ T490] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 715.776011][ T545] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7598'. [ 716.363853][T32395] net_ratelimit: 25 callbacks suppressed [ 716.363875][T32395] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 716.517393][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 716.559873][ T591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7613'. [ 716.673085][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 716.804208][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 716.824708][ T611] netlink: 81 bytes leftover after parsing attributes in process `syz.0.7617'. [ 716.854523][ T611] openvswitch: netlink: Key 8 has unexpected len 2 expected 40 [ 716.943525][T32395] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 717.019510][ T627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7623'. [ 717.073430][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 717.193772][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 717.333897][T32394] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 717.364998][ T648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7629'. [ 717.367456][ T649] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7630'. [ 717.395860][ T648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7629'. [ 717.457119][T32394] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.482531][T32394] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.486378][ T652] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20000 [ 717.533815][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 717.577411][T32394] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.606936][T32394] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.855411][ T669] bond0: (slave bond_slave_0): Releasing backup interface [ 718.082241][ T678] : entered promiscuous mode [ 718.267224][ T692] bond3 (unregistering): Released all slaves [ 718.538321][ T703] x_tables: unsorted underflow at hook 2 [ 718.620507][ T708] vlan4: entered promiscuous mode [ 718.634197][ T708] bridge0: entered promiscuous mode [ 718.662442][ T708] vlan3: entered promiscuous mode [ 718.693619][ T708] bridge_slave_0: entered promiscuous mode [ 718.798676][T32382] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.844650][T32382] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 718.925168][ T720] sctp: [Deprecated]: syz.2.7654 (pid 720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 718.925168][ T720] Use struct sctp_sack_info instead [ 719.368444][ T749] set match dimension is over the limit! [ 719.635585][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 719.888264][ T784] netlink: 'syz.0.7675': attribute type 11 has an invalid length. [ 719.907235][ T784] __nla_validate_parse: 8 callbacks suppressed [ 719.907254][ T784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7675'. [ 720.000375][ T784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7675'. [ 720.038009][ T789] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7676'. [ 720.063885][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 720.184730][ T793] pimreg: entered allmulticast mode [ 720.250209][ T809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7679'. [ 720.307463][ T809] tunl0: Master is either lo or non-ether device [ 720.496804][ T821] xt_hashlimit: overflow, try lower: 3/0 [ 720.532579][ T825] xt_hashlimit: overflow, try lower: 3/0 [ 720.984169][ T854] netlink: 'syz.1.7694': attribute type 5 has an invalid length. [ 721.352258][ T873] syzkaller1: entered promiscuous mode [ 721.366590][ T873] syzkaller1: entered allmulticast mode [ 721.453317][ T8404] net_ratelimit: 34 callbacks suppressed [ 721.453356][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 721.593697][T32394] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 721.638724][ T895] netlink: 'syz.1.7708': attribute type 2 has an invalid length. [ 721.671144][ T895] netlink: 'syz.1.7708': attribute type 1 has an invalid length. [ 721.680771][ T896] netlink: 'syz.0.7707': attribute type 1 has an invalid length. [ 721.714490][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 721.763045][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 721.780900][ T903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7709'. [ 721.833373][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 721.973725][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 722.125801][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 722.180620][ T922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7714'. [ 722.207848][ T922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7714'. [ 722.220770][ T922] netlink: 'syz.1.7714': attribute type 6 has an invalid length. [ 722.252031][ T922] TC_ACT_REPEAT abuse ? [ 722.263082][T32395] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 722.383236][T32395] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 722.400184][ T922] IPVS: persistence engine module ip_vs_pe_À not found [ 722.698780][ T954] can: request_module (can-proto-0) failed. [ 722.903569][T32395] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 723.011498][ T978] netlink: 'syz.2.7724': attribute type 4 has an invalid length. [ 723.025020][ T978] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7724'. [ 723.044415][ T978] .`: renamed from bond0 (while UP) [ 723.436442][ T1006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7730'. [ 723.538936][ T1011] netlink: 348 bytes leftover after parsing attributes in process `syz.3.7731'. [ 725.636318][ T954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.862707][ T1028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7734'. [ 726.072437][ T1052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7742'. [ 726.174483][ T1052] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 726.191168][ T1052] bond4: (slave lo): Enslaving as an active interface with an up link [ 726.203971][ T5717] lo speed is unknown, defaulting to 1000 [ 726.209790][ T5744] lo speed is unknown, defaulting to 1000 [ 726.216242][ T8592] lo speed is unknown, defaulting to 1000 [ 726.232059][ T1063] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.7745'. [ 726.300174][ T1073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7746'. [ 726.543028][T32382] net_ratelimit: 33 callbacks suppressed [ 726.543048][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 726.570197][ T1077] openvswitch: netlink: Flow actions attr not present in new flow. [ 726.630389][ T1090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7751'. [ 726.645500][ T1086] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7749'. [ 726.659673][ T1088] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.7750'. [ 726.690503][ T1091] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7749'. [ 726.704507][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 726.835620][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 726.961478][ T1111] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7754'. [ 726.994188][T32394] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 727.113472][T32394] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 727.233897][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 727.315372][ T1133] syzkaller0: entered promiscuous mode [ 727.331524][ T1133] syzkaller0: entered allmulticast mode [ 727.406957][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 727.436374][ T1132] tipc: Enabled bearer , priority 0 [ 727.458872][ T1130] tipc: Resetting bearer [ 727.527868][ T1130] tipc: Disabling bearer [ 727.596462][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 727.628735][ T1147] syzkaller0: entered promiscuous mode [ 727.655970][ T1147] syzkaller0: entered allmulticast mode [ 727.783992][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 727.801538][ T1167] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7767'. [ 727.937710][ T5625] block nbd2: Receive control failed (result -107) [ 727.974680][ T1158] nbd2: detected capacity change from 0 to 63 [ 728.009441][ T50] block nbd2: Receive control failed (result -104) [ 728.231526][ T1188] bridge10: entered promiscuous mode [ 728.239648][ T1188] bridge10: entered allmulticast mode [ 728.258656][ T1194] netlink: 'syz.2.7780': attribute type 14 has an invalid length. [ 728.267481][ T1194] netlink: 'syz.2.7780': attribute type 13 has an invalid length. [ 728.472400][ T1208] netlink: 'syz.2.7783': attribute type 13 has an invalid length. [ 728.533058][ T1208] tipc: Resetting bearer [ 728.551862][ T1208] veth1_macvtap: left promiscuous mode [ 728.568978][ T1208] macsec0: entered allmulticast mode [ 728.704349][ T1220] macvtap2: entered promiscuous mode [ 728.718144][ T1220] macvtap2: entered allmulticast mode [ 728.877713][ T1233] syzkaller0: entered promiscuous mode [ 728.911005][ T1233] syzkaller0: entered allmulticast mode [ 728.964295][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 729.145701][ T1245] netlink: 'syz.4.7796': attribute type 1 has an invalid length. [ 729.213537][ T8592] IPVS: starting estimator thread 0... [ 729.303600][ T1255] IPVS: using max 43 ests per chain, 103200 per kthread [ 729.313973][ T1253] 8021q: adding VLAN 0 to HW filter on device bond6 [ 729.341388][ T1253] bond5: (slave bond6): making interface the new active one [ 729.368469][ T1253] bond5: (slave bond6): Enslaving as an active interface with an up link [ 729.449179][ T1257] bond5: (slave gretap3): Enslaving as a backup interface with an up link [ 729.465680][ T1267] tipc: Enabling of bearer rejected, failed to enable media [ 729.695895][ T1282] netlink: 'syz.4.7804': attribute type 12 has an invalid length. [ 729.721506][ T1282] netlink: 'syz.4.7804': attribute type 29 has an invalid length. [ 729.753828][ T1282] netlink: 'syz.4.7804': attribute type 1 has an invalid length. [ 729.780312][ T1282] netlink: 'syz.4.7804': attribute type 2 has an invalid length. [ 729.805409][ T1287] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 729.879578][ T8404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.900565][ T8404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.470823][ T1326] syzkaller0: entered promiscuous mode [ 730.485677][ T1333] netlink: 'syz.3.7817': attribute type 1 has an invalid length. [ 730.492536][ T1326] syzkaller0: entered allmulticast mode [ 730.580018][ T1333] 8021q: adding VLAN 0 to HW filter on device bond5 [ 731.439709][ T1368] netlink: 'syz.2.7827': attribute type 1 has an invalid length. [ 731.504249][ T1372] __nla_validate_parse: 21 callbacks suppressed [ 731.504273][ T1372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7828'. [ 731.532795][ T1368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.564912][T32393] net_ratelimit: 22 callbacks suppressed [ 731.564936][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 731.579129][ T1372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.733255][T32394] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 731.973768][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 732.103736][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 732.233919][T32395] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 732.282394][ T1402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7838'. [ 732.363800][T32395] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 732.530472][ T1383] tunl0: left promiscuous mode [ 732.561774][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.569022][ T1383] bridge0: port 1(bridge_slave_0) entered listening state [ 732.737348][ T1383] veth1_macvtap: entered promiscuous mode [ 732.772817][ T1383] veth1_macvtap: entered allmulticast mode [ 732.808128][ T1383] tipc: Resetting bearer [ 732.818506][ T1416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.851032][ T1416] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7841'. [ 732.866423][ T1383] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 732.881615][ T1416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7841'. [ 732.903593][ T1383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.944380][ T1383] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 732.975843][ T1383] batman_adv: batadv0: Interface activated: wlan0 [ 733.001686][ T1383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 733.018652][ T1383] veth3: left promiscuous mode [ 733.029707][ T1383] 8021q: adding VLAN 0 to HW filter on device bond4 [ 733.049590][ T1421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7843'. [ 733.074090][ T1421] openvswitch: netlink: Flow actions attr not present in new flow. [ 733.099037][ T1383] 8021q: adding VLAN 0 to HW filter on device bond6 [ 733.115407][ T8404] bond2: (slave ip6gretap1): link status up again after 0 ms [ 733.132420][T32382] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.139621][T32382] bridge0: port 2(bridge_slave_1) entered listening state [ 733.185447][T32397] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.222699][T32397] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.476226][ T1423] syzkaller0: entered promiscuous mode [ 733.502993][ T1423] syzkaller0: entered allmulticast mode [ 733.526799][T32397] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.579968][T32397] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.744352][ T1440] gretap3: entered promiscuous mode [ 733.750476][ T1440] batman_adv: batadv0: Adding interface: gretap3 [ 733.761099][ T1440] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 733.799011][ T1440] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 733.823612][ T1450] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7851'. [ 733.853836][T32397] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 733.869723][ T1451] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:0 [ 733.883795][T32397] bond3: active interface up! [ 734.084955][ T1459] veth7: entered allmulticast mode [ 734.123580][ T1465] netlink: 'syz.3.7855': attribute type 21 has an invalid length. [ 734.158872][ T1465] IPv6: NLM_F_CREATE should be specified when creating new route [ 734.488304][ T1479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7860'. [ 734.536042][ T1479] netlink: 'syz.2.7860': attribute type 1 has an invalid length. [ 734.555867][ T1485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7862'. [ 734.581337][ T1485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7862'. [ 734.728487][ T1488] lo speed is unknown, defaulting to 1000 [ 734.905670][ T1497] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7866'. [ 735.197224][ T1510] netlink: 'syz.4.7871': attribute type 2 has an invalid length. [ 735.251038][ T1511] netlink: 'syz.4.7871': attribute type 2 has an invalid length. [ 735.499867][ T1527] IPv6: NLM_F_CREATE should be specified when creating new route [ 735.510563][ T1527] netlink: 'syz.0.7881': attribute type 1 has an invalid length. [ 735.885171][ T1544] xfrm1: entered allmulticast mode [ 736.030251][ T1555] --map-set only usable from mangle table [ 736.052705][ T1561] --map-set only usable from mangle table [ 736.281214][ T1574] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 736.298319][ T1578] netlink: 'syz.4.7897': attribute type 3 has an invalid length. [ 736.315592][ T1579] netlink: 'syz.4.7897': attribute type 3 has an invalid length. [ 736.524916][ T1586] pim6reg: entered allmulticast mode [ 736.554123][ T1591] __nla_validate_parse: 5 callbacks suppressed [ 736.554158][ T1591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7901'. [ 736.595961][T32394] net_ratelimit: 77 callbacks suppressed [ 736.595981][T32394] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 736.660132][ T1595] openvswitch: netlink: IPv6 tunnel dst address is zero [ 736.683202][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 736.723631][T32393] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 736.804584][T32392] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 736.821671][ T1601] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7906'. [ 736.847014][ T1601] netlink: 35 bytes leftover after parsing attributes in process `syz.3.7906'. [ 736.848002][T32392] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 736.873885][ T1601] netlink: 'syz.3.7906': attribute type 5 has an invalid length. [ 736.907571][ T1601] netlink: 'syz.3.7906': attribute type 6 has an invalid length. [ 736.925068][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 736.937555][ T1601] netlink: 35 bytes leftover after parsing attributes in process `syz.3.7906'. [ 736.966872][ T1605] ip6tnl1: entered allmulticast mode [ 737.004593][T32393] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 737.073284][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 737.124958][T32393] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 737.206920][ T1626] siw: device registration error -23 [ 737.407549][ T1630] bond7: entered promiscuous mode [ 737.416849][ T1633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7916'. [ 737.426517][ T1633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7916'. [ 737.778952][ T1663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7926'. [ 737.926300][ T1674] Bluetooth: MGMT ver 1.23 [ 737.972033][ T1674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7930'. [ 738.024695][ T1679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7930'. [ 738.133951][ T1681] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 738.145808][ T1681] netlink: 'syz.1.7933': attribute type 1 has an invalid length. [ 738.203704][ T1681] 8021q: adding VLAN 0 to HW filter on device bond9 [ 738.220646][ T50] block nbd4: Receive control failed (result -107) [ 738.264298][ T1677] nbd4: detected capacity change from 0 to 63 [ 738.296153][ T5630] block nbd4: Receive control failed (result -104) [ 738.309690][ T1686] bond9: (slave veth9): Enslaving as an active interface with a down link [ 738.336143][ T1681] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7933'. [ 738.576356][ T1699] team0 (unregistering): Port device team_slave_0 removed [ 738.619545][ T1705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.638623][ T1699] team0 (unregistering): Port device team_slave_1 removed [ 738.703898][T32393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.717011][T32393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.972786][ T1801] validate_nla: 2 callbacks suppressed [ 739.989009][ T1801] netlink: 'syz.3.7966': attribute type 5 has an invalid length. [ 741.613750][ T8404] net_ratelimit: 75 callbacks suppressed [ 741.613789][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 741.633476][ T8404] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 741.733503][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 741.744206][T32397] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 741.843990][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 741.853552][T32394] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 741.953673][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 741.963843][T32392] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 742.063090][T32392] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 742.073770][T32394] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 742.827726][ T1786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.042509][ T1861] __nla_validate_parse: 3 callbacks suppressed [ 743.042533][ T1861] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7982'. [ 743.244915][ T1875] netlink: 288 bytes leftover after parsing attributes in process `syz.4.7989'. [ 743.467914][ T1869] netlink: 236 bytes leftover after parsing attributes in process `syz.3.7986'. [ 743.486932][ T1869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7986'. [ 743.515890][ T1891] syzkaller0: entered promiscuous mode [ 743.530181][ T1891] syzkaller0: entered allmulticast mode [ 743.884040][ T1904] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.919172][ T1904] bridge_slave_0 (unregistering): left allmulticast mode [ 743.955191][ T1904] bridge_slave_0 (unregistering): left promiscuous mode [ 743.980446][ T1904] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.106508][ T1909] bridge_slave_0: left allmulticast mode [ 744.112503][ T1909] bridge_slave_0: left promiscuous mode [ 744.121773][ T1909] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.148392][ T1909] bridge_slave_1: left allmulticast mode [ 744.154740][ T1909] bridge_slave_1: left promiscuous mode [ 744.160544][ T1909] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.251367][ T1909] team0: Port device team_slave_0 removed [ 744.279868][ T1909] team0: Port device team_slave_1 removed [ 744.298463][ T1909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.307593][ T1909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.327039][ T1933] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8003'. [ 744.345961][ T1909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.358082][ T1909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.372633][ T1914] veth0_vlan: left promiscuous mode [ 744.379390][ T1914] vlan0: entered promiscuous mode [ 744.385486][ T1914] veth0_vlan: entered promiscuous mode [ 744.442361][ T1914] team0: Port device vlan0 added [ 744.712631][ T1949] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.8007'. [ 744.831308][ T1956] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8010'. [ 744.845787][ T1956] veth0: entered promiscuous mode [ 744.851520][ T1955] veth0: left promiscuous mode [ 746.623511][T32394] net_ratelimit: 68 callbacks suppressed [ 746.623600][T32394] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 746.644091][T32394] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 746.743522][T32395] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 746.753498][T32395] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 746.853844][ T8404] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 746.863564][T32395] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 746.963889][ T8404] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 746.973748][T32392] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 747.033670][ T1913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 747.073597][T32392] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 747.103727][T32392] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 747.304561][ T1982] nbd0: detected capacity change from 63 to 0 [ 747.314934][ T1985] macvtap1: left allmulticast mode [ 747.320425][ T1982] block nbd0: reconnected socket [ 747.334033][ T8592] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 747.345512][ T1985] macvtap2: left allmulticast mode [ 747.350691][ T1985] vlan0: left allmulticast mode [ 747.356645][ T1982] netlink: 'syz.3.8016': attribute type 1 has an invalid length. [ 747.371525][ T1982] nbd: error processing sock list [ 747.396142][ T1985] veth0_vlan: left allmulticast mode [ 747.411182][ T5630] block nbd0: Receive control failed (result -32) [ 747.529145][ T1999] netlink: 'syz.0.8021': attribute type 1 has an invalid length. [ 747.638894][ T1999] 8021q: adding VLAN 0 to HW filter on device bond4 [ 747.659936][ T2003] bond4: (slave geneve3): making interface the new active one [ 747.669818][ T2003] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 747.796800][ T2018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8026'. [ 748.002936][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 748.215988][ T2045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.245253][ T5717] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 748.340016][ T2045] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 748.394532][ T2045] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 748.436950][ T2045] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 748.459531][ T2063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8036'. [ 748.500068][ T2066] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8033'. [ 748.531361][ T2045] 8021q: adding VLAN 0 to HW filter on device bond4 [ 748.642978][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 748.811668][ T2078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8041'. [ 748.839583][ T2078] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8041'. [ 749.107760][ T2095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8045'. [ 749.144317][ T2095] netlink: 'syz.2.8045': attribute type 7 has an invalid length. [ 749.166845][ T2095] netlink: 'syz.2.8045': attribute type 8 has an invalid length. [ 749.185767][ T2095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8045'. [ 749.236271][ T2098] vlan1: entered allmulticast mode [ 749.254134][ T2098] bond0: entered allmulticast mode [ 749.511156][ T2115] netlink: 6 bytes leftover after parsing attributes in process `syz.2.8050'. [ 749.808646][ T2130] syzkaller0: entered promiscuous mode [ 749.815832][ T2130] syzkaller0: entered allmulticast mode [ 749.904897][ T2136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8058'. [ 750.008286][ T2138] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8056'. [ 750.106117][ T2149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8060'. [ 750.332754][ T2160] netlink: 'syz.0.8065': attribute type 10 has an invalid length. [ 750.357907][ T2160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.396176][ T2160] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 750.512351][ T2160] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 750.554076][ T2160] bond0 (unregistering): Released all slaves [ 751.733475][T32392] net_ratelimit: 68 callbacks suppressed [ 751.733500][T32392] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 751.753764][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 751.853575][T32397] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 751.863682][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 751.963961][T32397] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 751.973543][T32395] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 752.073512][ T8404] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 752.084243][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 752.183558][T32382] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 752.193612][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 753.429985][ T2165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 753.640277][ T2209] tipc: Enabled bearer , priority 0 [ 753.659130][ T2213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8079'. [ 753.697714][ T2208] tipc: Disabling bearer [ 753.906475][ T2228] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8084'. [ 754.236202][ T2250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8094'. [ 754.268385][ T2253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8096'. [ 754.284041][ T2254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8096'. [ 754.334483][ T2258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8097'. [ 754.353810][ T2255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8096'. [ 754.379561][ T2250] netlink: 'syz.1.8094': attribute type 12 has an invalid length. [ 754.392180][ T2258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8097'. [ 754.811335][ T2289] bridge0: port 1(ipvlan2) entered blocking state [ 754.835605][ T2289] bridge0: port 1(ipvlan2) entered disabled state [ 754.859999][ T2289] ipvlan2: entered allmulticast mode [ 754.866840][ T2289] bridge0: entered allmulticast mode [ 754.878223][ T2289] ipvlan2: left allmulticast mode [ 754.886697][ T2289] bridge0: left allmulticast mode [ 755.049977][ T2298] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8109'. [ 755.061336][ T2299] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8108'. [ 755.178332][ T2304] netlink: 'syz.1.8111': attribute type 23 has an invalid length. [ 755.271866][ T2311] netlink: 'syz.4.8113': attribute type 1 has an invalid length. [ 755.566333][ T2329] lo speed is unknown, defaulting to 1000 [ 755.647133][ T2335] netlink: 'syz.2.8119': attribute type 16 has an invalid length. [ 755.710211][ T2335] netlink: 'syz.2.8119': attribute type 17 has an invalid length. [ 755.769947][ T2333] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.786984][ T2333] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.822340][ T2333] tipc: Resetting bearer [ 755.829111][ T2333] tipc: Resetting bearer [ 755.885435][ T8404] tipc: Resetting bearer [ 755.905072][ T2341] pimreg: entered allmulticast mode [ 755.986147][ T2335] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.993402][ T2335] bridge0: port 1(bridge_slave_0) entered listening state [ 756.009247][ T2335] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.016481][ T2335] bridge0: port 2(bridge_slave_1) entered listening state [ 756.069070][ T2335] macsec0: left allmulticast mode [ 756.076473][ T2335] veth1_macvtap: left allmulticast mode [ 756.120185][ T2335] vlan2: left allmulticast mode [ 756.126972][ T2335] .`: left allmulticast mode [ 756.132283][ T2335] bond_slave_0: left allmulticast mode [ 756.144764][ T2335] bond_slave_1: left allmulticast mode [ 756.476968][ T2365] netlink: 'syz.1.8129': attribute type 58 has an invalid length. [ 756.567912][ T2363] vlan0: entered promiscuous mode [ 756.590284][ T2363] vlan0: entered allmulticast mode [ 756.615856][ T2363] veth0_vlan: entered allmulticast mode [ 756.691604][ T2377] tipc: Started in network mode [ 756.704881][ T2377] tipc: Node identity b2e894f5c4cf, cluster identity 4711 [ 756.723894][ T2377] tipc: Enabled bearer , priority 0 [ 756.747188][ T2358] syzkaller0: entered promiscuous mode [ 756.761339][ T2358] syzkaller0: entered allmulticast mode [ 756.791174][ T2384] sctp: [Deprecated]: syz.4.8132 (pid 2384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 756.791174][ T2384] Use struct sctp_sack_info instead [ 756.838476][ T2357] tipc: Resetting bearer [ 756.884202][ T2357] tipc: Disabling bearer [ 756.954729][T32395] net_ratelimit: 74 callbacks suppressed [ 756.954774][T32395] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 757.008134][ T2392] netlink: 'syz.0.8134': attribute type 10 has an invalid length. [ 757.024847][T32395] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 757.081584][ T2392] team0: Port device dummy0 added [ 757.173377][T32382] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 757.204734][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 757.314484][T32395] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 757.353770][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 757.418315][ T2415] netlink: 'syz.3.8144': attribute type 1 has an invalid length. [ 757.453096][T32393] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 757.500703][ T2425] netlink: 'syz.2.8147': attribute type 11 has an invalid length. [ 757.509728][ T2425] netlink: 'syz.2.8147': attribute type 11 has an invalid length. [ 757.603166][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 757.633812][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 757.674448][T32393] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 757.823553][T32382] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 758.249360][ T25] block nbd2: Connection timed out, retrying (0/2 alive) [ 758.257441][ T25] block nbd2: Connection timed out, retrying (0/2 alive) [ 758.266233][T22819] block nbd2: Dead connection, failed to find a fallback [ 758.274386][ T25] block nbd2: Connection timed out, retrying (0/2 alive) [ 758.282024][T22819] block nbd2: shutting down sockets [ 758.287991][ T25] block nbd2: Connection timed out, retrying (0/2 alive) [ 758.295790][T22819] blk_print_req_error: 138 callbacks suppressed [ 758.295823][T22819] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.313277][T22819] buffer_io_error: 138 callbacks suppressed [ 758.313452][T22819] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.328453][T22819] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.338686][T22819] Buffer I/O error on dev nbd2, logical block 3, async page read [ 758.347173][T22819] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.356995][T22819] Buffer I/O error on dev nbd2, logical block 2, async page read [ 758.365851][T22819] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.375739][T22819] Buffer I/O error on dev nbd2, logical block 1, async page read [ 758.384464][T31986] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.395920][T31986] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.405306][T31986] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.415186][T31986] Buffer I/O error on dev nbd2, logical block 1, async page read [ 758.424104][T31986] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.434364][T31986] Buffer I/O error on dev nbd2, logical block 2, async page read [ 758.442784][T31986] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.452660][T31986] Buffer I/O error on dev nbd2, logical block 3, async page read [ 758.461597][T31986] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.471469][T31986] Buffer I/O error on dev nbd2, logical block 0, async page read [ 758.480053][T31986] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 758.491414][T31986] Buffer I/O error on dev nbd2, logical block 1, async page read [ 758.503571][T31986] ldm_validate_partition_table(): Disk read failed. [ 758.513893][T31986] Dev nbd2: unable to read RDB block 0 [ 758.522330][T31986] nbd2: unable to read partition table [ 758.549317][T31986] ldm_validate_partition_table(): Disk read failed. [ 758.558659][ T2464] lo speed is unknown, defaulting to 1000 [ 758.572168][T31986] Dev nbd2: unable to read RDB block 0 [ 758.592088][T31986] nbd2: unable to read partition table [ 758.727751][ T2489] __nla_validate_parse: 14 callbacks suppressed [ 758.727785][ T2489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8162'. [ 758.759639][ T2489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8162'. [ 758.976326][ T2505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8165'. [ 759.015315][ T2505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8165'. [ 759.084934][ T2517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8168'. [ 759.132126][ T2521] netlink: 'syz.4.8167': attribute type 13 has an invalid length. [ 759.154779][T32397] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.203880][T32397] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.249285][T32397] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.278284][ T2532] netlink: 276 bytes leftover after parsing attributes in process `syz.3.8172'. [ 759.346276][ T2537] xt_socket: unknown flags 0x8 [ 759.410253][ T2541] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8167'. [ 759.609938][ T2552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8178'. [ 759.770847][ T2556] lo speed is unknown, defaulting to 1000 [ 759.973993][ T2581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8185'. [ 760.028384][ T2586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8187'. [ 760.302806][ T2603] bond0: Caught tx_queue_len zero misconfig [ 760.564625][ T2635] netlink: 'syz.3.8198': attribute type 7 has an invalid length. [ 760.698421][ T2646] netlink: 'syz.3.8201': attribute type 3 has an invalid length. [ 760.727435][ T2644] netlink: 'syz.2.8199': attribute type 1 has an invalid length. [ 760.750711][ T2644] NCSI netlink: No device for ifindex 0 [ 760.770133][ T2644] netlink: 'syz.2.8199': attribute type 27 has an invalid length. [ 760.793446][ T2644] netlink: 'syz.2.8199': attribute type 4 has an invalid length. [ 760.825255][ T2652] bridge7: entered promiscuous mode [ 760.833489][ T2652] bridge7: entered allmulticast mode [ 761.252372][ T2683] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 761.271795][ T2683] syzkaller1: Refused to change device type [ 761.486366][ T2699] xfrm1: entered promiscuous mode [ 761.495793][ T2699] xfrm1: entered allmulticast mode [ 761.538913][ T2708] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 761.549228][ T2708] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 762.013075][T32397] net_ratelimit: 54 callbacks suppressed [ 762.013125][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 762.063005][T32397] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 762.153447][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 762.203460][T32394] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 762.294753][T32392] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 762.355633][T32392] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 762.420091][ T2768] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 762.452628][ T2768] team1: entered promiscuous mode [ 762.475151][ T2768] team1: entered allmulticast mode [ 762.505563][T32394] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 762.593681][T32395] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 762.666947][T32394] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 762.713845][T32394] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 762.913824][ T2814] tap0: tun_chr_ioctl cmd 2148553947 [ 763.576308][ T2860] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.626810][ T2860] bridge_slave_1 (unregistering): left allmulticast mode [ 763.644839][ T2860] bridge_slave_1 (unregistering): left promiscuous mode [ 763.652704][ T2860] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.789077][ T2877] __nla_validate_parse: 28 callbacks suppressed [ 763.789114][ T2877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8257'. [ 763.845217][ T2877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8257'. [ 764.094835][ T2898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8263'. [ 764.110216][ T2896] block nbd0: NBD_DISCONNECT [ 764.122270][ T2896] block nbd0: Send disconnect failed -32 [ 764.133926][ T2898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8263'. [ 764.137884][ T2896] block nbd0: Send disconnect failed -32 [ 764.164125][ T2896] block nbd0: shutting down sockets [ 764.235493][T32392] ¾x9ÿ: left allmulticast mode [ 764.260651][T32392] ¾x9ÿ: left promiscuous mode [ 764.285435][T32392] bridge0: port 1(1¾x9ÿ) entered disabled state [ 764.511788][T32392] erspan0 (unregistering): left promiscuous mode [ 764.557796][T32392] batman_adv: batadv0: Removing interface: gretap1 [ 764.617171][T32392] bond3 (unregistering): (slave gretap2): Releasing active interface [ 764.709988][T32392] bond7 (unregistering): (slave geneve4): Releasing active interface [ 764.780386][T32392] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 764.870254][T32392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.896141][T32392] bond_slave_0: left promiscuous mode [ 764.904108][T32392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.913380][T32392] bond_slave_1: left promiscuous mode [ 764.922224][T32392] bond0 (unregistering): (slave bond1): Releasing backup interface [ 764.932550][T32392] bond1 (unregistering): left promiscuous mode [ 764.942378][T32392] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 764.947345][ T2929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8270'. [ 764.964085][T32392] dummy0: left promiscuous mode [ 764.972164][T32392] bond0 (unregistering): Released all slaves [ 764.986280][T32392] bond1 (unregistering): Released all slaves [ 765.001298][T32392] bond2 (unregistering): Released all slaves [ 765.015663][T32392] bond3 (unregistering): Released all slaves [ 765.048958][T32392] bond4 (unregistering): Released all slaves [ 765.070669][T32392] bond5 (unregistering): (slave veth7): Releasing active interface [ 765.081195][T32392] bond5 (unregistering): Released all slaves [ 765.101373][T32392] bond6 (unregistering): Released all slaves [ 765.122424][T32392] bond7 (unregistering): Released all slaves [ 765.140816][T32392] bond8 (unregistering): Released all slaves [ 765.162042][T32392] bond9 (unregistering): Released all slaves [ 765.177648][T32392] bond10 (unregistering): Released all slaves [ 765.190954][T32392] bond12 (unregistering): Released all slaves [ 765.210258][T32392] bond11 (unregistering): Released all slaves [ 765.233769][T32392] bond13 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 765.245441][T32392] bond13 (unregistering): Released all slaves [ 765.368454][T32392] tipc: Disabling bearer [ 765.387677][T32392] tipc: Left network mode [ 765.439698][ T2938] sctp: [Deprecated]: syz.0.8273 (pid 2938) Use of int in max_burst socket option. [ 765.439698][ T2938] Use struct sctp_assoc_value instead [ 765.547713][ T2943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8276'. [ 765.945349][ T2976] IPv6: NLM_F_CREATE should be specified when creating new route [ 766.024432][T32392] team0: left promiscuous mode [ 766.029402][T32392] team_slave_0: left promiscuous mode [ 766.035634][T32392] team_slave_1: left promiscuous mode [ 766.044217][T32392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.140882][T32392] team0 (unregistering): Port device team_slave_1 removed [ 766.155470][T32392] team0 (unregistering): Port device team_slave_0 removed [ 766.220159][T32392] smc: removing net device team0 with user defined pnetid SYZ2 [ 766.247905][T32395] smbdirect: ib_dev[syz1] removed [ 766.511865][T32392] IPVS: stop unused estimator thread 0... [ 767.033512][T32397] net_ratelimit: 52 callbacks suppressed [ 767.033541][T32397] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 767.055003][T32395] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 767.153585][T32397] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 767.173729][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 767.263744][T32393] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 767.283505][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 767.372996][T32397] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 767.393503][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 767.483489][ T8404] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 767.503841][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 768.464517][ T2943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 768.476512][ T2953] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8276'. [ 768.487297][ T5000] block nbd4: Connection timed out, retrying (0/2 alive) [ 768.495308][ T5000] block nbd4: Connection timed out, retrying (0/2 alive) [ 768.502429][ T5000] block nbd4: Connection timed out, retrying (0/2 alive) [ 768.510261][ T5000] block nbd4: Connection timed out, retrying (0/2 alive) [ 768.517531][ T5000] block nbd4: Dead connection, failed to find a fallback [ 768.525102][ T5000] block nbd4: shutting down sockets [ 768.530339][ T5000] blk_print_req_error: 138 callbacks suppressed [ 768.530359][ T5000] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.546468][ T5000] buffer_io_error: 138 callbacks suppressed [ 768.546486][ T5000] Buffer I/O error on dev nbd4, logical block 3, async page read [ 768.561029][ T5000] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.570689][ T5000] Buffer I/O error on dev nbd4, logical block 2, async page read [ 768.579057][ T5000] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.589088][ T5000] Buffer I/O error on dev nbd4, logical block 1, async page read [ 768.597461][ T5000] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.607145][ T5000] Buffer I/O error on dev nbd4, logical block 0, async page read [ 768.615896][T32073] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.626789][T32073] Buffer I/O error on dev nbd4, logical block 0, async page read [ 768.635284][T32073] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.645335][T32073] Buffer I/O error on dev nbd4, logical block 1, async page read [ 768.653738][T32073] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.663435][T32073] Buffer I/O error on dev nbd4, logical block 2, async page read [ 768.671267][T32073] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.681339][T32073] Buffer I/O error on dev nbd4, logical block 3, async page read [ 768.689732][T32073] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.699573][T32073] Buffer I/O error on dev nbd4, logical block 0, async page read [ 768.711055][T32073] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.734510][T32073] Buffer I/O error on dev nbd4, logical block 1, async page read [ 768.747284][T32073] ldm_validate_partition_table(): Disk read failed. [ 768.784539][T32073] Dev nbd4: unable to read RDB block 0 [ 768.806415][T32073] nbd4: unable to read partition table [ 768.830444][T32073] ldm_validate_partition_table(): Disk read failed. [ 768.840858][T32073] Dev nbd4: unable to read RDB block 0 [ 768.849755][T32073] nbd4: unable to read partition table [ 769.234033][ T3006] syzkaller0: entered promiscuous mode [ 769.261544][ T3006] syzkaller0: entered allmulticast mode [ 769.352351][ T3015] netlink: 'syz.2.8297': attribute type 21 has an invalid length. [ 769.644231][ T3037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8305'. [ 769.656144][ T3037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8305'. [ 769.686717][ T3041] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8303'. [ 769.719203][ T3037] syzkaller0: entered promiscuous mode [ 769.726143][ T3037] syzkaller0: entered allmulticast mode [ 769.734093][ T3040] netlink: 'syz.0.8304': attribute type 4 has an invalid length. [ 769.745493][ T3040] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8304'. [ 769.757791][ T3041] x_tables: duplicate underflow at hook 2 [ 769.960429][ T3052] netlink: 'syz.0.8309': attribute type 1 has an invalid length. [ 770.033693][ T3048] syzkaller1: entered promiscuous mode [ 770.054798][ T3048] syzkaller1: entered allmulticast mode [ 770.109419][ T3052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.392781][ T3068] xt_CT: No such helper "snmp_trap" [ 770.401397][ T3066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8312'. [ 770.436401][ T3075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8312'. [ 770.616627][ T3085] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 770.709368][ T3093] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8320'. [ 770.738205][ T3091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.762228][ T3091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.933830][ T3106] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8324'. [ 771.042954][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 771.050247][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 771.185260][ T3118] netlink: 'syz.3.8327': attribute type 4 has an invalid length. [ 771.472039][ T3131] syzkaller0: entered promiscuous mode [ 771.512211][ T3131] syzkaller0: entered allmulticast mode [ 771.576056][ T3131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8332'. [ 771.611925][ T3131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8332'. [ 771.662478][ T3148] Cannot find set identified by id 65534 to match [ 771.675870][ T3150] netlink: 'syz.1.8340': attribute type 58 has an invalid length. [ 771.969505][ T3169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.050671][ T3169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.094535][ T3170] ip_vti0: entered promiscuous mode [ 772.123049][T32392] net_ratelimit: 71 callbacks suppressed [ 772.123080][T32392] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 772.171996][ T3179] syzkaller0: entered promiscuous mode [ 772.185361][ T3179] syzkaller0: entered allmulticast mode [ 772.233547][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 772.251575][ T3179] tipc: Enabled bearer , priority 0 [ 772.287809][T32395] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 772.312231][ T3198] FAULT_INJECTION: forcing a failure. [ 772.312231][ T3198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.350516][ T3178] tipc: Resetting bearer [ 772.366096][ T3201] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 772.368836][ T3198] CPU: 0 UID: 0 PID: 3198 Comm: syz.4.8351 Not tainted syzkaller #0 PREEMPT(full) [ 772.368918][ T3198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 772.368959][ T3198] Call Trace: [ 772.368981][ T3198] [ 772.369012][ T3198] dump_stack_lvl+0xe8/0x150 [ 772.369125][ T3198] should_fail_ex+0x40c/0x560 [ 772.369203][ T3198] _copy_from_iter+0x1d3/0x1660 [ 772.369278][ T3198] ? skb_set_owner_w+0x263/0x3d0 [ 772.369482][ T3198] ? __pfx__copy_from_iter+0x10/0x10 [ 772.369612][ T3198] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 772.369667][ T3198] skb_copy_datagram_from_iter+0xe6/0x720 [ 772.369744][ T3198] ? dev_get_by_index+0x22/0x2d0 [ 772.369842][ T3198] ? skb_put+0x112/0x210 [ 772.369919][ T3198] packet_sendmsg+0x36ab/0x5040 [ 772.370037][ T3198] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 772.370121][ T3198] ? lock_acquire+0x5f/0x350 [ 772.370239][ T3198] ? kstrtouint+0x6e/0xe0 [ 772.370300][ T3198] ? get_pid_task+0x20/0x1f0 [ 772.370352][ T3198] ? rcu_is_watching+0x15/0xb0 [ 772.370405][ T3198] ? get_pid_task+0x20/0x1f0 [ 772.370487][ T3198] ? __pfx_packet_sendmsg+0x10/0x10 [ 772.370563][ T3198] ? aa_sk_perm+0x6d5/0x900 [ 772.370647][ T3198] ? lock_acquire+0x5f/0x350 [ 772.370730][ T3198] ? __pfx_aa_sk_perm+0x10/0x10 [ 772.370811][ T3198] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 772.370910][ T3198] ? lock_release+0x4b/0x3c0 [ 772.370989][ T3198] ? __might_fault+0xaf/0x130 [ 772.371048][ T3198] ? aa_sock_msg_perm+0xf1/0x1b0 [ 772.371102][ T3198] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 772.371175][ T3198] ? __pfx_packet_sendmsg+0x10/0x10 [ 772.371228][ T3198] __sys_sendto+0x626/0x6c0 [ 772.371310][ T3198] ? __pfx___sys_sendto+0x10/0x10 [ 772.371374][ T3198] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 772.371537][ T3198] ? __pfx_ksys_write+0x10/0x10 [ 772.371630][ T3198] __x64_sys_sendto+0xde/0x100 [ 772.371703][ T3198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.371759][ T3198] do_syscall_64+0x174/0x580 [ 772.371843][ T3198] ? trace_irq_disable+0x3b/0x140 [ 772.371942][ T3198] ? clear_bhb_loop+0x40/0x90 [ 772.372003][ T3198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.372048][ T3198] RIP: 0033:0x7f862dd9ce59 [ 772.372102][ T3198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.372153][ T3198] RSP: 002b:00007f862eb9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 772.372214][ T3198] RAX: ffffffffffffffda RBX: 00007f862e015fa0 RCX: 00007f862dd9ce59 [ 772.372256][ T3198] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000006 [ 772.372296][ T3198] RBP: 00007f862eb9f090 R08: 0000200000000140 R09: 0000000000000014 [ 772.372337][ T3198] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 772.372369][ T3198] R13: 00007f862e016038 R14: 00007f862e015fa0 R15: 00007fff0d5edaa8 [ 772.372431][ T3198] [ 772.690548][ T3178] tipc: Disabling bearer [ 772.744190][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 772.783255][ T8404] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 772.874082][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 772.916385][T32393] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 772.993763][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 773.055014][T32395] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 773.114062][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 773.258889][ T3246] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 773.715801][ T5630] block nbd0: Receive control failed (result -32) [ 774.326625][ T3322] netlink: 'syz.4.8384': attribute type 1 has an invalid length. [ 774.452198][ T3322] 8021q: adding VLAN 0 to HW filter on device bond8 [ 774.477412][ T3328] bond8: (slave veth0_to_bond): making interface the new active one [ 774.508143][ T3328] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 774.542478][ T3345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.560736][ T3336] gretap0: entered promiscuous mode [ 774.584985][ T3336] vlan3: entered promiscuous mode [ 774.741264][ T3352] __nla_validate_parse: 2 callbacks suppressed [ 774.741286][ T3352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8393'. [ 774.748983][ T3355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8393'. [ 774.761155][ T3352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8393'. [ 774.789453][ T3355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8393'. [ 774.820051][ T3354] bond9: entered promiscuous mode [ 774.825807][ T3354] bond9: entered allmulticast mode [ 774.832040][ T3354] 8021q: adding VLAN 0 to HW filter on device bond9 [ 774.927867][ T3364] syzkaller0: entered promiscuous mode [ 774.947639][ T3364] syzkaller0: entered allmulticast mode [ 775.231155][ T3376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8399'. [ 775.604361][ T3409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8411'. [ 775.797853][ T3420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8412'. [ 775.847986][ T3420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8412'. [ 775.900233][ T3421] syzkaller0: entered promiscuous mode [ 775.915716][ T3421] syzkaller0: entered allmulticast mode [ 775.945224][ T3417] tipc: Enabled bearer , priority 0 [ 776.015055][ T3416] tipc: Resetting bearer [ 776.279139][ T3416] tipc: Disabling bearer [ 776.355148][ T3437] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8419'. [ 776.438350][ T3456] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 777.091917][ T3507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8436'. [ 777.234193][T32397] net_ratelimit: 61 callbacks suppressed [ 777.234215][T32397] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 777.277354][ T3514] lo: entered allmulticast mode [ 777.306461][ T3514] tunl0: entered allmulticast mode [ 777.342190][ T3514] gre0: entered allmulticast mode [ 777.385442][ T3514] gretap0: entered allmulticast mode [ 777.588500][ T3514] erspan0: entered allmulticast mode [ 777.624117][ T3514] ip_vti0: left promiscuous mode [ 777.629283][ T3514] ip_vti0: entered allmulticast mode [ 777.636255][ T3514] ip6_vti0: entered allmulticast mode [ 777.646244][ T3514] sit0: entered allmulticast mode [ 777.699560][ T3514] ip6tnl0: entered allmulticast mode [ 777.709029][ T3514] ip6gre0: entered allmulticast mode [ 777.730721][ T3514] syz_tun: entered allmulticast mode [ 777.814927][T32382] bond7: (slave syz_tun): link status definitely down, disabling slave [ 777.945677][T32397] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 777.993525][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 778.088025][ T8404] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 778.104776][ T3554] netlink: 'syz.1.8450': attribute type 1 has an invalid length. [ 778.172950][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 778.358528][ T3565] bond5: entered promiscuous mode [ 778.371065][ T3565] bond5: entered allmulticast mode [ 778.386377][ T3565] 8021q: adding VLAN 0 to HW filter on device bond5 [ 778.424008][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 778.450778][ T3570] IPv6: NLM_F_REPLACE set, but no existing node found! [ 778.458012][T32382] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 778.555220][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 778.583034][ T8404] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 778.659632][ T3585] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 778.702939][ T8404] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 778.721848][ T3589] syzkaller0: entered promiscuous mode [ 778.737165][ T3589] syzkaller0: entered allmulticast mode [ 779.043800][ T8404] wlan1: Trigger new scan to find an IBSS to join [ 779.299360][ T3626] netlink: 'syz.0.8472': attribute type 32 has an invalid length. [ 779.434578][ T3626] bond6: option coupled_control: invalid value (192) [ 779.478703][ T3626] bond6 (unregistering): Released all slaves [ 779.766054][ T3653] netlink: 'syz.1.8478': attribute type 5 has an invalid length. [ 779.867403][ T3668] __nla_validate_parse: 6 callbacks suppressed [ 779.867425][ T3668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8482'. [ 780.050799][ T3680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8487'. [ 780.308151][ T3696] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.8491'. [ 780.679373][ T3715] ip6gre4: entered promiscuous mode [ 780.694493][ T3715] ip6gre4: entered allmulticast mode [ 780.701545][T32395] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 780.720942][ T3715] netlink: 'syz.1.8498': attribute type 1 has an invalid length. [ 780.731243][T32395] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 780.739697][ T3543] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 780.822562][ T3715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8498'. [ 780.863836][ T3543] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 780.964011][ T3543] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 780.979850][ T3731] ip6tnl0: Caught tx_queue_len zero misconfig [ 781.128380][ T3741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8508'. [ 781.174071][ T8404] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 781.197543][ T8404] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 781.235345][ T3749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.262419][ T3749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.270757][ T3543] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 781.302179][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8511'. [ 781.341185][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8511'. [ 781.420699][ T3757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8513'. [ 781.450834][ T3759] netlink: 195672 bytes leftover after parsing attributes in process `syz.3.8514'. [ 781.487765][ T3759] lo: entered promiscuous mode [ 781.504481][ T3759] tunl0: entered promiscuous mode [ 781.522416][ T3759] gre0: entered promiscuous mode [ 781.563830][ T3759] gretap0: entered promiscuous mode [ 781.586874][ T3759] erspan0: entered promiscuous mode [ 781.647267][ T3759] ip_vti0: entered promiscuous mode [ 781.663746][ T5724] lo speed is unknown, defaulting to 1000 [ 781.670394][ T5724] syz2: Port: 1 Link DOWN [ 781.716573][ T3767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8517'. [ 781.764506][ T3543] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 781.989433][ T3788] netlink: 'syz.1.8522': attribute type 1 has an invalid length. [ 782.003659][ T8404] wlan1: Trigger new scan to find an IBSS to join [ 782.334389][T32397] net_ratelimit: 56 callbacks suppressed [ 782.334413][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 782.391084][ T3818] netlink: 'syz.3.8528': attribute type 10 has an invalid length. [ 782.411573][T32392] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 782.427352][ T3818] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 782.473930][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 782.523245][T32397] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 782.594063][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 782.648193][T32382] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 782.677502][ T3836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.723861][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 782.774769][T32382] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 782.901934][ T3849] netlink: 'syz.4.8541': attribute type 11 has an invalid length. [ 782.917427][ T3849] netlink: 'syz.4.8541': attribute type 10 has an invalid length. [ 783.061501][ T3857] batman_adv: batadv0: Interface deactivated: wlan0 [ 783.236694][ T3868] netlink: 'syz.4.8545': attribute type 5 has an invalid length. [ 783.277756][ T3868] geneve3: entered promiscuous mode [ 783.296612][ T3868] geneve3: entered allmulticast mode [ 783.313624][T32392] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 783.327667][T32392] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 783.347224][T32392] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 783.370478][T32392] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 783.648723][ T3886] netlink: 'syz.2.8551': attribute type 13 has an invalid length. [ 783.784343][ T3857] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 783.796258][ T3857] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 783.829364][ T3857] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 783.836366][ T3857] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 784.114366][ T3904] pim6reg527: entered allmulticast mode [ 784.277803][ T3915] netlink: 'syz.0.8559': attribute type 83 has an invalid length. [ 784.449397][ T3928] 0ªX¹¦Dö»: renamed from gretap0 [ 784.459151][ T3928] 0ªX¹¦Dö»: left promiscuous mode [ 784.467432][ T3928] 0ªX¹¦Dö»: entered allmulticast mode [ 784.489261][ T3934] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 784.685385][ T3943] netlink: 'syz.0.8567': attribute type 1 has an invalid length. [ 784.703429][ T3947] IPVS: sync thread started: state = BACKUP, mcast_ifn = virt_wifi0, syncid = 0, id = 0 [ 784.841903][ T3943] 8021q: adding VLAN 0 to HW filter on device bond6 [ 784.917845][ T3960] netlink: 'syz.0.8567': attribute type 10 has an invalid length. [ 784.926726][ T3960] __nla_validate_parse: 17 callbacks suppressed [ 784.926747][ T3960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8567'. [ 784.947949][ T3949] bond6: (slave veth9): Enslaving as a backup interface with a down link [ 784.961296][ T3952] team0: Port device dummy0 removed [ 784.978436][ T3952] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 785.003482][ T3960] dummy0: entered promiscuous mode [ 785.017742][ T3960] bond6: (slave dummy0): Releasing backup interface [ 785.061880][ T3965] netlink: 'syz.4.8574': attribute type 1 has an invalid length. [ 785.165706][ T3967] netlink: 'syz.3.8573': attribute type 11 has an invalid length. [ 785.363028][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 785.591438][ T3987] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 785.632272][ T4001] netlink: 'syz.3.8583': attribute type 29 has an invalid length. [ 785.647683][ T4001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8583'. [ 785.864726][ T4017] macvlan0: entered promiscuous mode [ 785.890086][ T4014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8587'. [ 785.977684][ T4007] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8587'. [ 786.010430][ T4014] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 786.032041][ T4014] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 786.041618][ T4014] gretap0: entered promiscuous mode [ 786.049644][ T4014] gretap0: entered allmulticast mode [ 786.062294][ T4027] netlink: 'syz.4.8590': attribute type 11 has an invalid length. [ 786.074892][ T4027] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8590'. [ 786.192221][ T4033] netlink: 'syz.2.8593': attribute type 1 has an invalid length. [ 786.215921][ T4033] netlink: 'syz.2.8593': attribute type 1 has an invalid length. [ 786.227646][ T4033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8593'. [ 786.340233][ T4034] bond6: entered allmulticast mode [ 786.402950][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.410266][ C0] bridge0: topology change detected, propagating [ 786.416908][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.424162][ C0] bridge0: topology change detected, propagating [ 786.668229][ T4055] ip6tnl0: Caught tx_queue_len zero misconfig [ 786.727381][ T4062] 8021q: adding VLAN 0 to HW filter on device bond11 [ 786.854161][ T4070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8604'. [ 786.891617][ T4070] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.941079][ T4070] bridge_slave_1 (unregistering): left allmulticast mode [ 786.960703][ T4070] bridge_slave_1 (unregistering): left promiscuous mode [ 786.974681][ T4070] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.326324][ T4099] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8615'. [ 787.338793][ T4098] gtp1: entered promiscuous mode [ 787.346395][ T4098] gtp1: entered allmulticast mode [ 787.383879][T32393] net_ratelimit: 64 callbacks suppressed [ 787.383903][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 787.436547][T32393] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 787.466250][ T4104] tunl0: Caught tx_queue_len zero misconfig [ 787.499376][ T4104] IPv6: sit2: Disabled Multicast RS [ 787.520820][ T4104] sit2: entered allmulticast mode [ 787.564182][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 787.603452][T32392] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 787.705554][T32398] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 787.733445][T32398] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 787.833585][T32398] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 787.875906][T32393] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 787.958168][ T4120] syzkaller0: entered promiscuous mode [ 787.968340][ T4120] syzkaller0: entered allmulticast mode [ 787.984287][T32398] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 788.004270][T32394] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 788.059850][ T4126] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 788.069198][ T4126] ip6gretap0: entered promiscuous mode [ 788.076370][ T4126] ip6gretap0: entered allmulticast mode [ 788.823993][ T4164] veth0: entered promiscuous mode [ 788.872020][ T4169] validate_nla: 4 callbacks suppressed [ 788.872040][ T4169] netlink: 'syz.2.8637': attribute type 3 has an invalid length. [ 788.921357][ T4175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8638'. [ 788.940130][ T4169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8637'. [ 788.991162][ T4186] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 789.066059][ T5630] block nbd5: Receive control failed (result -107) [ 789.091417][ T4185] vlan0 (unregistering): left promiscuous mode [ 789.404122][ T4169] lo: Caught tx_queue_len zero misconfig [ 789.414828][ T4163] veth0: left promiscuous mode [ 789.700182][ T4209] netlink: 'syz.3.8644': attribute type 1 has an invalid length. [ 789.718599][ T4219] netlink: 'syz.2.8643': attribute type 1 has an invalid length. [ 789.825676][ T4209] bond7: option mode: invalid value (7) [ 789.847379][ T4209] bond7 (unregistering): Released all slaves [ 790.026982][ T4238] __nla_validate_parse: 4 callbacks suppressed [ 790.027016][ T4238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8650'. [ 790.239159][ T4240] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8651'. [ 790.576284][ T4276] netlink: 'syz.3.8661': attribute type 1 has an invalid length. [ 790.708715][ T4276] bond7: entered promiscuous mode [ 790.758935][ T4276] 8021q: adding VLAN 0 to HW filter on device bond7 [ 790.834507][ T4281] syzkaller0: entered promiscuous mode [ 790.856164][ T4281] syzkaller0: entered allmulticast mode [ 790.907025][ T4303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8668'. [ 790.986518][ T4307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8669'. [ 791.083879][ T4315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8671'. [ 791.357025][ T4336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8676'. [ 791.379244][ T4334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8676'. [ 791.397052][ T4333] 8021q: VLANs not supported on ip6tnl0 [ 791.514334][ T4342] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8678'. [ 791.617357][ T4350] ipvlan0: Caught tx_queue_len zero misconfig [ 791.887128][ T4364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8684'. [ 792.021795][ T4376] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8687'. [ 792.172491][ T4375] macvlan3: entered promiscuous mode [ 792.179707][ T4375] macvlan3: entered allmulticast mode [ 792.187502][ T4375] bond8: (slave macvlan3): Opening slave failed [ 792.390182][ T4393] veth11: entered promiscuous mode [ 792.406290][ T4393] veth11: entered allmulticast mode [ 792.473937][T32398] net_ratelimit: 54 callbacks suppressed [ 792.473959][T32398] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 792.627042][T32392] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 792.663828][T32398] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 792.744313][T32398] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 792.793113][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 792.872717][ T4422] gtp1: entered promiscuous mode [ 792.879274][ T4422] gtp1: entered allmulticast mode [ 792.933765][T32393] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 792.983940][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 793.074369][T32392] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 793.104354][ T4443] lo: left allmulticast mode [ 793.130665][ T4443] tunl0: left allmulticast mode [ 793.158536][ T4450] netlink: 'syz.2.8704': attribute type 266 has an invalid length. [ 793.188421][ T4452] netlink: 'syz.4.8706': attribute type 1 has an invalid length. [ 793.201968][ T4443] gre0: left allmulticast mode [ 793.220287][ T4443] gretap0: left allmulticast mode [ 793.230202][ T4452] netlink: 'syz.4.8706': attribute type 3 has an invalid length. [ 793.260251][ T4443] erspan0: left allmulticast mode [ 793.270003][ T4452] NCSI netlink: No device for ifindex 813332851 [ 793.301059][ T4443] ip_vti0: left allmulticast mode [ 793.335282][ T4443] ip6_vti0: left allmulticast mode [ 793.426284][ T4455] vlan4: entered promiscuous mode [ 793.443692][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 793.486392][ T4455] gretap0: entered promiscuous mode [ 793.613713][ T8404] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 793.694247][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 793.986086][ T4502] xt_ecn: cannot match TCP bits for non-tcp packets [ 794.102137][ T4510] tc_dump_action: action bad kind [ 794.209080][ T4510] xt_CT: No such helper "snmp_trap" [ 794.386427][ T4518] bridge6: entered promiscuous mode [ 794.405924][ T4518] bridge6: entered allmulticast mode [ 794.460473][ T4529] sit1: entered promiscuous mode [ 794.466982][ T4529] sit1: entered allmulticast mode [ 794.507861][ T4532] syzkaller0: entered promiscuous mode [ 794.525570][ T4532] syzkaller0: entered allmulticast mode [ 794.947995][ T4558] netlink: 'syz.1.8733': attribute type 21 has an invalid length. [ 795.334860][ T4575] __nla_validate_parse: 17 callbacks suppressed [ 795.334897][ T4575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8738'. [ 795.743529][ T4592] netlink: 'syz.3.8745': attribute type 3 has an invalid length. [ 795.788517][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 795.799621][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 795.809428][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 795.819360][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 795.830396][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 795.871647][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 795.881035][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 795.889270][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 795.899498][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 795.908216][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 795.987121][ T4607] netlink: 'syz.2.8746': attribute type 21 has an invalid length. [ 795.997129][ T4607] IPv6: NLM_F_CREATE should be specified when creating new route [ 796.154370][ T4612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8751'. [ 796.397138][ T4625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8753'. [ 796.591275][ T4639] 8021q: VLANs not supported on ip_vti0 [ 796.614496][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8757'. [ 796.688024][ T4639] netlink: 'syz.4.8757': attribute type 1 has an invalid length. [ 796.734592][ T4639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8757'. [ 796.988649][ T4594] lo speed is unknown, defaulting to 1000 [ 797.238595][ T4682] netlink: 'syz.0.8772': attribute type 20 has an invalid length. [ 797.260201][ T4682] IPv6: NLM_F_CREATE should be specified when creating new route [ 797.332083][ T4686] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.8773'. [ 797.632532][ T4594] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.649304][ T4594] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.657793][ T4594] bridge_slave_0: entered allmulticast mode [ 797.667041][ T4594] bridge_slave_0: entered promiscuous mode [ 797.677158][ T4594] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.688359][ T4594] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.696553][ T4594] bridge_slave_1: entered allmulticast mode [ 797.705087][ T4594] bridge_slave_1: entered promiscuous mode [ 797.754823][ T4594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.771145][ T4594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.847726][ T4594] team0: Port device team_slave_0 added [ 797.870165][ T4594] team0: Port device team_slave_1 added [ 797.884068][T32393] net_ratelimit: 62 callbacks suppressed [ 797.884092][T32393] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 797.994674][ T4722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8778'. [ 798.004685][ T5630] Bluetooth: hci3: command tx timeout [ 798.044572][ T4594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.051587][ T4594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.079241][ T4594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.100379][ T4594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.118413][ T4594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.154940][ T4728] Bluetooth: MGMT ver 1.23 [ 798.168697][ T4728] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 798.197360][ T4594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.223480][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 798.239053][ T4730] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 798.259526][ T4731] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 798.300474][ T4594] hsr_slave_0: entered promiscuous mode [ 798.307574][ T4594] hsr_slave_1: entered promiscuous mode [ 798.315318][ T4594] debugfs: 'hsr0' already exists in 'hsr' [ 798.321183][ T4594] Cannot create hsr debugfs directory [ 798.477190][ T4742] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 798.493924][ T4742] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 798.507955][ T4744] netlink: 'syz.0.8785': attribute type 21 has an invalid length. [ 798.516600][ T4742] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 798.587297][ T4594] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.607360][ T4594] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.618115][ T4594] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 798.637233][ T4749] netlink: 'syz.0.8788': attribute type 178 has an invalid length. [ 798.646066][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 798.674804][ T8404] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 798.707437][ T4594] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.720940][ T4594] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.744287][ T4594] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 798.783505][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 798.793573][ T8404] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 798.815654][ T4594] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.826774][ T4594] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.838376][ T4594] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 798.893055][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 798.923164][ T8404] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 799.034062][ T8404] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 799.099428][ T4594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 799.125802][ T4594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 799.138561][ T4594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 799.157686][ T4594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 799.177840][ T4594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 799.208853][ T4594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 799.227784][ T4594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 799.256160][ T4594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 799.274261][ T4768] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8795'. [ 799.459875][ T4594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.502183][ T4594] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.536073][T32397] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.543312][T32397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.602287][T32397] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.609479][T32397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.622095][ T4790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8799'. [ 799.638787][ T4787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8799'. [ 799.870944][ T4802] netlink: 'syz.3.8803': attribute type 6 has an invalid length. [ 800.084788][ T5630] Bluetooth: hci3: command tx timeout [ 800.180573][ T4820] netlink: 'syz.4.8807': attribute type 1 has an invalid length. [ 800.199137][ T4822] syzkaller1: entered promiscuous mode [ 800.212643][ T4822] syzkaller1: entered allmulticast mode [ 800.300887][ T4820] 8021q: adding VLAN 0 to HW filter on device bond11 [ 800.505812][ T4831] bond11: (slave geneve4): making interface the new active one [ 800.561784][ T4831] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 800.858556][ T4868] __nla_validate_parse: 3 callbacks suppressed [ 800.858578][ T4868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8813'. [ 800.920608][ T4594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.116976][ T4594] veth0_vlan: entered promiscuous mode [ 801.176214][ T4594] veth1_vlan: entered promiscuous mode [ 801.209158][ T4882] netlink: 'syz.3.8818': attribute type 9 has an invalid length. [ 801.330189][ T4594] veth0_macvtap: entered promiscuous mode [ 801.377001][ T4594] veth1_macvtap: entered promiscuous mode [ 801.398446][ T4893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8819'. [ 801.474311][ T4594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.542469][ T4594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.617962][T32394] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.654235][T32394] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.707908][T32397] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.751939][T32397] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.927032][ T4917] netlink: 'syz.2.8826': attribute type 2 has an invalid length. [ 801.957804][T32394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.967135][ T4917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8826'. [ 801.995889][T32394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.107336][ T8404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.146033][ T8404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.164474][ T5630] Bluetooth: hci3: command tx timeout [ 802.434657][ T4942] Unknown options in mask b7f2 [ 802.499867][ T4946] IPv6: sit2: Disabled Multicast RS [ 802.533775][ T4946] tipc: Enabling of bearer rejected, failed to enable media [ 802.767083][ T4964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8836'. [ 802.790833][ T4964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8836'. [ 802.934680][T32382] net_ratelimit: 46 callbacks suppressed [ 802.934716][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 803.047219][T32387] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 803.134500][T32398] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 803.193697][T32382] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 803.263998][ T8404] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 803.314755][T32398] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 803.434102][T32382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 803.466565][T32382] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 803.593603][T32382] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 803.744379][T32398] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 803.757590][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8856'. [ 803.798878][ T5031] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.8856'. [ 803.830083][ T5034] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.8856'. [ 803.845920][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8856'. [ 803.856279][ T5031] ksmbd: Unknown IPC event: 8, ignore. [ 803.861859][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8856'. [ 803.872693][ T5034] ksmbd: Unknown IPC event: 8, ignore. [ 803.997710][ T5044] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 804.243982][ T5630] Bluetooth: hci3: command tx timeout [ 807.127998][ T5050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 807.305478][ T5111] __nla_validate_parse: 5 callbacks suppressed [ 807.305513][ T5111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8883'. [ 807.355512][ T5115] gre3: entered promiscuous mode [ 807.369644][ T5115] gre3: entered allmulticast mode [ 807.406673][ T5112] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8883'. [ 807.495200][ T5124] bond0: (slave gre0): refused to change device type [ 807.570270][ T5125] syzkaller0: entered promiscuous mode [ 807.590296][ T5125] syzkaller0: entered allmulticast mode [ 807.667562][ T5140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8891'. [ 807.677806][ T5140] netlink: 'syz.3.8891': attribute type 1 has an invalid length. [ 807.689735][ T5141] netlink: 'syz.2.8889': attribute type 1 has an invalid length. [ 807.698757][ T5140] netlink: 'syz.3.8891': attribute type 1 has an invalid length. [ 807.708726][ T5139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8890'. [ 807.725270][ T5140] netlink: 'syz.3.8891': attribute type 2 has an invalid length. [ 807.736340][ T5139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8890'. [ 807.752707][ T5140] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8891'. [ 807.779405][ T5141] 8021q: adding VLAN 0 to HW filter on device bond9 [ 807.854295][ T5144] vlan4: entered promiscuous mode [ 807.860184][ T5144] bond9: entered promiscuous mode [ 807.868080][ T5144] vlan4: entered allmulticast mode [ 807.873952][ T5144] bond9: entered allmulticast mode [ 807.929842][ T5153] team_slave_1: entered promiscuous mode [ 807.944893][ T5155] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 808.003834][T32398] net_ratelimit: 73 callbacks suppressed [ 808.003857][T32398] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 808.063775][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 808.174410][T32397] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 808.206222][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 808.293076][T32393] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 808.324627][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 808.407507][T32393] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 808.433511][T32393] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 808.533989][T32393] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 808.582971][T32397] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 808.606435][ T5182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8901'. [ 808.625074][ T5182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8901'. [ 808.667514][ T5184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8902'. [ 808.781278][ T5190] xt_cgroup: invalid path, errno=-2 [ 808.809159][ T5190] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8904'. [ 808.863862][ T5190] unsupported nla_type 7424 [ 808.886950][ T5198] netlink: 'syz.4.8907': attribute type 1 has an invalid length. [ 809.019361][ T5199] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 809.074236][ T5209] H: renamed from dummy0 [ 809.298017][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.319965][ T5225] xt_hashlimit: size too large, truncated to 1048576 [ 809.408132][ T5224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 809.443004][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 809.459147][ T5233] netlink: 'syz.3.8912': attribute type 1 has an invalid length. [ 809.541654][ T5224] ieee802154 phy1 wpan3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 809.807065][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 809.816173][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 809.826228][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 809.836314][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 809.845898][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 809.949606][T26982] bond7: (slave syz_tun): Releasing backup interface [ 810.022424][T32382] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.038386][T32382] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.188356][T32382] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.257390][T32382] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.382529][T32382] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.427640][T32382] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.477699][ T5271] x_tables: duplicate entry at hook 3 [ 810.487257][ T5265] batadv_slave_1: entered promiscuous mode [ 810.506413][ T5264] batadv_slave_1: left promiscuous mode [ 810.626354][T32382] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.671278][T32382] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.712118][ T5289] sit0: Caught tx_queue_len zero misconfig [ 810.848434][ T5291] netlink: 'syz.0.8932': attribute type 1 has an invalid length. [ 810.935386][ T5294] netlink: 'syz.1.8931': attribute type 1 has an invalid length. [ 810.946489][ T5291] bond7: entered promiscuous mode [ 810.952023][ T5291] 8021q: adding VLAN 0 to HW filter on device bond7 [ 810.967823][ T5240] lo speed is unknown, defaulting to 1000 [ 811.101142][ T5300] macvtap1: entered allmulticast mode [ 811.119122][T32382] bridge_slave_0: left allmulticast mode [ 811.133052][T32382] bridge_slave_0: left promiscuous mode [ 811.149606][T32382] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.184791][T32382] pimreg: left allmulticast mode [ 811.275043][ C0] ================================================================== [ 811.283313][ C0] BUG: KASAN: double-free in rcu_free_sheaf+0x31/0x200 [ 811.290334][ C0] Free of addr ffff888078aaec00 by task ksoftirqd/0/15 [ 811.297217][ C0] [ 811.299657][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 811.299736][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 811.299750][ C0] Call Trace: [ 811.299760][ C0] [ 811.299770][ C0] dump_stack_lvl+0xe8/0x150 [ 811.299803][ C0] print_address_description+0x55/0x1e0 [ 811.299827][ C0] print_report+0x58/0x70 [ 811.299846][ C0] ? rcu_free_sheaf+0x31/0x200 [ 811.299874][ C0] kasan_report_invalid_free+0xea/0x110 [ 811.299908][ C0] ? rcu_free_sheaf+0x31/0x200 [ 811.299937][ C0] ? rcu_free_sheaf+0x31/0x200 [ 811.299973][ C0] __kasan_slab_pre_free+0x104/0x120 [ 811.300003][ C0] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 811.300027][ C0] ? rcu_core+0x70d/0x10a0 [ 811.300047][ C0] rcu_free_sheaf+0x31/0x200 [ 811.300074][ C0] ? rcu_is_watching+0x15/0xb0 [ 811.300095][ C0] ? trace_irq_enable+0x3b/0x140 [ 811.300122][ C0] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 811.300151][ C0] ? rcu_core+0x70d/0x10a0 [ 811.300170][ C0] rcu_core+0x78b/0x10a0 [ 811.300198][ C0] ? __pfx_rcu_core+0x10/0x10 [ 811.300218][ C0] ? try_to_wake_up+0x8c5/0x14d0 [ 811.300243][ C0] ? rcu_is_watching+0x15/0xb0 [ 811.300266][ C0] handle_softirqs+0x225/0x840 [ 811.300295][ C0] ? run_ksoftirqd+0x36/0x60 [ 811.300328][ C0] run_ksoftirqd+0x36/0x60 [ 811.300357][ C0] smpboot_thread_fn+0x57c/0xa80 [ 811.300389][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 811.300422][ C0] kthread+0x388/0x470 [ 811.300442][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 811.300470][ C0] ? __pfx_kthread+0x10/0x10 [ 811.300489][ C0] ret_from_fork+0x514/0xb70 [ 811.300534][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 811.300553][ C0] ? __switch_to+0xc89/0x1420 [ 811.300582][ C0] ? __pfx_kthread+0x10/0x10 [ 811.300603][ C0] ret_from_fork_asm+0x1a/0x30 [ 811.300637][ C0] [ 811.300646][ C0] [ 811.485425][ C0] Allocated by task 27097: [ 811.489944][ C0] kasan_save_track+0x3e/0x80 [ 811.494660][ C0] __kasan_kmalloc+0x93/0xb0 [ 811.499293][ C0] __kmalloc_cache_noprof+0x318/0x660 [ 811.504751][ C0] hwsim_update_pib+0x88/0x450 [ 811.509700][ C0] hwsim_hw_channel+0x178/0x2b0 [ 811.514598][ C0] ieee802154_set_channel+0x292/0x530 [ 811.520105][ C0] nl802154_set_channel+0x24d/0x420 [ 811.525423][ C0] genl_family_rcv_msg_doit+0x233/0x340 [ 811.531096][ C0] genl_rcv_msg+0x614/0x7a0 [ 811.535640][ C0] netlink_rcv_skb+0x226/0x4a0 [ 811.540515][ C0] genl_rcv+0x28/0x40 [ 811.544573][ C0] netlink_unicast+0x7bb/0x940 [ 811.549375][ C0] netlink_sendmsg+0x813/0xb40 [ 811.554183][ C0] ____sys_sendmsg+0x9b9/0xa20 [ 811.559021][ C0] ___sys_sendmsg+0x2a5/0x360 [ 811.563742][ C0] __x64_sys_sendmsg+0x1b1/0x290 [ 811.568723][ C0] do_syscall_64+0x174/0x580 [ 811.573379][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.579317][ C0] [ 811.581667][ C0] Freed by task 15: [ 811.585507][ C0] kasan_save_track+0x3e/0x80 [ 811.590235][ C0] kasan_save_free_info+0x40/0x50 [ 811.595301][ C0] __kasan_slab_free+0x5c/0x80 [ 811.600115][ C0] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 811.605697][ C0] rcu_free_sheaf+0x31/0x200 [ 811.610341][ C0] rcu_core+0x78b/0x10a0 [ 811.614631][ C0] handle_softirqs+0x225/0x840 [ 811.619440][ C0] run_ksoftirqd+0x36/0x60 [ 811.623898][ C0] smpboot_thread_fn+0x57c/0xa80 [ 811.628876][ C0] kthread+0x388/0x470 [ 811.632972][ C0] ret_from_fork+0x514/0xb70 [ 811.637606][ C0] ret_from_fork_asm+0x1a/0x30 [ 811.642407][ C0] [ 811.644756][ C0] The buggy address belongs to the object at ffff888078aaec00 [ 811.644756][ C0] which belongs to the cache kmalloc-64 of size 64 [ 811.658914][ C0] The buggy address is located 0 bytes inside of [ 811.658914][ C0] 64-byte region [ffff888078aaec00, ffff888078aaec40) [ 811.671983][ C0] [ 811.674347][ C0] The buggy address belongs to the physical page: [ 811.680879][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78aae [ 811.689705][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 811.696847][ C0] page_type: f5(slab) [ 811.700860][ C0] raw: 00fff00000000000 ffff88813fe1b8c0 dead000000000100 dead000000000122 [ 811.709480][ C0] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 811.718093][ C0] page dumped because: kasan: bad access detected [ 811.724539][ C0] page_owner tracks the page as allocated [ 811.730282][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4995, tgid 4995 (udevd), ts 26975453585, free_ts 23459458262 [ 811.750301][ C0] post_alloc_hook+0x22d/0x280 [ 811.755120][ C0] get_page_from_freelist+0x24ae/0x2530 [ 811.760710][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 811.766557][ C0] allocate_slab+0x74/0x5d0 [ 811.771089][ C0] refill_objects+0x328/0x3c0 [ 811.775797][ C0] __pcs_replace_empty_main+0x2e0/0x6b0 [ 811.781381][ C0] __kmalloc_noprof+0x464/0x750 [ 811.786287][ C0] tomoyo_encode+0x2ad/0x570 [ 811.790964][ C0] tomoyo_realpath_from_path+0x5fa/0x640 [ 811.796633][ C0] tomoyo_check_open_permission+0x229/0x470 [ 811.802570][ C0] security_file_open+0xa9/0x240 [ 811.807650][ C0] do_dentry_open+0x4a0/0x1380 [ 811.812449][ C0] vfs_open+0x3b/0x340 [ 811.816550][ C0] path_openat+0x2e44/0x3830 [ 811.821181][ C0] do_file_open+0x23e/0x4a0 [ 811.825728][ C0] do_sys_openat2+0x115/0x200 [ 811.830436][ C0] page last free pid 1 tgid 1 stack trace: [ 811.836275][ C0] __free_frozen_pages+0xc0d/0xd20 [ 811.841435][ C0] free_contig_range+0xb7/0x100 [ 811.846318][ C0] destroy_args+0x4e5/0x570 [ 811.850989][ C0] debug_vm_pgtable+0x3f8/0x410 [ 811.855921][ C0] do_one_initcall+0x250/0x870 [ 811.860723][ C0] do_initcall_level+0x10a/0x1a0 [ 811.865795][ C0] do_initcalls+0x59/0xa0 [ 811.870171][ C0] kernel_init_freeable+0x29d/0x3e0 [ 811.875407][ C0] kernel_init+0x1d/0x1d0 [ 811.879770][ C0] ret_from_fork+0x514/0xb70 [ 811.884394][ C0] ret_from_fork_asm+0x1a/0x30 [ 811.889191][ C0] [ 811.891534][ C0] Memory state around the buggy address: [ 811.897261][ C0] ffff888078aaeb00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 811.905372][ C0] ffff888078aaeb80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 811.913580][ C0] >ffff888078aaec00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 811.921668][ C0] ^ [ 811.925770][ C0] ffff888078aaec80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 811.928604][ T50] Bluetooth: hci4: command tx timeout [ 811.933859][ C0] ffff888078aaed00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 811.933873][ C0] ================================================================== [ 811.933973][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 811.933996][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 811.934023][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 811.934038][ C0] Call Trace: [ 811.934049][ C0] [ 811.934059][ C0] vpanic+0x56c/0xa60 [ 811.934090][ C0] ? rcu_is_watching+0x15/0xb0 [ 811.934115][ C0] ? __pfx_vpanic+0x10/0x10 [ 811.934139][ C0] ? rcu_is_watching+0x15/0xb0 [ 811.934165][ C0] panic+0xc5/0xd0 [ 811.934187][ C0] ? __pfx_panic+0x10/0x10 [ 811.934218][ C0] check_panic_on_warn+0x89/0xb0 [ 811.934241][ C0] end_report+0x73/0x170 [ 811.934271][ C0] ? rcu_free_sheaf+0x31/0x200 [ 811.934300][ C0] kasan_report_invalid_free+0xfa/0x110 [ 811.934331][ C0] ? rcu_free_sheaf+0x31/0x200 [ 811.934369][ C0] ? rcu_free_sheaf+0x31/0x200 [ 811.934397][ C0] __kasan_slab_pre_free+0x104/0x120 [ 811.934428][ C0] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 811.934453][ C0] ? rcu_core+0x70d/0x10a0 [ 811.934472][ C0] rcu_free_sheaf+0x31/0x200 [ 811.934500][ C0] ? rcu_is_watching+0x15/0xb0 [ 811.934522][ C0] ? trace_irq_enable+0x3b/0x140 [ 811.934550][ C0] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 811.934578][ C0] ? rcu_core+0x70d/0x10a0 [ 811.934597][ C0] rcu_core+0x78b/0x10a0 [ 811.934625][ C0] ? __pfx_rcu_core+0x10/0x10 [ 811.934645][ C0] ? try_to_wake_up+0x8c5/0x14d0 [ 811.934669][ C0] ? rcu_is_watching+0x15/0xb0 [ 811.934693][ C0] handle_softirqs+0x225/0x840 [ 811.934722][ C0] ? run_ksoftirqd+0x36/0x60 [ 811.934754][ C0] run_ksoftirqd+0x36/0x60 [ 811.934784][ C0] smpboot_thread_fn+0x57c/0xa80 [ 811.934862][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 811.934965][ C0] kthread+0x388/0x470 [ 811.935018][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 811.935097][ C0] ? __pfx_kthread+0x10/0x10 [ 811.935148][ C0] ret_from_fork+0x514/0xb70 [ 811.935202][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 811.935261][ C0] ? __switch_to+0xc89/0x1420 [ 811.935336][ C0] ? __pfx_kthread+0x10/0x10 [ 811.935386][ C0] ret_from_fork_asm+0x1a/0x30 [ 811.935473][ C0] [ 811.940812][ C0] Kernel Offset: disabled