last executing test programs: 3.606043213s ago: executing program 0 (id=7455): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20004840) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x6000, 0x0, 0x42804}, 0x4000010) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = accept4$nfc_llcp(r3, 0x0, &(0x7f00000004c0), 0x80800) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0xa) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24040884) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$AUDIT_TRIM(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f6, 0x8, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000094) writev(r7, &(0x7f0000000140), 0x1) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x2004c890) socket$inet_udp(0x2, 0x2, 0x0) 3.207721458s ago: executing program 2 (id=7461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000006910a000000000000400000000000000950000000000bfda4efaa7e20843c2fb0cc2050f4b9c0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd2d, 0xfffffffe, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x2000}}, 0x1c}}, 0x4800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40000000000000e9, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000140), &(0x7f00000001c0), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="05000000d8000001118006b07f8d720d9408b2be9a0e342ce4f0785c6a8ce2", @ANYRES32, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES8, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, 0x0, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0xbed68ccd03ea03a8, 0x3, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) 3.190425152s ago: executing program 0 (id=7462): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) connect$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x2, @private=0xa010106}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x2, @local}}, 0x1e) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x6048004) sendmsg$NL80211_CMD_SET_CQM(r5, 0x0, 0x10000001) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r1, &(0x7f00000003c0)=""/123, 0x7b) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x14, 0x0, 0x8d61ddcfedb48df, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 3.131233224s ago: executing program 1 (id=7464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000d80)=[@hopopts={{0x20, 0x29, 0x36, {0x3c, 0x1, '\x00', [@padn, @generic={0x9}, @ra={0x5, 0x2, 0x4}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x16}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}], 0x68}}], 0x2, 0x4040005) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x1ad72f7) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 2.32673319s ago: executing program 0 (id=7473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e00010000000000000000000000001900000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000008056000000000000000a0000000000000000000000000000000000000010000000090000000200000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x144}}, 0x0) 2.26254284s ago: executing program 2 (id=7474): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x4002, @mcast1, 0x4fe}, 0x1c) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffb, 0x2000000, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x14000000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2400000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='oCy\f'], 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x1200, 0x8, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000005800000000000000046e03ff7b0102000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = socket(0x11, 0x3, 0x0) setsockopt(r6, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg(r6, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x6, r8, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="04e4", 0x2}, {&(0x7f0000001540)="11ec4e696119aed2", 0x8}], 0x2}, 0x40000c4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005001f000000000082000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r4, 0x20, &(0x7f00000002c0)={&(0x7f0000000400)=""/101, 0x65, 0x0, &(0x7f0000000580)=""/234, 0xea}}, 0x10) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f00000008c0)='./file0\x00', r3, 0x4000, r4}, 0xfffffffffffffe0e) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e0000003b0affff050000000000000000000400", @ANYRES32, @ANYBLOB="0700000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0500000000000000040000000f00"/28], 0x50) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x9, '\x00', 0x0, r4, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xd, &(0x7f0000000240)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @generic={0x6, 0x8, 0x0, 0xde05, 0xd03}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @jmp={0x5, 0x1, 0x5, 0x8, 0x8, 0x40, 0x8}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x8b, &(0x7f0000000340)=""/139, 0x41100, 0x8, '\x00', r8, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0xa, 0x6, 0x511}, 0x10, r11, 0xffffffffffffffff, 0x3, &(0x7f0000000780)=[r12, r5, r3, r5, r5, r13, r14], &(0x7f00000007c0)=[{0x0, 0x5, 0x8, 0xc}, {0x5, 0x4, 0x6}, {0x5, 0x1, 0x1, 0x5}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) 2.08692377s ago: executing program 1 (id=7475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff040002400400"/37, @ANYBLOB="995f01a565d182e371b935f11d9c6d098f798f8f1c1d973bebfe39fd52899c8d1b38bfe38b6b69474ce75e779360e47cdbeb0963d9603447c2853dc8d3c4bf99c6593d724ac763f7cb1f15967dc96a", @ANYRES64=r0], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x62}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffff07}, 0x0, 0x6e6bc0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@private1}}, 0xe8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000240), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003800038034000080040001800c0005400000000000001c4914000b80100001800b0001006f626a72656600000c00044000000000000007f6"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) unshare(0x400) socket$tipc(0x1e, 0x2, 0x0) r9 = accept4(r8, &(0x7f0000000300)=@nfc, &(0x7f0000000380)=0x80, 0x0) getsockopt$inet_tcp_buf(r9, 0x6, 0xb, &(0x7f00000004c0)=""/25, &(0x7f0000000500)=0x19) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r10 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r10, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2b, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x8927, &(0x7f0000000140)={0x23a, 0xfffffffe, 0x1, 0x0, 0x3, [0xfffffffd, 0xffffffff, 0x4000097, 0x4000]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000001000ffff27bd7000fedbdf2500"], 0x70}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r11, 0x89e8) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4048815}, 0xc000) 2.086766505s ago: executing program 0 (id=7476): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e980214", 0x4}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)) 2.086558994s ago: executing program 2 (id=7477): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x9c, 0x30, 0xb, 0x5, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_LABELS={0x11, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) socket$nl_route(0x10, 0x3, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x9c, 0x30, 0xb, 0x5, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_LABELS={0x11, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) (async) 1.997692218s ago: executing program 2 (id=7478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000000600)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000000580)="24a10f2a16837717b9ac706f53cbc1865aa4e9cedccce6e0f6cdd54704bfe2f26db6fd0918ff7915774192e5003559a7667bf77c485c4952a3d5647790cab7fef3989d2359387ade1a6b3c1d57dae491b8e93df2beee9bddd174f6bd022cd4f8f38b1e40f63e0eab48ddf3775067a0c5b648690d65f30a6c084c813c06e4e167"}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_ttl={{0x0, 0xf00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x20004044) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x1a, 0x3, 0x20006) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x5, 0x76e, [0x0, 0x200000000180, 0x2000000002de, 0x20000000042c], 0x0, &(0x7f0000000000), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x24, 0x11, 'sit0\x00', 'veth0_to_bridge\x00', '\x00', 'virt_wifi0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0x0, 0xff, 0x0, 0xff], 0xde, 0xde, 0x12e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x6}, {0x5}]}}}, @connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x80, 0x2}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0xb7eb, {0x4}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x3, 0x41, 0x19, 'ip6_vti0\x00', 'erspan0\x00', 'macvlan0\x00', 'veth1_vlan\x00', @broadcast, [0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0xff], 0xa6, 0xee, 0x11e, [@mac={{'mac\x00', 0x0, 0x10}, {{@remote, 0x1}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"188e596042b790df575c7a63c4960a8cd4f27d696f0ecb41f3305559459a"}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x11, 0x28, 0x7, 'macsec0\x00', 'veth0_macvtap\x00', 'veth0_macvtap\x00', 'gre0\x00', @empty, [0x0, 0x0, 0x0, 0xff], @random="01afbad4adcc", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x1e6, 0x25e, [], [@common=@ERROR={'ERROR\x00', 0x20, {"1b963e1c4181c04913380eed12d3d1267f6d2f0040653abc313902db498b"}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x70, 'system_u:object_r:netutils_exec_t:s0\x00'}}}], @common=@nflog={'nflog\x00', 0x50, {{0x3, 0x9, 0x3, 0x0, 0x0, "972f406b4dd9236c989eb3c9cfee34324ae50e1a2af22f0a74e5ac3801f3f76d5ac6b4b21e8f04ef9349c2d8eee819bd07053debad5ccc085306de6502472483"}}}}, {0x3, 0x14, 0x890d, 'bond_slave_1\x00', 'ip_vti0\x00', 'dummy0\x00', 'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0xae, 0xae, 0xfe, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x5, 0x7408, 0x0, 0x3}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x4, {0xcca9}}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x1, [{0x3, 0x20, 0x6003, 'vlan1\x00', 'dvmrp0\x00', '\x00', 'ipvlan0\x00', @multicast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff], 0xb6, 0xb6, 0x106, [@limit={{'limit\x00', 0x0, 0x20}, {{0x2, 0x7, 0x5, 0x5, 0x1d, 0x4}}}], [], @common=@log={'log\x00', 0x28, {{0x1, "4f79e5ffa91448475d169c1a3c382adb8372b7c728c12439f734866e2d36", 0xc}}}}]}]}, 0x7e6) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000100)={r6, 0x6}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r6, 0xe724}, &(0x7f0000000980)=0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="cb"], 0x8) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) close(0x3) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0xffff}, {}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x240088b0}, 0x4041080) 1.928428203s ago: executing program 0 (id=7479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = epoll_create(0x400008) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x30000010}) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)={'pimreg\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pimreg1\x00', 0x600}) 1.821779658s ago: executing program 0 (id=7481): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$rose(r3, &(0x7f0000000300)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) accept4$nfc_llcp(r4, 0x0, &(0x7f00000004c0), 0x80800) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040810}, 0x2000c000) unshare(0x6a040000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r10, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x20008040) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 1.677693264s ago: executing program 4 (id=7483): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4802}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.550811262s ago: executing program 3 (id=7484): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000000)=0x1f5, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000003, 0x20011, r0, 0xffffd000) socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x891d, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000800)={0x0, 0x10, 0x0, [0x1, 0x1, 0x7, 0x9, 0x5], [0x9, 0x96, 0x40, 0xa, 0x9f73, 0x4, 0x8, 0x9, 0x9, 0xc, 0x10, 0xde, 0xffffffffffff0001, 0x0, 0x1, 0x1, 0xc9, 0xfffffffffffffff9, 0x5, 0x5, 0x2, 0x9, 0x8e, 0x40, 0x1, 0x5, 0x0, 0x1, 0x1, 0xb4, 0x7f, 0x7, 0x1, 0x8000000000000001, 0xd5, 0x7, 0x6, 0x3, 0x1, 0x8001, 0x7, 0xfca5, 0x2000006, 0x8001, 0xffffffffffffff80, 0x6, 0x8001, 0x6, 0x1, 0x5, 0x7, 0x9, 0x0, 0x9, 0x9e, 0x7, 0x48, 0x8000000000000006, 0x6, 0x8000, 0x3, 0xdec1, 0x4, 0x7, 0xfaae, 0x2, 0x2f26, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x55d, 0x8001, 0xffffffffffffffa8, 0x3ff, 0x7f, 0x3, 0x4, 0x8, 0xfffffffffffff1e2, 0x3, 0x7d43, 0x596b, 0x200, 0x6, 0x401, 0x1000, 0xa, 0x2, 0xfffffffffffff7df, 0x45e, 0x5, 0xffffffff, 0x1, 0x7, 0x6, 0x9, 0x8, 0x101, 0x114e, 0x200, 0x6, 0x8, 0xc787, 0x4, 0x2, 0x2, 0x2, 0x4, 0xfffffffffffffffc, 0x9, 0x9, 0x2, 0x6, 0xd3e, 0x6, 0x3, 0x300000000000, 0xf382, 0x1191, 0x6]}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000001180)={0x1, 0x2, @start={r3, 0x0, "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", "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"}, [0x98e, 0x4, 0x7f, 0x8000000000000001, 0x4, 0x0, 0x38, 0x2, 0x2, 0x1, 0xfffffffffffffffc, 0x2, 0x0, 0x100000000, 0x35c, 0xfffffffffffffffe, 0x2, 0xb08d, 0x0, 0x7, 0x7fffffffffffffff, 0xc7, 0x7, 0x2, 0x4, 0x81, 0x9, 0xfffffffffffffffe, 0x893, 0xe48f, 0x4, 0x9a, 0x3, 0x3, 0x5, 0x8, 0x7fbf, 0x7, 0x4, 0xf7f1, 0xeadc, 0xffffffffffffffdd, 0x101, 0x3, 0x580000000000000, 0x1, 0x10001, 0x200, 0x2, 0xfff, 0xfffffffffffffffd, 0x6, 0x80000001, 0x6, 0x1, 0x8, 0x2, 0x3, 0x4, 0x4, 0x0, 0x4, 0x1, 0x2]}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f00000004c0)=@ethtool_per_queue_op={0x4b, 0x0, [0x6, 0x5, 0x3, 0x2, 0x7, 0x4, 0x401, 0xd, 0x3, 0x64, 0x0, 0x6, 0x100, 0xedc, 0x8, 0x5, 0x83, 0x1, 0x8, 0xa, 0x9, 0x9, 0xffffff0a, 0x400040, 0x9, 0x10, 0x4, 0x7, 0x8, 0x3ff, 0x5, 0x10001, 0x0, 0x2, 0x2, 0x6, 0x2, 0x86b5, 0x3, 0x3, 0x261bdce8, 0xd9d, 0x1000, 0x6, 0x6, 0x5f9a4d8d, 0xc, 0x2, 0x40, 0xc, 0xf386, 0x2, 0x6, 0x3, 0x1, 0x2, 0xe, 0x6f156377, 0x0, 0x43d0, 0xf, 0x400, 0x173, 0x9, 0xa5, 0x7fffffff, 0xbde, 0x8000, 0x3ae, 0xc, 0xe2, 0x40, 0xfff, 0x5, 0x67f3, 0x2, 0x9, 0x4, 0x477a, 0xffff8001, 0xa, 0x9, 0x7, 0x9, 0x5, 0xd55, 0x7, 0x9, 0xd2d, 0x7, 0xffff, 0x4, 0x3, 0x401, 0x1, 0x2, 0x0, 0xffffffff, 0xf2, 0x1000, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0xf, 0x6, 0x8, 0xe8, 0x7fff, 0x7, 0x3, 0xd, 0x4, 0x9, 0x4, 0x400, 0x0, 0x8, 0x2, 0x0, 0xfffffffe, 0xdf, 0x0, 0x0, 0x3, 0x2], "4a38862c0e12f374020335618e42fd12c9ae27c958ee5e51d463a2048397af7124cd446a55f27d3e838fadb1f73f2f841df157154605a03bab058e5aab77146fa4a4afe086ac8cb813b262fcce2316aba0fa509d76be9a2070ff2bcca5af715799d051625fcf9249e24e937f793926ba6f6b9b4c"}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x295, 0x1, 0xfffffffc, 0x4, 0x0, 0xddb0, 0x4, 0xf2e, 0xfff}}}}]}, 0x58}}, 0x4000) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0x15, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20054054) sendmmsg(r5, &(0x7f0000000000), 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 1.550173745s ago: executing program 4 (id=7485): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x4, 0x0}}}}]}]}, 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000600050000080900010073797a30000000005c000000030a03000000001300000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.492183926s ago: executing program 4 (id=7486): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) socket(0x28, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x80) 1.22251647s ago: executing program 1 (id=7487): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f00000007c0)="c1188e5d795d02ff42", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 579.658512ms ago: executing program 3 (id=7488): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000000500000000000000000000000000000000000000400000020001000000000000000a18ff00000005000500000000000a"], 0x70}}, 0x0) 547.259265ms ago: executing program 4 (id=7489): clock_gettime(0x7, 0xfffffffffffffffc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5a}]}, &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f0000000600)=""/209}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000064000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001007465616d300000000000000000000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x4008005}, 0x8d4) 516.368744ms ago: executing program 3 (id=7490): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000140000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 399.459328ms ago: executing program 1 (id=7491): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) socket(0x28, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x80) 398.022087ms ago: executing program 3 (id=7492): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@lld, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x301}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 393.569874ms ago: executing program 4 (id=7493): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 387.692973ms ago: executing program 2 (id=7494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x3, 0x2, 0xf, 0x6, 0x7, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0x3, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x7, 0x3, 0x8, 0x6, 0x2, 0x2, 0x80, 0x8, 0x7, 0x15, 0x1d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r15 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r14, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001811005abeef4ba0d598", 0xd}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f6ffa14306d06c4fd", 0x21}], 0x3) 286.907437ms ago: executing program 3 (id=7495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = epoll_create(0x400008) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x30000010, 0x2000000}) 270.638519ms ago: executing program 4 (id=7496): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac00000012000105000000000000000000000005000000005c00"/56, @ANYRES32, @ANYBLOB="00000000000000feffffff0000000000040002"], 0xac}}, 0x4000) 201.199226ms ago: executing program 1 (id=7497): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000040000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0xb8}}, 0x10) 46.672892ms ago: executing program 3 (id=7498): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000039000100faff0700fedbdf25010000000800ec000b8000007116f81f7ce5a44d968855007b658648f3618f07ee0273e3eebeb7e5963da221cbfedd83aa5234ffaaf396452f9f6edf03c05177697a605146770167e6d5735e0e95625ce6bfba70c901b3f5256a581fd0952be94cb0"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = socket(0x10, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000300), &(0x7f00000003c0)=0x4) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x40000000003a, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6, 0xffff}, {0xffff, 0xffff}, {0x1, 0x4}}}, 0x24}}, 0x400c880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r8, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f00000000c0)=@bpq0, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@allocspi={0x144, 0x16, 0x1, 0x70bd2d, 0x25dfdbff, {{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x8}, {@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x1, 0x0, 0x88c}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2}}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}, @tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3505, 0x4, 0x1, 0x9, 0x100, 0x8000, 0x2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x4, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) 45.680425ms ago: executing program 1 (id=7499): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) socket(0x28, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x80) 0s ago: executing program 2 (id=7500): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg(r2, &(0x7f0000006800)={0x0, 0x0, 0x0}, 0x810) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x8d, &(0x7f0000000680)=""/141}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x710, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {0x0, 0x40000}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x770) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000480)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000180)="95b3af2a59da6cb84343b985ee489c7c4eb25e2a2d22f3b12488a1bd399ff498fe0a640899e9df4610d223897ebcbb142bf574796ad9831e9c4acaefcb7c49b3c88dd307bcacf9b3d52f4045e151f647ef5c6e185dfa116307c208280843f06acd59acf60ae581bcb5aab166cceb7d9ad406504e5bc93bba01d2ac648cb1dec756adbda4fd855f71a4f822a7bf55bc3d7c68e07da6a4797f34653696185a45874b91f13fcd6c65c280bc6412430918d9881a92d81ca6477d7c8801bf668e124cc69e521bf5f4ef1e05fac99842afb93c9e3e0d5bd92d", 0xd6}, {0x0}, {&(0x7f0000000500)="f656497ee181ab35e7c589615ba53627fd072e80894c34931acefa7c7be33a3688e380a7090000000000000044cc9944e45fb4f4305148f7ba761be5f1102e8da23b3f04408881bd04465fda0c0e86286980b626a1f2d023a847c36c0d4197d05d9e7aa0c0519cfceb4f0a317193849c5cffffffffffffffffef1914e63765f26639417f72ed0bff443aafc15bf7b9a8ca97b692c7fddf4762d93ff39a4a9a8bc416d257a6a4f23bc29b100ec90ad382b69c34249b8fa9a34585b70494c5a10254ca9c66b20ca98b7d111384a4bcc57f5af8cb90fc873d596186243ccc272ba061ba30be7d1675b5d80000000000000000", 0xf1}], 0x4}, 0x24000808) kernel console output (not intermixed with test programs): m. [ 585.134042][T24052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.146643][T24052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.157086][T24052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.185125][T24052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.227926][T24052] hsr_slave_0: entered promiscuous mode [ 585.237346][T24052] hsr_slave_1: entered promiscuous mode [ 585.244288][ T51] Bluetooth: hci5: command tx timeout [ 585.252731][T24052] debugfs: 'hsr0' already exists in 'hsr' [ 585.259256][T24052] Cannot create hsr debugfs directory [ 585.773084][T24116] netlink: 'syz.2.6171': attribute type 1 has an invalid length. [ 585.812681][T24052] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 585.833994][T24052] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 585.847442][T24052] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 585.868061][T24052] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 585.883512][ T51] Bluetooth: hci0: command tx timeout [ 585.927090][T24120] Can't find ip_set type has [ 586.034981][T24134] netlink: 'syz.2.6176': attribute type 1 has an invalid length. [ 586.230720][T24052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.270480][T24052] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.303742][T20340] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.310936][T20340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.338504][T24137] vlan2: entered promiscuous mode [ 586.404001][T20340] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.411187][T20340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.450328][T20339] net_ratelimit: 25 callbacks suppressed [ 586.450348][T20339] bond1: (slave macvlan0): failed to get link speed/duplex [ 586.576234][T24142] netlink: 'syz.0.6178': attribute type 1 has an invalid length. [ 586.676452][T24142] 8021q: adding VLAN 0 to HW filter on device bond6 [ 586.720369][T20340] bond1: (slave macvlan0): failed to get link speed/duplex [ 586.825104][T24142] bond6: (slave veth5): Enslaving as an active interface with a down link [ 586.953769][T24146] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 586.968830][ T5891] IPVS: starting estimator thread 0... [ 586.984019][T24146] bond7 (unregistering): Released all slaves [ 587.035021][T24134] lo speed is unknown, defaulting to 1000 [ 587.043574][T24162] netlink: 'syz.3.6185': attribute type 13 has an invalid length. [ 587.048067][T24164] netlink: 'syz.4.6184': attribute type 39 has an invalid length. [ 587.060576][T24159] IPVS: using max 37 ests per chain, 88800 per kthread [ 587.176933][T24134] virt_wifi0 speed is unknown, defaulting to 1000 [ 587.196574][T20339] bond1: (slave macvlan0): failed to get link speed/duplex [ 587.243669][T24134] wg1 speed is unknown, defaulting to 1000 [ 587.263388][T24052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.310463][T24168] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 587.318843][T24168] batadv2: entered promiscuous mode [ 587.331926][T24168] team0: Port device batadv2 added [ 587.399773][T20340] bond1: (slave macvlan0): failed to get link speed/duplex [ 587.497980][T24180] __nla_validate_parse: 8 callbacks suppressed [ 587.498002][T24180] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6189'. [ 587.517127][T24180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6189'. [ 587.539151][T24183] bridge0: entered promiscuous mode [ 587.550107][T24183] macvtap1: entered promiscuous mode [ 587.555723][T24183] macvtap1: entered allmulticast mode [ 587.562307][T24183] bridge0: entered allmulticast mode [ 587.572447][T24183] bridge0: port 3(macvtap1) entered blocking state [ 587.579216][T24183] bridge0: port 3(macvtap1) entered disabled state [ 587.591960][T24183] bridge0: left allmulticast mode [ 587.597351][T24183] bridge0: left promiscuous mode [ 587.648004][T24052] veth0_vlan: entered promiscuous mode [ 587.691749][T24052] veth1_vlan: entered promiscuous mode [ 587.767351][T24190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6192'. [ 587.797426][T24052] veth0_macvtap: entered promiscuous mode [ 587.804779][T24190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6192'. [ 587.858641][T24190] erspan0: entered promiscuous mode [ 587.873172][T20339] bond1: (slave macvlan0): failed to get link speed/duplex [ 587.897500][T24052] veth1_macvtap: entered promiscuous mode [ 587.920879][T24052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.943849][T24052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.960636][ T51] Bluetooth: hci0: command tx timeout [ 587.973402][T20333] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.994880][T20333] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.003715][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 588.003735][ C0] lec:lec_tx_timeout: lec0 [ 588.011937][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 588.025062][T20333] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.041278][T20333] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.128381][T24201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6195'. [ 588.133690][T24175] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 588.140527][T20333] bond1: (slave macvlan0): failed to get link speed/duplex [ 588.231981][T20340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.242421][T24206] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6196'. [ 588.252235][T20340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.361512][T20335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.379941][ T1012] bond1: (slave macvlan0): failed to get link speed/duplex [ 588.388870][T20335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.490295][T20339] bond1: (slave macvlan0): failed to get link speed/duplex [ 588.557509][T24214] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6200'. [ 588.585962][T24214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6200'. [ 588.607252][T24217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6151'. [ 588.632130][T20335] bond1: (slave macvlan0): failed to get link speed/duplex [ 588.739805][T20339] bond1: (slave macvlan0): failed to get link speed/duplex [ 588.840625][T24226] vlan5: entered promiscuous mode [ 588.909055][T24232] netlink: 'syz.3.6206': attribute type 39 has an invalid length. [ 589.028198][T24238] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6206'. [ 589.037284][T24238] netlink: 'syz.3.6206': attribute type 5 has an invalid length. [ 589.132450][ T5142] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 589.146648][ T5142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 589.156420][ T5142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 589.165091][ T5142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 589.186855][T24238] vlan2: entered allmulticast mode [ 589.285508][ T5142] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 589.538638][T24234] lo speed is unknown, defaulting to 1000 [ 589.547991][T24234] virt_wifi0 speed is unknown, defaulting to 1000 [ 589.568984][T24234] wg1 speed is unknown, defaulting to 1000 [ 589.809247][T24258] netlink: 'syz.3.6212': attribute type 39 has an invalid length. [ 590.041174][ T5142] Bluetooth: hci0: command 0x040f tx timeout [ 590.102442][T24243] lo speed is unknown, defaulting to 1000 [ 590.115263][T24243] virt_wifi0 speed is unknown, defaulting to 1000 [ 590.174000][T24243] wg1 speed is unknown, defaulting to 1000 [ 590.707612][T24293] ip6gretap0: entered promiscuous mode [ 590.716291][T24293] ip6gretap0: left promiscuous mode [ 590.795732][T24243] chnl_net:caif_netlink_parms(): no params data found [ 590.996175][T24310] SET target dimension over the limit! [ 591.053919][T24243] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.071426][T24243] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.078726][T24243] bridge_slave_0: entered allmulticast mode [ 591.088706][T24243] bridge_slave_0: entered promiscuous mode [ 591.104924][T24312] team_slave_0: entered promiscuous mode [ 591.110684][T24312] team_slave_1: entered promiscuous mode [ 591.127057][T24312] vlan2: entered promiscuous mode [ 591.137037][T24312] team0: entered promiscuous mode [ 591.218016][T24243] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.228376][T24243] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.251089][T24316] netlink: 'syz.4.6231': attribute type 1 has an invalid length. [ 591.256696][T24243] bridge_slave_1: entered allmulticast mode [ 591.274194][T24243] bridge_slave_1: entered promiscuous mode [ 591.397061][T24243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.410003][ T5142] Bluetooth: hci4: command tx timeout [ 591.444831][T24243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.486057][T24243] team0: Port device team_slave_0 added [ 591.495692][T24243] team0: Port device team_slave_1 added [ 591.557715][T24243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.572181][T24243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.598671][T24243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.646619][T24338] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 591.670835][T24338] batadv1: entered promiscuous mode [ 591.684762][T24338] team0: Port device batadv1 added [ 591.702807][T24243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.739609][T24243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.839154][T24243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.983362][T24243] hsr_slave_0: entered promiscuous mode [ 592.005582][T24243] hsr_slave_1: entered promiscuous mode [ 592.019431][T24243] debugfs: 'hsr0' already exists in 'hsr' [ 592.028928][T24243] Cannot create hsr debugfs directory [ 592.122862][ T5142] Bluetooth: hci0: command 0x040f tx timeout [ 592.129362][T20335] net_ratelimit: 10 callbacks suppressed [ 592.129381][T20335] bond1: (slave macvlan0): failed to get link speed/duplex [ 592.204128][T24364] netlink: 'syz.1.6243': attribute type 1 has an invalid length. [ 592.526762][ T1012] bond1: (slave macvlan0): failed to get link speed/duplex [ 592.608854][T24243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.620941][T24243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.687868][T24379] syzkaller0: entered promiscuous mode [ 592.694557][T24379] syzkaller0: entered allmulticast mode [ 592.713038][T24384] bridge0: entered promiscuous mode [ 592.718552][T24384] macvtap1: entered promiscuous mode [ 592.724470][T24384] macvtap1: entered allmulticast mode [ 592.737030][T24384] bridge0: entered allmulticast mode [ 592.745591][T24384] bridge0: port 3(macvtap1) entered blocking state [ 592.779945][T24384] bridge0: port 3(macvtap1) entered disabled state [ 592.793953][T24384] bridge0: left allmulticast mode [ 592.799358][T24384] bridge0: left promiscuous mode [ 592.860734][T24243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.873173][T24243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.017156][T24387] __nla_validate_parse: 20 callbacks suppressed [ 593.017179][T24387] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6253'. [ 593.048630][T24243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.075759][T24243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.140590][T20328] bond1: (slave macvlan0): failed to get link speed/duplex [ 593.313438][T24403] netlink: 'syz.4.6257': attribute type 3 has an invalid length. [ 593.322124][T24404] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 593.323010][T24404] batadv1: entered promiscuous mode [ 593.337979][T24406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6259'. [ 593.350161][T24406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6259'. [ 593.355745][T24404] team0: Port device batadv1 added [ 593.369862][ T1012] bond1: (slave macvlan0): failed to get link speed/duplex [ 593.432685][T24243] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.444036][T24403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6257'. [ 593.448524][T24243] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.487109][ T5142] Bluetooth: hci4: command tx timeout [ 593.510657][T24406] erspan0: entered promiscuous mode [ 593.549715][ T1012] bond1: (slave macvlan0): failed to get link speed/duplex [ 593.670715][T20328] bond1: (slave macvlan0): failed to get link speed/duplex [ 593.799541][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 593.807608][ C0] lec:lec_tx_timeout: lec0 [ 593.812646][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 593.855831][T24419] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 593.868346][T24400] lo speed is unknown, defaulting to 1000 [ 593.883273][T24400] virt_wifi0 speed is unknown, defaulting to 1000 [ 593.923713][T24400] wg1 speed is unknown, defaulting to 1000 [ 593.929169][T24243] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 593.936077][T24420] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6262'. [ 593.949103][T24420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6262'. [ 593.950915][T24243] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 594.026577][T24243] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 594.038014][T24243] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 594.208259][ T5142] Bluetooth: hci0: command 0x040f tx timeout [ 594.283673][T20340] bond1: (slave macvlan0): failed to get link speed/duplex [ 594.379447][T24243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.411693][T24243] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.464994][T20340] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.472247][T20340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.506981][T20335] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.514267][T20335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.591489][T20340] bond1: (slave macvlan0): failed to get link speed/duplex [ 594.628334][T24431] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6264'. [ 594.645586][T24431] nbd: must specify at least one socket [ 594.663330][T24431] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6264'. [ 594.677340][T24431] nbd: must specify at least one socket [ 594.763643][T20335] bond1: (slave macvlan0): failed to get link speed/duplex [ 594.775908][T24443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6267'. [ 594.852098][T24443] vlan2: entered promiscuous mode [ 594.874775][T24445] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6268'. [ 594.883952][T20335] bond1: (slave macvlan0): failed to get link speed/duplex [ 595.115992][T24243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.163545][ T5905] IPVS: starting estimator thread 0... [ 595.222375][T24243] veth0_vlan: entered promiscuous mode [ 595.255596][T24243] veth1_vlan: entered promiscuous mode [ 595.259798][T24462] IPVS: using max 36 ests per chain, 86400 per kthread [ 595.322079][T24243] veth0_macvtap: entered promiscuous mode [ 595.374694][T24243] veth1_macvtap: entered promiscuous mode [ 595.460805][T24243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.493619][T24243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.571102][ T5142] Bluetooth: hci4: command tx timeout [ 595.804063][T20328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.826436][T20328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.852470][T24469] lo speed is unknown, defaulting to 1000 [ 595.860103][T24469] virt_wifi0 speed is unknown, defaulting to 1000 [ 595.876607][T24469] wg1 speed is unknown, defaulting to 1000 [ 595.938298][T20340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.953785][T20340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.974940][T24499] vlan2: entered promiscuous mode [ 596.158396][T20341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.221655][T20341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.385450][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.427137][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.559924][T24500] lo speed is unknown, defaulting to 1000 [ 596.623404][T24500] virt_wifi0 speed is unknown, defaulting to 1000 [ 596.647837][T24500] wg1 speed is unknown, defaulting to 1000 [ 596.698323][T24521] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 596.751222][T24520] netlink: 'syz.3.6288': attribute type 2 has an invalid length. [ 596.816625][T24520] : entered promiscuous mode [ 596.924668][T24528] batadv0: entered promiscuous mode [ 596.930221][T24528] vlan2: entered promiscuous mode [ 597.158070][T24535] batadv_slave_0: entered promiscuous mode [ 597.188966][T24535] batadv1: entered promiscuous mode [ 597.224348][T20335] net_ratelimit: 11 callbacks suppressed [ 597.224369][T20335] bond1: (slave macvlan0): failed to get link speed/duplex [ 597.294217][T24534] batadv_slave_0: left promiscuous mode [ 597.381311][T20341] bond1: (slave macvlan0): failed to get link speed/duplex [ 597.499624][T20328] bond1: (slave macvlan0): failed to get link speed/duplex [ 597.609722][T20328] bond1: (slave macvlan0): failed to get link speed/duplex [ 597.639753][ T5142] Bluetooth: hci4: command tx timeout [ 597.720832][T20328] bond1: (slave macvlan0): failed to get link speed/duplex [ 597.859757][T20328] bond1: (slave macvlan0): failed to get link speed/duplex [ 597.989950][T20335] bond1: (slave macvlan0): failed to get link speed/duplex [ 598.034098][T24562] __nla_validate_parse: 19 callbacks suppressed [ 598.034119][T24562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6299'. [ 598.099653][T20328] bond1: (slave macvlan0): failed to get link speed/duplex [ 598.153426][T24567] bond_slave_0: entered promiscuous mode [ 598.159227][T24567] bond_slave_1: entered promiscuous mode [ 598.167480][T24567] vlan2: entered promiscuous mode [ 598.187731][T24567] bond0: entered promiscuous mode [ 598.260836][T20328] bond1: (slave macvlan0): failed to get link speed/duplex [ 598.375200][T20335] bond1: (slave macvlan0): failed to get link speed/duplex [ 598.698716][T24594] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6314'. [ 598.723429][T24594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6314'. [ 598.822367][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 598.834219][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 598.841507][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 598.841531][ C0] lec:lec_tx_timeout: lec0 [ 598.849871][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 598.862014][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 598.872318][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 598.880427][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 599.011089][T24608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6315'. [ 599.120333][T24611] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6317'. [ 599.148976][T24608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 599.367489][T24608] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 599.421978][T24608] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 599.454072][T24599] lo speed is unknown, defaulting to 1000 [ 599.476490][T24599] virt_wifi0 speed is unknown, defaulting to 1000 [ 599.484879][T24625] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 599.512169][T24599] wg1 speed is unknown, defaulting to 1000 [ 599.597336][T24628] x_tables: duplicate underflow at hook 2 [ 599.602836][T24630] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6321'. [ 599.659734][T24630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6321'. [ 599.764515][T24622] lo speed is unknown, defaulting to 1000 [ 599.784252][T24622] virt_wifi0 speed is unknown, defaulting to 1000 [ 599.807177][T24622] wg1 speed is unknown, defaulting to 1000 [ 599.814138][T24635] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6325'. [ 599.825157][T24635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6325'. [ 600.027753][T24599] chnl_net:caif_netlink_parms(): no params data found [ 600.293496][T24648] vlan2: entered promiscuous mode [ 600.518919][T24599] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.554175][T24599] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.580468][T24599] bridge_slave_0: entered allmulticast mode [ 600.597881][T24599] bridge_slave_0: entered promiscuous mode [ 600.637148][T24599] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.637603][T24658] netlink: 'syz.4.6330': attribute type 8 has an invalid length. [ 600.652611][T24658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6330'. [ 600.658787][T24599] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.689063][T24599] bridge_slave_1: entered allmulticast mode [ 600.712493][T24599] bridge_slave_1: entered promiscuous mode [ 600.785796][T24658] gretap0: entered promiscuous mode [ 600.795328][T24658] gretap0: left promiscuous mode [ 600.817847][T24664] vlan2: entered promiscuous mode [ 600.826778][T24664] dummy0: entered promiscuous mode [ 600.851290][T24640] lo speed is unknown, defaulting to 1000 [ 600.874126][T24640] virt_wifi0 speed is unknown, defaulting to 1000 [ 600.884639][T24599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.919764][ T5142] Bluetooth: hci1: command tx timeout [ 600.939171][T24599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.967333][T24640] wg1 speed is unknown, defaulting to 1000 [ 601.064960][T24599] team0: Port device team_slave_0 added [ 601.097391][T24599] team0: Port device team_slave_1 added [ 601.289095][T24599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.310893][T24599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.348310][T24599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.381858][T24599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.389070][T24599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.418185][T24599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.464812][T24691] batadv0: entered promiscuous mode [ 601.470643][T24691] vlan2: entered promiscuous mode [ 601.640629][T24599] hsr_slave_0: entered promiscuous mode [ 601.647185][T24599] hsr_slave_1: entered promiscuous mode [ 601.654135][T24599] debugfs: 'hsr0' already exists in 'hsr' [ 601.679612][T24599] Cannot create hsr debugfs directory [ 601.929242][T24703] batadv_slave_0: entered promiscuous mode [ 601.948242][T24685] lo speed is unknown, defaulting to 1000 [ 601.975092][T24703] batadv1: entered promiscuous mode [ 601.989618][T24685] virt_wifi0 speed is unknown, defaulting to 1000 [ 602.048671][T24685] wg1 speed is unknown, defaulting to 1000 [ 602.119163][T24702] batadv_slave_0: left promiscuous mode [ 602.294036][T20333] net_ratelimit: 12 callbacks suppressed [ 602.294056][T20333] bond1: (slave macvlan0): failed to get link speed/duplex [ 602.550790][T24719] syzkaller0: entered promiscuous mode [ 602.556299][T24719] syzkaller0: entered allmulticast mode [ 603.002531][ T5142] Bluetooth: hci1: command tx timeout [ 603.859632][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 603.867800][ C0] lec:lec_tx_timeout: lec0 [ 603.872488][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 604.419727][T20341] bond1: (slave macvlan0): failed to get link speed/duplex [ 604.464164][T24732] netlink: 'syz.3.6357': attribute type 39 has an invalid length. [ 604.523593][T24734] __nla_validate_parse: 8 callbacks suppressed [ 604.523613][T24734] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6358'. [ 604.564642][T24734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6358'. [ 604.584881][T24599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 604.627873][T24599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 604.710994][T24744] SET target dimension over the limit! [ 604.719729][T24599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 604.748354][T24599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 604.819958][T20328] bond1: (slave macvlan0): failed to get link speed/duplex [ 604.930663][T20333] bond1: (slave macvlan0): failed to get link speed/duplex [ 604.955566][T24725] lo speed is unknown, defaulting to 1000 [ 604.975913][T24725] virt_wifi0 speed is unknown, defaulting to 1000 [ 604.993504][T24762] syz.4.6364: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 604.997301][T24725] wg1 speed is unknown, defaulting to 1000 [ 605.028752][T24762] CPU: 0 UID: 0 PID: 24762 Comm: syz.4.6364 Not tainted syzkaller #0 PREEMPT(full) [ 605.028790][T24762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 605.028802][T24762] Call Trace: [ 605.028811][T24762] [ 605.028820][T24762] dump_stack_lvl+0xe8/0x150 [ 605.028851][T24762] warn_alloc+0x249/0x340 [ 605.028876][T24762] ? stack_trace_save+0xa9/0x100 [ 605.028903][T24762] ? __pfx_warn_alloc+0x10/0x10 [ 605.028928][T24762] ? kasan_save_track+0x4f/0x80 [ 605.028944][T24762] ? kasan_save_track+0x3e/0x80 [ 605.028960][T24762] ? __kasan_kmalloc+0x93/0xb0 [ 605.028977][T24762] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 605.028994][T24762] ? xskq_create+0x56/0x170 [ 605.029016][T24762] ? xsk_setsockopt+0x54c/0x990 [ 605.029036][T24762] ? do_sock_setsockopt+0x17c/0x1b0 [ 605.029058][T24762] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 605.029081][T24762] ? do_syscall_64+0xe2/0xf80 [ 605.029111][T24762] __vmalloc_node_range_noprof+0x132/0x1730 [ 605.029157][T24762] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 605.029179][T24762] ? __kasan_kmalloc+0x93/0xb0 [ 605.029204][T24762] vmalloc_user_noprof+0xad/0xe0 [ 605.029224][T24762] ? xskq_create+0xbf/0x170 [ 605.029247][T24762] xskq_create+0xbf/0x170 [ 605.029272][T24762] xsk_init_queue+0xad/0x110 [ 605.029298][T24762] xsk_setsockopt+0x54c/0x990 [ 605.029328][T24762] ? __pfx_xsk_setsockopt+0x10/0x10 [ 605.029349][T24762] ? __pfx_aa_sk_perm+0x10/0x10 [ 605.029375][T24762] ? aa_sock_opt_perm+0xff/0x1a0 [ 605.029402][T24762] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 605.029423][T24762] ? __pfx_xsk_setsockopt+0x10/0x10 [ 605.029445][T24762] do_sock_setsockopt+0x17c/0x1b0 [ 605.029474][T24762] __x64_sys_setsockopt+0x13d/0x1b0 [ 605.029503][T24762] do_syscall_64+0xe2/0xf80 [ 605.029533][T24762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.029550][T24762] ? trace_irq_disable+0x37/0x100 [ 605.029568][T24762] ? clear_bhb_loop+0x60/0xb0 [ 605.029591][T24762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.029611][T24762] RIP: 0033:0x7f73d4d9aeb9 [ 605.029629][T24762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.029646][T24762] RSP: 002b:00007f73d5bf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 605.029667][T24762] RAX: ffffffffffffffda RBX: 00007f73d5015fa0 RCX: 00007f73d4d9aeb9 [ 605.029682][T24762] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 605.029694][T24762] RBP: 00007f73d4e08c1f R08: 0000000000000004 R09: 0000000000000000 [ 605.029707][T24762] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.029719][T24762] R13: 00007f73d5016038 R14: 00007f73d5015fa0 R15: 00007ffd391d7f98 [ 605.029750][T24762] [ 605.052236][T24599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.104891][ T5142] Bluetooth: hci1: command tx timeout [ 605.125993][T24762] Mem-Info: [ 605.160712][T24766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6366'. [ 605.302313][ T1012] bond1: (slave macvlan0): failed to get link speed/duplex [ 605.340584][T24762] active_anon:21537 inactive_anon:6146 isolated_anon:0 [ 605.340584][T24762] active_file:3498 inactive_file:40167 isolated_file:0 [ 605.340584][T24762] unevictable:768 dirty:383 writeback:0 [ 605.340584][T24762] slab_reclaimable:13671 slab_unreclaimable:193140 [ 605.340584][T24762] mapped:29614 shmem:1483 pagetables:1274 [ 605.340584][T24762] sec_pagetables:0 bounce:0 [ 605.340584][T24762] kernel_misc_reclaimable:0 [ 605.340584][T24762] free:1172320 free_pcp:24492 free_cma:0 [ 605.387901][T24764] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.6365'. [ 605.391978][T24768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6364'. [ 605.416565][T24766] ip6gretap0: entered promiscuous mode [ 605.422467][T24762] Node 0 active_anon:86148kB inactive_anon:24584kB active_file:13992kB inactive_file:160468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48824kB dirty:1532kB writeback:0kB shmem:4396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15992kB pagetables:4948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 605.428614][T24766] ip6gretap0: left promiscuous mode [ 605.466982][T24762] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 605.498611][T24762] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 605.530606][T24762] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 605.536474][T24762] Node 0 DMA32 free:979716kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:86148kB inactive_anon:24584kB active_file:13992kB inactive_file:160468kB unevictable:1536kB writepending:1532kB zspages:0kB present:3129332kB managed:2554028kB mlocked:0kB bounce:0kB free_pcp:40260kB local_pcp:20040kB free_cma:0kB [ 605.578501][T24762] lowmem_reserve[]: 0 0 1 1 1 [ 605.583495][T24762] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 605.614684][T24762] lowmem_reserve[]: 0 0 0 0 0 [ 605.619583][T24762] Node 1 Normal free:3698564kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:57700kB local_pcp:27792kB free_cma:0kB [ 605.634816][ T1012] bond1: (slave macvlan0): failed to get link speed/duplex [ 605.660694][T24762] lowmem_reserve[]: 0 0 0 0 0 [ 605.665580][T24762] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 605.695041][T24599] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.724436][T24762] Node 0 DMA32: 7483*4kB (UME) 6056*8kB (UM) 3230*16kB (UME) 668*32kB (UME) 602*64kB (UM) 346*128kB (UME) 336*256kB (UME) 358*512kB (UME) 269*1024kB (UME) 96*2048kB (UME) 1*4096kB (U) = 979724kB [ 605.731552][T20333] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.751105][T20333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.756556][T24762] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 605.778867][T24773] bridge_slave_0: left allmulticast mode [ 605.785082][T24773] bridge_slave_0: left promiscuous mode [ 605.788291][T24762] Node 1 Normal: 169*4kB (UE) 46*8kB (UME) 43*16kB (UME) 102*32kB (UME) 26*64kB (UME) 11*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 899*4096kB (UM) = 3698564kB [ 605.807920][T24773] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.814202][T24762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 605.826484][T24762] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 605.837584][T24762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 605.850854][T24762] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 605.863383][T24762] 45146 total pagecache pages [ 605.868345][T24762] 2 pages in swap cache [ 605.872979][T24762] Free swap = 124988kB [ 605.877317][T24762] Total swap = 124996kB [ 605.906701][T24762] 2097051 pages RAM [ 605.917526][T24773] bridge_slave_1: left allmulticast mode [ 605.918376][T24762] 0 pages HighMem/MovableOnly [ 605.929783][T24773] bridge_slave_1: left promiscuous mode [ 605.930048][T24773] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.949295][T24762] 426646 pages reserved [ 605.956914][T24762] 0 pages cma reserved [ 606.046322][T24773] bond0: (slave bond_slave_0): Releasing backup interface [ 606.070049][T24773] bond0: (slave bond_slave_1): Releasing backup interface [ 606.081614][T24778] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6370'. [ 606.090782][T24778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6370'. [ 606.094878][T24773] team0: Port device team_slave_0 removed [ 606.114959][T24773] team0: Port device team_slave_1 removed [ 606.122617][T24773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.131149][T24773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.140937][T24773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.148709][T24773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.167903][T24773] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 606.246661][T24781] bond0: (slave wlan1): Releasing backup interface [ 606.284041][T24781] mac80211_hwsim hwsim61 wlan1 (unregistering): left promiscuous mode [ 606.322392][T20335] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.329656][T20335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.389672][T20341] bond1: (slave macvlan0): failed to get link speed/duplex [ 606.448794][T24785] netlink: 'syz.3.6372': attribute type 1 has an invalid length. [ 606.467071][T24785] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6372'. [ 606.509687][T20341] bond1: (slave macvlan0): failed to get link speed/duplex [ 606.629687][T20335] bond1: (slave macvlan0): failed to get link speed/duplex [ 606.666597][T24780] lo speed is unknown, defaulting to 1000 [ 606.691289][T24780] virt_wifi0 speed is unknown, defaulting to 1000 [ 606.707520][T24780] wg1 speed is unknown, defaulting to 1000 [ 606.725544][T24801] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6376'. [ 606.734951][T24801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6376'. [ 606.759474][T24802] nbd: must specify at least one socket [ 606.777819][T24802] nbd: must specify at least one socket [ 606.912829][T24599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.118391][T24599] veth0_vlan: entered promiscuous mode [ 607.137405][T24599] veth1_vlan: entered promiscuous mode [ 607.160767][ T5142] Bluetooth: hci1: command tx timeout [ 607.222225][T24599] veth0_macvtap: entered promiscuous mode [ 607.237133][T24599] veth1_macvtap: entered promiscuous mode [ 607.294332][T24599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.345471][T24599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.380673][T20339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.430004][T20339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.445221][T20339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.466428][T20339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.606570][T20341] net_ratelimit: 4 callbacks suppressed [ 607.606590][T20341] bond1: (slave macvlan0): failed to get link speed/duplex [ 607.779785][T20328] bond1: (slave macvlan0): failed to get link speed/duplex [ 607.819453][T20335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.840225][T20335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.889850][T20335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.899764][ T1012] bond1: (slave macvlan0): failed to get link speed/duplex [ 607.917410][T20335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.010956][T20339] bond1: (slave macvlan0): failed to get link speed/duplex [ 608.127730][T24849] bridge_slave_0: left promiscuous mode [ 608.190217][T24849] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.214677][T24849] bridge_slave_1: left allmulticast mode [ 608.221386][T24849] bridge_slave_1: left promiscuous mode [ 608.227366][T24849] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.246779][T24849] bond0: (slave bond_slave_0): Releasing backup interface [ 608.255887][T24849] bond_slave_0: left promiscuous mode [ 608.273041][T24849] bond0: (slave bond_slave_1): Releasing backup interface [ 608.299470][T24849] bond_slave_1: left promiscuous mode [ 608.313592][T24849] team_slave_0: left promiscuous mode [ 608.328723][T24849] team0: Port device team_slave_0 removed [ 608.336935][T24849] team_slave_1: left promiscuous mode [ 608.347244][T24849] team0: Port device team_slave_1 removed [ 608.354601][T24849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.363122][T24849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.372125][T24849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.379830][T24849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.388521][T24849] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 608.407497][T24831] lo speed is unknown, defaulting to 1000 [ 608.412253][T20328] bond1: (slave macvlan0): failed to get link speed/duplex [ 608.449781][T24831] virt_wifi0 speed is unknown, defaulting to 1000 [ 608.458637][T24831] wg1 speed is unknown, defaulting to 1000 [ 608.569229][T24867] bond_slave_0: entered promiscuous mode [ 608.575016][T24867] bond_slave_1: entered promiscuous mode [ 608.582306][T24867] vlan2: entered promiscuous mode [ 608.587362][T24867] bond0: entered promiscuous mode [ 608.770414][T20335] bond1: (slave macvlan0): failed to get link speed/duplex [ 608.879569][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 608.887639][ C0] lec:lec_tx_timeout: lec0 [ 608.892812][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 608.906319][ T1012] bond1: (slave macvlan0): failed to get link speed/duplex [ 609.020496][T20340] bond1: (slave macvlan0): failed to get link speed/duplex [ 609.115134][T24882] vlan2: entered promiscuous mode [ 609.128733][T24884] netlink: 'syz.3.6404': attribute type 1 has an invalid length. [ 609.147920][T24884] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 609.182061][ T1012] bond1: (slave macvlan0): failed to get link speed/duplex [ 609.242359][T24890] vlan2: entered promiscuous mode [ 609.344557][T24896] ip6gretap0: entered promiscuous mode [ 609.352662][T24896] ip6gretap0: left promiscuous mode [ 609.627683][T24910] netlink: 'syz.2.6412': attribute type 1 has an invalid length. [ 609.639803][T24910] __nla_validate_parse: 17 callbacks suppressed [ 609.639822][T24910] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6412'. [ 609.959287][T24932] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6422'. [ 609.969490][T24932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6422'. [ 609.986872][T24935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6423'. [ 610.177468][T24942] netlink: 'syz.4.6425': attribute type 2 has an invalid length. [ 610.227499][T24943] IPv6: sit1: Disabled Multicast RS [ 610.255208][T24942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6425'. [ 610.299756][T24942] bridge_slave_1: left allmulticast mode [ 610.307743][T24942] bridge_slave_1: left promiscuous mode [ 610.326131][T24942] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.357327][T24942] bridge_slave_0: left allmulticast mode [ 610.370926][T24942] bridge_slave_0: left promiscuous mode [ 610.387219][T24942] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.590241][T24952] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6428'. [ 610.620556][T24952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6428'. [ 610.623800][T24951] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6427'. [ 610.638970][T24951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6427'. [ 610.715143][T24952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 610.872643][T24967] batadv_slave_0: entered promiscuous mode [ 610.898849][T24971] SET target dimension over the limit! [ 610.911176][T24967] batadv2: entered promiscuous mode [ 611.093810][T24966] batadv_slave_0: left promiscuous mode [ 611.126697][T24981] netlink: 'syz.2.6437': attribute type 1 has an invalid length. [ 611.151074][T24981] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6437'. [ 611.584832][T24998] netlink: 'syz.1.6447': attribute type 7 has an invalid length. [ 611.595604][T24998] netlink: 'syz.1.6447': attribute type 8 has an invalid length. [ 611.754903][T25005] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 611.874768][T25012] netlink: 'syz.4.6451': attribute type 32 has an invalid length. [ 611.902989][T25012] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 612.423680][T25028] bridge_slave_0: left allmulticast mode [ 612.441801][T25028] bridge_slave_0: left promiscuous mode [ 612.457948][T25028] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.491844][T25028] bridge_slave_1: left allmulticast mode [ 612.497545][T25028] bridge_slave_1: left promiscuous mode [ 612.509847][T25028] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.546305][T25028] bond0: (slave bond_slave_0): Releasing backup interface [ 612.570802][T25028] bond0: (slave bond_slave_1): Releasing backup interface [ 612.618760][T25028] team0: Port device team_slave_0 removed [ 612.633015][T25028] team0: Port device team_slave_1 removed [ 612.651748][T25028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.660237][T25028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.672365][T25028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.681076][T25028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.690211][T25028] net_ratelimit: 24 callbacks suppressed [ 612.690223][T25028] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 612.723423][T25035] tipc: MTU too low for tipc bearer [ 612.728712][T25019] lo speed is unknown, defaulting to 1000 [ 612.736155][T25019] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.746195][ T1012] bond1: (slave macvlan0): failed to get link speed/duplex [ 612.773122][T25019] wg1 speed is unknown, defaulting to 1000 [ 612.905796][ T1012] bond1: (slave macvlan0): failed to get link speed/duplex [ 613.154974][ T1012] bond1: (slave macvlan0): failed to get link speed/duplex [ 613.156279][T25053] netlink: 'syz.4.6465': attribute type 1 has an invalid length. [ 613.289877][ T1012] bond1: (slave macvlan0): failed to get link speed/duplex [ 613.470973][T25071] vlan2: entered promiscuous mode [ 613.504077][T25071] team0: entered promiscuous mode [ 613.632858][T25073] nbd: must specify at least one socket [ 613.639035][T25077] team_slave_0: entered promiscuous mode [ 613.641004][T25073] nbd: must specify at least one socket [ 613.644764][T25077] team_slave_1: entered promiscuous mode [ 613.713490][T25077] vlan2: entered promiscuous mode [ 613.729612][T25077] team0: entered promiscuous mode [ 613.832214][T20340] bond1: (slave macvlan0): failed to get link speed/duplex [ 613.870637][T25051] lo speed is unknown, defaulting to 1000 [ 613.886178][T25051] virt_wifi0 speed is unknown, defaulting to 1000 [ 613.899579][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 613.907759][ C0] lec:lec_tx_timeout: lec0 [ 613.912476][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 613.923103][T25051] wg1 speed is unknown, defaulting to 1000 [ 614.189859][T20340] bond1: (slave macvlan0): failed to get link speed/duplex [ 614.249776][T25075] lo speed is unknown, defaulting to 1000 [ 614.263653][T25075] virt_wifi0 speed is unknown, defaulting to 1000 [ 614.277192][T25075] wg1 speed is unknown, defaulting to 1000 [ 614.352561][T25096] netlink: 'syz.4.6481': attribute type 1 has an invalid length. [ 614.465182][T25096] netlink: 'syz.4.6481': attribute type 1 has an invalid length. [ 614.834829][T25113] SET target dimension over the limit! [ 614.994205][T20335] bond1 (unregistering): (slave gretap1): Releasing active interface [ 615.033549][T20335] bond2 (unregistering): (slave geneve3): Releasing active interface [ 615.194359][T20335] team0: Port device bond0 removed [ 615.203043][T20335] bond0 (unregistering): Released all slaves [ 615.229164][T20335] bond1 (unregistering): Released all slaves [ 615.248852][T20335] bond2 (unregistering): Released all slaves [ 615.264413][T20335] bond3 (unregistering): Released all slaves [ 615.281231][T20335] bond4 (unregistering): Released all slaves [ 615.295775][T20335] bond5 (unregistering): Released all slaves [ 615.341282][T25119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.590744][T20341] bond1: (slave macvlan0): failed to get link speed/duplex [ 615.633763][T25134] netlink: 'syz.2.6493': attribute type 39 has an invalid length. [ 615.756971][T25136] __nla_validate_parse: 18 callbacks suppressed [ 615.756994][T25136] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6494'. [ 615.763834][T20339] bond1: (slave macvlan0): failed to get link speed/duplex [ 615.783469][T25136] nbd: must specify at least one socket [ 615.793451][T25136] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6494'. [ 615.807014][T25136] nbd: must specify at least one socket [ 615.819332][T25139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6495'. [ 615.860167][T25139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6495'. [ 615.882253][T25139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6495'. [ 615.919893][T25117] lo speed is unknown, defaulting to 1000 [ 616.024091][T25117] virt_wifi0 speed is unknown, defaulting to 1000 [ 616.086118][T25117] wg1 speed is unknown, defaulting to 1000 [ 616.221653][T25149] xt_hashlimit: size too large, truncated to 1048576 [ 616.817314][T25168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6504'. [ 616.945856][T25170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6506'. [ 617.017608][T25170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6506'. [ 617.045174][T25170] erspan0: entered promiscuous mode [ 617.087838][T25171] syzkaller0: entered promiscuous mode [ 617.129711][T25171] syzkaller0: entered allmulticast mode [ 617.155842][T25167] geneve0: entered allmulticast mode [ 617.186620][T20335] hsr_slave_0: left promiscuous mode [ 617.198579][T20335] hsr_slave_1: left promiscuous mode [ 617.235151][T20335] batadv3 (unregistering): left promiscuous mode [ 617.262147][T25178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6508'. [ 617.272451][T20335] team0 (unregistering): Port device batadv3 removed [ 617.302485][T20335] batadv2 (unregistering): left promiscuous mode [ 617.310375][T20335] team0 (unregistering): Port device batadv2 removed [ 617.349812][T20335] batadv1 (unregistering): left promiscuous mode [ 617.363009][T20335] team0 (unregistering): Port device batadv1 removed [ 617.369444][T25180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6509'. [ 617.760168][T25180] ip6gretap0: entered promiscuous mode [ 617.768439][T25180] ip6gretap0: left promiscuous mode [ 617.909666][T20339] net_ratelimit: 5 callbacks suppressed [ 617.909687][T20339] bond1: (slave macvlan0): failed to get link speed/duplex [ 618.058657][T25192] bridge0: entered promiscuous mode [ 618.071686][T25192] macvtap1: entered promiscuous mode [ 618.081386][T25192] macvtap1: entered allmulticast mode [ 618.095999][T25192] bridge0: entered allmulticast mode [ 618.116032][T25192] bridge0: port 3(macvtap1) entered blocking state [ 618.142738][T25192] bridge0: port 3(macvtap1) entered disabled state [ 618.176187][T25192] bridge0: left allmulticast mode [ 618.186861][T25192] bridge0: left promiscuous mode [ 618.250614][T20330] bond1: (slave macvlan0): failed to get link speed/duplex [ 618.379636][T20330] bond1: (slave macvlan0): failed to get link speed/duplex [ 618.550672][T20341] bond1: (slave macvlan0): failed to get link speed/duplex [ 618.593484][T20335] IPVS: stop unused estimator thread 0... [ 618.699984][T20341] bond1: (slave macvlan0): failed to get link speed/duplex [ 618.757345][T25234] netlink: 'syz.4.6527': attribute type 21 has an invalid length. [ 618.829797][T20335] bond1: (slave macvlan0): failed to get link speed/duplex [ 618.919920][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 618.928221][ C0] lec:lec_tx_timeout: lec0 [ 618.933131][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 618.942660][T20340] bond1: (slave macvlan0): failed to get link speed/duplex [ 619.043847][T25253] tunl0: Caught tx_queue_len zero misconfig [ 619.053586][T25253] sch_fq: defrate 4294967293 ignored. [ 619.075790][T25254] vlan2: entered promiscuous mode [ 619.132189][T25256] team0: Port device gtp0 added [ 619.145393][T25261] netlink: 'syz.4.6537': attribute type 39 has an invalid length. [ 619.152076][T25259] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 619.201010][T25259] batadv1: entered promiscuous mode [ 619.215648][T25259] team0: Port device batadv1 added [ 619.229998][T25253] team_slave_1: Caught tx_queue_len zero misconfig [ 619.271698][T20333] bond1: (slave macvlan0): failed to get link speed/duplex [ 619.395431][T25276] syzkaller0: entered promiscuous mode [ 619.405880][T25276] syzkaller0: entered allmulticast mode [ 619.419748][T20330] bond1: (slave macvlan0): failed to get link speed/duplex [ 619.452829][T25279] vlan2: entered promiscuous mode [ 619.550329][T20335] bond1: (slave macvlan0): failed to get link speed/duplex [ 619.980804][T25317] netlink: 'syz.4.6558': attribute type 3 has an invalid length. [ 620.240319][T25331] sctp: [Deprecated]: syz.4.6564 (pid 25331) Use of int in maxseg socket option. [ 620.240319][T25331] Use struct sctp_assoc_value instead [ 620.511137][T25342] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 620.820791][T25297] lo speed is unknown, defaulting to 1000 [ 620.908916][T25297] virt_wifi0 speed is unknown, defaulting to 1000 [ 620.994472][T25297] wg1 speed is unknown, defaulting to 1000 [ 621.227071][T25361] __nla_validate_parse: 14 callbacks suppressed [ 621.227109][T25361] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6571'. [ 621.406696][T25372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6574'. [ 621.448418][T25372] 8021q: VLANs not supported on team0 [ 621.788100][T25398] netlink: 'syz.2.6586': attribute type 39 has an invalid length. [ 621.946230][T25402] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6585'. [ 622.260729][T25411] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 622.275756][T25411] bond1: (slave macvlan3): Enslaving as an active interface with a down link [ 622.394083][T25415] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6592'. [ 622.427257][T25423] batadv_slave_0: entered promiscuous mode [ 622.471391][T25423] batadv1: entered promiscuous mode [ 622.555381][T25424] bond1: option all_slaves_active: invalid value (13) [ 622.586235][T25424] bond1 (unregistering): Released all slaves [ 622.614754][T25421] batadv_slave_0: left promiscuous mode [ 622.701908][T25433] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6598'. [ 622.802378][T25440] vlan2: entered promiscuous mode [ 622.825175][T25437] delete_channel: no stack [ 622.969944][T20330] net_ratelimit: 24 callbacks suppressed [ 622.969965][T20330] bond1: (slave macvlan0): failed to get link speed/duplex [ 623.018895][T25453] netlink: 'syz.3.6605': attribute type 1 has an invalid length. [ 623.049767][T25453] netlink: 'syz.3.6605': attribute type 2 has an invalid length. [ 623.090378][T20330] bond1: (slave macvlan0): failed to get link speed/duplex [ 623.200003][T20328] bond1: (slave macvlan0): failed to get link speed/duplex [ 623.295909][T25473] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6608'. [ 623.320927][ T1012] bond1: (slave macvlan0): failed to get link speed/duplex [ 623.439697][ T1012] bond1: (slave macvlan0): failed to get link speed/duplex [ 623.518928][T25482] bridge0: entered promiscuous mode [ 623.551143][T25482] macvtap1: entered promiscuous mode [ 623.566783][T25482] macvtap1: entered allmulticast mode [ 623.593174][T25482] bridge0: entered allmulticast mode [ 623.616649][T25482] bridge0: port 3(macvtap1) entered blocking state [ 623.643933][T25482] bridge0: port 3(macvtap1) entered disabled state [ 623.676876][T25482] bridge0: left allmulticast mode [ 623.688915][T25482] bridge0: left promiscuous mode [ 623.833615][T25510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6615'. [ 623.842664][T25498] bond1: (slave macvlan0): failed to get link speed/duplex [ 623.939577][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 623.947657][ C0] lec:lec_tx_timeout: lec0 [ 623.953527][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 624.083467][T25517] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 624.092668][T25517] batadv2: entered promiscuous mode [ 624.112742][T25517] team0: Port device batadv2 added [ 624.126473][T25515] vlan2: entered promiscuous mode [ 624.196550][T25520] vlan2: entered promiscuous mode [ 624.240890][T25503] bond1: (slave macvlan0): failed to get link speed/duplex [ 624.350413][T25498] bond1: (slave macvlan0): failed to get link speed/duplex [ 624.401813][T25534] Bluetooth: MGMT ver 1.23 [ 624.481455][T25498] bond1: (slave macvlan0): failed to get link speed/duplex [ 624.567824][T25549] vlan2: entered promiscuous mode [ 624.616063][T25549] bond0: entered promiscuous mode [ 624.646131][T25558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6633'. [ 624.657198][T25558] openvswitch: netlink: Flow actions attr not present in new flow. [ 624.730787][T25560] vlan2: entered promiscuous mode [ 624.738763][T25556] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6627'. [ 625.100462][T25583] SET target dimension over the limit! [ 625.201865][T25592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6645'. [ 625.275553][T25596] vlan2: entered promiscuous mode [ 625.356746][T25599] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 625.367388][T25599] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 625.376095][T25599] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 625.517141][T25608] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 625.525618][T25608] team0: Device batadv1 is of different type [ 626.027204][T25618] batadv0: entered promiscuous mode [ 626.033981][T25618] vlan2: entered promiscuous mode [ 626.233364][T25627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6657'. [ 626.433453][T25630] lo speed is unknown, defaulting to 1000 [ 626.441837][T25630] virt_wifi0 speed is unknown, defaulting to 1000 [ 626.449251][T25630] wg1 speed is unknown, defaulting to 1000 [ 627.487926][T25546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 627.651808][T25646] tipc: Started in network mode [ 627.657927][T25646] tipc: Node identity 36271a83073, cluster identity 4711 [ 627.674638][T25646] tipc: Enabled bearer , priority 0 [ 627.690701][T25646] syzkaller0: entered promiscuous mode [ 627.696210][T25646] syzkaller0: entered allmulticast mode [ 627.748789][T25646] tipc: Resetting bearer [ 627.767587][T25652] batadv_slave_0: entered promiscuous mode [ 627.800586][T25645] tipc: Resetting bearer [ 627.844001][T25645] tipc: Disabling bearer [ 627.891342][T25652] batadv2: entered promiscuous mode [ 628.025111][T25670] net_ratelimit: 29 callbacks suppressed [ 628.025133][T25670] openvswitch: netlink: Flow actions attr not present in new flow. [ 628.039103][T25502] bond1: (slave macvlan0): failed to get link speed/duplex [ 628.056916][T25651] batadv_slave_0: left promiscuous mode [ 628.070412][T25656] 8021q: VLANs not supported on caif0 [ 628.138903][T25667] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 628.209010][T25679] vlan3: entered promiscuous mode [ 628.223187][T25675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6670'. [ 628.257681][T25675] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 628.319658][T25498] bond1: (slave macvlan0): failed to get link speed/duplex [ 628.415070][T25688] netlink: 'syz.2.6674': attribute type 3 has an invalid length. [ 628.423282][T25688] netlink: 'syz.2.6674': attribute type 1 has an invalid length. [ 628.432666][T25498] bond1: (slave macvlan0): failed to get link speed/duplex [ 628.440952][T25688] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.6674'. [ 628.505771][T25692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6676'. [ 628.549884][T25501] bond1: (slave macvlan0): failed to get link speed/duplex [ 628.572135][T25672] lo speed is unknown, defaulting to 1000 [ 628.583438][T25688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6674'. [ 628.595553][T25672] virt_wifi0 speed is unknown, defaulting to 1000 [ 628.613678][T25688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6674'. [ 628.632461][T25672] wg1 speed is unknown, defaulting to 1000 [ 628.743649][T25697] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 628.768113][T25697] batadv2: entered promiscuous mode [ 628.833070][T25697] team0: Port device batadv2 added [ 628.889958][T25498] bond1: (slave macvlan0): failed to get link speed/duplex [ 628.969665][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 628.977749][ C0] lec:lec_tx_timeout: lec0 [ 628.982655][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 629.023552][T25706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6679'. [ 629.072022][T25706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6679'. [ 629.113875][T25714] openvswitch: netlink: Flow actions attr not present in new flow. [ 629.179953][T25503] bond1: (slave macvlan0): failed to get link speed/duplex [ 629.231352][T25677] lo speed is unknown, defaulting to 1000 [ 629.246693][T25677] virt_wifi0 speed is unknown, defaulting to 1000 [ 629.297300][T25677] wg1 speed is unknown, defaulting to 1000 [ 629.368801][T25723] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6688'. [ 629.389606][T25724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6686'. [ 629.456220][T25729] netlink: 'syz.0.6689': attribute type 1 has an invalid length. [ 629.669970][T25729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 629.915963][T25730] veth3: entered promiscuous mode [ 629.941185][T25730] bond2: (slave veth3): Enslaving as an active interface with an up link [ 630.008879][T25736] vlan2: entered promiscuous mode [ 630.263317][T25752] vlan3: entered promiscuous mode [ 630.326378][T25761] netlink: 'syz.0.6702': attribute type 39 has an invalid length. [ 630.761289][T25781] erspan0: entered promiscuous mode [ 630.862881][T25783] netlink: 'syz.1.6710': attribute type 1 has an invalid length. [ 630.889054][T25783] netlink: 'syz.1.6710': attribute type 1 has an invalid length. [ 631.153593][T25814] x9: renamed from bridge_slave_0 (while UP) [ 631.676674][T25832] __nla_validate_parse: 13 callbacks suppressed [ 631.676694][T25832] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6724'. [ 631.680841][T25833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6726'. [ 631.810474][T25839] netlink: 'syz.1.6727': attribute type 1 has an invalid length. [ 631.940794][T25842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6728'. [ 631.970371][T25847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6731'. [ 632.009791][T25847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6731'. [ 632.463990][T25875] netlink: 'syz.2.6741': attribute type 3 has an invalid length. [ 632.508992][T25875] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6741'. [ 632.599391][T25876] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 632.639215][T25876] team0: Device batadv1 is of different type [ 632.700710][T25882] vlan2: entered promiscuous mode [ 632.771677][T25884] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6743'. [ 633.097726][T25903] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6750'. [ 633.119984][T25499] net_ratelimit: 25 callbacks suppressed [ 633.120004][T25499] bond1: (slave macvlan0): failed to get link speed/duplex [ 633.299671][T25501] bond1: (slave macvlan0): failed to get link speed/duplex [ 633.410681][T25501] bond1: (slave macvlan0): failed to get link speed/duplex [ 633.490932][T25925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6757'. [ 633.559771][T25502] bond1: (slave macvlan0): failed to get link speed/duplex [ 633.670522][T25502] bond1: (slave macvlan0): failed to get link speed/duplex [ 633.779338][T25931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6759'. [ 633.811390][T25498] bond1: (slave macvlan0): failed to get link speed/duplex [ 633.939667][T25502] bond1: (slave macvlan0): failed to get link speed/duplex [ 633.989571][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 633.997639][ C0] lec:lec_tx_timeout: lec0 [ 634.002389][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 634.076744][T25502] bond1: (slave macvlan0): failed to get link speed/duplex [ 634.111732][T25918] lo speed is unknown, defaulting to 1000 [ 634.153479][T25918] virt_wifi0 speed is unknown, defaulting to 1000 [ 634.177497][T25918] wg1 speed is unknown, defaulting to 1000 [ 634.186209][T25946] Cannot find add_set index 2 as target [ 634.278766][T25947] netlink: 'syz.2.6764': attribute type 1 has an invalid length. [ 634.440940][T25947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 634.482744][T25960] veth2: entered allmulticast mode [ 634.686696][T25943] mac80211_hwsim hwsim72 wlan0: entered promiscuous mode [ 634.779343][T25943] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 634.869672][T25488] bond1: (slave macvlan0): failed to get link speed/duplex [ 634.900431][T25967] vlan2: entered promiscuous mode [ 635.000605][T25487] bond1: (slave macvlan0): failed to get link speed/duplex [ 635.212130][ T129] IPVS: starting estimator thread 0... [ 635.323208][T25978] IPVS: using max 29 ests per chain, 69600 per kthread [ 635.474223][T25986] vlan2: entered promiscuous mode [ 635.965026][T25973] lo speed is unknown, defaulting to 1000 [ 636.009275][T26006] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 636.038746][T25973] virt_wifi0 speed is unknown, defaulting to 1000 [ 636.049253][T25949] lo speed is unknown, defaulting to 1000 [ 636.146425][T25973] wg1 speed is unknown, defaulting to 1000 [ 636.146451][T25949] virt_wifi0 speed is unknown, defaulting to 1000 [ 636.195913][T25949] wg1 speed is unknown, defaulting to 1000 [ 636.532316][T26002] lo speed is unknown, defaulting to 1000 [ 636.557549][T26002] virt_wifi0 speed is unknown, defaulting to 1000 [ 636.602125][T26002] wg1 speed is unknown, defaulting to 1000 [ 636.819441][T26020] vlan2: entered promiscuous mode [ 637.000341][T26025] __nla_validate_parse: 6 callbacks suppressed [ 637.000355][T26025] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6787'. [ 637.387537][T26036] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 637.399416][T26036] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 637.411618][T26036] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 637.487087][T26040] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 637.496555][T26040] team0: Device batadv1 is of different type [ 637.796252][T26053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6800'. [ 637.815665][T26053] 8021q: VLANs not supported on team0 [ 637.900885][T26060] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6803'. [ 637.921383][T26058] vlan3: entered promiscuous mode [ 638.221755][T25497] net_ratelimit: 21 callbacks suppressed [ 638.221776][T25497] bond1: (slave macvlan0): failed to get link speed/duplex [ 638.394257][T25487] bond1: (slave macvlan0): failed to get link speed/duplex [ 638.521472][T25488] bond1: (slave macvlan0): failed to get link speed/duplex [ 638.574150][T26067] lo speed is unknown, defaulting to 1000 [ 638.581670][T26067] virt_wifi0 speed is unknown, defaulting to 1000 [ 638.594512][T26067] wg1 speed is unknown, defaulting to 1000 [ 638.644653][T26080] vlan2: entered promiscuous mode [ 638.702360][T25497] bond1: (slave macvlan0): failed to get link speed/duplex [ 638.863968][T25490] bond1: (slave macvlan0): failed to get link speed/duplex [ 638.887823][T26090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6815'. [ 638.972396][T25488] bond1: (slave macvlan0): failed to get link speed/duplex [ 639.009575][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 639.017656][ C0] lec:lec_tx_timeout: lec0 [ 639.022917][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 639.038253][T26095] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 639.049976][T26095] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 639.073413][T26095] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 639.083235][T26093] netlink: 'syz.3.6817': attribute type 13 has an invalid length. [ 639.101751][T26100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6819'. [ 639.122342][T25497] bond1: (slave macvlan0): failed to get link speed/duplex [ 639.420433][T26109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6822'. [ 639.430253][T25497] bond1: (slave macvlan0): failed to get link speed/duplex [ 639.454136][T26109] netlink: 'syz.1.6822': attribute type 1 has an invalid length. [ 639.548150][T25487] bond1: (slave macvlan0): failed to get link speed/duplex [ 639.697625][T26127] vlan3: entered promiscuous mode [ 639.750040][T25488] bond1: (slave macvlan0): failed to get link speed/duplex [ 639.979003][T26147] netlink: 'syz.1.6834': attribute type 11 has an invalid length. [ 640.068592][T26154] SET target dimension over the limit! [ 640.153403][T26161] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 640.170067][T26161] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 640.179411][T26161] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 640.233546][T26164] vxcan4: entered allmulticast mode [ 640.267738][T26165] bridge0: entered promiscuous mode [ 640.287139][T26165] macvtap1: entered promiscuous mode [ 640.293641][T26165] macvtap1: entered allmulticast mode [ 640.299062][T26165] bridge0: entered allmulticast mode [ 640.305794][T26165] bridge0: port 1(macvtap1) entered blocking state [ 640.313555][T26165] bridge0: port 1(macvtap1) entered disabled state [ 640.322965][T26165] bridge0: left allmulticast mode [ 640.328163][T26165] bridge0: left promiscuous mode [ 640.559134][T26180] delete_channel: no stack [ 640.889938][T26203] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6853'. [ 640.921617][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6854'. [ 641.074380][T26209] netlink: 'syz.1.6857': attribute type 39 has an invalid length. [ 641.549949][T26242] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6865'. [ 641.894067][T26259] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6873'. [ 641.949395][T26260] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 642.013246][T26238] lo speed is unknown, defaulting to 1000 [ 642.061533][T26238] virt_wifi0 speed is unknown, defaulting to 1000 [ 642.081576][T26238] wg1 speed is unknown, defaulting to 1000 [ 642.383381][T26274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6878'. [ 642.545104][T26286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6879'. [ 642.597690][T26290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6880'. [ 642.967845][ T5142] block nbd3: Receive control failed (result -32) [ 643.295808][T26322] vlan3: entered promiscuous mode [ 643.366475][T26318] syzkaller0: entered promiscuous mode [ 643.372120][T26318] syzkaller0: entered allmulticast mode [ 643.432970][T26333] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6897'. [ 643.563975][T26339] vlan2: entered promiscuous mode [ 643.626408][T26337] bridge0: entered promiscuous mode [ 643.632194][T26337] macvtap1: entered promiscuous mode [ 643.638175][T26337] macvtap1: entered allmulticast mode [ 643.675886][T26343] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6901'. [ 643.684895][T26337] bridge0: entered allmulticast mode [ 643.685827][T26337] bridge0: port 1(macvtap1) entered blocking state [ 643.709697][T26337] bridge0: port 1(macvtap1) entered disabled state [ 643.737806][T26337] bridge0: left allmulticast mode [ 643.748168][T26337] bridge0: left promiscuous mode [ 643.830999][T25488] net_ratelimit: 22 callbacks suppressed [ 643.831021][T25488] bond1: (slave macvlan0): failed to get link speed/duplex [ 643.960497][T25487] bond1: (slave macvlan0): failed to get link speed/duplex [ 644.079699][T25487] bond1: (slave macvlan0): failed to get link speed/duplex [ 644.176960][T26372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6913'. [ 644.263993][T26377] netlink: 'syz.1.6913': attribute type 1 has an invalid length. [ 644.311050][T26377] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6913'. [ 644.390471][T26377] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6913'. [ 644.396616][T26385] FAULT_INJECTION: forcing a failure. [ 644.396616][T26385] name failslab, interval 1, probability 0, space 0, times 0 [ 644.415859][T26377] netlink: 'syz.1.6913': attribute type 1 has an invalid length. [ 644.429146][T26385] CPU: 0 UID: 0 PID: 26385 Comm: syz.0.6917 Not tainted syzkaller #0 PREEMPT(full) [ 644.429187][T26385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 644.429205][T26385] Call Trace: [ 644.429213][T26385] [ 644.429221][T26385] dump_stack_lvl+0xe8/0x150 [ 644.429249][T26385] should_fail_ex+0x412/0x560 [ 644.429273][T26385] should_failslab+0xa8/0x100 [ 644.429294][T26385] kmem_cache_alloc_noprof+0x87/0x6e0 [ 644.429317][T26385] ? __netlink_lookup+0xc6/0x8b0 [ 644.429336][T26385] ? skb_clone+0x212/0x3a0 [ 644.429361][T26385] skb_clone+0x212/0x3a0 [ 644.429385][T26385] __netlink_deliver_tap+0x404/0x850 [ 644.429414][T26385] ? netlink_deliver_tap+0x2e/0x1b0 [ 644.429433][T26385] netlink_deliver_tap+0x19c/0x1b0 [ 644.429453][T26385] netlink_unicast+0x7e3/0x9b0 [ 644.429476][T26385] ? __pfx_netlink_unicast+0x10/0x10 [ 644.429494][T26385] ? netlink_sendmsg+0x650/0xb40 [ 644.429513][T26385] ? skb_put+0x11b/0x210 [ 644.429533][T26385] netlink_sendmsg+0x813/0xb40 [ 644.429558][T26385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.429579][T26385] ? aa_sock_msg_perm+0xf1/0x1b0 [ 644.429601][T26385] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 644.429619][T26385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.429637][T26385] ____sys_sendmsg+0xa68/0xad0 [ 644.429717][T26385] ? __might_fault+0xaf/0x130 [ 644.429746][T26385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.429776][T26385] ? import_iovec+0x73/0xa0 [ 644.429803][T26385] ___sys_sendmsg+0x2a5/0x360 [ 644.429824][T26385] ? __lock_acquire+0x6b5/0x2cf0 [ 644.429851][T26385] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.429907][T26385] ? __fget_files+0x2a/0x420 [ 644.429925][T26385] ? __fget_files+0x3a0/0x420 [ 644.429954][T26385] __x64_sys_sendmsg+0x1bd/0x2a0 [ 644.429980][T26385] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 644.430012][T26385] ? __pfx_ksys_write+0x10/0x10 [ 644.430047][T26385] do_syscall_64+0xe2/0xf80 [ 644.430070][T26385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.430087][T26385] ? trace_irq_disable+0x37/0x100 [ 644.430104][T26385] ? clear_bhb_loop+0x60/0xb0 [ 644.430125][T26385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.430142][T26385] RIP: 0033:0x7efe5959aeb9 [ 644.430159][T26385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.430175][T26385] RSP: 002b:00007efe5a4f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.430194][T26385] RAX: ffffffffffffffda RBX: 00007efe59815fa0 RCX: 00007efe5959aeb9 [ 644.430207][T26385] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 644.430219][T26385] RBP: 00007efe5a4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 644.430230][T26385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.430241][T26385] R13: 00007efe59816038 R14: 00007efe59815fa0 R15: 00007ffdea782778 [ 644.430271][T26385] [ 644.449780][T26377] netlink: 'syz.1.6913': attribute type 8 has an invalid length. [ 644.520039][T26390] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6920'. [ 644.526652][T26377] netlink: 606 bytes leftover after parsing attributes in process `syz.1.6913'. [ 644.744529][T26372] veth3: entered allmulticast mode [ 644.765560][T26355] lo speed is unknown, defaulting to 1000 [ 644.837044][T26355] virt_wifi0 speed is unknown, defaulting to 1000 [ 644.869962][T26355] wg1 speed is unknown, defaulting to 1000 [ 644.949813][T26398] tipc: Enabling of bearer rejected, failed to enable media [ 645.029686][T25487] bond1: (slave macvlan0): failed to get link speed/duplex [ 645.104300][T26401] vlan2: entered promiscuous mode [ 645.318315][T25488] bond1: (slave macvlan0): failed to get link speed/duplex [ 645.389776][T26421] netlink: 'syz.2.6932': attribute type 39 has an invalid length. [ 645.399614][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6380 ms [ 645.407631][ C0] lec:lec_tx_timeout: lec0 [ 645.415615][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 645.429635][T25488] bond1: (slave macvlan0): failed to get link speed/duplex [ 645.502889][T26425] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 645.589738][T26429] netlink: 'syz.2.6934': attribute type 23 has an invalid length. [ 645.593899][T26418] IPv6: sit1: Disabled Multicast RS [ 645.619681][T25490] bond1: (slave macvlan0): failed to get link speed/duplex [ 645.740081][T25490] bond1: (slave macvlan0): failed to get link speed/duplex [ 645.852699][T25490] bond1: (slave macvlan0): failed to get link speed/duplex [ 645.921718][T26444] erspan0: entered promiscuous mode [ 645.933643][T26442] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 645.953670][T26446] SET target dimension over the limit! [ 645.962147][T26442] tunl0: Caught tx_queue_len zero misconfig [ 646.032214][T26448] tipc: Enabled bearer , priority 0 [ 646.079934][T25490] bond1: (slave macvlan0): failed to get link speed/duplex [ 646.263578][T26447] tipc: Disabling bearer [ 646.824875][T26496] netlink: 'syz.1.6958': attribute type 39 has an invalid length. [ 647.178939][T26510] netlink: 'syz.2.6961': attribute type 1 has an invalid length. [ 647.433144][T26532] __nla_validate_parse: 14 callbacks suppressed [ 647.433167][T26532] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6970'. [ 647.455128][T26534] SET target dimension over the limit! [ 647.715632][T26530] lo speed is unknown, defaulting to 1000 [ 647.725916][T26530] virt_wifi0 speed is unknown, defaulting to 1000 [ 647.743416][T26544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6976'. [ 647.754621][T26530] wg1 speed is unknown, defaulting to 1000 [ 647.815492][T26552] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6979'. [ 647.840250][T26544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6976'. [ 647.946251][T26559] veth2: entered allmulticast mode [ 648.138845][T26571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6986'. [ 648.498407][T26594] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6991'. [ 648.511063][T26597] netlink: 320 bytes leftover after parsing attributes in process `syz.4.6992'. [ 648.539609][T26594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6991'. [ 648.676590][T26602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6994'. [ 648.696928][T26602] ip6gretap0: entered promiscuous mode [ 648.711881][T26602] ip6gretap0: left promiscuous mode [ 648.833888][T26588] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6990'. [ 648.847447][T25497] net_ratelimit: 19 callbacks suppressed [ 648.847467][T25497] bond1: (slave macvlan0): failed to get link speed/duplex [ 648.985526][T25490] bond1: (slave macvlan0): failed to get link speed/duplex [ 649.140244][T25496] bond1: (slave macvlan0): failed to get link speed/duplex [ 649.214556][ T30] audit: type=1107 audit(1770351936.441:6): pid=26626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 649.214556][ T30] ߊ/Bz"B+qC8J_yYLEϼZ񆮈D Ch%ջftis)L7`QNO3=:=&wG?C=Jv#sF*d8!Ƽ*G}" \_ٷѱJY]&[ZKil"LYs1#<0V<.FVCEң.IgZ(e:x9f–R()l-+zpd&oݟ@ [ 649.214556][ T30] R G^d8nQeucSy[Cz rlC=xj#Z4zaiqyNBGƌRĖOLAAU¡l-ej*E>ӑxsb˞%n^f֣afbbw]B!J8? [ 651.234991][T26724] dump_stack_lvl+0xe8/0x150 [ 651.235019][T26724] should_fail_ex+0x412/0x560 [ 651.235046][T26724] should_failslab+0xa8/0x100 [ 651.235068][T26724] __kmalloc_noprof+0xde/0x7e0 [ 651.235084][T26724] ? kfree+0x4d/0x650 [ 651.235110][T26724] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 651.235138][T26724] tomoyo_realpath_from_path+0xe3/0x5d0 [ 651.235161][T26724] ? tomoyo_domain+0xd7/0x130 [ 651.235188][T26724] ? tomoyo_path_number_perm+0x219/0x630 [ 651.235208][T26724] tomoyo_path_number_perm+0x246/0x630 [ 651.235230][T26724] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 651.235248][T26724] ? __lock_acquire+0x6b5/0x2cf0 [ 651.235286][T26724] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 651.235324][T26724] ? __fget_files+0x2a/0x420 [ 651.235345][T26724] ? __fget_files+0x2a/0x420 [ 651.235360][T26724] ? __fget_files+0x3a0/0x420 [ 651.235376][T26724] ? __fget_files+0x2a/0x420 [ 651.235399][T26724] security_file_ioctl+0xc3/0x2a0 [ 651.235420][T26724] __se_sys_ioctl+0x47/0x170 [ 651.235444][T26724] do_syscall_64+0xe2/0xf80 [ 651.235466][T26724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.235482][T26724] ? trace_irq_disable+0x37/0x100 [ 651.235500][T26724] ? clear_bhb_loop+0x60/0xb0 [ 651.235519][T26724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.235536][T26724] RIP: 0033:0x7f73d4d9aeb9 [ 651.235554][T26724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.235568][T26724] RSP: 002b:00007f73d5bf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.235586][T26724] RAX: ffffffffffffffda RBX: 00007f73d5015fa0 RCX: 00007f73d4d9aeb9 [ 651.235598][T26724] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000003 [ 651.235610][T26724] RBP: 00007f73d5bf5090 R08: 0000000000000000 R09: 0000000000000000 [ 651.235621][T26724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.235632][T26724] R13: 00007f73d5016038 R14: 00007f73d5015fa0 R15: 00007ffd391d7f98 [ 651.235660][T26724] [ 651.235680][T26724] ERROR: Out of memory at tomoyo_realpath_from_path. [ 651.266745][T26725] IPVS: length: 35 != 24 [ 651.348146][T26728] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 651.483338][T26728] pim6reg1: linktype set to 774 [ 651.514827][T26724] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 651.562470][T26724] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 651.594426][T26724] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 651.626395][T26735] veth2: entered allmulticast mode [ 651.998345][T26751] IPVS: ip_vs_add_dest(): server weight less than zero [ 652.016978][ T5884] IPVS: starting estimator thread 0... [ 652.109697][T26752] IPVS: using max 32 ests per chain, 76800 per kthread [ 652.153538][T26755] syzkaller0: entered promiscuous mode [ 652.159019][T26755] syzkaller0: entered allmulticast mode [ 652.187899][T26760] siw: device registration error -23 [ 652.601742][T26781] SET target dimension over the limit! [ 652.697670][T26786] __nla_validate_parse: 10 callbacks suppressed [ 652.697693][T26786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7057'. [ 652.767257][T26786] netlink: 'syz.2.7057': attribute type 5 has an invalid length. [ 652.783015][T26786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7057'. [ 652.988172][T26800] vlan3: entered promiscuous mode [ 653.297777][T26822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7070'. [ 653.323544][T26822] vlan2: entered promiscuous mode [ 653.328639][T26822] dummy0: entered promiscuous mode [ 653.452850][T26832] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7072'. [ 653.536343][T26836] xt_socket: unknown flags 0xfc [ 653.618541][T26839] vlan2: entered promiscuous mode [ 653.662401][T26844] batadv_slave_0: entered promiscuous mode [ 653.677583][T26844] batadv1: entered promiscuous mode [ 653.830864][T26852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7079'. [ 653.832602][T26843] batadv_slave_0: left promiscuous mode [ 653.840432][T26852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7079'. [ 653.950055][T25490] net_ratelimit: 26 callbacks suppressed [ 653.950074][T25490] bond1: (slave macvlan0): failed to get link speed/duplex [ 653.995222][T26860] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7083'. [ 654.063774][T26865] SET target dimension over the limit! [ 654.069862][T25487] bond1: (slave macvlan0): failed to get link speed/duplex [ 654.170105][T26870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7086'. [ 654.183795][T25488] bond1: (slave macvlan0): failed to get link speed/duplex [ 654.258490][T26876] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7088'. [ 654.268519][T26876] nbd: must specify at least one socket [ 654.275111][T26876] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7088'. [ 654.288636][T26876] nbd: must specify at least one socket [ 654.300437][T25488] bond1: (slave macvlan0): failed to get link speed/duplex [ 654.410716][T25496] bond1: (slave macvlan0): failed to get link speed/duplex [ 654.520262][T25490] bond1: (slave macvlan0): failed to get link speed/duplex [ 654.653924][T25488] bond1: (slave macvlan0): failed to get link speed/duplex [ 654.686230][T26899] netlink: 'syz.4.7095': attribute type 1 has an invalid length. [ 654.781754][T25488] bond1: (slave macvlan0): failed to get link speed/duplex [ 654.899805][T25488] bond1: (slave macvlan0): failed to get link speed/duplex [ 655.030053][T25488] bond1: (slave macvlan0): failed to get link speed/duplex [ 655.675552][T26939] ip6gretap0: entered promiscuous mode [ 655.702436][T26939] ip6gretap0: left promiscuous mode [ 655.985763][T26934] lo speed is unknown, defaulting to 1000 [ 656.008123][T26934] virt_wifi0 speed is unknown, defaulting to 1000 [ 656.032899][T26934] wg1 speed is unknown, defaulting to 1000 [ 656.623687][T26970] FAULT_INJECTION: forcing a failure. [ 656.623687][T26970] name failslab, interval 1, probability 0, space 0, times 0 [ 656.640469][T26970] CPU: 1 UID: 0 PID: 26970 Comm: syz.3.7118 Not tainted syzkaller #0 PREEMPT(full) [ 656.640495][T26970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 656.640507][T26970] Call Trace: [ 656.640515][T26970] [ 656.640523][T26970] dump_stack_lvl+0xe8/0x150 [ 656.640550][T26970] should_fail_ex+0x412/0x560 [ 656.640574][T26970] should_failslab+0xa8/0x100 [ 656.640596][T26970] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 656.640620][T26970] ? __alloc_skb+0x186/0x7d0 [ 656.640640][T26970] ? __alloc_skb+0x1d0/0x7d0 [ 656.640658][T26970] ? __local_bh_enable_ip+0xd0/0x130 [ 656.640679][T26970] __alloc_skb+0x1d0/0x7d0 [ 656.640704][T26970] netlink_sendmsg+0x5d4/0xb40 [ 656.640733][T26970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.640756][T26970] ? aa_sock_msg_perm+0xf1/0x1b0 [ 656.640777][T26970] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.640796][T26970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.640811][T26970] ____sys_sendmsg+0xa68/0xad0 [ 656.640838][T26970] ? __might_fault+0xaf/0x130 [ 656.640864][T26970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.640893][T26970] ? import_iovec+0x73/0xa0 [ 656.640917][T26970] ___sys_sendmsg+0x2a5/0x360 [ 656.640936][T26970] ? __lock_acquire+0x6b5/0x2cf0 [ 656.640960][T26970] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.641008][T26970] ? __fget_files+0x2a/0x420 [ 656.641024][T26970] ? __fget_files+0x3a0/0x420 [ 656.641048][T26970] __x64_sys_sendmsg+0x1bd/0x2a0 [ 656.641071][T26970] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.641098][T26970] ? __pfx_ksys_write+0x10/0x10 [ 656.641130][T26970] do_syscall_64+0xe2/0xf80 [ 656.641152][T26970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.641168][T26970] ? trace_irq_disable+0x37/0x100 [ 656.641186][T26970] ? clear_bhb_loop+0x60/0xb0 [ 656.641207][T26970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.641224][T26970] RIP: 0033:0x7f6bab39aeb9 [ 656.641241][T26970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.641257][T26970] RSP: 002b:00007f6bac2e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.641276][T26970] RAX: ffffffffffffffda RBX: 00007f6bab616090 RCX: 00007f6bab39aeb9 [ 656.641289][T26970] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000c [ 656.641301][T26970] RBP: 00007f6bac2e4090 R08: 0000000000000000 R09: 0000000000000000 [ 656.641321][T26970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.641332][T26970] R13: 00007f6bab616128 R14: 00007f6bab616090 R15: 00007ffd23390b48 [ 656.641361][T26970] [ 656.695316][T26972] vlan2: entered promiscuous mode [ 656.919643][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 656.927669][ C0] lec:lec_tx_timeout: lec0 [ 656.933633][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 657.087557][T26980] netlink: 'syz.2.7122': attribute type 1 has an invalid length. [ 657.212812][T26982] batadv_slave_0: entered promiscuous mode [ 657.237939][T26982] batadv3: entered promiscuous mode [ 657.283804][T26988] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 657.343714][T26981] batadv_slave_0: left promiscuous mode [ 657.412390][T26994] netlink: 'syz.0.7124': attribute type 1 has an invalid length. [ 657.420342][T26994] FAULT_INJECTION: forcing a failure. [ 657.420342][T26994] name failslab, interval 1, probability 0, space 0, times 0 [ 657.459615][T26994] CPU: 0 UID: 0 PID: 26994 Comm: syz.0.7124 Not tainted syzkaller #0 PREEMPT(full) [ 657.459641][T26994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 657.459651][T26994] Call Trace: [ 657.459657][T26994] [ 657.459664][T26994] dump_stack_lvl+0xe8/0x150 [ 657.459692][T26994] should_fail_ex+0x412/0x560 [ 657.459718][T26994] should_failslab+0xa8/0x100 [ 657.459739][T26994] __kmalloc_cache_noprof+0x83/0x6e0 [ 657.459757][T26994] ? ioam6_genl_addns+0x884/0x1910 [ 657.459774][T26994] ? ioam6_genl_addns+0x191/0x1910 [ 657.459794][T26994] ioam6_genl_addns+0x884/0x1910 [ 657.459820][T26994] ? ioam6_genl_addns+0x191/0x1910 [ 657.459840][T26994] ? __pfx_ioam6_genl_addns+0x10/0x10 [ 657.459861][T26994] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 657.459890][T26994] genl_family_rcv_msg_doit+0x22a/0x330 [ 657.459911][T26994] ? __asan_memcpy+0x40/0x70 [ 657.459937][T26994] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 657.459970][T26994] ? bpf_lsm_capable+0x9/0x20 [ 657.459989][T26994] ? security_capable+0x7e/0x2c0 [ 657.460014][T26994] genl_rcv_msg+0x61c/0x7a0 [ 657.460042][T26994] ? __pfx_genl_rcv_msg+0x10/0x10 [ 657.460062][T26994] ? __pfx_ioam6_genl_addns+0x10/0x10 [ 657.460084][T26994] ? __pfx_ref_tracker_free+0x10/0x10 [ 657.460110][T26994] netlink_rcv_skb+0x232/0x4b0 [ 657.460131][T26994] ? __pfx_genl_rcv_msg+0x10/0x10 [ 657.460154][T26994] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 657.460170][T26994] ? genl_rcv+0x19/0x40 [ 657.460208][T26994] ? down_read+0x272/0x2e0 [ 657.460223][T26994] ? genl_rcv+0xd/0x40 [ 657.460246][T26994] genl_rcv+0x28/0x40 [ 657.460266][T26994] netlink_unicast+0x80f/0x9b0 [ 657.460294][T26994] ? __pfx_netlink_unicast+0x10/0x10 [ 657.460314][T26994] ? netlink_sendmsg+0x650/0xb40 [ 657.460331][T26994] ? skb_put+0x11b/0x210 [ 657.460356][T26994] netlink_sendmsg+0x813/0xb40 [ 657.460385][T26994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.460409][T26994] ? aa_sock_msg_perm+0xf1/0x1b0 [ 657.460431][T26994] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 657.460452][T26994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.460470][T26994] ____sys_sendmsg+0xa68/0xad0 [ 657.460501][T26994] ? __might_fault+0xaf/0x130 [ 657.460531][T26994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.460558][T26994] ? import_iovec+0x73/0xa0 [ 657.460584][T26994] ___sys_sendmsg+0x2a5/0x360 [ 657.460603][T26994] ? __lock_acquire+0x6b5/0x2cf0 [ 657.460630][T26994] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.460685][T26994] ? __fget_files+0x2a/0x420 [ 657.460703][T26994] ? __fget_files+0x3a0/0x420 [ 657.460731][T26994] __x64_sys_sendmsg+0x1bd/0x2a0 [ 657.460754][T26994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 657.460782][T26994] ? __pfx_ksys_write+0x10/0x10 [ 657.460815][T26994] do_syscall_64+0xe2/0xf80 [ 657.460836][T26994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.460852][T26994] ? trace_irq_disable+0x37/0x100 [ 657.460866][T26994] ? clear_bhb_loop+0x60/0xb0 [ 657.460887][T26994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.460903][T26994] RIP: 0033:0x7efe5959aeb9 [ 657.460920][T26994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.460935][T26994] RSP: 002b:00007efe5a4b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.460953][T26994] RAX: ffffffffffffffda RBX: 00007efe59816180 RCX: 00007efe5959aeb9 [ 657.460964][T26994] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 000000000000000c [ 657.460976][T26994] RBP: 00007efe5a4b5090 R08: 0000000000000000 R09: 0000000000000000 [ 657.460987][T26994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.460996][T26994] R13: 00007efe59816218 R14: 00007efe59816180 R15: 00007ffdea782778 [ 657.461031][T26994] [ 658.006878][T27001] geneve2: entered promiscuous mode [ 658.012436][T27001] geneve2: entered allmulticast mode [ 658.152243][T27004] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 658.264314][T27010] bond1: (slave wlan0): Releasing active interface [ 658.348498][T27011] bridge0: entered promiscuous mode [ 658.364969][T27011] macvtap1: entered promiscuous mode [ 658.385584][T27011] bridge0: port 1(macvtap1) entered blocking state [ 658.419791][T27010] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 658.435054][T27011] bridge0: port 1(macvtap1) entered disabled state [ 658.450953][T27011] macvtap1: entered allmulticast mode [ 658.456658][T27011] bridge0: entered allmulticast mode [ 658.468713][T27011] macvtap1: left allmulticast mode [ 658.479938][T27011] bridge0: left allmulticast mode [ 658.508270][T27011] bridge0: left promiscuous mode [ 658.686061][T27008] lo speed is unknown, defaulting to 1000 [ 658.709235][T27026] netlink: 'syz.3.7138': attribute type 1 has an invalid length. [ 658.711789][T27008] virt_wifi0 speed is unknown, defaulting to 1000 [ 658.727080][T27008] wg1 speed is unknown, defaulting to 1000 [ 658.730845][T27026] __nla_validate_parse: 7 callbacks suppressed [ 658.730866][T27026] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7138'. [ 658.762197][T27026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7138'. [ 659.008164][T27036] batadv_slave_0: entered promiscuous mode [ 659.022246][T27036] batadv1: entered promiscuous mode [ 659.070512][T27038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7141'. [ 659.109820][T27038] nbd: must specify at least one socket [ 659.115593][T25488] net_ratelimit: 22 callbacks suppressed [ 659.115611][T25488] bond1: (slave macvlan0): failed to get link speed/duplex [ 659.147475][T27034] batadv_slave_0: left promiscuous mode [ 659.249646][T25494] bond1: (slave macvlan0): failed to get link speed/duplex [ 659.576294][T25490] bond1: (slave macvlan0): failed to get link speed/duplex [ 659.595203][T27052] netlink: 'syz.1.7148': attribute type 1 has an invalid length. [ 659.614506][T27052] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7148'. [ 659.635069][T27058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7149'. [ 659.706008][T25494] bond1: (slave macvlan0): failed to get link speed/duplex [ 659.762475][T27055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7149'. [ 659.831829][T27066] syzkaller0: entered promiscuous mode [ 659.837359][T27066] syzkaller0: entered allmulticast mode [ 659.910839][T27071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7155'. [ 660.077172][T25496] bond1: (slave macvlan0): failed to get link speed/duplex [ 660.191398][T25494] bond1: (slave macvlan0): failed to get link speed/duplex [ 660.272332][T27112] netlink: 'syz.0.7164': attribute type 2 has an invalid length. [ 660.309997][T25496] bond1: (slave macvlan0): failed to get link speed/duplex [ 660.403393][T27117] vlan2: entered promiscuous mode [ 660.419110][T27120] SET target dimension over the limit! [ 660.461116][T25494] bond1: (slave macvlan0): failed to get link speed/duplex [ 660.512994][T27124] bond0: (slave bridge0): Releasing backup interface [ 660.520972][T27124] bridge0: left promiscuous mode [ 660.526792][T27124] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.534226][T27124] bridge0: port 1(1x9) entered disabled state [ 660.574397][T27124] x9: left allmulticast mode [ 660.581602][T27124] x9: left promiscuous mode [ 660.586665][T27124] bridge0: port 1(1x9) entered disabled state [ 660.602733][T27124] bridge_slave_1: left allmulticast mode [ 660.608610][T27124] bridge_slave_1: left promiscuous mode [ 660.614588][T27124] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.625604][T27124] bond0: (slave bond_slave_0): Releasing backup interface [ 660.634890][T27124] bond_slave_0: left promiscuous mode [ 660.644490][T27124] bond0: (slave bond_slave_1): Releasing backup interface [ 660.654752][T27124] bond_slave_1: left promiscuous mode [ 660.661896][T27124] team_slave_0: left promiscuous mode [ 660.670680][T27124] team0: Port device team_slave_0 removed [ 660.677323][T27124] team_slave_1: left promiscuous mode [ 660.688514][T27124] team0: Port device team_slave_1 removed [ 660.695994][T27124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.703782][T27124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.712536][T27124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.720598][T27124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.729689][T27124] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 660.746346][T27110] lo speed is unknown, defaulting to 1000 [ 660.789758][T27110] virt_wifi0 speed is unknown, defaulting to 1000 [ 660.797912][T27110] wg1 speed is unknown, defaulting to 1000 [ 660.799916][T25497] bond1: (slave macvlan0): failed to get link speed/duplex [ 661.497665][T27172] netlink: 'syz.2.7177': attribute type 1 has an invalid length. [ 661.530106][T27172] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7177'. [ 661.674660][T27175] vlan2: entered promiscuous mode [ 661.949636][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 661.957673][ C0] lec:lec_tx_timeout: lec0 [ 661.962947][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 662.131010][T27191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7183'. [ 662.423407][T27199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7187'. [ 662.511385][T27218] netlink: 'syz.3.7191': attribute type 29 has an invalid length. [ 662.634510][T23595] udevd[23595]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 662.783882][T27228] bridge0: entered promiscuous mode [ 662.794206][T27228] macvtap1: entered promiscuous mode [ 662.802219][T27228] macvtap1: entered allmulticast mode [ 662.808180][T27228] bridge0: entered allmulticast mode [ 662.814673][T27228] bridge0: port 1(macvtap1) entered blocking state [ 662.821703][T27228] bridge0: port 1(macvtap1) entered disabled state [ 662.862231][T27228] bridge0: left allmulticast mode [ 662.867826][T27228] bridge0: left promiscuous mode [ 662.962161][T27232] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 662.981656][T27230] netlink: 'syz.1.7195': attribute type 1 has an invalid length. [ 663.150324][T27239] bond0: Caught tx_queue_len zero misconfig [ 663.515382][T27257] xt_hashlimit: size too large, truncated to 1048576 [ 663.612543][T27257] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 663.743485][T27263] netlink: 'syz.3.7203': attribute type 1 has an invalid length. [ 663.785076][T27263] __nla_validate_parse: 3 callbacks suppressed [ 663.785093][T27263] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7203'. [ 663.842823][T27259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.083952][T27259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.151534][T27290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7215'. [ 664.172772][T27290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7215'. [ 664.174199][T25490] net_ratelimit: 18 callbacks suppressed [ 664.174215][T25490] bond1: (slave macvlan0): failed to get link speed/duplex [ 664.314037][T27259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.369630][T25489] bond1: (slave macvlan0): failed to get link speed/duplex [ 664.444269][T27259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.520789][T25490] bond1: (slave macvlan0): failed to get link speed/duplex [ 664.692744][T25496] bond1: (slave macvlan0): failed to get link speed/duplex [ 664.745430][T25496] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.781402][T25496] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.792812][T25496] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.801930][T25496] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.840083][T25500] bond1: (slave macvlan0): failed to get link speed/duplex [ 664.960073][T25500] bond1: (slave macvlan0): failed to get link speed/duplex [ 665.024541][T27331] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7228'. [ 665.080050][T25490] bond1: (slave macvlan0): failed to get link speed/duplex [ 665.209857][T25496] bond1: (slave macvlan0): failed to get link speed/duplex [ 665.310900][T27352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7236'. [ 665.927692][T25496] erspan0 (unregistering): left promiscuous mode [ 666.168733][T25496] bond0 (unregistering): Released all slaves [ 666.170550][T25494] smc: removing ib device syz1 [ 666.181040][T25496] bond1 (unregistering): Released all slaves [ 666.212669][T27352] vlan3: entered promiscuous mode [ 666.253441][T25487] bond1: (slave macvlan0): failed to get link speed/duplex [ 666.398456][T27384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 666.752859][T27401] tls_set_device_offload: netdev not found [ 666.928523][T27413] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 666.969571][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 666.977647][ C0] lec:lec_tx_timeout: lec0 [ 666.982729][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 667.322418][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 667.931952][T27455] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 667.993980][T27450] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7260'. [ 668.204539][T27468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7265'. [ 668.270271][T27469] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7264'. [ 668.279257][T27469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7264'. [ 668.314836][T27469] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7264'. [ 668.347230][T27455] bond4 (unregistering): Released all slaves [ 668.396321][T27452] lo speed is unknown, defaulting to 1000 [ 668.409413][T27474] netlink: 'syz.3.7266': attribute type 13 has an invalid length. [ 668.457202][T27474] netlink: 'syz.3.7266': attribute type 17 has an invalid length. [ 668.461475][T27452] virt_wifi0 speed is unknown, defaulting to 1000 [ 668.763436][T27483] netlink: 'syz.4.7268': attribute type 39 has an invalid length. [ 668.804017][T27452] wg1 speed is unknown, defaulting to 1000 [ 669.311523][T27503] FAULT_INJECTION: forcing a failure. [ 669.311523][T27503] name failslab, interval 1, probability 0, space 0, times 0 [ 669.334904][T27502] __nla_validate_parse: 1 callbacks suppressed [ 669.334922][T27502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7272'. [ 669.367176][T27503] CPU: 0 UID: 0 PID: 27503 Comm: syz.3.7273 Not tainted syzkaller #0 PREEMPT(full) [ 669.367203][T27503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 669.367215][T27503] Call Trace: [ 669.367223][T27503] [ 669.367231][T27503] dump_stack_lvl+0xe8/0x150 [ 669.367258][T27503] should_fail_ex+0x412/0x560 [ 669.367286][T27503] should_failslab+0xa8/0x100 [ 669.367306][T27503] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 669.367339][T27503] ? __alloc_skb+0x1d0/0x7d0 [ 669.367365][T27503] __alloc_skb+0x1d0/0x7d0 [ 669.367389][T27503] tcp_stream_alloc_skb+0x3f/0x580 [ 669.367419][T27503] tcp_sendmsg_locked+0x131c/0x5430 [ 669.367462][T27503] ? __lock_acquire+0x6b5/0x2cf0 [ 669.367515][T27503] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 669.367551][T27503] ? __local_bh_enable_ip+0xd0/0x130 [ 669.367573][T27503] tcp_sendmsg+0x2f/0x50 [ 669.367589][T27503] __sys_sendto+0x627/0x7a0 [ 669.367611][T27503] ? __pfx___sys_sendto+0x10/0x10 [ 669.367628][T27503] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 669.367662][T27503] ? __fget_files+0x3a0/0x420 [ 669.367691][T27503] ? ksys_write+0x242/0x270 [ 669.367715][T27503] ? __pfx_ksys_write+0x10/0x10 [ 669.367743][T27503] __x64_sys_sendto+0xde/0x100 [ 669.367768][T27503] do_syscall_64+0xe2/0xf80 [ 669.367790][T27503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.367807][T27503] ? trace_irq_disable+0x37/0x100 [ 669.367824][T27503] ? clear_bhb_loop+0x60/0xb0 [ 669.367846][T27503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.367862][T27503] RIP: 0033:0x7f6bab39aeb9 [ 669.367879][T27503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.367894][T27503] RSP: 002b:00007f6bac305028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 669.367913][T27503] RAX: ffffffffffffffda RBX: 00007f6bab615fa0 RCX: 00007f6bab39aeb9 [ 669.367926][T27503] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 669.367937][T27503] RBP: 00007f6bac305090 R08: 0000000000000000 R09: 0000000000000000 [ 669.367948][T27503] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 669.367960][T27503] R13: 00007f6bab616038 R14: 00007f6bab615fa0 R15: 00007ffd23390b48 [ 669.367990][T27503] [ 669.777120][T27502] ip6gretap0: entered promiscuous mode [ 669.787117][T27502] ip6gretap0: left promiscuous mode [ 669.859915][T25500] net_ratelimit: 13 callbacks suppressed [ 669.859937][T25500] bond1: (slave macvlan0): failed to get link speed/duplex [ 669.989673][T25500] bond1: (slave macvlan0): failed to get link speed/duplex [ 670.100026][T25500] bond1: (slave macvlan0): failed to get link speed/duplex [ 670.194401][T27527] batadv0: entered promiscuous mode [ 670.200433][T27527] vlan2: entered promiscuous mode [ 670.252907][T25500] bond1: (slave macvlan0): failed to get link speed/duplex [ 670.370690][T25489] bond1: (slave macvlan0): failed to get link speed/duplex [ 670.481031][T25497] bond1: (slave macvlan0): failed to get link speed/duplex [ 670.616989][T25496] l24): left promiscuous mode [ 670.790103][T25491] bond1: (slave macvlan0): failed to get link speed/duplex [ 670.829208][T27554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7288'. [ 670.878908][T27553] veth4: entered allmulticast mode [ 670.966590][T25496] tipc: Left network mode [ 670.971214][T25494] bond1: (slave macvlan0): failed to get link speed/duplex [ 671.016800][T27559] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7291'. [ 671.065299][T25496] IPVS: stopping backup sync thread 6998 ... [ 671.069864][T27559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7291'. [ 671.091943][T25500] bond1: (slave macvlan0): failed to get link speed/duplex [ 671.099392][T27559] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7291'. [ 671.117990][T27559] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7291'. [ 671.289798][ T3581] bond1: (slave macvlan0): failed to get link speed/duplex [ 671.306289][T27570] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7295'. [ 671.397897][T27574] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7295'. [ 671.596719][T27587] xt_connbytes: Forcing CT accounting to be enabled [ 671.673998][T27593] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 671.857099][T25496] hsr_slave_0: left promiscuous mode [ 671.871112][T25496] hsr_slave_1: left promiscuous mode [ 671.889290][T27602] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7306'. [ 671.903803][T27602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7306'. [ 671.989649][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 671.997799][ C0] lec:lec_tx_timeout: lec0 [ 672.002498][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 672.474879][T27598] vlan3: entered promiscuous mode [ 672.732657][T27634] netlink: 'syz.0.7316': attribute type 62 has an invalid length. [ 672.808851][T27636] lo speed is unknown, defaulting to 1000 [ 672.817892][T27636] virt_wifi0 speed is unknown, defaulting to 1000 [ 672.828611][T27636] wg1 speed is unknown, defaulting to 1000 [ 672.855028][T27634] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 672.918980][T27647] IPv6: NLM_F_CREATE should be specified when creating new route [ 672.946044][T27647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 672.953609][T27647] IPv6: NLM_F_CREATE should be set when creating new route [ 673.136739][T25496] IPVS: stop unused estimator thread 0... [ 673.258260][T27667] vlan2: entered promiscuous mode [ 673.336120][T27666] syzkaller0: entered promiscuous mode [ 673.345319][T27666] syzkaller0: entered allmulticast mode [ 673.853312][T27693] syzkaller0: entered promiscuous mode [ 673.858938][T27693] syzkaller0: entered allmulticast mode [ 674.164327][T27715] netlink: 'syz.0.7338': attribute type 5 has an invalid length. [ 674.383854][T27731] __nla_validate_parse: 3 callbacks suppressed [ 674.383874][T27731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7344'. [ 674.403790][T27731] netlink: 380 bytes leftover after parsing attributes in process `syz.4.7344'. [ 674.488666][T27737] lo speed is unknown, defaulting to 1000 [ 674.525141][T27737] virt_wifi0 speed is unknown, defaulting to 1000 [ 674.546934][T27737] wg1 speed is unknown, defaulting to 1000 [ 674.583399][T27741] netlink: 'syz.0.7343': attribute type 1 has an invalid length. [ 674.623252][T27741] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7343'. [ 675.029754][T25496] net_ratelimit: 21 callbacks suppressed [ 675.029777][T25496] bond1: (slave macvlan0): failed to get link speed/duplex [ 675.175409][T25496] bond1: (slave macvlan0): failed to get link speed/duplex [ 675.196993][T27766] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7353'. [ 675.250677][T27766] netlink: 'syz.3.7353': attribute type 1 has an invalid length. [ 675.270714][T27776] siw: device registration error -23 [ 675.299654][ T3581] bond1: (slave macvlan0): failed to get link speed/duplex [ 675.325623][T27775] syzkaller0: entered promiscuous mode [ 675.331499][T27775] syzkaller0: entered allmulticast mode [ 675.410172][ T3581] bond1: (slave macvlan0): failed to get link speed/duplex [ 675.642937][T27794] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 675.662104][T27794] bond3 (unregistering): Released all slaves [ 675.725837][T27796] lo speed is unknown, defaulting to 1000 [ 675.739898][T25500] bond1: (slave macvlan0): failed to get link speed/duplex [ 675.777276][T27796] virt_wifi0 speed is unknown, defaulting to 1000 [ 675.801475][T27796] wg1 speed is unknown, defaulting to 1000 [ 675.979931][T25500] bond1: (slave macvlan0): failed to get link speed/duplex [ 676.014743][T27805] lo speed is unknown, defaulting to 1000 [ 676.025907][T27805] virt_wifi0 speed is unknown, defaulting to 1000 [ 676.042126][T27810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 676.098329][T27805] wg1 speed is unknown, defaulting to 1000 [ 676.104334][ T3581] bond1: (slave macvlan0): failed to get link speed/duplex [ 676.455002][T27824] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 676.491583][T27826] bridge0: port 1(macvtap1) entered blocking state [ 676.498236][T27826] bridge0: port 1(macvtap1) entered disabled state [ 676.512276][T27826] macvtap1: entered allmulticast mode [ 676.520916][T27826] macvtap1: left allmulticast mode [ 676.609756][T25494] bond1: (slave macvlan0): failed to get link speed/duplex [ 676.855528][T27845] FAULT_INJECTION: forcing a failure. [ 676.855528][T27845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.886749][T27845] CPU: 0 UID: 0 PID: 27845 Comm: syz.2.7381 Not tainted syzkaller #0 PREEMPT(full) [ 676.886781][T27845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 676.886793][T27845] Call Trace: [ 676.886801][T27845] [ 676.886809][T27845] dump_stack_lvl+0xe8/0x150 [ 676.886837][T27845] should_fail_ex+0x412/0x560 [ 676.886863][T27845] _copy_from_user+0x2d/0xb0 [ 676.886889][T27845] sk_setsockopt+0x2b3/0x2e80 [ 676.886918][T27845] ? __pfx_sk_setsockopt+0x10/0x10 [ 676.886938][T27845] ? aa_sk_perm+0x15a/0x960 [ 676.886960][T27845] ? aa_sk_perm+0x82d/0x960 [ 676.886980][T27845] ? __fget_files+0x2a/0x420 [ 676.887004][T27845] ? __pfx_aa_sk_perm+0x10/0x10 [ 676.887025][T27845] ? __fget_files+0x2a/0x420 [ 676.887042][T27845] ? aa_sock_opt_perm+0xff/0x1a0 [ 676.887064][T27845] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 676.887086][T27845] do_sock_setsockopt+0x11b/0x1b0 [ 676.887113][T27845] __x64_sys_setsockopt+0x13d/0x1b0 [ 676.887139][T27845] do_syscall_64+0xe2/0xf80 [ 676.887162][T27845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.887180][T27845] ? clear_bhb_loop+0x60/0xb0 [ 676.887200][T27845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.887218][T27845] RIP: 0033:0x7fd73eb9aeb9 [ 676.887235][T27845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.887250][T27845] RSP: 002b:00007fd73faa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 676.887270][T27845] RAX: ffffffffffffffda RBX: 00007fd73ee15fa0 RCX: 00007fd73eb9aeb9 [ 676.887284][T27845] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000004 [ 676.887295][T27845] RBP: 00007fd73faa1090 R08: 0000000000000004 R09: 0000000000000000 [ 676.887306][T27845] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 676.887318][T27845] R13: 00007fd73ee16038 R14: 00007fd73ee15fa0 R15: 00007ffeb6c76a88 [ 676.887348][T27845] [ 677.080157][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5080 ms [ 677.088173][ C0] lec:lec_tx_timeout: lec0 [ 677.094008][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 677.116474][T27850] 8021q: VLANs not supported on team0 [ 677.176576][T27854] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7385'. [ 677.427734][T27867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7391'. [ 677.468978][T27858] lo speed is unknown, defaulting to 1000 [ 677.500743][T27871] SET target dimension over the limit! [ 677.511133][T27867] vlan2: entered promiscuous mode [ 677.544337][T27858] virt_wifi0 speed is unknown, defaulting to 1000 [ 677.622031][T27858] wg1 speed is unknown, defaulting to 1000 [ 677.759984][T27883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7397'. [ 677.947473][T27887] bridge0: entered promiscuous mode [ 677.962178][T27887] bridge0: port 1(macvtap1) entered blocking state [ 677.987730][T27887] bridge0: port 1(macvtap1) entered disabled state [ 677.994692][T27887] macvtap1: entered allmulticast mode [ 678.004523][T27887] bridge0: entered allmulticast mode [ 678.037212][T27887] macvtap1: left allmulticast mode [ 678.043205][T27887] bridge0: left allmulticast mode [ 678.052469][T27887] bridge0: left promiscuous mode [ 678.127492][T27904] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 678.136973][T27904] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 678.165990][T27904] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 678.358933][T27922] netlink: 'syz.2.7407': attribute type 1 has an invalid length. [ 678.538653][T27934] vlan3: entered promiscuous mode [ 678.783611][T27939] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7412'. [ 679.102688][T27947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7415'. [ 679.372836][T27947] netlink: 'syz.1.7415': attribute type 1 has an invalid length. [ 679.432374][T27947] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7415'. [ 679.637543][T27966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7420'. [ 679.810484][T27966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 679.816803][T27971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7420'. [ 679.861659][T27973] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 679.885439][T27973] bond1: (slave batadv3): Enslaving as an active interface with an up link [ 679.975213][T27971] bond1 (unregistering): (slave batadv3): Releasing backup interface [ 679.990719][T27971] bond1 (unregistering): Released all slaves [ 680.040299][T27981] vlan3: entered promiscuous mode [ 680.150159][T25497] net_ratelimit: 17 callbacks suppressed [ 680.150182][T25497] bond1: (slave macvlan0): failed to get link speed/duplex [ 680.233789][T27996] netlink: 'syz.4.7428': attribute type 29 has an invalid length. [ 680.270676][T27996] netlink: 'syz.4.7428': attribute type 29 has an invalid length. [ 680.293686][T27996] netlink: 588 bytes leftover after parsing attributes in process `syz.4.7428'. [ 680.311137][T25494] bond1: (slave macvlan0): failed to get link speed/duplex [ 680.342538][T28000] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 680.361917][T28003] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7430'. [ 680.429747][T25494] bond1: (slave macvlan0): failed to get link speed/duplex [ 680.541233][T25497] bond1: (slave macvlan0): failed to get link speed/duplex [ 680.558999][T28013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7436'. [ 680.647724][T28013] vlan2: entered promiscuous mode [ 680.722956][T28018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7437'. [ 680.738668][T28018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7437'. [ 680.771739][T28017] vlan2: entered promiscuous mode [ 680.797655][T28018] erspan0: entered promiscuous mode [ 680.812271][T28019] netlink: 'syz.2.7438': attribute type 1 has an invalid length. [ 680.820557][T28019] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7438'. [ 680.832152][ T3581] bond1: (slave macvlan0): failed to get link speed/duplex [ 680.969707][T25494] bond1: (slave macvlan0): failed to get link speed/duplex [ 681.113246][T28034] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 681.156584][T25496] bond1: (slave macvlan0): failed to get link speed/duplex [ 681.185777][T28039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7446'. [ 681.271037][T25494] bond1: (slave macvlan0): failed to get link speed/duplex [ 681.273626][T28042] nbd: must specify at least one socket [ 681.286191][T28042] nbd: must specify at least one socket [ 681.322344][T28050] netlink: 'syz.0.7449': attribute type 1 has an invalid length. [ 681.449685][ T3581] bond1: (slave macvlan0): failed to get link speed/duplex [ 681.771666][T28060] lo speed is unknown, defaulting to 1000 [ 681.782327][T28060] virt_wifi0 speed is unknown, defaulting to 1000 [ 681.804305][T28060] wg1 speed is unknown, defaulting to 1000 [ 682.091597][T28081] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 682.115927][T28081] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 682.133935][T28081] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 683.105870][T28124] netlink: 'syz.1.7475': attribute type 2 has an invalid length. [ 683.159549][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6060 ms [ 683.167722][ C0] lec:lec_tx_timeout: lec0 [ 683.172513][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 683.956474][T28168] netlink: 'syz.1.7487': attribute type 13 has an invalid length. [ 683.971240][T28168] netlink: 'syz.1.7487': attribute type 17 has an invalid length. [ 684.327293][T28133] geneve0: left allmulticast mode [ 684.405917][T28133] erspan0: left promiscuous mode [ 684.472413][T28154] vlan2: entered promiscuous mode [ 684.643911][ T1107] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.665537][ T1107] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.726631][T28143] lo speed is unknown, defaulting to 1000 [ 684.737192][ T1107] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.753354][ T1107] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.768208][T28143] virt_wifi0 speed is unknown, defaulting to 1000 [ 684.781453][T28178] vlan3: entered promiscuous mode [ 684.786526][T28178] bond0: entered promiscuous mode [ 684.861094][T28143] wg1 speed is unknown, defaulting to 1000 [ 685.125420][T28199] vlan3: entered promiscuous mode [ 685.167056][T28202] [ 685.169430][T28202] ====================================================== [ 685.176627][T28202] WARNING: possible circular locking dependency detected [ 685.183659][T28202] syzkaller #0 Not tainted [ 685.188081][T28202] ------------------------------------------------------ [ 685.195107][T28202] syz.3.7498/28202 is trying to acquire lock: [ 685.201273][T28202] ffffffff8fb28378 (nr_node_list_lock){+.-.}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 685.210791][T28202] [ 685.210791][T28202] but task is already holding lock: [ 685.218158][T28202] ffffffff8fb28318 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 685.227823][T28202] [ 685.227823][T28202] which lock already depends on the new lock. [ 685.227823][T28202] [ 685.238211][T28202] [ 685.238211][T28202] the existing dependency chain (in reverse order) is: [ 685.247211][T28202] [ 685.247211][T28202] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 685.255110][T28202] _raw_spin_lock_bh+0x36/0x50 [ 685.260478][T28202] nr_rt_ioctl+0x40c/0xf90 [ 685.265409][T28202] sock_do_ioctl+0x101/0x320 [ 685.270609][T28202] sock_ioctl+0x5c6/0x7f0 [ 685.275467][T28202] __se_sys_ioctl+0xfc/0x170 [ 685.280584][T28202] do_syscall_64+0xe2/0xf80 [ 685.285664][T28202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.292118][T28202] [ 685.292118][T28202] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 685.300196][T28202] _raw_spin_lock_bh+0x36/0x50 [ 685.305478][T28202] nr_rt_ioctl+0x215/0xf90 [ 685.310410][T28202] sock_do_ioctl+0x101/0x320 [ 685.315509][T28202] sock_ioctl+0x5c6/0x7f0 [ 685.320353][T28202] __se_sys_ioctl+0xfc/0x170 [ 685.325459][T28202] do_syscall_64+0xe2/0xf80 [ 685.330477][T28202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.336880][T28202] [ 685.336880][T28202] -> #0 (nr_node_list_lock){+.-.}-{3:3}: [ 685.344707][T28202] __lock_acquire+0x15a5/0x2cf0 [ 685.350095][T28202] lock_acquire+0x106/0x330 [ 685.355128][T28202] _raw_spin_lock_bh+0x36/0x50 [ 685.360419][T28202] nr_rt_device_down+0xbe/0x860 [ 685.365820][T28202] nr_device_event+0x137/0x150 [ 685.371188][T28202] notifier_call_chain+0x19d/0x3a0 [ 685.376828][T28202] __dev_notify_flags+0x16d/0x310 [ 685.382385][T28202] netif_change_flags+0xe8/0x1a0 [ 685.387842][T28202] dev_change_flags+0x130/0x260 [ 685.393220][T28202] dev_ioctl+0x7b4/0x1150 [ 685.398144][T28202] sock_do_ioctl+0x23e/0x320 [ 685.403240][T28202] sock_ioctl+0x5c6/0x7f0 [ 685.408087][T28202] __se_sys_ioctl+0xfc/0x170 [ 685.413207][T28202] do_syscall_64+0xe2/0xf80 [ 685.418228][T28202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.424672][T28202] [ 685.424672][T28202] other info that might help us debug this: [ 685.424672][T28202] [ 685.434983][T28202] Chain exists of: [ 685.434983][T28202] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 685.434983][T28202] [ 685.448895][T28202] Possible unsafe locking scenario: [ 685.448895][T28202] [ 685.456419][T28202] CPU0 CPU1 [ 685.461773][T28202] ---- ---- [ 685.467136][T28202] lock(nr_neigh_list_lock); [ 685.472005][T28202] lock(&nr_node->node_lock); [ 685.479298][T28202] lock(nr_neigh_list_lock); [ 685.486501][T28202] lock(nr_node_list_lock); [ 685.491105][T28202] [ 685.491105][T28202] *** DEADLOCK *** [ 685.491105][T28202] [ 685.499243][T28202] 2 locks held by syz.3.7498/28202: [ 685.504429][T28202] #0: ffffffff8f9ac008 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 685.513228][T28202] #1: ffffffff8fb28318 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 685.523328][T28202] [ 685.523328][T28202] stack backtrace: [ 685.529231][T28202] CPU: 0 UID: 0 PID: 28202 Comm: syz.3.7498 Not tainted syzkaller #0 PREEMPT(full) [ 685.529254][T28202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 685.529265][T28202] Call Trace: [ 685.529275][T28202] [ 685.529283][T28202] dump_stack_lvl+0xe8/0x150 [ 685.529308][T28202] print_circular_bug+0x2e1/0x300 [ 685.529327][T28202] check_noncircular+0x12e/0x150 [ 685.529345][T28202] __lock_acquire+0x15a5/0x2cf0 [ 685.529369][T28202] ? __lock_acquire+0x6b5/0x2cf0 [ 685.529389][T28202] ? dsa_user_netdevice_event+0x495/0x2850 [ 685.529409][T28202] ? nr_rt_device_down+0xbe/0x860 [ 685.529429][T28202] lock_acquire+0x106/0x330 [ 685.529449][T28202] ? nr_rt_device_down+0xbe/0x860 [ 685.529475][T28202] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 685.529493][T28202] ? nr_rt_device_down+0xbe/0x860 [ 685.529513][T28202] _raw_spin_lock_bh+0x36/0x50 [ 685.529532][T28202] ? nr_rt_device_down+0xbe/0x860 [ 685.529552][T28202] nr_rt_device_down+0xbe/0x860 [ 685.529576][T28202] nr_device_event+0x137/0x150 [ 685.529596][T28202] notifier_call_chain+0x19d/0x3a0 [ 685.529615][T28202] __dev_notify_flags+0x16d/0x310 [ 685.529636][T28202] ? __pfx___dev_notify_flags+0x10/0x10 [ 685.529654][T28202] ? __dev_change_flags+0x4c6/0x690 [ 685.529675][T28202] ? __pfx___dev_change_flags+0x10/0x10 [ 685.529694][T28202] ? full_name_hash+0x92/0xe0 [ 685.529713][T28202] netif_change_flags+0xe8/0x1a0 [ 685.529739][T28202] dev_change_flags+0x130/0x260 [ 685.529759][T28202] dev_ioctl+0x7b4/0x1150 [ 685.529778][T28202] sock_do_ioctl+0x23e/0x320 [ 685.529794][T28202] ? __pfx_sock_do_ioctl+0x10/0x10 [ 685.529808][T28202] ? do_futex+0x395/0x420 [ 685.529833][T28202] sock_ioctl+0x5c6/0x7f0 [ 685.529848][T28202] ? __pfx_sock_ioctl+0x10/0x10 [ 685.529862][T28202] ? __fget_files+0x2a/0x420 [ 685.529878][T28202] ? __fget_files+0x3a0/0x420 [ 685.529893][T28202] ? __fget_files+0x2a/0x420 [ 685.529910][T28202] ? bpf_lsm_file_ioctl+0x9/0x20 [ 685.529928][T28202] ? __pfx_sock_ioctl+0x10/0x10 [ 685.529942][T28202] __se_sys_ioctl+0xfc/0x170 [ 685.529963][T28202] do_syscall_64+0xe2/0xf80 [ 685.529985][T28202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.529999][T28202] ? trace_irq_disable+0x37/0x100 [ 685.530014][T28202] ? clear_bhb_loop+0x60/0xb0 [ 685.530031][T28202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.530046][T28202] RIP: 0033:0x7f6bab39aeb9 [ 685.530062][T28202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.530076][T28202] RSP: 002b:00007f6bac2e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.530095][T28202] RAX: ffffffffffffffda RBX: 00007f6bab616090 RCX: 00007f6bab39aeb9 [ 685.530107][T28202] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000b [ 685.530118][T28202] RBP: 00007f6bab408c1f R08: 0000000000000000 R09: 0000000000000000 [ 685.530128][T28202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.530137][T28202] R13: 00007f6bab616128 R14: 00007f6bab616090 R15: 00007ffd23390b48 [ 685.530154][T28202] [ 685.841801][ T3581] net_ratelimit: 18 callbacks suppressed [ 685.841820][ T3581] bond1: (slave macvlan0): failed to get link speed/duplex [ 685.979695][ T1107] bond1: (slave macvlan0): failed to get link speed/duplex [ 686.089741][ T1107] bond1: (slave macvlan0): failed to get link speed/duplex [ 686.199821][T25494] bond1: (slave macvlan0): failed to get link speed/duplex [ 686.309648][ T1107] bond1: (slave macvlan0): failed to get link speed/duplex [ 686.419691][T25494] bond1: (slave macvlan0): failed to get link speed/duplex [ 686.529680][T25500] bond1: (slave macvlan0): failed to get link speed/duplex [ 686.639711][ T1107] bond1: (slave macvlan0): failed to get link speed/duplex [ 686.749685][T25494] bond1: (slave macvlan0): failed to get link speed/duplex [ 686.859664][T25494] bond1: (slave macvlan0): failed to get link speed/duplex [ 688.919620][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 688.927752][ C0] lec:lec_tx_timeout: lec0 [ 688.932508][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 690.849703][ T1107] net_ratelimit: 35 callbacks suppressed [ 690.849724][ T1107] bond1: (slave macvlan0): failed to get link speed/duplex [ 690.969665][T25500] bond1: (slave macvlan0): failed to get link speed/duplex [ 691.080078][ T1107] bond1: (slave macvlan0): failed to get link speed/duplex [ 691.200286][T25494] bond1: (slave macvlan0): failed to get link speed/duplex [ 691.309707][T25500] bond1: (slave macvlan0): failed to get link speed/duplex [ 691.419789][T25500] bond1: (slave macvlan0): failed to get link speed/duplex [ 691.529749][ T3581] bond1: (slave macvlan0): failed to get link speed/duplex [ 691.640411][ T3581] bond1: (slave macvlan0): failed to get link speed/duplex [ 691.749734][ T3581] bond1: (slave macvlan0): failed to get link speed/duplex [ 691.859883][T25500] bond1: (slave macvlan0): failed to get link speed/duplex [ 693.949560][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 693.957606][ C0] lec:lec_tx_timeout: lec0 [ 693.962257][ C0] lec:lec_start_xmit: lec0:No lecd attached