last executing test programs: 5.179842601s ago: executing program 0 (id=2281): r0 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r11, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000080", @ANYRES32=r11, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r11, @ANYBLOB="14000500fe80917a952a643f152befd0599ecd85f55afcd7d85070a802fc3c9b75011f7bb27cfa7e4e"], 0x3c}}, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, r2, 0x5a2df000) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000) 4.115426155s ago: executing program 0 (id=2285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000440)=0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xa) r2 = socket$netlink(0x10, 0x3, 0x1c) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040805) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x12d}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0x6, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x409}, 0x22) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$kcm(r5, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, 0x80, 0x0}, 0x24004059) close(r5) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 4.032567502s ago: executing program 3 (id=2286): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'pimreg0\x00', {0x2, 0x4e22, @rand_addr=0x64010101}}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0364000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0a0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="06000000000000000500"/28], 0x50) (async) socket(0x2, 0x80805, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x4) r3 = socket$inet6(0xa, 0x80000, 0xd) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000002c0)='macvtap0\x00') (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076003008cd4aa9c18ed0f", 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x19) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000d0000000000400700000000850000007b0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r5, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) 3.863724553s ago: executing program 3 (id=2287): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd26, 0x25dfdbfa, {0x6}}, 0x14}}, 0x40800) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d80000000af905000000c8ca640000005f93b4ebb133d240afa21a4c730eb79f49dcd36bffff000000000000413538c817", 0x31}], 0x1}, 0x4001845) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0xffffffffffffffb1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) 3.706006767s ago: executing program 3 (id=2288): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000580)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYRES64=r3, @ANYBLOB="641c8c66f722d455cf52b111456df216dca5cd046644cb4bd476fbd723d98abb1335b6466fd34ce3b1b5747a7a9193e91788a262f10f57"], 0x23c}}, 0x0) 3.548587652s ago: executing program 0 (id=2289): socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004500005800000000002f9078000000e0e000c8aaed726a9e0162f11250d4e0c2c6ada7813f40eb000b00b48065580000000010000800000086dd080088be000000001000000088f7ffff00000000080022eb000000002000000002000000"], 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0303fdfffffffcffffff0c00000008000300f6ebabf90b5381f0cbee51654bc8907f59de3abcb929c392ea037ac30a20618b8460627f41bad24f71c738188514bf1896c0b51518da8cb260e8687229abdc058653f967919c601da08b343110ad5da92af01d89a8148733d3f97a56fe", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x44040) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r6}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r6) close(r7) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40000, 0x0, 0xcc84, 0x100, 0x5, 0x1}) 3.376394734s ago: executing program 4 (id=2290): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r0}, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x28}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x1411, 0x1, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x240440c5}, 0x8054) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r4, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="2e003300d0000000ffffffffffff0802110000005050505050500000000425"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) write(0xffffffffffffffff, &(0x7f0000003300)="ac", 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 3.203009151s ago: executing program 4 (id=2291): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x3c) 2.978900959s ago: executing program 4 (id=2294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="05000000030000000a00000004"], 0x50) socket$nl_crypto(0x10, 0x3, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000280)=[{0x0, 0x0, 0x0}], 0x1, 0x4000) recvmmsg(r7, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x28, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @empty}}, [0x6, 0x3, 0x1eb4, 0x1, 0x8, 0x1, 0x4, 0x60, 0x9, 0x1, 0x4, 0x6, 0x80000001, 0x5, 0xfffffffffffff001]}, &(0x7f0000000640)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000800)={r10, 0xa0, &(0x7f0000000740)=[@in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0x101, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x10000}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x8, @private0, 0x291}, @in6={0xa, 0x4e20, 0xb5f3, @remote, 0xa}]}, &(0x7f0000000840)=0x10) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44105}, 0xf1052705dc79decb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2042) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) 2.730659042s ago: executing program 4 (id=2295): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) shutdown(r0, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000004000000060000000400000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000002000000000000000000000000a4037df9ff084b025e9ada87bb4c704490ddb89fd8c53cf2a3496017"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000006bce3af00da769e1089839e000000003dfa741cf329e29872a8d9dc42914c4ed188", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004000005000008001b0000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) unshare(0x20000400) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="28010000170001002cbd7000fbdbdf2500000000000000000000000000000000000004d55f000000fc020000000000040000eeffffff000100000000000000000000000000000000000000000000000000000000000008014e2000804e21"], 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x20004814}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) 2.729829374s ago: executing program 3 (id=2296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000b40)={{r0}, "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"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40200000000000061114c0000000000850000001c0000009500000005007586285866cbd92f204f00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.605086292s ago: executing program 0 (id=2297): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x44, 0x6, 0x568, 0x0, 0x1c8, 0x1c8, 0x98, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f8}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'ip6gretap0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x5}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x0, 0x8, 0x1e, 0x1, 0x0, 0x10000, 0x0, 0x9, 0x80, 0x18}, {0x100}}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x2, 0x0, 0x4, 0x4, 0x7, 0x1], 0x1, 0xc}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'macvlan0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) 2.465588957s ago: executing program 3 (id=2298): socket$inet(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x4) socket(0x10, 0x80000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0xfffc, 0x2, 0x5, 0x5, r5}, 0x10) r6 = socket$inet(0x2, 0x80001, 0x84) listen(r6, 0x3) accept4(r6, 0x0, 0x0, 0x800) listen(r6, 0x0) shutdown(r6, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.352694808s ago: executing program 0 (id=2299): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002d00090027bd70000000000004000000080018000cac0f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) unshare(0x6a040000) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x20000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x1f, 0x1c}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x80000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 1.87929825s ago: executing program 3 (id=2302): pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write(r3, &(0x7f0000003300)="ac", 0x1) write(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r9, 0x0, 0x7f}, 0x18) socket$inet6(0xa, 0x3, 0x3c) (async) r10 = socket$inet6(0xa, 0x3, 0x3c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) (async) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$nl_generic(r8, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10) 1.572694053s ago: executing program 1 (id=2305): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x22, 0x0, &(0x7f0000000540)="3d25ab555b19c4cbd0017085080040fee5a990ecaf5c07d06f1f7a8aa879d3a622a8", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close(0x3) 1.508139626s ago: executing program 2 (id=2306): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) bind$inet6(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="6c000000100003042bbd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000004400128009000100766c616e00000000340002800600010002000000280003800c00010000000000640000000c00010000000080020000000c0001fae9e360000100010008000500", @ANYRES32=r2], 0x6c}}, 0x0) 1.291940861s ago: executing program 2 (id=2307): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x1f4d2000) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{0x301}]}}) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000085}, 0x800) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r6, 0x5c2a7000) sendmsg$nl_route(r6, 0x0, 0x4084) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'caif0\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x3, 0xd]}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.224588376s ago: executing program 1 (id=2308): unshare(0x400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80800) getpeername(r2, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000120) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r3}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r3, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r3, r3, r3, r3, 0xffffffffffffffff, r3], 0x0, 0x10, 0xfffffffe}, 0xc3) 1.13989999s ago: executing program 1 (id=2309): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x6c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x18}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xd}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xb}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'netdevsim0\x00'}) shutdown(r1, 0x0) close(r0) 954.475564ms ago: executing program 2 (id=2310): getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f0000001980)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, 0x0, 0x84) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/4096, 0x1000}, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r2, 0xfffffffffffff451, 0xffffffffffffffff, 0x9a}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000019c0)={0x438, 0x3f4, 0x504, 0x70bd26, 0x25dfdbfc, {0x2, 0x1, 0x1, [0x9, 0x3ff, 0xff, 0x90, 0xbc, 0xf35, 0x101, 0x1, 0x1, 0x5, 0x3, 0x1ab, 0x46f1, 0x7f, 0x6, 0x0, 0x1, 0x7, 0x0, 0x81, 0xd, 0x9, 0xf6, 0x1e000000, 0x8, 0x8cd, 0x9, 0x92, 0x597, 0x2, 0x3, 0x4, 0x6, 0x0, 0x47, 0xa6da, 0x600f, 0x100, 0x0, 0x400, 0x7fffffff, 0x7, 0x2, 0xe, 0x81, 0x4, 0x0, 0xd, 0x472, 0x2, 0x3, 0xffffffcf, 0x4, 0x10, 0x6, 0x9, 0x7, 0x9f9, 0x101, 0x7, 0x65, 0x1, 0x26d, 0x4], [0xfffffffd, 0x6, 0x4, 0x7, 0x8, 0x6, 0x6, 0x89, 0xfffffffd, 0x5, 0x2, 0x5, 0x2, 0x4, 0xffffffff, 0x7, 0x0, 0x3, 0xffffffff, 0x2, 0x8, 0xb30, 0x3, 0x8, 0x27, 0x4, 0x9, 0x986b, 0x7ff, 0x6, 0xf73c, 0x2003, 0x7ff, 0x9a, 0x3, 0x3, 0x3ff, 0x6, 0x21, 0xff, 0x0, 0x2, 0x6c54, 0x8, 0x3c6, 0xfffffff7, 0x6, 0x51b, 0x400, 0x101, 0x4, 0x1, 0xf, 0x0, 0x6, 0xe7d, 0x1000, 0x7, 0x8, 0x401, 0x7, 0x5, 0x23d, 0x1], [0x9, 0x75c26fce, 0x55db, 0x3, 0x1, 0x67, 0x672, 0x99d, 0x9, 0x1, 0x0, 0x5, 0x7, 0x8, 0x9, 0x4, 0x49, 0x4, 0x34, 0x211, 0x3, 0x2, 0xfff, 0x100, 0x4, 0x1, 0xf7a6, 0x3, 0x5, 0x5, 0x3, 0x7f, 0x9, 0x0, 0x101, 0xc, 0x8, 0x80000000, 0x8, 0x3, 0x3, 0x9, 0x1, 0x7, 0x1, 0x9, 0x86b, 0x6, 0x4, 0x800000, 0x5, 0x6, 0x8000, 0x2, 0x2, 0x7, 0x800, 0x3, 0x2, 0x7f, 0x7, 0x6, 0xa], [0x9, 0x4, 0x3, 0x4, 0x80, 0x16ef, 0x4, 0xfffffffe, 0x2, 0x3, 0x65, 0x80, 0x4, 0x1, 0xd, 0x5, 0x3, 0x7, 0x7ff00000, 0xfff, 0x8, 0xae9d, 0x9, 0xff, 0x7fffffff, 0x8, 0x7, 0x5, 0xfffffff9, 0x2, 0x6, 0x18000, 0x7, 0x2, 0x131, 0x8, 0x25, 0x8, 0xac, 0x7, 0x8, 0xda, 0x2, 0x2000000, 0x9, 0xff, 0x7fffffff, 0x8001, 0x8, 0x2, 0x0, 0x9, 0x4, 0x2, 0x40, 0xa597, 0x2, 0x4, 0x7a800000, 0x3, 0xd, 0x2, 0x4, 0x2], 0x17, [':%#\x00', 'devlink\x00', '^+]{(%\x00', '\x00', '-:\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x438}}, 0x20000081) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) 862.807406ms ago: executing program 1 (id=2311): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}]}, 0x48}}, 0x4000010) socket$key(0xf, 0x3, 0x2) 857.221022ms ago: executing program 4 (id=2312): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x16}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FICLONE(r3, 0x40049409, r3) getpeername$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000003c0)={0x1d, r6, 0xfffffffffffffdfd, {0x2, 0xff, 0x7}, 0xfd}, 0x18) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f00000003c0), 0x8, 0x39, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0xb, &(0x7f0000000340)=@raw=[@jmp={0x5, 0x0, 0x3, 0x6, 0x1, 0x80, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x7e}, @alu={0x7, 0x1, 0xc, 0x4, 0xa, 0xfffffffffffffff0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000240)='GPL\x00', 0x4, 0x41, &(0x7f00000004c0)=""/65, 0x40f00, 0x8, '\x00', r4, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xd, 0x5, 0x1000}, 0x10, r10, r3, 0x5, &(0x7f0000000580)=[r3], &(0x7f00000005c0)=[{0x1, 0x5, 0xe, 0x2}, {0x4, 0x4, 0x0, 0x2}, {0x4, 0x2, 0xe, 0x4}, {0x1, 0x3, 0x2, 0xc}, {0x3, 0x4, 0x8, 0x9}], 0x10, 0x418}, 0x94) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x1, {0x2, 0x0, 0x4}, 0xff}, 0x18) connect$can_j1939(r7, &(0x7f0000000000)={0x1d, r8, 0x4, {0x0, 0x1, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newchain={0x24, 0x64, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x5, 0x6}, {0xffe0, 0xfff2}, {0x3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 783.34151ms ago: executing program 0 (id=2313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 782.746755ms ago: executing program 2 (id=2314): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 288.734013ms ago: executing program 1 (id=2315): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x3c) 274.533681ms ago: executing program 2 (id=2316): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='kfree_skb\x00', r0, 0x0, 0x8}, 0x18) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) ppoll(&(0x7f0000000000)=[{r1, 0x240}], 0x1, 0x0, &(0x7f0000000100)={[0x4]}, 0x8) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 168.59986ms ago: executing program 1 (id=2317): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1000, 0x0, 0x0, 0x0, 0x8}}, [@sec_ctx={0xc, 0x10, {0x8}}]}, 0xc4}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x50bd2a, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x800001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000a80)={0x0, 0x0, "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"}, &(0x7f0000000180)=0xfebd) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRESHEX=r2, @ANYBLOB="a42800ff0f00006d6d794e0000004080000000100008170a0000000000000008", @ANYRES32=r4, @ANYRESHEX=r6], 0x3c}}, 0x8000) 88.557361ms ago: executing program 4 (id=2318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) unshare(0x60480) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000240)=0x5, 0x4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xc}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x40010) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, &(0x7f0000000400)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=2319): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010025bd7000fcdbdf250a008000", @ANYRES64=r0], 0x30}}, 0x40080) r1 = socket$packet(0x11, 0x2, 0x300) accept4(r1, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, &(0x7f0000000140)=0x80, 0x80800) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kernel console output (not intermixed with test programs): 169.661740][ T8185] ___sys_sendmsg+0x21f/0x2a0 [ 169.661768][ T8185] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.661801][ T8185] ? rcu_read_lock_any_held+0xb3/0x120 [ 169.661843][ T8185] ? sb_end_write+0xe9/0x1c0 [ 169.661878][ T8185] ? __pfx_vfs_write+0x10/0x10 [ 169.661907][ T8185] ? do_sys_openat2+0x154/0x1c0 [ 169.661940][ T8185] __x64_sys_sendmsg+0x19b/0x260 [ 169.661969][ T8185] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.662007][ T8185] ? __pfx_ksys_write+0x10/0x10 [ 169.662052][ T8185] ? do_syscall_64+0xbe/0xfa0 [ 169.662082][ T8185] do_syscall_64+0xfa/0xfa0 [ 169.662107][ T8185] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.662132][ T8185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.662153][ T8185] ? clear_bhb_loop+0x60/0xb0 [ 169.662187][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.662207][ T8185] RIP: 0033:0x7f1db0f8eec9 [ 169.662226][ T8185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.662244][ T8185] RSP: 002b:00007f1db1ee1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.662266][ T8185] RAX: ffffffffffffffda RBX: 00007f1db11e5fa0 RCX: 00007f1db0f8eec9 [ 169.662281][ T8185] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 169.662294][ T8185] RBP: 00007f1db1ee1090 R08: 0000000000000000 R09: 0000000000000000 [ 169.662306][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.662318][ T8185] R13: 00007f1db11e6038 R14: 00007f1db11e5fa0 R15: 00007ffd132f7de8 [ 169.662354][ T8185] [ 170.042506][ T8193] netlink: 56 bytes leftover after parsing attributes in process `syz.0.583'. [ 170.261992][ T8208] netlink: 76 bytes leftover after parsing attributes in process `syz.2.586'. [ 170.299187][ T8205] geneve2: entered promiscuous mode [ 170.472879][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 171.253149][ T8240] hsr_slave_1 (unregistering): left promiscuous mode [ 171.504379][ T8256] tipc: Started in network mode [ 171.509364][ T8256] tipc: Node identity eee97388787c, cluster identity 4711 [ 171.523971][ T8256] tipc: Enabled bearer , priority 0 [ 171.535138][ T8256] syzkaller0: entered promiscuous mode [ 171.540682][ T8256] syzkaller0: entered allmulticast mode [ 171.604586][ T8260] nbd: must specify a device to reconfigure [ 171.771301][ T8256] tipc: Resetting bearer [ 171.814457][ T8254] tipc: Resetting bearer [ 171.845654][ T8254] tipc: Disabling bearer [ 171.900620][ T8263] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 172.127620][ T8276] wg1 speed is unknown, defaulting to 1000 [ 172.258933][ T8277] tc_dump_action: action bad kind [ 172.699908][ T8285] wg1 speed is unknown, defaulting to 1000 [ 173.328497][ T8317] tipc: Enabled bearer , priority 0 [ 173.376652][ T8313] syzkaller0: entered promiscuous mode [ 173.403460][ T8313] syzkaller0: entered allmulticast mode [ 173.503731][ T8321] pim6reg1: entered allmulticast mode [ 173.531915][ T8313] tipc: Resetting bearer [ 173.540453][ T8323] syzkaller0: entered promiscuous mode [ 173.561547][ T8323] syzkaller0: entered allmulticast mode [ 173.573664][ T8312] tipc: Resetting bearer [ 173.591404][ T8312] tipc: Disabling bearer [ 173.749825][ T8336] netlink: 'syz.2.618': attribute type 13 has an invalid length. [ 173.788623][ T8336] netlink: 'syz.2.618': attribute type 17 has an invalid length. [ 173.837431][ T8341] __nla_validate_parse: 3 callbacks suppressed [ 173.837450][ T8341] netlink: 32 bytes leftover after parsing attributes in process `syz.3.619'. [ 173.928150][ T8341] FAULT_INJECTION: forcing a failure. [ 173.928150][ T8341] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 173.950221][ T8341] CPU: 1 UID: 0 PID: 8341 Comm: syz.3.619 Not tainted syzkaller #0 PREEMPT(full) [ 173.950258][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.950272][ T8341] Call Trace: [ 173.950283][ T8341] [ 173.950294][ T8341] dump_stack_lvl+0x189/0x250 [ 173.950319][ T8341] ? __pfx____ratelimit+0x10/0x10 [ 173.950341][ T8341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.950363][ T8341] ? __pfx__printk+0x10/0x10 [ 173.950393][ T8341] should_fail_ex+0x414/0x560 [ 173.950417][ T8341] _copy_to_user+0x31/0xb0 [ 173.950435][ T8341] simple_read_from_buffer+0xe1/0x170 [ 173.950469][ T8341] proc_fail_nth_read+0x1b3/0x220 [ 173.950498][ T8341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.950527][ T8341] ? rw_verify_area+0x2a6/0x4d0 [ 173.950555][ T8341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.950581][ T8341] vfs_read+0x200/0xa30 [ 173.950619][ T8341] ? __pfx_vfs_read+0x10/0x10 [ 173.950647][ T8341] ? do_sys_openat2+0x154/0x1c0 [ 173.950679][ T8341] ? __x64_sys_sendmsg+0x1b4/0x260 [ 173.950715][ T8341] ksys_read+0x145/0x250 [ 173.950747][ T8341] ? __pfx_ksys_read+0x10/0x10 [ 173.950780][ T8341] ? do_syscall_64+0xbe/0xfa0 [ 173.950822][ T8341] do_syscall_64+0xfa/0xfa0 [ 173.950846][ T8341] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.950869][ T8341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.950890][ T8341] ? clear_bhb_loop+0x60/0xb0 [ 173.950916][ T8341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.950935][ T8341] RIP: 0033:0x7fc45fd8d8dc [ 173.950954][ T8341] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 173.950972][ T8341] RSP: 002b:00007fc460b8c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.950994][ T8341] RAX: ffffffffffffffda RBX: 00007fc45ffe5fa0 RCX: 00007fc45fd8d8dc [ 173.951009][ T8341] RDX: 000000000000000f RSI: 00007fc460b8c0a0 RDI: 0000000000000009 [ 173.951021][ T8341] RBP: 00007fc460b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 173.951033][ T8341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.951044][ T8341] R13: 00007fc45ffe6038 R14: 00007fc45ffe5fa0 R15: 00007ffe68cb64b8 [ 173.951080][ T8341] [ 174.170758][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 174.320022][ T8337] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.328134][ T8337] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.670283][ T8337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.693227][ T8337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.058240][ T8336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.081144][ T8336] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.101324][ T8336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.166747][ T5831] wg1 speed is unknown, defaulting to 1000 [ 175.172857][ T5831] syz0: Port: 1 Link DOWN [ 175.179224][ T3448] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.192443][ T3448] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.210253][ T3448] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.221567][ T3448] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.382200][ T8371] xt_socket: unknown flags 0x50 [ 175.403315][ T8373] netlink: 'syz.1.627': attribute type 5 has an invalid length. [ 175.429614][ T8368] wg1 speed is unknown, defaulting to 1000 [ 175.573739][ T8379] xt_bpf: check failed: parse error [ 175.770131][ T8382] macvtap2: entered promiscuous mode [ 175.775644][ T8382] batadv0: entered promiscuous mode [ 175.783054][ T8382] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 175.812545][ T8382] batadv0: left promiscuous mode [ 176.136216][ T8400] macsec1: entered promiscuous mode [ 176.141674][ T8400] ip6gretap0: entered promiscuous mode [ 176.152420][ T8402] IPv6: NLM_F_REPLACE set, but no existing node found! [ 176.216606][ T8399] netlink: 'syz.0.636': attribute type 30 has an invalid length. [ 176.227579][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 176.501872][ T8419] netlink: 'syz.2.639': attribute type 1 has an invalid length. [ 176.515137][ T8419] netlink: 228 bytes leftover after parsing attributes in process `syz.2.639'. [ 177.109067][ T8432] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 177.202357][ T37] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.222419][ T37] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.248790][ T37] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.260364][ T37] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.271472][ T8411] wg1 speed is unknown, defaulting to 1000 [ 177.285314][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.644'. [ 177.304780][ T37] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.313217][ T37] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.319151][ T8435] netlink: 48 bytes leftover after parsing attributes in process `syz.0.644'. [ 177.381637][ T8421] wg1 speed is unknown, defaulting to 1000 [ 177.384029][ T37] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.414000][ T37] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.458039][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.644'. [ 177.708443][ T8444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.656'. [ 177.773780][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.646'. [ 178.131179][ T8451] geneve3: entered promiscuous mode [ 178.559081][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.654'. [ 178.980520][ T8497] __nla_validate_parse: 3 callbacks suppressed [ 178.980541][ T8497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.664'. [ 179.384728][ T8504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.406476][ T8504] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.435384][ T8504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.547217][ T8514] Unsupported ieee802154 address type: 0 [ 179.633070][ T8518] netlink: 'syz.1.670': attribute type 11 has an invalid length. [ 180.390482][ T8559] wg1 speed is unknown, defaulting to 1000 [ 180.443073][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 180.727919][ T8569] wg1 speed is unknown, defaulting to 1000 [ 181.599487][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 181.945355][ T8600] netlink: 'syz.4.693': attribute type 10 has an invalid length. [ 181.967146][ T8601] netlink: 'syz.4.693': attribute type 10 has an invalid length. [ 181.996825][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'. [ 182.048994][ T8605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.695'. [ 182.100422][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 182.282210][ T8615] netlink: 32 bytes leftover after parsing attributes in process `syz.3.698'. [ 182.490166][ T8623] netlink: 'syz.4.700': attribute type 6 has an invalid length. [ 182.538543][ T8625] Cannot find del_set index 2 as target [ 182.699304][ T8632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.704'. [ 182.745278][ T8626] wg1 speed is unknown, defaulting to 1000 [ 182.859712][ T8632] bond0: entered promiscuous mode [ 182.888849][ T8632] bond_slave_0: entered promiscuous mode [ 182.922493][ T8632] bond_slave_1: entered promiscuous mode [ 182.930721][ T8632] bond0: left promiscuous mode [ 182.935932][ T8632] bond_slave_0: left promiscuous mode [ 182.941782][ T8632] bond_slave_1: left promiscuous mode [ 183.679684][ T8656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.710'. [ 183.809189][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 184.056096][ T8671] netlink: 'syz.1.714': attribute type 6 has an invalid length. [ 184.237287][ T8673] wg1 speed is unknown, defaulting to 1000 [ 184.283080][ T8681] netlink: 'syz.4.716': attribute type 9 has an invalid length. [ 184.796040][ T8692] wg1 speed is unknown, defaulting to 1000 [ 185.192565][ T8705] netlink: 'syz.3.721': attribute type 30 has an invalid length. [ 185.716316][ T56] block nbd0: Possible stuck request ffff8880253a0000: control (read@0,1024B). Runtime 60 seconds [ 185.727347][ T56] block nbd0: Possible stuck request ffff8880253a01c0: control (read@1024,1024B). Runtime 60 seconds [ 185.739024][ T56] block nbd0: Possible stuck request ffff8880253a0380: control (read@2048,1024B). Runtime 60 seconds [ 185.750636][ T56] block nbd0: Possible stuck request ffff8880253a0540: control (read@3072,1024B). Runtime 60 seconds [ 186.141681][ T8732] FAULT_INJECTION: forcing a failure. [ 186.141681][ T8732] name failslab, interval 1, probability 0, space 0, times 0 [ 186.172497][ T8732] CPU: 1 UID: 0 PID: 8732 Comm: syz.3.727 Not tainted syzkaller #0 PREEMPT(full) [ 186.172527][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.172540][ T8732] Call Trace: [ 186.172549][ T8732] [ 186.172558][ T8732] dump_stack_lvl+0x189/0x250 [ 186.172587][ T8732] ? __pfx____ratelimit+0x10/0x10 [ 186.172614][ T8732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.172636][ T8732] ? __pfx__printk+0x10/0x10 [ 186.172664][ T8732] ? __pfx___might_resched+0x10/0x10 [ 186.172692][ T8732] should_fail_ex+0x414/0x560 [ 186.172720][ T8732] should_failslab+0xa8/0x100 [ 186.172739][ T8732] __kmalloc_noprof+0xcb/0x7f0 [ 186.172762][ T8732] ? kfree+0x4d/0x6d0 [ 186.172780][ T8732] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 186.172811][ T8732] tomoyo_realpath_from_path+0xe3/0x5d0 [ 186.172844][ T8732] ? tomoyo_domain+0xd9/0x130 [ 186.172874][ T8732] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 186.172894][ T8732] tomoyo_path_number_perm+0x1e8/0x5a0 [ 186.172916][ T8732] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.172970][ T8732] ? __fget_files+0x2a/0x420 [ 186.172989][ T8732] ? __fget_files+0x3a0/0x420 [ 186.173003][ T8732] ? __fget_files+0x2a/0x420 [ 186.173022][ T8732] security_file_ioctl+0xcb/0x2d0 [ 186.173042][ T8732] __se_sys_ioctl+0x47/0x170 [ 186.173073][ T8732] do_syscall_64+0xfa/0xfa0 [ 186.173093][ T8732] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.173114][ T8732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.173131][ T8732] ? clear_bhb_loop+0x60/0xb0 [ 186.173152][ T8732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.173168][ T8732] RIP: 0033:0x7fc45fd8eec9 [ 186.173184][ T8732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.173198][ T8732] RSP: 002b:00007fc460b8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.173216][ T8732] RAX: ffffffffffffffda RBX: 00007fc45ffe5fa0 RCX: 00007fc45fd8eec9 [ 186.173229][ T8732] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 000000000000000a [ 186.173239][ T8732] RBP: 00007fc460b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 186.173249][ T8732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.173259][ T8732] R13: 00007fc45ffe6038 R14: 00007fc45ffe5fa0 R15: 00007ffe68cb64b8 [ 186.173288][ T8732] [ 186.173304][ T8732] ERROR: Out of memory at tomoyo_realpath_from_path. [ 186.239966][ T8734] netlink: 116 bytes leftover after parsing attributes in process `syz.0.729'. [ 186.537473][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 186.707837][ T8745] netlink: 60 bytes leftover after parsing attributes in process `syz.2.731'. [ 186.806604][ T8748] netlink: 'syz.2.731': attribute type 13 has an invalid length. [ 186.822938][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 186.843394][ T8748] netlink: 'syz.2.731': attribute type 17 has an invalid length. [ 186.907099][ T8748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.099064][ T8748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.142283][ T8745] wg1 speed is unknown, defaulting to 1000 [ 187.244898][ T8761] xt_cgroup: xt_cgroup: no path or classid specified [ 187.284886][ T8748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.401896][ T8767] netlink: 'syz.0.737': attribute type 5 has an invalid length. [ 187.541946][ T8773] netlink: 44 bytes leftover after parsing attributes in process `syz.3.740'. [ 187.567451][ T8773] netlink: 19 bytes leftover after parsing attributes in process `syz.3.740'. [ 187.584635][ T8773] netlink: 'syz.3.740': attribute type 6 has an invalid length. [ 187.601385][ T8773] netlink: 'syz.3.740': attribute type 4 has an invalid length. [ 187.628102][ T8774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.740'. [ 187.700711][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 187.837121][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'. [ 188.263155][ T8796] netem: incorrect gi model size [ 188.274718][ T8796] netem: change failed [ 188.283111][ T8804] netlink: 277 bytes leftover after parsing attributes in process `syz.2.747'. [ 188.323135][ T8806] netlink: 'syz.4.749': attribute type 3 has an invalid length. [ 188.337122][ T8802] FAULT_INJECTION: forcing a failure. [ 188.337122][ T8802] name failslab, interval 1, probability 0, space 0, times 0 [ 188.406688][ T8802] CPU: 0 UID: 0 PID: 8802 Comm: syz.3.748 Not tainted syzkaller #0 PREEMPT(full) [ 188.406718][ T8802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 188.406730][ T8802] Call Trace: [ 188.406738][ T8802] [ 188.406746][ T8802] dump_stack_lvl+0x189/0x250 [ 188.406772][ T8802] ? __pfx____ratelimit+0x10/0x10 [ 188.406795][ T8802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.406816][ T8802] ? __pfx__printk+0x10/0x10 [ 188.406843][ T8802] ? __pfx___might_resched+0x10/0x10 [ 188.406862][ T8802] ? fs_reclaim_acquire+0x7d/0x100 [ 188.406898][ T8802] should_fail_ex+0x414/0x560 [ 188.406928][ T8802] should_failslab+0xa8/0x100 [ 188.406951][ T8802] __kmalloc_noprof+0xcb/0x7f0 [ 188.406980][ T8802] ? tomoyo_encode+0x28b/0x550 [ 188.407025][ T8802] tomoyo_encode+0x28b/0x550 [ 188.407061][ T8802] tomoyo_realpath_from_path+0x58d/0x5d0 [ 188.407095][ T8802] ? tomoyo_domain+0xd9/0x130 [ 188.407133][ T8802] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 188.407159][ T8802] tomoyo_path_number_perm+0x1e8/0x5a0 [ 188.407187][ T8802] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 188.407257][ T8802] ? __fget_files+0x2a/0x420 [ 188.407283][ T8802] ? __fget_files+0x3a0/0x420 [ 188.407301][ T8802] ? __fget_files+0x2a/0x420 [ 188.407334][ T8802] security_file_ioctl+0xcb/0x2d0 [ 188.407361][ T8802] __se_sys_ioctl+0x47/0x170 [ 188.407390][ T8802] do_syscall_64+0xfa/0xfa0 [ 188.407415][ T8802] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.407441][ T8802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.407462][ T8802] ? clear_bhb_loop+0x60/0xb0 [ 188.407489][ T8802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.407510][ T8802] RIP: 0033:0x7fc45fd8eec9 [ 188.407529][ T8802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.407547][ T8802] RSP: 002b:00007fc460b8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.407571][ T8802] RAX: ffffffffffffffda RBX: 00007fc45ffe5fa0 RCX: 00007fc45fd8eec9 [ 188.407587][ T8802] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 000000000000000a [ 188.407601][ T8802] RBP: 00007fc460b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 188.407615][ T8802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.407627][ T8802] R13: 00007fc45ffe6038 R14: 00007fc45ffe5fa0 R15: 00007ffe68cb64b8 [ 188.407667][ T8802] [ 188.408870][ T8802] ERROR: Out of memory at tomoyo_realpath_from_path. [ 188.868727][ T8823] netlink: 'syz.2.751': attribute type 5 has an invalid length. [ 189.245364][ T8834] wg1 speed is unknown, defaulting to 1000 [ 189.307680][ T8851] batadv_slave_0: entered promiscuous mode [ 189.942807][ T8873] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 189.960945][ T8878] netlink: 'syz.1.765': attribute type 2 has an invalid length. [ 190.398911][ T8890] wg1 speed is unknown, defaulting to 1000 [ 190.512489][ T8901] macvtap1: entered promiscuous mode [ 190.518808][ T8901] batadv0: entered promiscuous mode [ 190.525359][ T8901] macvtap1: entered allmulticast mode [ 190.530757][ T8901] batadv0: entered allmulticast mode [ 190.538159][ T8901] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 190.569322][ T8904] batadv0: left allmulticast mode [ 190.577500][ T8904] batadv0: left promiscuous mode [ 191.116892][ T8925] netlink: 'syz.1.778': attribute type 2 has an invalid length. [ 191.330185][ T8932] wg1 speed is unknown, defaulting to 1000 [ 191.656285][ T8949] __nla_validate_parse: 8 callbacks suppressed [ 191.656304][ T8949] netlink: 256 bytes leftover after parsing attributes in process `syz.4.784'. [ 192.023735][ T8966] netlink: 'syz.0.788': attribute type 1 has an invalid length. [ 192.073630][ T8964] lo: entered allmulticast mode [ 192.096843][ T8964] lo: left allmulticast mode [ 192.104396][ T8970] netlink: 'syz.2.789': attribute type 1 has an invalid length. [ 192.223504][ T8970] bond1: (slave gretap1): making interface the new active one [ 192.240446][ T8970] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 192.385631][ T8985] netlink: 'syz.4.792': attribute type 6 has an invalid length. [ 192.643154][ T8996] netlink: 68 bytes leftover after parsing attributes in process `syz.4.795'. [ 192.931141][ T9013] netlink: 32 bytes leftover after parsing attributes in process `syz.4.799'. [ 193.096956][ T9017] wg1 speed is unknown, defaulting to 1000 [ 193.112615][ T9023] netlink: 'syz.2.802': attribute type 11 has an invalid length. [ 193.125739][ T9023] netlink: 'syz.2.802': attribute type 11 has an invalid length. [ 193.136356][ T9023] netlink: 224 bytes leftover after parsing attributes in process `syz.2.802'. [ 193.273395][ T9029] tipc: Started in network mode [ 193.295563][ T9029] tipc: Node identity aaa6abd1a425, cluster identity 4711 [ 193.315038][ T9029] tipc: Enabled bearer , priority 0 [ 193.332485][ T9032] netlink: 'syz.4.804': attribute type 2 has an invalid length. [ 193.349354][ T9033] syzkaller0: entered promiscuous mode [ 193.364419][ T9033] syzkaller0: entered allmulticast mode [ 193.490210][ T9033] tipc: Resetting bearer [ 193.798398][ T9042] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 193.874712][ T9045] netlink: 'syz.4.808': attribute type 1 has an invalid length. [ 194.011196][ T9020] tipc: Resetting bearer [ 194.041341][ T9020] tipc: Disabling bearer [ 194.058864][ T9052] netlink: 132 bytes leftover after parsing attributes in process `syz.0.810'. [ 194.073118][ T9053] netlink: 132 bytes leftover after parsing attributes in process `syz.0.810'. [ 194.341615][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 194.383411][ T9060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.813'. [ 194.526812][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 194.943347][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 195.050087][ T9096] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.245784][ T9133] netlink: 'syz.1.830': attribute type 6 has an invalid length. [ 196.687436][ T9154] __nla_validate_parse: 5 callbacks suppressed [ 196.687456][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 198.793457][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 199.163399][ T9238] netlink: 20 bytes leftover after parsing attributes in process `syz.4.857'. [ 199.539364][ T5829] udevd[5829]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 199.608306][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.863'. [ 199.657246][ T9265] netlink: 68 bytes leftover after parsing attributes in process `syz.3.863'. [ 199.659488][ T5829] udevd[5829]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 199.780648][ T9276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.864'. [ 199.813228][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.852634][ T9276] vlan2: entered promiscuous mode [ 199.860594][ T9276] bond0: entered promiscuous mode [ 199.866844][ T9276] bond_slave_0: entered promiscuous mode [ 199.873073][ T9276] bond_slave_1: entered promiscuous mode [ 199.881339][ T9276] bridge0: entered promiscuous mode [ 200.169441][ T9293] netlink: 'syz.3.866': attribute type 1 has an invalid length. [ 200.187989][ T9293] netlink: 224 bytes leftover after parsing attributes in process `syz.3.866'. [ 200.240992][ T9290] wg1 speed is unknown, defaulting to 1000 [ 200.580573][ T9297] wg1 speed is unknown, defaulting to 1000 [ 200.639679][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 201.107636][ T5846] Bluetooth: hci4: link tx timeout [ 201.113782][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.128049][ T5834] Bluetooth: hci4: link tx timeout [ 201.133398][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.141748][ T5834] Bluetooth: hci4: link tx timeout [ 201.147412][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.339511][ T9321] bridge3: entered allmulticast mode [ 201.666534][ T9330] syzkaller1: entered promiscuous mode [ 201.672265][ T9330] syzkaller1: entered allmulticast mode [ 201.693584][ T9334] wg1 speed is unknown, defaulting to 1000 [ 201.719639][ T9338] ipt_REJECT: TCP_RESET invalid for non-tcp [ 201.736553][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 201.797172][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 201.861191][ T9340] xfrm2: entered allmulticast mode [ 201.925557][ T9338] ip6tnl1: entered promiscuous mode [ 201.941143][ T9338] ip6tnl1: entered allmulticast mode [ 202.435114][ T9348] wg1 speed is unknown, defaulting to 1000 [ 202.619498][ T9367] netlink: 48 bytes leftover after parsing attributes in process `syz.0.890'. [ 202.777956][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'. [ 202.815012][ T9372] syzkaller0: entered promiscuous mode [ 202.824712][ T9372] syzkaller0: entered allmulticast mode [ 202.850756][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 203.007446][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 203.154260][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 203.243325][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 203.346283][ T9388] wg1 speed is unknown, defaulting to 1000 [ 203.893703][ T9418] netlink: 'syz.3.903': attribute type 6 has an invalid length. [ 204.367950][ T9440] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.488074][ T9429] wg1 speed is unknown, defaulting to 1000 [ 204.732959][ T9448] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 204.911712][ T9454] !: renamed from dummy0 [ 205.142738][ T9454] wg1 speed is unknown, defaulting to 1000 [ 205.425426][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 205.516607][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 206.018634][ T9508] siw: device registration error -23 [ 206.486962][ T9520] wg1 speed is unknown, defaulting to 1000 [ 207.071966][ T9545] syz_tun: entered promiscuous mode [ 207.086318][ T9545] syz_tun: entered allmulticast mode [ 207.099162][ T9547] netlink: 44 bytes leftover after parsing attributes in process `syz.3.934'. [ 207.225401][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.937'. [ 207.248174][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.937'. [ 207.643201][ T9565] wg1 speed is unknown, defaulting to 1000 [ 207.711767][ T9580] tipc: Started in network mode [ 207.723379][ T9580] tipc: Node identity 6aff866b17eb, cluster identity 4711 [ 207.752338][ T9580] tipc: Enabled bearer , priority 0 [ 207.870034][ T9586] veth1_to_team: entered allmulticast mode [ 207.930510][ T9577] tipc: Resetting bearer [ 208.085172][ T9599] Unsupported ieee802154 address type: 0 [ 208.186641][ T9590] wg1 speed is unknown, defaulting to 1000 [ 208.266104][ T9576] tipc: Disabling bearer [ 208.759738][ T9601] netlink: 76 bytes leftover after parsing attributes in process `syz.4.949'. [ 208.934859][ T9609] netlink: 32 bytes leftover after parsing attributes in process `syz.0.952'. [ 208.987145][ T9609] tipc: Enabled bearer , priority 0 [ 209.005340][ T9609] syzkaller0: entered promiscuous mode [ 209.011126][ T9609] syzkaller0: entered allmulticast mode [ 209.079905][ T9609] tipc: Resetting bearer [ 209.120536][ T9608] tipc: Resetting bearer [ 209.158890][ T9608] tipc: Disabling bearer [ 209.179578][ T9624] netlink: 'syz.4.955': attribute type 1 has an invalid length. [ 209.265296][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'. [ 209.352904][ T9620] netlink: 32 bytes leftover after parsing attributes in process `syz.4.955'. [ 209.387888][ T9624] bond1: entered promiscuous mode [ 209.396608][ T9624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.242431][ T9671] netlink: 'syz.3.964': attribute type 39 has an invalid length. [ 210.334852][ T9680] netlink: 'syz.4.967': attribute type 14 has an invalid length. [ 210.946543][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.969'. [ 211.270064][ T9715] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 211.278478][ T9715] netlink: 68 bytes leftover after parsing attributes in process `syz.3.975'. [ 211.609710][ T9734] netlink: 308 bytes leftover after parsing attributes in process `syz.1.977'. [ 211.632028][ T9737] netlink: 'syz.2.980': attribute type 10 has an invalid length. [ 211.652464][ T9737] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.758115][ T9737] bond0: (slave team0): Enslaving as an active interface with an up link [ 214.863479][ T9766] x_tables: duplicate entry at hook 2 [ 215.122078][ T9781] bridge0: port 3(batadv1) entered blocking state [ 215.200378][ T9781] bridge0: port 3(batadv1) entered disabled state [ 215.221363][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.993'. [ 215.266883][ T9781] batadv1: entered allmulticast mode [ 215.306819][ T9781] batadv1: entered promiscuous mode [ 215.445516][ T9789] gretap0: left promiscuous mode [ 215.577306][ T9789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.607657][ T1166] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 215.617620][ T1166] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 215.626185][ T9789] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.662858][ T9789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.798735][ T56] block nbd0: Possible stuck request ffff8880253a0000: control (read@0,1024B). Runtime 90 seconds [ 215.816726][ T56] block nbd0: Possible stuck request ffff8880253a01c0: control (read@1024,1024B). Runtime 90 seconds [ 215.829500][ T56] block nbd0: Possible stuck request ffff8880253a0380: control (read@2048,1024B). Runtime 90 seconds [ 215.840463][ T9793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.841904][ T56] block nbd0: Possible stuck request ffff8880253a0540: control (read@3072,1024B). Runtime 90 seconds [ 215.970722][ T9808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1005'. [ 216.081253][ T9815] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 216.101362][ T9815] bridge0: entered allmulticast mode [ 216.177424][ T9808] xt_connbytes: Forcing CT accounting to be enabled [ 216.191946][ T9816] wg1 speed is unknown, defaulting to 1000 [ 216.238725][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 216.338091][ T9823] netlink: 'syz.3.1007': attribute type 2 has an invalid length. [ 216.465451][ T9822] wg1 speed is unknown, defaulting to 1000 [ 216.638465][ T9831] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1009'. [ 216.685066][ T9845] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1009'. [ 217.015818][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 217.236387][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 217.237306][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 217.242569][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 217.279369][ T9869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1017'. [ 217.335078][ T9869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1017'. [ 217.396035][ T9869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1017'. [ 217.409874][ T9869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1017'. [ 217.858619][ T9892] wg1 speed is unknown, defaulting to 1000 [ 218.087061][ T9906] vxcan1: entered allmulticast mode [ 218.166718][ T9916] wg1 speed is unknown, defaulting to 1000 [ 218.637709][ T9925] wg1 speed is unknown, defaulting to 1000 [ 219.196986][ T9944] ip6gre1: entered allmulticast mode [ 219.398842][ T9948] tun0: tun_chr_ioctl cmd 2148045848 [ 219.404689][ T9954] tun0: tun_chr_ioctl cmd 21731 [ 219.680237][ T9967] Can't find ip_set type hash:ip$mec [ 219.905060][ T9977] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 219.957428][ T9977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.021949][ T9983] wg1 speed is unknown, defaulting to 1000 [ 220.258415][ T9983] __nla_validate_parse: 4 callbacks suppressed [ 220.258438][ T9983] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1041'. [ 220.387163][ T9995] wg1 speed is unknown, defaulting to 1000 [ 220.825743][T10010] netlink: zone id is out of range [ 220.855427][T10010] netlink: zone id is out of range [ 220.934223][T10010] netlink: zone id is out of range [ 220.971055][T10010] netlink: zone id is out of range [ 221.021214][T10015] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 221.439842][T10017] batadv_slave_0: left promiscuous mode [ 221.446054][T10017] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 221.468836][T10017] bond1: left promiscuous mode [ 221.473681][T10017] bridge1: left promiscuous mode [ 221.495020][T10017] gtp0: left promiscuous mode [ 221.519648][T10017] bond2: left promiscuous mode [ 221.746060][T10027] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1052'. [ 221.776730][T10025] x_tables: duplicate underflow at hook 1 [ 221.807955][T10034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1055'. [ 221.831745][T10028] netlink: 'syz.4.1053': attribute type 1 has an invalid length. [ 221.866896][T10032] wg1 speed is unknown, defaulting to 1000 [ 222.162666][T10049] gretap1: entered allmulticast mode [ 222.248187][T10049] bond1: (slave gretap1): making interface the new active one [ 222.261667][T10049] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 222.577841][T10059] wg1 speed is unknown, defaulting to 1000 [ 222.681644][T10077] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1065'. [ 222.711720][T10071] wg1 speed is unknown, defaulting to 1000 [ 222.901475][T10077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1065'. [ 223.060748][T10093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.159657][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'. [ 223.825699][T10120] tipc: Started in network mode [ 223.834597][T10120] tipc: Node identity 4e30f75e04f8, cluster identity 4711 [ 223.869212][T10120] tipc: Enabled bearer , priority 0 [ 223.926791][T10119] syzkaller0: MTU too low for tipc bearer [ 223.951022][T10119] tipc: Disabling bearer [ 223.972681][T10124] syzkaller0: MTU too low for tipc bearer [ 223.979207][T10124] tipc: Enabling of bearer rejected, failed to enable media [ 224.012318][ T5493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.062319][T10130] tipc: Enabled bearer , priority 0 [ 224.074578][T10130] syzkaller0: entered promiscuous mode [ 224.080572][T10130] syzkaller0: entered allmulticast mode [ 224.113788][T10130] tipc: Resetting bearer [ 224.133573][T10129] tipc: Resetting bearer [ 224.161549][T10129] tipc: Disabling bearer [ 224.311506][T10139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1079'. [ 225.079265][T10179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'. [ 225.398920][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1088'. [ 225.474892][T10184] wg1 speed is unknown, defaulting to 1000 [ 225.762937][T10209] netlink: 'syz.1.1092': attribute type 10 has an invalid length. [ 225.810583][T10209] veth0_vlan: entered allmulticast mode [ 225.827144][T10209] veth0_vlan: left promiscuous mode [ 225.847906][T10209] veth0_vlan: entered promiscuous mode [ 225.867425][T10209] team0: Device veth0_vlan failed to register rx_handler [ 226.379787][T10237] netlink: 'syz.3.1097': attribute type 1 has an invalid length. [ 226.502117][T10237] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 226.610424][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1102'. [ 227.593359][T10292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.804504][T10292] netlink: 'syz.0.1110': attribute type 14 has an invalid length. [ 228.256915][T10314] wg1 speed is unknown, defaulting to 1000 [ 228.432740][T10322] netlink: 'syz.3.1117': attribute type 1 has an invalid length. [ 228.532352][T10322] bond1: entered promiscuous mode [ 228.544704][T10322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.641630][T10327] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.671074][T10327] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 228.710914][T10327] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 228.747159][T10327] bond1: (slave gre1): making interface the new active one [ 228.767597][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 228.812765][T10327] gre1: entered promiscuous mode [ 228.829278][T10327] bond1: (slave gre1): Enslaving as an active interface with an up link [ 229.083519][T10331] wg1 speed is unknown, defaulting to 1000 [ 229.186535][T10338] wg1 speed is unknown, defaulting to 1000 [ 229.410717][T10355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1123'. [ 229.437652][T10353] siw: device registration error -23 [ 229.482002][T10351] bridge0: port 3(batadv1) entered blocking state [ 229.529187][T10351] bridge0: port 3(batadv1) entered disabled state [ 229.537659][T10351] batadv1: entered allmulticast mode [ 229.548057][T10351] batadv1: entered promiscuous mode [ 229.975033][ T1166] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 229.985110][ T1166] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 230.025595][T10362] netlink: 'syz.3.1124': attribute type 8 has an invalid length. [ 230.038957][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 230.113017][T10363] netlink: 'syz.3.1124': attribute type 8 has an invalid length. [ 230.142131][T10362] bond0: entered promiscuous mode [ 230.164208][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 230.184271][T10362] bond_slave_0: entered promiscuous mode [ 230.190508][T10362] bond_slave_1: entered promiscuous mode [ 230.206066][T10362] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 230.216882][T10368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.229192][T10362] hsr1: entered promiscuous mode [ 230.462850][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 230.527900][T10376] bridge3: entered allmulticast mode [ 230.540011][T10383] netlink: 'syz.3.1130': attribute type 1 has an invalid length. [ 230.635042][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1130'. [ 230.646819][T10383] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1130'. [ 230.919254][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1136'. [ 231.010389][T10407] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 231.672599][T10424] wg1 speed is unknown, defaulting to 1000 [ 231.722305][T10426] wg1 speed is unknown, defaulting to 1000 [ 232.366991][T10435] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 232.505728][T10435] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 232.635362][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1147'. [ 232.653666][T10435] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 232.749076][T10454] netlink: 'syz.3.1148': attribute type 1 has an invalid length. [ 232.767013][T10435] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 232.997079][T10461] bond3: (slave geneve2): making interface the new active one [ 233.008321][T10461] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 233.059052][ T1166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.076629][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1151'. [ 233.090566][ T1166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.100156][ T1166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.110065][ T1166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.176373][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1151'. [ 233.347562][T10476] sctp: [Deprecated]: syz.2.1156 (pid 10476) Use of int in maxseg socket option. [ 233.347562][T10476] Use struct sctp_assoc_value instead [ 233.545894][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'. [ 233.572099][T10472] wg1 speed is unknown, defaulting to 1000 [ 233.722545][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'. [ 233.954070][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1159'. [ 234.408265][T10511] netlink: 'syz.1.1162': attribute type 1 has an invalid length. [ 234.503629][T10511] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.974547][T10537] netlink: 'syz.3.1171': attribute type 1 has an invalid length. [ 235.029262][T10539] netlink: 'syz.4.1170': attribute type 1 has an invalid length. [ 235.215037][T10552] netlink: 'syz.3.1174': attribute type 13 has an invalid length. [ 235.223026][T10552] netlink: 'syz.3.1174': attribute type 17 has an invalid length. [ 235.301455][T10552] syz_tun: left promiscuous mode [ 235.347889][T10552] syz_tun: left allmulticast mode [ 235.412825][T10552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.444182][T10549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.531960][T10555] wg1 speed is unknown, defaulting to 1000 [ 235.572776][T10561] __nla_validate_parse: 6 callbacks suppressed [ 235.572797][T10561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1178'. [ 237.098691][T10590] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1183'. [ 238.242938][T10610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1188'. [ 238.382996][T10612] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1189'. [ 238.636936][T10614] wg1 speed is unknown, defaulting to 1000 [ 239.054683][T10638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'. [ 239.149624][T10638] vlan2: entered promiscuous mode [ 239.167894][T10638] bond0: entered promiscuous mode [ 239.175934][T10638] bond_slave_0: entered promiscuous mode [ 239.182767][T10638] bond_slave_1: entered promiscuous mode [ 240.361268][T10636] netlink: 'syz.4.1194': attribute type 14 has an invalid length. [ 240.416019][T10641] wg1 speed is unknown, defaulting to 1000 [ 240.540306][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 240.852055][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1202'. [ 241.012891][T10662] wg1 speed is unknown, defaulting to 1000 [ 241.108615][T10672] ksmbd: Unknown IPC event: 3, ignore. [ 241.293593][T10681] netlink: 'syz.0.1206': attribute type 7 has an invalid length. [ 241.303183][T10677] bond1: entered promiscuous mode [ 241.311470][T10677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.423522][T10683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1209'. [ 242.115834][T10679] team0 (unregistering): Port device team_slave_0 removed [ 242.132908][T10679] team0 (unregistering): Port device team_slave_1 removed [ 242.474896][T10713] wg1 speed is unknown, defaulting to 1000 [ 242.684473][T10722] netlink: 'syz.3.1214': attribute type 8 has an invalid length. [ 242.703129][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1214'. [ 242.764896][T10729] netlink: 'syz.3.1214': attribute type 8 has an invalid length. [ 242.774864][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1214'. [ 243.426027][T10749] netlink: 'syz.0.1220': attribute type 1 has an invalid length. [ 243.475634][T10747] x_tables: duplicate underflow at hook 1 [ 243.489293][T10747] x_tables: duplicate underflow at hook 1 [ 243.499665][T10747] x_tables: duplicate underflow at hook 1 [ 243.550230][T10747] x_tables: duplicate underflow at hook 1 [ 243.556468][T10747] x_tables: duplicate underflow at hook 1 [ 243.681010][T10754] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 243.709304][T10754] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 243.865763][T10759] bond2: (slave bridge6): Enslaving as an active interface with a down link [ 243.897893][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 243.921383][T10749] bond2: (slave gretap1): making interface the new active one [ 243.932214][T10749] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 244.123332][T10761] macvlan3: entered promiscuous mode [ 244.128910][T10761] macvlan3: entered allmulticast mode [ 244.137523][T10761] bond2: entered promiscuous mode [ 244.144744][T10761] gretap1: entered promiscuous mode [ 244.172011][T10761] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 244.257926][T10761] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 244.377330][T10761] bond2: left promiscuous mode [ 244.382664][T10761] gretap1: left promiscuous mode [ 244.678905][T10780] wg1 speed is unknown, defaulting to 1000 [ 244.866742][T10795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1230'. [ 244.911735][T10804] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1229'. [ 244.992120][T10805] dummy0: entered allmulticast mode [ 245.193023][T10805] dummy0: left allmulticast mode [ 245.628392][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1234'. [ 245.875499][ T56] block nbd0: Possible stuck request ffff8880253a0000: control (read@0,1024B). Runtime 120 seconds [ 245.887127][ T56] block nbd0: Possible stuck request ffff8880253a01c0: control (read@1024,1024B). Runtime 120 seconds [ 245.900178][ T56] block nbd0: Possible stuck request ffff8880253a0380: control (read@2048,1024B). Runtime 120 seconds [ 245.912333][ T56] block nbd0: Possible stuck request ffff8880253a0540: control (read@3072,1024B). Runtime 120 seconds [ 246.213663][T10851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.411498][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 246.503175][T10864] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.528101][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 246.555952][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 246.575076][T10864] macsec1: entered promiscuous mode [ 246.580483][T10864] bond3: entered promiscuous mode [ 246.586522][T10864] macsec1: entered allmulticast mode [ 246.592006][T10864] bond3: entered allmulticast mode [ 246.820277][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1248'. [ 246.910078][T10882] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 247.082923][T10894] Can't find ip_set type hash:n [ 247.314840][T10911] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1256'. [ 247.682954][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 247.809767][T10917] wg1 speed is unknown, defaulting to 1000 [ 248.272545][T10941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1259'. [ 248.324823][T10942] netlink: 'syz.0.1258': attribute type 21 has an invalid length. [ 248.333038][T10942] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1258'. [ 248.437164][T10939] wg1 speed is unknown, defaulting to 1000 [ 248.456661][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1259'. [ 248.720661][T10957] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 248.841070][T10963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1263'. [ 248.945968][T10967] batman_adv: batadv0: Adding interface: ipvlan2 [ 248.965130][T10967] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.999081][T10967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.011897][T10967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.051894][T10967] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 250.098487][T11015] netlink: 'syz.0.1274': attribute type 14 has an invalid length. [ 250.429223][T11034] batadv1: left allmulticast mode [ 250.436599][T11034] batadv1: left promiscuous mode [ 250.442226][T11034] bridge0: port 3(batadv1) entered disabled state [ 250.457848][T11034] bridge_slave_1: left allmulticast mode [ 250.471615][T11034] bridge_slave_1: left promiscuous mode [ 250.478844][T11034] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.506836][T11034] bridge_slave_0: left allmulticast mode [ 250.523365][T11034] bridge_slave_0: left promiscuous mode [ 250.546598][T11034] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.591853][ T30] audit: type=1800 audit(1760388241.831:2): pid=11023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1274" name="memory.events" dev="tmpfs" ino=1266 res=0 errno=0 [ 250.729362][T11040] wg1 speed is unknown, defaulting to 1000 [ 251.356522][T11059] syzkaller1: entered promiscuous mode [ 251.362193][T11059] syzkaller1: entered allmulticast mode [ 251.436191][T11063] __nla_validate_parse: 7 callbacks suppressed [ 251.436213][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 251.486093][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 251.521622][T11063] netlink: 'syz.0.1288': attribute type 18 has an invalid length. [ 251.575897][T11068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1290'. [ 251.585424][T11068] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1290'. [ 251.596576][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 251.611151][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 251.621717][T11068] xt_CONNSECMARK: invalid mode: 0 [ 252.096374][T11082] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 252.310511][T11093] netlink: 'syz.0.1297': attribute type 6 has an invalid length. [ 252.354760][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 252.497632][T11108] wg1 speed is unknown, defaulting to 1000 [ 252.583352][T11096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1299'. [ 252.617784][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1302'. [ 252.717275][T11112] tipc: Enabled bearer , priority 0 [ 252.732746][T11112] vlan2: entered allmulticast mode [ 252.786420][T11115] syzkaller0: entered promiscuous mode [ 252.792701][T11115] syzkaller0: entered allmulticast mode [ 252.825948][T11112] tipc: Resetting bearer [ 252.838050][T11111] tipc: Resetting bearer [ 252.884484][T11111] tipc: Disabling bearer [ 253.016943][T11121] tipc: Enabled bearer , priority 0 [ 253.025737][T11121] syzkaller0: entered promiscuous mode [ 253.031317][T11121] syzkaller0: entered allmulticast mode [ 253.041536][T11121] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 253.099984][T11121] tipc: Resetting bearer [ 253.132828][T11123] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 253.145937][T11123] bond4 (unregistering): Released all slaves [ 253.176662][T11120] tipc: Resetting bearer [ 253.193512][T11120] tipc: Disabling bearer [ 253.435819][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1312'. [ 253.462031][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1311'. [ 253.716224][T11156] wg1 speed is unknown, defaulting to 1000 [ 253.811073][T11169] netlink: 'syz.4.1316': attribute type 6 has an invalid length. [ 253.982128][T11173] netlink: 'syz.4.1319': attribute type 1 has an invalid length. [ 254.063285][T11173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.096620][T11173] xt_bpf: check failed: parse error [ 254.144884][T11180] bond2: (slave geneve0): making interface the new active one [ 254.156373][T11180] bond2: (slave geneve0): Enslaving as an active interface with an up link [ 254.183673][ T1166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.210215][ T1166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.253524][ T1166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.262610][ T1166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.299179][T11175] wg1 speed is unknown, defaulting to 1000 [ 254.334959][T11182] wg1 speed is unknown, defaulting to 1000 [ 254.693005][T11201] netlink: 'syz.4.1326': attribute type 1 has an invalid length. [ 254.861457][T11207] ip6tnl2: entered promiscuous mode [ 254.867281][T11207] ip6tnl2: entered allmulticast mode [ 254.874421][T11207] team0: Device ip6tnl2 is of different type [ 255.286554][T11223] veth0: entered promiscuous mode [ 255.325292][T11220] veth0: left promiscuous mode [ 255.864360][T11257] netlink: 'syz.4.1337': attribute type 13 has an invalid length. [ 255.876274][T11257] netlink: 'syz.4.1337': attribute type 17 has an invalid length. [ 255.934009][T11257] netlink: 'syz.4.1337': attribute type 27 has an invalid length. [ 256.698762][T11278] ip6gre1: entered allmulticast mode [ 257.033979][T11297] netlink: 'syz.3.1342': attribute type 4 has an invalid length. [ 259.013641][T11288] netlink: 'syz.3.1342': attribute type 12 has an invalid length. [ 259.224809][T11358] __nla_validate_parse: 8 callbacks suppressed [ 259.224834][T11358] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1348'. [ 260.171655][T11401] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 260.205892][T11406] bond0: (slave bond_slave_0): Releasing backup interface [ 260.224975][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'. [ 260.235833][T11406] bond_slave_0: left promiscuous mode [ 260.265724][T11406] bond0: (slave bond_slave_1): Releasing backup interface [ 260.298897][T11406] bond_slave_1: left promiscuous mode [ 260.313102][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1360'. [ 260.325071][T11406] team0: Port device team_slave_0 removed [ 260.364799][T11414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1358'. [ 260.389580][T11406] team0: Port device team_slave_1 removed [ 260.407443][T11406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.425416][T11406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.438579][T11406] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.445067][T11417] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1362'. [ 260.772445][T11440] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 260.811295][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1372'. [ 261.075809][T11452] wg1 speed is unknown, defaulting to 1000 [ 261.151986][T11460] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.1375'. [ 261.361643][T11457] netlink: 'syz.3.1375': attribute type 10 has an invalid length. [ 261.382833][T11457] team0: Failed to send options change via netlink (err -105) [ 261.435142][T11457] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 261.451837][T11457] team0: Port device dummy0 removed [ 261.461366][T11457] dummy0: entered promiscuous mode [ 261.468937][T11457] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 261.579763][T11458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1376'. [ 262.060096][T11490] atomic_op ffff8880791f9998 conn xmit_atomic 0000000000000000 [ 262.096265][T11490] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 262.157435][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1386'. [ 262.212015][T11497] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 262.312943][T11497] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1385'. [ 262.359499][T11495] bond4: entered promiscuous mode [ 262.378717][T11495] bond4: entered allmulticast mode [ 262.413584][T11495] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.511293][T11505] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.526978][T11505] bond5: entered promiscuous mode [ 262.533185][T11505] bond5: entered allmulticast mode [ 262.545210][T11505] bond4: (slave bond5): Enslaving as a backup interface with a down link [ 262.708138][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.724885][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.008053][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.034667][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.071347][T11541] netlink: 'syz.4.1395': attribute type 2 has an invalid length. [ 263.082982][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.180105][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.261825][T11538] wg1 speed is unknown, defaulting to 1000 [ 263.561557][T11558] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.587805][T11558] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.637112][T11568] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 263.760649][T11558] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.796798][T11558] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.170104][T11558] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.217151][T11558] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.283179][T11582] netlink: 'syz.4.1408': attribute type 4 has an invalid length. [ 264.309315][T11595] macvtap1: entered allmulticast mode [ 264.315532][T11595] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 264.372126][T11558] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.388600][T11597] netlink: 'syz.2.1412': attribute type 83 has an invalid length. [ 264.394917][T11558] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.426390][T11592] wg1 speed is unknown, defaulting to 1000 [ 264.695059][ T60] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.730289][ T60] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.985817][ T3534] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.017168][ T3534] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.143431][ T3534] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.179825][ T3534] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.213930][T11608] wg1 speed is unknown, defaulting to 1000 [ 265.230125][ T3534] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.262641][ T3534] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.605327][T11633] __nla_validate_parse: 12 callbacks suppressed [ 265.605347][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1419'. [ 266.066374][T11658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1423'. [ 266.097065][T11657] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 266.250540][ T6007] hid-generic 0005:16C0:05DF.0001: unknown main item tag 0x0 [ 266.333134][ T6007] hid-generic 0005:16C0:05DF.0001: hidraw0: BLUETOOTH HID v0.87 Device [syz0] on aa:aa:aa:aa:aa:aa [ 266.345494][T11660] macsec2: entered promiscuous mode [ 266.380229][T11660] team0: entered promiscuous mode [ 266.389401][T11674] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1430'. [ 266.406294][T11660] team0: Device macsec2 is already an upper device of the team interface [ 266.463533][T11660] team0: left promiscuous mode [ 266.602340][T11680] netlink: 'syz.4.1432': attribute type 1 has an invalid length. [ 266.627746][T11680] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1432'. [ 266.923757][T11683] wg1 speed is unknown, defaulting to 1000 [ 267.000417][T11685] wg1 speed is unknown, defaulting to 1000 [ 267.321354][T11698] wg1 speed is unknown, defaulting to 1000 [ 267.723061][T11710] netlink: 'syz.2.1439': attribute type 9 has an invalid length. [ 267.981761][T11718] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1442'. [ 268.022928][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1445'. [ 268.075251][T11724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1444'. [ 268.095176][T11724] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1444'. [ 268.122798][T11728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1445'. [ 268.124232][T11724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1444'. [ 268.172896][T11722] wg1 speed is unknown, defaulting to 1000 [ 269.351676][T11779] wg1 speed is unknown, defaulting to 1000 [ 269.409275][T11782] netlink: 'syz.0.1461': attribute type 1 has an invalid length. [ 269.462710][T11782] 8021q: adding VLAN 0 to HW filter on device bond6 [ 270.176757][T11796] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 270.454508][T11804] IPVS: nq: FWM 3 0x00000003 - no destination available [ 271.209973][T11834] __nla_validate_parse: 7 callbacks suppressed [ 271.209997][T11834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1475'. [ 271.374702][T11837] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 271.393487][T11837] bridge8: entered allmulticast mode [ 271.460165][T11834] wg1 speed is unknown, defaulting to 1000 [ 271.554737][T11841] netlink: 'syz.2.1477': attribute type 1 has an invalid length. [ 271.572703][T11841] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1477'. [ 271.779032][T11844] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1478'. [ 272.057494][T11856] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1480'. [ 272.182225][T11860] netlink: 'syz.1.1482': attribute type 12 has an invalid length. [ 272.233189][T11855] wg1 speed is unknown, defaulting to 1000 [ 272.597227][T11863] bond3: left allmulticast mode [ 272.602248][T11863] bond3: left promiscuous mode [ 272.665165][T11863] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 272.746975][T11872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1486'. [ 273.376655][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 273.421258][T11888] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1490'. [ 273.464445][T11891] netlink: 'syz.0.1489': attribute type 16 has an invalid length. [ 273.472563][T11891] netlink: 'syz.0.1489': attribute type 17 has an invalid length. [ 273.479205][T11893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1491'. [ 273.560036][T11891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.571088][T11891] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.590745][T11891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.692155][T11888] bond4: entered promiscuous mode [ 273.698459][T11888] 8021q: adding VLAN 0 to HW filter on device bond4 [ 273.846925][T11903] netlink: 'syz.4.1493': attribute type 12 has an invalid length. [ 273.862372][T11903] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1493'. [ 273.876110][T11907] bridge4: entered allmulticast mode [ 274.320342][T11926] pimreg: entered allmulticast mode [ 274.397389][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'. [ 274.606332][T11929] bond5 (unregistering): Released all slaves [ 275.176938][T11950] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 275.285520][T11950] bridge0: entered allmulticast mode [ 275.314327][T11954] netlink: 'syz.1.1502': attribute type 1 has an invalid length. [ 275.386236][T11949] wg1 speed is unknown, defaulting to 1000 [ 275.401782][T11948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.407041][T11958] netlink: 'syz.3.1503': attribute type 1 has an invalid length. [ 275.421532][T11958] netlink: 'syz.3.1503': attribute type 1 has an invalid length. [ 275.955105][ T56] block nbd0: Possible stuck request ffff8880253a0000: control (read@0,1024B). Runtime 150 seconds [ 275.967721][ T56] block nbd0: Possible stuck request ffff8880253a01c0: control (read@1024,1024B). Runtime 150 seconds [ 275.981077][ T56] block nbd0: Possible stuck request ffff8880253a0380: control (read@2048,1024B). Runtime 150 seconds [ 275.995782][ T56] block nbd0: Possible stuck request ffff8880253a0540: control (read@3072,1024B). Runtime 150 seconds [ 276.160667][T11979] bond0: (slave team0): Releasing backup interface [ 276.180456][T11979] bond1: (slave gretap1): Releasing active interface [ 276.327140][T11984] netlink: 'syz.2.1508': attribute type 10 has an invalid length. [ 276.360203][T11984] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 276.937860][T12009] __nla_validate_parse: 5 callbacks suppressed [ 276.937883][T12009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1516'. [ 277.088944][T12009] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 277.134159][T12009] bridge5: entered allmulticast mode [ 277.185953][T12018] wg1 speed is unknown, defaulting to 1000 [ 277.286086][T12021] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1519'. [ 277.469934][T12030] IPVS: set_ctl: invalid protocol: 230 100.1.1.0:20001 [ 277.656306][T12039] vlan2: entered promiscuous mode [ 277.661421][T12039] team0: entered promiscuous mode [ 277.831960][T12036] wg1 speed is unknown, defaulting to 1000 [ 277.968037][T12057] netlink: 'syz.1.1526': attribute type 1 has an invalid length. [ 278.079549][T12057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.176743][T12058] veth7: entered promiscuous mode [ 278.188506][T12068] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 278.191363][T12058] bond4: (slave veth7): Enslaving as an active interface with a down link [ 278.232421][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.245883][T12072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1530'. [ 278.259139][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.373756][T12072] bridge0: port 3(syz_tun) entered blocking state [ 278.391095][T12072] bridge0: port 3(syz_tun) entered disabled state [ 278.418415][T12072] syz_tun: entered allmulticast mode [ 278.440773][T12075] rdma_rxe: rxe_newlink: failed to add syz_tun [ 278.485717][T12072] syz_tun: entered promiscuous mode [ 278.746474][T12092] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1534'. [ 278.921600][T12100] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 278.942597][T12100] bridge6: entered allmulticast mode [ 279.067264][T12095] wg1 speed is unknown, defaulting to 1000 [ 279.186116][T12100] wg1 speed is unknown, defaulting to 1000 [ 280.153361][T12132] wg1 speed is unknown, defaulting to 1000 [ 280.193444][T12141] wg1 speed is unknown, defaulting to 1000 [ 281.501100][T12190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1550'. [ 281.513511][T12190] netlink: 'syz.1.1550': attribute type 16 has an invalid length. [ 281.543847][T12190] netlink: 'syz.1.1550': attribute type 17 has an invalid length. [ 282.234798][T12221] syzkaller1: entered promiscuous mode [ 282.244374][T12221] syzkaller1: entered allmulticast mode [ 282.319470][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 282.489621][T12235] tipc: Enabled bearer , priority 0 [ 282.499686][T12235] syzkaller0: entered promiscuous mode [ 282.506496][T12235] syzkaller0: entered allmulticast mode [ 282.559812][T12235] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1561'. [ 282.582846][T12235] tipc: Resetting bearer [ 282.628319][T12234] tipc: Resetting bearer [ 282.666928][T12234] tipc: Disabling bearer [ 282.714767][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'. [ 282.902035][T12248] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.957332][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1565'. [ 282.967405][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1565'. [ 283.352895][T12272] netlink: 'syz.0.1572': attribute type 13 has an invalid length. [ 283.536813][T12286] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1576'. [ 283.739006][T12298] xt_connbytes: Forcing CT accounting to be enabled [ 283.750397][T12278] bond5: entered promiscuous mode [ 283.756445][T12278] bond5: entered allmulticast mode [ 283.777925][T12278] 8021q: adding VLAN 0 to HW filter on device bond5 [ 284.045856][T12278] bond5 (unregistering): Released all slaves [ 284.082536][T12284] macvtap2: entered allmulticast mode [ 284.088400][T12284] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 284.099219][T12284] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 284.179206][T12293] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 284.197178][T12293] bridge4: entered allmulticast mode [ 284.243676][T12286] wg1 speed is unknown, defaulting to 1000 [ 284.446982][T12315] wg1 speed is unknown, defaulting to 1000 [ 284.625633][T12336] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1582'. [ 284.933653][T12326] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.1581'. [ 284.997021][T12345] netlink: 'syz.3.1583': attribute type 11 has an invalid length. [ 285.443091][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1585'. [ 285.839455][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'. [ 285.925472][T12387] netlink: 'syz.3.1592': attribute type 9 has an invalid length. [ 286.175959][T12396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.352630][T12409] wg1 speed is unknown, defaulting to 1000 [ 286.801843][T12427] No such timeout policy "syz0" [ 287.530069][T12437] netlink: 'syz.2.1607': attribute type 7 has an invalid length. [ 287.555397][T12437] netlink: 'syz.2.1607': attribute type 8 has an invalid length. [ 288.171794][T12455] __nla_validate_parse: 19 callbacks suppressed [ 288.171814][T12455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1613'. [ 288.254039][T12462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1613'. [ 288.696543][T12482] netlink: 'syz.1.1619': attribute type 1 has an invalid length. [ 288.732896][T12482] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1619'. [ 288.751550][T12484] pim6reg: entered allmulticast mode [ 288.752738][T12485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'. [ 289.153472][T12492] netlink: 'syz.2.1617': attribute type 1 has an invalid length. [ 289.181247][T12492] netlink: 'syz.2.1617': attribute type 1 has an invalid length. [ 289.210925][T12492] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1617'. [ 289.387774][T12497] wg1: entered promiscuous mode [ 289.396583][T12497] wg1: entered allmulticast mode [ 289.406941][ T5898] wg1 speed is unknown, defaulting to 1000 [ 289.425259][ T5898] syz0: Port: 1 Link ACTIVE [ 289.476141][T12485] delete_channel: no stack [ 289.650345][T12505] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 289.772070][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1626'. [ 290.040528][T12514] ip6tnl2: entered promiscuous mode [ 290.064909][T12514] ip6tnl2: entered allmulticast mode [ 290.084224][T12514] team0: Device ip6tnl2 is up. Set it down before adding it as a team port [ 290.184117][T12518] bond2: option tlb_dynamic_lb: invalid value (71) [ 290.196044][T12518] bond2 (unregistering): Released all slaves [ 290.603063][T12548] wg1 speed is unknown, defaulting to 1000 [ 291.151057][T12573] netlink: 566 bytes leftover after parsing attributes in process `syz.0.1642'. [ 291.152536][T12572] syz.3.1641 (12572) used obsolete PPPIOCDETACH ioctl [ 291.531450][T12586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1646'. [ 291.714585][ T5839] Bluetooth: hci0: command tx timeout [ 291.785545][T12603] lo: entered allmulticast mode [ 291.831077][T12603] dvmrp8: entered allmulticast mode [ 291.939083][T12603] wg1 speed is unknown, defaulting to 1000 [ 291.983343][T12611] netlink: 'syz.1.1648': attribute type 23 has an invalid length. [ 292.408892][T12596] lo: left allmulticast mode [ 292.439054][T12596] dvmrp8: left allmulticast mode [ 292.495275][T12635] tipc: Enabled bearer , priority 0 [ 292.511484][T12635] syzkaller0: entered promiscuous mode [ 292.518566][T12635] syzkaller0: entered allmulticast mode [ 292.571895][T12642] sch_fq: defrate 2 ignored. [ 292.611716][T12634] tipc: Resetting bearer [ 292.672517][T12634] tipc: Disabling bearer [ 292.864626][T12658] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 293.016607][T12664] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1666'. [ 293.166564][T12672] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1670'. [ 293.217201][T12673] wg1 speed is unknown, defaulting to 1000 [ 293.229722][T12672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1670'. [ 293.662530][T12686] openvswitch: netlink: Flow actions attr not present in new flow. [ 293.746206][T12693] bridge9: entered allmulticast mode [ 293.828591][ T5198] udevd[5198]: worker [5850] terminated by signal 33 (Unknown signal 33) [ 293.839053][ T5198] udevd[5198]: worker [5850] failed while handling '/devices/virtual/block/loop1' [ 294.133634][T12713] netlink: 'syz.4.1680': attribute type 6 has an invalid length. [ 294.219707][T12715] netlink: 'syz.4.1680': attribute type 6 has an invalid length. [ 294.663999][T12721] netlink: 'syz.3.1683': attribute type 2 has an invalid length. [ 294.672654][T12721] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.1683'. [ 295.112343][T12741] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1688'. [ 295.122201][T12741] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 295.472862][T12737] wg1 speed is unknown, defaulting to 1000 [ 296.033600][T12756] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.1691'. [ 296.490462][T12777] wg1 speed is unknown, defaulting to 1000 [ 296.716571][T12785] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1701'. [ 296.829880][T12799] bond2: option min_links: invalid value (18446744073709551612) [ 296.848837][T12799] bond2: option min_links: allowed values 0 - 2147483647 [ 296.892096][T12799] bond2 (unregistering): Released all slaves [ 297.033351][T12806] IPv6: Can't replace route, no match found [ 297.358671][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 297.473539][T12828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1712'. [ 297.582250][T12833] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 297.602073][T12833] bridge10: entered allmulticast mode [ 297.694528][T12828] wg1 speed is unknown, defaulting to 1000 [ 298.079701][T12847] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 298.095344][T12847] bridge7: entered allmulticast mode [ 298.123465][T12847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1717'. [ 298.339450][T12847] veth5: entered allmulticast mode [ 298.356302][T12852] bridge8: port 1(veth0_to_bond) entered blocking state [ 298.363622][T12852] bridge8: port 1(veth0_to_bond) entered disabled state [ 298.398644][T12852] veth0_to_bond: entered allmulticast mode [ 298.440355][T12852] veth0_to_bond: entered promiscuous mode [ 298.480430][T12857] vlan2: entered allmulticast mode [ 298.486752][T12857] veth1: entered allmulticast mode [ 298.506140][T12857] bridge8: port 2(vlan2) entered blocking state [ 298.512697][T12857] bridge8: port 2(vlan2) entered disabled state [ 298.525346][T12857] vlan2: entered promiscuous mode [ 298.530608][T12857] veth1: entered promiscuous mode [ 298.538459][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 298.600369][T12850] wg1 speed is unknown, defaulting to 1000 [ 298.610394][T12858] wg1 speed is unknown, defaulting to 1000 [ 298.659296][T12863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.875748][ T30] audit: type=1804 audit(1760388290.111:3): pid=12870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1722" name="/newroot/350/cgroup.controllers" dev="tmpfs" ino=1813 res=1 errno=0 [ 298.982376][ T30] audit: type=1800 audit(1760388290.121:4): pid=12870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1722" name="cgroup.controllers" dev="tmpfs" ino=1813 res=0 errno=0 [ 299.015130][T12877] Bluetooth: hci0: invalid length 42, exp 2 for type 1 [ 299.023639][T12877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1722'. [ 299.033105][T12877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1722'. [ 299.161426][T12881] netlink: 'syz.2.1723': attribute type 10 has an invalid length. [ 299.198930][T12881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1723'. [ 299.360688][T12879] wg1 speed is unknown, defaulting to 1000 [ 299.536685][T12891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1727'. [ 299.580633][T12891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1727'. [ 299.608658][T12891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1727'. [ 299.672762][T12896] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1728'. [ 299.729273][T12895] netlink: 'syz.2.1729': attribute type 1 has an invalid length. [ 299.766268][T12895] netlink: 'syz.2.1729': attribute type 1 has an invalid length. [ 299.803904][T12895] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1729'. [ 299.926427][T12898] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 299.942691][T12898] bridge5: entered allmulticast mode [ 300.068432][T12896] wg1 speed is unknown, defaulting to 1000 [ 300.148827][T12913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1731'. [ 300.609923][T12916] netlink: 'syz.3.1734': attribute type 10 has an invalid length. [ 301.345777][T12956] wg1 speed is unknown, defaulting to 1000 [ 301.382532][T12967] netlink: 'syz.2.1745': attribute type 13 has an invalid length. [ 301.419704][T12968] ip6tnl2: entered promiscuous mode [ 301.429783][T12968] ip6tnl2: entered allmulticast mode [ 301.501973][T12967] netlink: 'syz.2.1745': attribute type 17 has an invalid length. [ 301.628684][T12967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.640572][T12967] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.661840][T12967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.719972][T12967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.748178][T12969] wg1 speed is unknown, defaulting to 1000 [ 301.862189][T12976] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 301.871560][T12976] bridge4: entered allmulticast mode [ 301.940863][T12979] wg1 speed is unknown, defaulting to 1000 [ 301.990210][T12980] xt_connbytes: Forcing CT accounting to be enabled [ 302.149061][T12978] wg1 speed is unknown, defaulting to 1000 [ 302.211599][T12976] wg1 speed is unknown, defaulting to 1000 [ 302.470181][T13000] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 302.483566][T13000] SET target dimension over the limit! [ 303.120529][T13017] wg1 speed is unknown, defaulting to 1000 [ 303.300239][T13012] wg1 speed is unknown, defaulting to 1000 [ 303.372019][T13031] netlink: 'syz.4.1761': attribute type 4 has an invalid length. [ 303.698164][T13043] __nla_validate_parse: 7 callbacks suppressed [ 303.698185][T13043] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1764'. [ 303.766563][T13049] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1765'. [ 303.769899][T13039] bond7: option lacp_active: invalid value (7) [ 303.791833][T13039] bond7 (unregistering): Released all slaves [ 303.885847][T13052] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 303.917767][T13052] bridge6: entered allmulticast mode [ 304.048490][T13058] netlink: 'syz.3.1767': attribute type 1 has an invalid length. [ 304.066454][T13054] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1766'. [ 304.106258][T13058] 8021q: adding VLAN 0 to HW filter on device bond6 [ 304.148970][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.168452][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.199986][T13058] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 304.312192][T13070] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1770'. [ 304.339032][T13067] wg1 speed is unknown, defaulting to 1000 [ 304.632089][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1772'. [ 304.717503][T13086] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1774'. [ 304.842191][T13091] geneve3: entered promiscuous mode [ 304.854928][T13091] geneve3: entered allmulticast mode [ 304.894734][T13088] wg1 speed is unknown, defaulting to 1000 [ 305.158831][T13101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.248359][T13101] wg1 speed is unknown, defaulting to 1000 [ 305.266223][T13104] netlink: 'syz.0.1778': attribute type 6 has an invalid length. [ 305.537570][T13108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1780'. [ 305.800801][T13111] netlink: 'syz.0.1781': attribute type 12 has an invalid length. [ 305.841661][T13111] gtp0: entered promiscuous mode [ 305.863890][T13111] gtp0: entered allmulticast mode [ 305.918094][T13111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1781'. [ 306.035893][ T56] block nbd0: Possible stuck request ffff8880253a0000: control (read@0,1024B). Runtime 180 seconds [ 306.047572][ T56] block nbd0: Possible stuck request ffff8880253a01c0: control (read@1024,1024B). Runtime 180 seconds [ 306.060051][ T56] block nbd0: Possible stuck request ffff8880253a0380: control (read@2048,1024B). Runtime 180 seconds [ 306.072325][ T56] block nbd0: Possible stuck request ffff8880253a0540: control (read@3072,1024B). Runtime 180 seconds [ 306.364038][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 306.392904][T13134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1787'. [ 306.571578][T13140] netlink: 'syz.1.1790': attribute type 1 has an invalid length. [ 306.579614][T13140] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1790'. [ 307.364952][T13187] xt_limit: Overflow, try lower: 268435456/134217728 [ 307.427909][T13185] block nbd1: shutting down sockets [ 307.528412][T13193] netlink: 'syz.2.1804': attribute type 1 has an invalid length. [ 307.724737][T13207] wg1: left promiscuous mode [ 307.743137][T13207] wg1: left allmulticast mode [ 307.779280][T13207] bridge3: left allmulticast mode [ 307.810570][T13207] bond1: left promiscuous mode [ 307.835941][T13207] ip6gre1: left allmulticast mode [ 307.916606][T13207] bridge0: left allmulticast mode [ 307.931269][T13207] bridge4: left allmulticast mode [ 307.950168][T13207] bridge5: left allmulticast mode [ 307.961102][T13207] ip6tnl2: left promiscuous mode [ 307.967662][T13207] ip6tnl2: left allmulticast mode [ 307.987359][T13207] bridge6: left allmulticast mode [ 308.010546][ T5898] wg1 speed is unknown, defaulting to 1000 [ 308.030270][ T5898] syz0: Port: 1 Link DOWN [ 308.075693][ T3534] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.115373][ T3534] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.147283][ T3534] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.249869][ T3534] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.354985][T13211] wg1 speed is unknown, defaulting to 1000 [ 308.426578][T13220] IPVS: Scheduler module ip_vs_sip not found [ 308.705490][T13235] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 308.713298][T13235] __nla_validate_parse: 10 callbacks suppressed [ 308.713317][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1813'. [ 308.737575][T13235] sch_fq: defrate 0 ignored. [ 308.797000][T13237] netlink: 'syz.3.1814': attribute type 3 has an invalid length. [ 308.805323][T13237] netlink: 'syz.3.1814': attribute type 3 has an invalid length. [ 308.868292][T13239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1815'. [ 309.229155][T13256] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 309.246940][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 309.262628][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 309.921809][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 310.049817][T13276] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 310.102504][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 310.138451][T13285] bond0: (slave bridge0): Releasing backup interface [ 310.198167][T13285] bridge0: left promiscuous mode [ 310.308281][T13285] ¾x9ÿ: left allmulticast mode [ 310.313137][T13285] ¾x9ÿ: left promiscuous mode [ 310.319200][T13291] netlink: 'syz.1.1827': attribute type 10 has an invalid length. [ 310.328276][T13285] bridge0: port 1(1¾x9ÿ) entered disabled state [ 310.338583][T13285] bridge_slave_1: left allmulticast mode [ 310.346497][T13285] bridge_slave_1: left promiscuous mode [ 310.353534][T13285] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.373312][T13285] bond0: (slave bond_slave_0): Releasing backup interface [ 310.385113][T13285] bond_slave_0: left promiscuous mode [ 310.392968][T13285] bond0: (slave bond_slave_1): Releasing backup interface [ 310.401701][T13285] bond_slave_1: left promiscuous mode [ 310.408972][T13285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.421457][T13285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.431084][T13285] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 310.461435][T13291] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 310.478008][T13291] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 310.488909][T13291] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 310.536965][T13305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.563743][T13305] bond0: (slave rose0): Enslaving as an active interface with an up link [ 310.668935][T13290] wg1 speed is unknown, defaulting to 1000 [ 311.068157][T13330] netlink: 'syz.3.1837': attribute type 1 has an invalid length. [ 311.078560][T13330] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1837'. [ 311.519829][T13345] bridge0: port 1(veth0_to_bridge) entered blocking state [ 311.529902][T13345] bridge0: port 1(veth0_to_bridge) entered disabled state [ 311.538082][T13345] veth0_to_bridge: entered allmulticast mode [ 311.550618][T13345] veth0_to_bridge: entered promiscuous mode [ 311.810487][T13354] bond0: option resend_igmp: invalid value (1793847487) [ 311.817729][T13354] bond0: option resend_igmp: allowed values 0 - 255 [ 311.986362][T13363] netlink: 'syz.0.1845': attribute type 83 has an invalid length. [ 312.491974][T13373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1847'. [ 312.696535][T13378] wg1 speed is unknown, defaulting to 1000 [ 312.803505][T13385] tap0: tun_chr_ioctl cmd 1074025677 [ 312.810566][T13385] tap0: linktype set to 825 [ 312.992343][T13398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1853'. [ 313.068943][T13400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1853'. [ 314.095635][T13424] netlink: 'syz.4.1858': attribute type 1 has an invalid length. [ 314.362856][T13440] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 314.563017][T13457] wg1 speed is unknown, defaulting to 1000 [ 314.795746][T13467] syzkaller1: entered promiscuous mode [ 314.801373][T13467] syzkaller1: entered allmulticast mode [ 314.885453][T13475] __nla_validate_parse: 1 callbacks suppressed [ 314.885475][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 315.021806][T13468] wg1 speed is unknown, defaulting to 1000 [ 315.483467][T13491] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 315.753193][T13501] tipc: Enabled bearer , priority 0 [ 315.761633][T13501] syzkaller0: entered promiscuous mode [ 315.768335][T13501] syzkaller0: entered allmulticast mode [ 315.836689][T13501] tipc: Resetting bearer [ 315.868052][T13500] tipc: Resetting bearer [ 316.069286][T13500] tipc: Disabling bearer [ 316.073600][T13510] netlink: 'syz.3.1876': attribute type 1 has an invalid length. [ 316.100854][T13506] tc_dump_action: action bad kind [ 316.277282][T13513] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 316.305902][T13513] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 316.328928][T13517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1877'. [ 316.341568][T13510] netlink: 'syz.3.1876': attribute type 10 has an invalid length. [ 316.388365][T13526] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1879'. [ 316.459379][T13525] netlink: 'syz.0.1880': attribute type 3 has an invalid length. [ 316.720032][T13540] wg1 speed is unknown, defaulting to 1000 [ 316.788025][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1887'. [ 316.822098][T13537] wg1 speed is unknown, defaulting to 1000 [ 316.873351][T13553] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 316.899064][T13542] wg1 speed is unknown, defaulting to 1000 [ 317.052914][T13563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1890'. [ 317.103111][T13563] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.180635][T13569] block nbd2: Unsupported socket: should be TCP or UNIX. [ 317.287410][T13574] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1894'. [ 317.572873][T13593] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1895'. [ 317.609120][T13577] veth2: entered promiscuous mode [ 317.615934][T13577] veth2: entered allmulticast mode [ 317.674388][T13572] wg1 speed is unknown, defaulting to 1000 [ 317.984817][T13591] wg1 speed is unknown, defaulting to 1000 [ 318.056386][T13610] !: renamed from dummy0 [ 318.273989][T13601] wg1 speed is unknown, defaulting to 1000 [ 318.393458][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'. [ 318.596655][T13622] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1901'. [ 318.633973][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1901'. [ 319.209859][T13625] netlink: 'syz.4.1904': attribute type 1 has an invalid length. [ 319.224202][T13625] netlink: 'syz.4.1904': attribute type 1 has an invalid length. [ 319.286420][T13621] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 320.020703][T13648] __nla_validate_parse: 2 callbacks suppressed [ 320.020727][T13648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1911'. [ 320.234338][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1912'. [ 320.243567][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1912'. [ 320.263191][T13655] netlink: 'syz.1.1912': attribute type 15 has an invalid length. [ 320.281237][T13659] netlink: 'syz.0.1913': attribute type 30 has an invalid length. [ 320.426990][T13664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1914'. [ 320.475307][T13666] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1915'. [ 320.672127][T13676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1913'. [ 320.815088][T13679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1916'. [ 320.894000][T13680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1916'. [ 321.075493][T13688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1919'. [ 321.864998][T13711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1926'. [ 321.988353][T13711] batadv1: left allmulticast mode [ 322.009248][T13711] batadv1: left promiscuous mode [ 322.024867][T13711] bridge0: port 3(batadv1) entered disabled state [ 322.496002][T13748] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 322.506992][T13748] SET target dimension over the limit! [ 322.706536][T13753] nicvf0: entered promiscuous mode [ 322.747999][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 322.766922][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 322.801059][T12906] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 322.844474][T12906] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 323.149921][T13787] netlink: 'syz.1.1949': attribute type 1 has an invalid length. [ 323.188112][T13788] netlink: 'syz.3.1950': attribute type 1 has an invalid length. [ 323.197366][T13788] netlink: 'syz.3.1950': attribute type 1 has an invalid length. [ 323.320082][T13798] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 323.903617][T13818] tipc: Enabling of bearer rejected, failed to enable media [ 324.287630][T13823] dvmrp8: entered allmulticast mode [ 324.330093][T13824] wg1 speed is unknown, defaulting to 1000 [ 324.358685][T13823] netlink: 'syz.3.1960': attribute type 23 has an invalid length. [ 324.676430][T13838] wg1 speed is unknown, defaulting to 1000 [ 324.788783][T13822] dvmrp8: left allmulticast mode [ 325.091267][T13842] wg1 speed is unknown, defaulting to 1000 [ 325.823566][T13862] Bluetooth: MGMT ver 1.23 [ 325.897306][T13868] __nla_validate_parse: 8 callbacks suppressed [ 325.897327][T13868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1972'. [ 325.945104][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1972'. [ 325.957767][T13874] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1971'. [ 325.967380][T13874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1971'. [ 325.997959][T13874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1971'. [ 326.082470][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1972'. [ 326.147816][T13876] netlink: 'syz.0.1972': attribute type 13 has an invalid length. [ 326.619492][T13884] netlink: 'syz.3.1975': attribute type 1 has an invalid length. [ 326.628911][T13884] netlink: 'syz.3.1975': attribute type 1 has an invalid length. [ 326.786579][T13869] wg1 speed is unknown, defaulting to 1000 [ 326.905981][T13891] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1977'. [ 327.060768][T13901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1978'. [ 327.356851][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1979'. [ 327.672151][T13930] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1983'. [ 327.707295][T13930] netlink: 'syz.2.1983': attribute type 1 has an invalid length. [ 327.901534][T13928] wg1 speed is unknown, defaulting to 1000 [ 328.947198][T13947] wg1 speed is unknown, defaulting to 1000 [ 329.042128][T13957] wg1 speed is unknown, defaulting to 1000 [ 329.332418][T13973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.908266][T13980] IPVS: Scheduler module ip_vs_ not found [ 330.295523][T13992] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 330.315922][T13992] dvmrp1: linktype set to 768 [ 330.351798][T13995] vxcan2: entered allmulticast mode [ 330.854637][T14009] syzkaller0: entered promiscuous mode [ 330.860198][T14009] syzkaller0: entered allmulticast mode [ 331.050296][T14016] wg1 speed is unknown, defaulting to 1000 [ 331.180269][T14024] netlink: 'syz.1.2009': attribute type 16 has an invalid length. [ 331.236666][T14030] IPv6: NLM_F_REPLACE set, but no existing node found! [ 331.263357][T14024] netlink: 'syz.1.2009': attribute type 17 has an invalid length. [ 331.420382][T14007] __nla_validate_parse: 5 callbacks suppressed [ 331.420405][T14007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'. [ 331.452808][T14035] bond4: option lp_interval: invalid value (0) [ 331.474339][T14035] bond4: option lp_interval: allowed values 1 - 2147483647 [ 331.517905][T14035] bond4 (unregistering): Released all slaves [ 332.157977][T14053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.219510][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 332.347255][T14050] wg1 speed is unknown, defaulting to 1000 [ 332.500347][T14072] netlink: 'syz.2.2020': attribute type 1 has an invalid length. [ 332.531976][T14072] netlink: 'syz.2.2020': attribute type 3 has an invalid length. [ 332.542070][T14072] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2020'. [ 332.573498][T14074] netlink: 'syz.4.2019': attribute type 13 has an invalid length. [ 332.584527][T14072] NCSI netlink: No device for ifindex 246 [ 332.593315][T14074] netlink: 'syz.4.2019': attribute type 17 has an invalid length. [ 332.619279][T14072] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2020'. [ 332.712531][T14074] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.743533][T14074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.885135][T14073] wg1 speed is unknown, defaulting to 1000 [ 332.954798][T14074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2019'. [ 332.995899][T14079] wg1 speed is unknown, defaulting to 1000 [ 333.004765][T14089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2024'. [ 333.045348][T14086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.079373][T14089] vlan2: entered promiscuous mode [ 333.084994][T14089] bond0: entered promiscuous mode [ 333.094658][T14089] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 333.164494][T14074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.258251][T14071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.510096][T14103] dvmrp0: left allmulticast mode [ 333.681191][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2027'. [ 334.183616][T14121] bond0: (slave wlan1): Releasing backup interface [ 334.197896][T14125] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2029'. [ 334.223615][T14121] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 334.660391][T14145] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 334.678128][T14154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2037'. [ 334.715636][T14157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2038'. [ 334.743386][T14147] wg1 speed is unknown, defaulting to 1000 [ 334.957736][T14165] netlink: 'syz.1.2039': attribute type 30 has an invalid length. [ 335.043059][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.053643][T14165] netlink: 'syz.1.2039': attribute type 30 has an invalid length. [ 335.071996][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.109567][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.121631][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.366752][T14180] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 335.711947][T14194] netlink: 'syz.4.2048': attribute type 10 has an invalid length. [ 335.722324][T14198] 8021q: adding VLAN 0 to HW filter on device bond8 [ 335.814317][T14195] netlink: 'syz.4.2048': attribute type 10 has an invalid length. [ 335.842132][T14195] dummy0: entered promiscuous mode [ 335.895252][T14194] team0: Port device dummy0 added [ 336.114627][ T56] block nbd0: Possible stuck request ffff8880253a0000: control (read@0,1024B). Runtime 210 seconds [ 336.126540][ T56] block nbd0: Possible stuck request ffff8880253a01c0: control (read@1024,1024B). Runtime 210 seconds [ 336.138116][ T56] block nbd0: Possible stuck request ffff8880253a0380: control (read@2048,1024B). Runtime 210 seconds [ 336.149905][ T56] block nbd0: Possible stuck request ffff8880253a0540: control (read@3072,1024B). Runtime 210 seconds [ 336.218603][T14227] batadv_slave_1: entered promiscuous mode [ 336.239104][T14226] batadv_slave_1: left promiscuous mode [ 336.359786][T14244] netlink: 'syz.3.2065': attribute type 1 has an invalid length. [ 336.396900][T14244] 8021q: adding VLAN 0 to HW filter on device bond9 [ 336.421164][T14244] bond9: entered allmulticast mode [ 336.508272][T14244] bond9: (slave ip6gretap1): making interface the new active one [ 336.529457][T14244] ip6gretap1: entered allmulticast mode [ 336.554650][T14244] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 336.627747][T14259] __nla_validate_parse: 12 callbacks suppressed [ 336.627768][T14259] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2068'. [ 336.710872][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2071'. [ 336.823922][T14261] wg1 speed is unknown, defaulting to 1000 [ 336.877027][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2074'. [ 336.893895][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2074'. [ 337.130511][T14284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2075'. [ 337.559877][T14322] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2079'. [ 337.648471][T14322] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 338.222284][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2084'. [ 338.573005][T14351] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2087'. [ 338.640607][T14354] netlink: 'syz.0.2089': attribute type 13 has an invalid length. [ 338.674357][T14354] netlink: 'syz.0.2089': attribute type 17 has an invalid length. [ 338.777336][T14360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2091'. [ 338.951683][T14354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.967579][T14354] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.991946][T14354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.271794][T14382] IPVS: Scheduler module ip_vs_ not found [ 339.278961][T14385] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2094'. [ 339.694501][T14402] block nbd2: server does not support multiple connections per device. [ 339.705216][T14402] block nbd2: shutting down sockets [ 340.088419][T14449] wg1 speed is unknown, defaulting to 1000 [ 340.698613][T14478] wg1 speed is unknown, defaulting to 1000 [ 341.398395][T14505] x_tables: duplicate underflow at hook 1 [ 341.749001][T14521] netlink: 'syz.1.2129': attribute type 3 has an invalid length. [ 341.762111][T14517] bond4: entered promiscuous mode [ 341.799454][T14517] bond4: entered allmulticast mode [ 341.805688][T14517] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.983563][T14508] __nla_validate_parse: 4 callbacks suppressed [ 341.983583][T14508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2123'. [ 342.011698][T14517] wg1 speed is unknown, defaulting to 1000 [ 342.078657][T14536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2131'. [ 342.133227][T14538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2132'. [ 342.241139][T14541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 342.390177][T14544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2133'. [ 342.490281][T14547] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2133'. [ 342.515528][T14546] ip6t_srh: unknown srh invflags 4000 [ 342.523585][T14546] syzkaller1: entered promiscuous mode [ 342.537654][T14546] syzkaller1: entered allmulticast mode [ 342.954134][T14558] wg1 speed is unknown, defaulting to 1000 [ 343.207657][T14573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2140'. [ 343.418933][T14579] No such timeout policy "syz0" [ 343.445283][T14580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2142'. [ 343.499768][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2142'. [ 343.756509][T14575] bond5: option resend_igmp: invalid value (18446744073709548392) [ 343.784893][T14575] bond5: option resend_igmp: allowed values 0 - 255 [ 343.818190][T14575] bond5 (unregistering): Released all slaves [ 343.850846][T14588] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2143'. [ 344.595160][T14599] netlink: 'syz.1.2146': attribute type 9 has an invalid length. [ 344.963582][T14614] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.975989][T14614] hsr0: entered promiscuous mode [ 344.981093][T14614] hsr0: entered allmulticast mode [ 344.986580][T14614] hsr_slave_0: entered allmulticast mode [ 345.053174][T14612] wg1 speed is unknown, defaulting to 1000 [ 345.199534][T14619] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 345.619673][T14628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.680917][T14626] unsupported nlmsg_type 40 [ 345.720676][T14626] netlink: 'syz.2.2153': attribute type 1 has an invalid length. [ 345.973232][T14637] wg1 speed is unknown, defaulting to 1000 [ 346.126433][T14636] wg1 speed is unknown, defaulting to 1000 [ 346.217851][T14646] bond0: (slave gretap0): Error: Device type is different from other slaves [ 346.933472][T14661] vxcan1: left allmulticast mode [ 346.987832][T14661] gtp0: left allmulticast mode [ 347.002108][T14661] bond2: left allmulticast mode [ 347.014847][T14661] bridge3: left allmulticast mode [ 347.033653][T14661] veth7: left promiscuous mode [ 347.051363][T14661] bridge4: left allmulticast mode [ 347.092404][T12906] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.112569][T12906] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.120325][T14670] __nla_validate_parse: 4 callbacks suppressed [ 347.120350][T14670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2165'. [ 347.168091][T14670] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2165'. [ 347.168097][T12906] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.168146][T12906] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.224777][T14668] wg1 speed is unknown, defaulting to 1000 [ 347.336818][T14675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2167'. [ 347.373896][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'. [ 347.386987][T14679] netlink: 'syz.1.2166': attribute type 10 has an invalid length. [ 347.410462][T14679] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2166'. [ 347.457541][T14679] !: entered promiscuous mode [ 347.497867][T14679] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 347.550457][ T30] audit: type=1800 audit(1760388338.791:5): pid=14687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2170" name="memory.events" dev="tmpfs" ino=2198 res=0 errno=0 [ 347.576304][ T30] audit: type=1804 audit(1760388338.811:6): pid=14687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2170" name="/newroot/424/memory.events" dev="tmpfs" ino=2198 res=1 errno=0 [ 347.799940][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2171'. [ 347.851495][T14701] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2172'. [ 348.130416][T14710] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2175'. [ 348.706000][ T30] audit: type=1800 audit(1760388339.951:7): pid=14735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2180" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=2332 res=0 errno=0 [ 348.801843][ T30] audit: type=1804 audit(1760388339.981:8): pid=14735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2180" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=2332 res=1 errno=0 [ 349.072996][T14749] veth7: entered promiscuous mode [ 349.249092][T14759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2185'. [ 349.293086][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2184'. [ 349.445698][T14765] syzkaller1: entered promiscuous mode [ 349.470048][T14772] sctp: [Deprecated]: syz.4.2189 (pid 14772) Use of int in max_burst socket option deprecated. [ 349.470048][T14772] Use struct sctp_assoc_value instead [ 349.479802][T14765] syzkaller1: entered allmulticast mode [ 349.948346][T14797] xt_CONNSECMARK: invalid mode: 66 [ 351.419168][ T5198] udevd[5198]: worker [5851] /devices/virtual/block/nbd0 timeout; kill it [ 351.461072][ T5198] udevd[5198]: seq 12063 '/devices/virtual/block/nbd0' killed [ 352.816388][T14893] pim6reg: entered allmulticast mode [ 353.166607][T14906] netlink: 'syz.3.2216': attribute type 1 has an invalid length. [ 353.195961][T14906] __nla_validate_parse: 6 callbacks suppressed [ 353.195982][T14906] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2216'. [ 353.257930][T14906] netlink: 'syz.3.2216': attribute type 2 has an invalid length. [ 353.290499][T14906] netlink: 'syz.3.2216': attribute type 1 has an invalid length. [ 353.445879][T14913] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2218'. [ 353.703010][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'. [ 353.722694][T14925] pim6reg1: entered promiscuous mode [ 353.726544][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2221'. [ 353.729829][T14925] pim6reg1: entered allmulticast mode [ 353.748115][T14926] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 353.764894][T14926] netlink: 'syz.2.2223': attribute type 1 has an invalid length. [ 353.791432][T14930] openvswitch: netlink: Missing key (keys=40, expected=80) [ 353.834922][T14926] 8021q: adding VLAN 0 to HW filter on device bond5 [ 353.860767][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2224'. [ 353.894728][T14934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.908073][T14934] bond5: (slave batadv0): making interface the new active one [ 353.919718][T14934] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 353.954660][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 354.099047][T14934] bond5 (unregistering): (slave batadv0): Releasing active interface [ 354.109848][T14934] bond5 (unregistering): Released all slaves [ 354.147110][T14939] geneve0: entered promiscuous mode [ 354.181386][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 354.190458][ T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 354.200029][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 354.211407][ T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 354.309720][T14949] syzkaller1: entered promiscuous mode [ 354.315725][T14949] syzkaller1: entered allmulticast mode [ 354.441106][T14960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2229'. [ 354.576156][T14966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2231'. [ 354.768460][T14973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2233'. [ 355.134251][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'. [ 355.465133][T14992] tipc: Enabled bearer , priority 0 [ 355.472071][T14994] tipc: Enabling of bearer rejected, already enabled [ 355.533129][T14995] syzkaller0: entered promiscuous mode [ 355.539087][T14995] syzkaller0: entered allmulticast mode [ 355.715512][T14992] tipc: Resetting bearer [ 355.770812][T14992] tipc: Disabling bearer [ 355.779540][T15009] netlink: 'syz.0.2243': attribute type 4 has an invalid length. [ 355.793223][T15009] netlink: 'syz.0.2243': attribute type 2 has an invalid length. [ 355.813907][ T5839] Bluetooth: hci0: command tx timeout [ 355.988629][T15017] x_tables: duplicate underflow at hook 4 [ 356.021209][T15022] wg1 speed is unknown, defaulting to 1000 [ 356.207376][T15029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.641847][T15048] netlink: 'syz.3.2254': attribute type 1 has an invalid length. [ 356.777875][T15048] bond10: entered promiscuous mode [ 356.797602][T15048] 8021q: adding VLAN 0 to HW filter on device bond10 [ 356.862304][T15054] wg1 speed is unknown, defaulting to 1000 [ 357.070819][T15067] netlink: 'syz.0.2255': attribute type 13 has an invalid length. [ 357.118834][T15067] netlink: 'syz.0.2255': attribute type 17 has an invalid length. [ 357.291170][T15077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.370242][T15062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.439495][T15067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.544635][T14960] Set syz1 is full, maxelem 65536 reached [ 359.788907][T15098] __nla_validate_parse: 3 callbacks suppressed [ 359.788931][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2260'. [ 359.861927][T15071] wg1 speed is unknown, defaulting to 1000 [ 360.327983][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2262'. [ 360.361913][T15115] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 360.400630][T15127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2264'. [ 360.533304][T15131] wg1 speed is unknown, defaulting to 1000 [ 360.713660][T15141] tipc: Enabling of bearer rejected, failed to enable media [ 360.950019][T15143] tap0: tun_chr_ioctl cmd 1074025677 [ 360.964324][T15143] tap0: linktype set to 804 [ 361.369911][T15169] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2277'. [ 361.434146][T15162] wg1 speed is unknown, defaulting to 1000 [ 361.633015][T15179] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2279'. [ 361.688112][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2280'. [ 361.862931][T15188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2281'. [ 362.062514][T15182] wg1 speed is unknown, defaulting to 1000 [ 362.451769][T15191] wg1 speed is unknown, defaulting to 1000 [ 362.711603][T15209] tipc: Enabling of bearer rejected, media not registered [ 362.862974][T15200] wg1 speed is unknown, defaulting to 1000 [ 363.056226][T15223] netlink: 'syz.0.2285': attribute type 10 has an invalid length. [ 363.115941][T15202] netlink: 'syz.2.2283': attribute type 1 has an invalid length. [ 363.136011][T15202] netlink: 'syz.2.2283': attribute type 1 has an invalid length. [ 363.147145][T15223] bond0: (slave 0!): Releasing backup interface [ 363.168593][T15223] !: entered promiscuous mode [ 363.174977][T15223] team0: Failed to send port change of device 0! via netlink (err -105) [ 363.184071][T15223] team0: Failed to send options change via netlink (err -105) [ 363.191720][T15223] team0: Port device 0! added [ 363.302228][T15202] wg1 speed is unknown, defaulting to 1000 [ 363.604735][T15244] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2290'. [ 363.778656][T15250] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2292'. [ 363.942931][T15255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2293'. [ 364.460434][T15266] wg1 speed is unknown, defaulting to 1000 [ 364.572505][T15273] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 364.777303][T15269] wg1 speed is unknown, defaulting to 1000 [ 364.925117][T15284] __nla_validate_parse: 1 callbacks suppressed [ 364.925140][T15284] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2300'. [ 364.973413][T15288] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2301'. [ 365.032098][T15280] wg1 speed is unknown, defaulting to 1000 [ 365.032124][T15284] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2300'. [ 365.048849][T15284] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2300'. [ 365.220555][T15292] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.231654][T15292] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.486763][T15305] tipc: Enabling of bearer rejected, failed to enable media [ 365.506171][T15308] vlan3: entered promiscuous mode [ 365.511258][T15308] geneve1: entered promiscuous mode [ 365.517462][T15308] vlan3: entered allmulticast mode [ 365.522596][T15308] geneve1: entered allmulticast mode [ 365.532361][T15292] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.542908][T15292] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.560911][T15306] tipc: Enabling of bearer rejected, failed to enable media [ 365.681309][T15292] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.701654][T15292] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.719882][T15317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2307'. [ 365.797267][T15314] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2307'. [ 365.807693][T15314] openvswitch: netlink: Message has 512 unknown bytes. [ 365.819829][T15292] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.830473][T15292] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.027610][ T3534] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.051933][ T3534] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.087764][T15326] netlink: 'syz.4.2312': attribute type 13 has an invalid length. [ 366.113520][ T3534] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.129624][ T3534] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.208378][ T56] block nbd0: Possible stuck request ffff8880253a0000: control (read@0,1024B). Runtime 240 seconds [ 366.220283][ T56] block nbd0: Possible stuck request ffff8880253a01c0: control (read@1024,1024B). Runtime 240 seconds [ 366.232311][ T56] block nbd0: Possible stuck request ffff8880253a0380: control (read@2048,1024B). Runtime 240 seconds [ 366.244711][ T56] block nbd0: Possible stuck request ffff8880253a0540: control (read@3072,1024B). Runtime 240 seconds [ 366.408616][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2312'. [ 366.613008][ T9530] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.646989][ T9530] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.714720][T15331] wg1 speed is unknown, defaulting to 1000 [ 366.725373][T15349] netlink: 'syz.1.2317': attribute type 1 has an invalid length. [ 366.769500][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.784116][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.808148][T15353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2317'. [ 366.924989][T15291] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.936469][T15291] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.966478][T15357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2319'. [ 367.031304][ T12] ================================================================== [ 367.039441][ T12] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 367.047039][ T12] Read of size 8 at addr ffff88807d50c4b0 by task kworker/u8:0/12 [ 367.054888][ T12] [ 367.057256][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 367.057284][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.057299][ T12] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 367.057337][ T12] Call Trace: [ 367.057346][ T12] [ 367.057355][ T12] dump_stack_lvl+0x189/0x250 [ 367.057380][ T12] ? __kasan_check_byte+0x12/0x40 [ 367.057416][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.057438][ T12] ? lock_release+0x4b/0x3e0 [ 367.057464][ T12] ? __virt_addr_valid+0x4a5/0x5c0 [ 367.057495][ T12] print_report+0xca/0x240 [ 367.057522][ T12] ? __mutex_lock+0x147/0x1350 [ 367.057550][ T12] kasan_report+0x118/0x150 [ 367.057567][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 367.057593][ T12] ? __mutex_lock+0x147/0x1350 [ 367.057625][ T12] __mutex_lock+0x147/0x1350 [ 367.057656][ T12] ? __mutex_lock+0x5bb/0x1350 [ 367.057686][ T12] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 367.057714][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 367.057744][ T12] ? __lock_acquire+0xab9/0xd20 [ 367.057772][ T12] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 367.057802][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 367.057824][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 367.057849][ T12] process_scheduled_works+0xae1/0x17b0 [ 367.057888][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 367.057922][ T12] worker_thread+0x8a0/0xda0 [ 367.057961][ T12] kthread+0x711/0x8a0 [ 367.057991][ T12] ? __pfx_worker_thread+0x10/0x10 [ 367.058023][ T12] ? __pfx_kthread+0x10/0x10 [ 367.058052][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 367.058075][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.058099][ T12] ? __pfx_kthread+0x10/0x10 [ 367.058129][ T12] ret_from_fork+0x4bc/0x870 [ 367.058153][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 367.058178][ T12] ? __switch_to_asm+0x39/0x70 [ 367.058202][ T12] ? __switch_to_asm+0x33/0x70 [ 367.058226][ T12] ? __pfx_kthread+0x10/0x10 [ 367.058255][ T12] ret_from_fork_asm+0x1a/0x30 [ 367.058292][ T12] [ 367.058300][ T12] [ 367.261407][ T12] Allocated by task 15292: [ 367.265842][ T12] kasan_save_track+0x3e/0x80 [ 367.270537][ T12] __kasan_kmalloc+0x93/0xb0 [ 367.275142][ T12] __kmalloc_noprof+0x411/0x7f0 [ 367.280004][ T12] udp_tunnel_nic_netdevice_event+0x4c3/0x1810 [ 367.286164][ T12] notifier_call_chain+0x1b6/0x3e0 [ 367.291285][ T12] register_netdevice+0x1608/0x1ae0 [ 367.296493][ T12] nsim_create+0xae8/0xf10 [ 367.300911][ T12] __nsim_dev_port_add+0x6b6/0xb10 [ 367.306028][ T12] nsim_dev_port_add_all+0x37/0xf0 [ 367.311145][ T12] nsim_dev_reload_up+0x451/0x780 [ 367.316175][ T12] devlink_reload+0x4e9/0x8d0 [ 367.320858][ T12] devlink_nl_reload_doit+0xb35/0xd50 [ 367.326235][ T12] genl_family_rcv_msg_doit+0x212/0x300 [ 367.331796][ T12] genl_rcv_msg+0x60e/0x790 [ 367.336307][ T12] netlink_rcv_skb+0x205/0x470 [ 367.341075][ T12] genl_rcv+0x28/0x40 [ 367.345076][ T12] netlink_unicast+0x82f/0x9e0 [ 367.349854][ T12] netlink_sendmsg+0x805/0xb30 [ 367.354621][ T12] __sock_sendmsg+0x21c/0x270 [ 367.359305][ T12] ____sys_sendmsg+0x505/0x830 [ 367.364075][ T12] ___sys_sendmsg+0x21f/0x2a0 [ 367.368754][ T12] __x64_sys_sendmsg+0x19b/0x260 [ 367.373697][ T12] do_syscall_64+0xfa/0xfa0 [ 367.378210][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.384110][ T12] [ 367.386439][ T12] Freed by task 15291: [ 367.390508][ T12] kasan_save_track+0x3e/0x80 [ 367.395237][ T12] __kasan_save_free_info+0x46/0x50 [ 367.400441][ T12] __kasan_slab_free+0x5c/0x80 [ 367.405215][ T12] kfree+0x19a/0x6d0 [ 367.409141][ T12] udp_tunnel_nic_netdevice_event+0x11ab/0x1810 [ 367.415382][ T12] notifier_call_chain+0x1b6/0x3e0 [ 367.420500][ T12] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 367.426927][ T12] unregister_netdevice_queue+0x33c/0x380 [ 367.432656][ T12] nsim_destroy+0x1dd/0x670 [ 367.437167][ T12] __nsim_dev_port_del+0x14d/0x1b0 [ 367.442291][ T12] nsim_dev_reload_destroy+0x288/0x490 [ 367.447753][ T12] nsim_dev_reload_down+0x8a/0xc0 [ 367.452795][ T12] devlink_reload+0x1b3/0x8d0 [ 367.457476][ T12] devlink_nl_reload_doit+0xb35/0xd50 [ 367.462850][ T12] genl_family_rcv_msg_doit+0x212/0x300 [ 367.468405][ T12] genl_rcv_msg+0x60e/0x790 [ 367.472919][ T12] netlink_rcv_skb+0x205/0x470 [ 367.477690][ T12] genl_rcv+0x28/0x40 [ 367.481710][ T12] netlink_unicast+0x82f/0x9e0 [ 367.486487][ T12] netlink_sendmsg+0x805/0xb30 [ 367.491262][ T12] __sock_sendmsg+0x21c/0x270 [ 367.495952][ T12] ____sys_sendmsg+0x505/0x830 [ 367.500728][ T12] ___sys_sendmsg+0x21f/0x2a0 [ 367.505409][ T12] __x64_sys_sendmsg+0x19b/0x260 [ 367.510352][ T12] do_syscall_64+0xfa/0xfa0 [ 367.514862][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.520757][ T12] [ 367.523080][ T12] Last potentially related work creation: [ 367.528795][ T12] kasan_save_stack+0x3e/0x60 [ 367.533484][ T12] kasan_record_aux_stack+0xbd/0xd0 [ 367.538689][ T12] insert_work+0x3d/0x330 [ 367.543019][ T12] __queue_work+0xbaf/0xfb0 [ 367.547524][ T12] queue_work_on+0x181/0x270 [ 367.552119][ T12] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 367.557754][ T12] udp_tunnel_push_rx_port+0x17d/0x200 [ 367.563214][ T12] geneve_offload_rx_ports+0xd7/0x160 [ 367.568595][ T12] geneve_netdevice_event+0x6a/0x80 [ 367.573803][ T12] notifier_call_chain+0x1b6/0x3e0 [ 367.578925][ T12] call_netdevice_notifiers+0x88/0xc0 [ 367.584320][ T12] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 367.590493][ T12] notifier_call_chain+0x1b6/0x3e0 [ 367.595615][ T12] register_netdevice+0x1608/0x1ae0 [ 367.600823][ T12] nsim_create+0xae8/0xf10 [ 367.605241][ T12] __nsim_dev_port_add+0x6b6/0xb10 [ 367.610364][ T12] nsim_dev_port_add_all+0x37/0xf0 [ 367.615481][ T12] nsim_dev_reload_up+0x451/0x780 [ 367.620511][ T12] devlink_reload+0x4e9/0x8d0 [ 367.625194][ T12] devlink_nl_reload_doit+0xb35/0xd50 [ 367.630573][ T12] genl_family_rcv_msg_doit+0x212/0x300 [ 367.636129][ T12] genl_rcv_msg+0x60e/0x790 [ 367.640642][ T12] netlink_rcv_skb+0x205/0x470 [ 367.645410][ T12] genl_rcv+0x28/0x40 [ 367.649404][ T12] netlink_unicast+0x82f/0x9e0 [ 367.654181][ T12] netlink_sendmsg+0x805/0xb30 [ 367.658956][ T12] __sock_sendmsg+0x21c/0x270 [ 367.663643][ T12] ____sys_sendmsg+0x505/0x830 [ 367.668413][ T12] ___sys_sendmsg+0x21f/0x2a0 [ 367.673116][ T12] __x64_sys_sendmsg+0x19b/0x260 [ 367.678063][ T12] do_syscall_64+0xfa/0xfa0 [ 367.682573][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.688471][ T12] [ 367.690813][ T12] Second to last potentially related work creation: [ 367.697398][ T12] kasan_save_stack+0x3e/0x60 [ 367.702087][ T12] kasan_record_aux_stack+0xbd/0xd0 [ 367.707375][ T12] insert_work+0x3d/0x330 [ 367.711707][ T12] __queue_work+0xcd2/0xfb0 [ 367.716217][ T12] queue_work_on+0x181/0x270 [ 367.720809][ T12] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 367.726448][ T12] udp_tunnel_push_rx_port+0x17d/0x200 [ 367.731915][ T12] vxlan_offload_rx_ports+0x139/0x200 [ 367.737299][ T12] vxlan_netdevice_event+0x111/0x470 [ 367.742630][ T12] notifier_call_chain+0x1b6/0x3e0 [ 367.747749][ T12] call_netdevice_notifiers+0x88/0xc0 [ 367.753135][ T12] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 367.759294][ T12] notifier_call_chain+0x1b6/0x3e0 [ 367.764411][ T12] register_netdevice+0x1608/0x1ae0 [ 367.769613][ T12] nsim_create+0xae8/0xf10 [ 367.774034][ T12] __nsim_dev_port_add+0x6b6/0xb10 [ 367.779153][ T12] nsim_dev_port_add_all+0x37/0xf0 [ 367.784314][ T12] nsim_dev_reload_up+0x451/0x780 [ 367.789358][ T12] devlink_reload+0x4e9/0x8d0 [ 367.794039][ T12] devlink_nl_reload_doit+0xb35/0xd50 [ 367.799417][ T12] genl_family_rcv_msg_doit+0x212/0x300 [ 367.804971][ T12] genl_rcv_msg+0x60e/0x790 [ 367.809485][ T12] netlink_rcv_skb+0x205/0x470 [ 367.814251][ T12] genl_rcv+0x28/0x40 [ 367.818238][ T12] netlink_unicast+0x82f/0x9e0 [ 367.823008][ T12] netlink_sendmsg+0x805/0xb30 [ 367.827770][ T12] __sock_sendmsg+0x21c/0x270 [ 367.832459][ T12] ____sys_sendmsg+0x505/0x830 [ 367.837226][ T12] ___sys_sendmsg+0x21f/0x2a0 [ 367.841923][ T12] __x64_sys_sendmsg+0x19b/0x260 [ 367.846890][ T12] do_syscall_64+0xfa/0xfa0 [ 367.851418][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.857326][ T12] [ 367.859661][ T12] The buggy address belongs to the object at ffff88807d50c400 [ 367.859661][ T12] which belongs to the cache kmalloc-256 of size 256 [ 367.873723][ T12] The buggy address is located 176 bytes inside of [ 367.873723][ T12] freed 256-byte region [ffff88807d50c400, ffff88807d50c500) [ 367.887538][ T12] [ 367.889874][ T12] The buggy address belongs to the physical page: [ 367.896301][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d50c [ 367.905080][ T12] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 367.913605][ T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 367.921154][ T12] page_type: f5(slab) [ 367.925148][ T12] raw: 00fff00000000040 ffff88813ffa6b40 dead000000000122 0000000000000000 [ 367.933739][ T12] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 367.942446][ T12] head: 00fff00000000040 ffff88813ffa6b40 dead000000000122 0000000000000000 [ 367.951136][ T12] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 367.959816][ T12] head: 00fff00000000001 ffffea0001f54301 00000000ffffffff 00000000ffffffff [ 367.968496][ T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 367.977165][ T12] page dumped because: kasan: bad access detected [ 367.983594][ T12] page_owner tracks the page as allocated [ 367.989336][ T12] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15331, tgid 15329 (syz.0.2313), ts 366561995838, free_ts 366555195756 [ 368.010892][ T12] post_alloc_hook+0x240/0x2a0 [ 368.015679][ T12] get_page_from_freelist+0x2365/0x2440 [ 368.021234][ T12] __alloc_frozen_pages_noprof+0x181/0x370 [ 368.027045][ T12] alloc_pages_mpol+0x232/0x4a0 [ 368.031941][ T12] allocate_slab+0x96/0x3a0 [ 368.036460][ T12] ___slab_alloc+0xe94/0x18a0 [ 368.041157][ T12] __slab_alloc+0x65/0x100 [ 368.045627][ T12] __kmalloc_noprof+0x471/0x7f0 [ 368.050520][ T12] ops_init+0x7b/0x5c0 [ 368.054600][ T12] setup_net+0xfe/0x320 [ 368.058754][ T12] copy_net_ns+0x34e/0x4e0 [ 368.063170][ T12] create_new_namespaces+0x3f3/0x720 [ 368.068458][ T12] unshare_nsproxy_namespaces+0x11c/0x170 [ 368.074179][ T12] ksys_unshare+0x4c8/0x8c0 [ 368.078694][ T12] __x64_sys_unshare+0x38/0x50 [ 368.083467][ T12] do_syscall_64+0xfa/0xfa0 [ 368.087981][ T12] page last free pid 15331 tgid 15329 stack trace: [ 368.094482][ T12] __free_frozen_pages+0xbc4/0xd30 [ 368.099615][ T12] rcu_core+0xca8/0x1770 [ 368.103875][ T12] handle_softirqs+0x283/0x870 [ 368.108663][ T12] __irq_exit_rcu+0xca/0x1f0 [ 368.113268][ T12] irq_exit_rcu+0x9/0x30 [ 368.117519][ T12] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 368.123159][ T12] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 368.129145][ T12] [ 368.131472][ T12] Memory state around the buggy address: [ 368.137110][ T12] ffff88807d50c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 368.145176][ T12] ffff88807d50c400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 368.153245][ T12] >ffff88807d50c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 368.161307][ T12] ^ [ 368.166945][ T12] ffff88807d50c500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 368.175013][ T12] ffff88807d50c580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 368.183094][ T12] ================================================================== [ 368.290493][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 368.297764][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 368.307109][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.317178][ T12] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 368.324498][ T12] Call Trace: [ 368.327802][ T12] [ 368.330755][ T12] dump_stack_lvl+0x99/0x250 [ 368.335359][ T12] ? __asan_memcpy+0x40/0x70 [ 368.339965][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.345168][ T12] ? __pfx__printk+0x10/0x10 [ 368.349768][ T12] vpanic+0x237/0x6d0 [ 368.353772][ T12] ? __pfx_vpanic+0x10/0x10 [ 368.358302][ T12] ? preempt_schedule+0xae/0xc0 [ 368.363162][ T12] ? __pfx_preempt_schedule+0x10/0x10 [ 368.368551][ T12] panic+0xb9/0xc0 [ 368.372283][ T12] ? __pfx_panic+0x10/0x10 [ 368.376723][ T12] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 368.382626][ T12] ? __mutex_lock+0x147/0x1350 [ 368.387397][ T12] check_panic_on_warn+0x89/0xb0 [ 368.392352][ T12] ? __mutex_lock+0x147/0x1350 [ 368.397128][ T12] end_report+0x78/0x160 [ 368.401388][ T12] kasan_report+0x129/0x150 [ 368.405897][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 368.411800][ T12] ? __mutex_lock+0x147/0x1350 [ 368.416579][ T12] __mutex_lock+0x147/0x1350 [ 368.421187][ T12] ? __mutex_lock+0x5bb/0x1350 [ 368.425965][ T12] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 368.432216][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 368.437258][ T12] ? __lock_acquire+0xab9/0xd20 [ 368.442124][ T12] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 368.448202][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 368.453925][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 368.459650][ T12] process_scheduled_works+0xae1/0x17b0 [ 368.465214][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 368.471211][ T12] worker_thread+0x8a0/0xda0 [ 368.475821][ T12] kthread+0x711/0x8a0 [ 368.479906][ T12] ? __pfx_worker_thread+0x10/0x10 [ 368.485024][ T12] ? __pfx_kthread+0x10/0x10 [ 368.489632][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.494838][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.500047][ T12] ? __pfx_kthread+0x10/0x10 [ 368.504658][ T12] ret_from_fork+0x4bc/0x870 [ 368.509260][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 368.514391][ T12] ? __switch_to_asm+0x39/0x70 [ 368.519163][ T12] ? __switch_to_asm+0x33/0x70 [ 368.523947][ T12] ? __pfx_kthread+0x10/0x10 [ 368.528550][ T12] ret_from_fork_asm+0x1a/0x30 [ 368.533332][ T12] [ 368.536694][ T12] Kernel Offset: disabled [ 368.541024][ T12] Rebooting in 86400 seconds..