last executing test programs: 10.233524454s ago: executing program 0 (id=11715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) unshare(0x40000) 10.09730191s ago: executing program 0 (id=11718): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d8, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, 0x0, 0x8855) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x8090) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@datasec={0x204, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x5, 0x4}], 'R'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7597d5"}]}, {0x0, [0x2e, 0x5f, 0x30, 0x5f]}}, &(0x7f00000014c0)=""/184, 0x46, 0xb8, 0x1, 0xc71f2d1f}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYBLOB="00022dbd7000fcdbdf25060000000800030079ea6cb2e3509af3ebfdbb51b69c7f369c6842e35da4199cdf7e88b35114e25fd09dc3b0935870902a0251f3ee104f45a07ab68cbdae5549dee6bb486fa4df", @ANYRES32, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x20040041}, 0x4004004) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x24000040) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x8, @broadcast, 0x15, 0x3, 'lc\x00', 0x1, 0x0, 0x4}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) 9.091649388s ago: executing program 4 (id=11723): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.918992941s ago: executing program 4 (id=11724): r0 = socket(0x10, 0x80002, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000003c0)="dc8daf8d760c0b5d5c8caa98fa19c6a35a188a3775d272c579ff33a6effc0c49320ff86badc0d7f8b91fbc6ce4baa16de55d0ee6203b6db86008599c5d2f19dda7e34e3693cbb469728ec4005e4f00000000000053c282394f9f31d9210d4e736b769be32865f7dc70c5bdd6cdd0e82ac0e85e8ae59456bcda96de64e44f063dd60011126f90ef97069e", 0x8a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYBLOB="40a91b4824eabf84d30861196d22a3403ff04a", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x3, 0x3, 0xff) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "6ac4b8d77751b955511d441ba765f109"}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "8c8f14bcf2a335c42db253db5bd80461"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2010000040000000140012800b00010067656e655faa76650000040002800a000100000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) accept$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000340)=0x1c) ppoll(&(0x7f0000000300), 0x0, &(0x7f0000000480), &(0x7f00000004c0), 0x8) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0xf, &(0x7f0000000080)=0x5, 0xa) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000812000001c0012800d0000000003000947ba4e37643ab2f1e5da16bbba7f2900"], 0x3c}}, 0x28000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00 \b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000640)=0x800, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 7.728884397s ago: executing program 4 (id=11729): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, 0x0, 0x0) listen(r1, 0xffb) accept4(r1, 0x0, 0x0, 0x800) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[], 0x0, 0x26, 0xffffffffffffff60, 0x1, 0xfffffffd}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000ebffffff0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x11, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000900b7040000080000008500000095000000850000000f0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x5, 0x81, 0x8001, 0x400, 0x7ff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r4], 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a80)={0x14, 0x26, 0x1, 0x7fffb, 0x1000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) unshare(0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100000000000000000007e3"], 0x28}}, 0x4000800) 7.575667387s ago: executing program 4 (id=11730): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdb6, 0x3, [@default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000004740906140002000000000000000000000000000000000114000600626f6e64300000000000000001000000140003"], 0x58}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f00000005c0)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a2348f7d2b19a50595dfae00ccacb48664a8be5d67b097a01abfbd7ab3016f8b71fa0a7692550ab7c3d4d4f57287299ef0ed0c8efb033034467a658a4754bd9e916a368d967cbe43bf38595ea2d7ee49620bdfc14018e2e1aaa2e6bcaf512a80e0485318dc9a8a4d8d6fbeef064cf9ab6f532d8824f1d3c83a4f79687c1bddf5d793eb73a8e4a836510f5972781dbfffab4d25952c6ee6047b8e0d4c9543f30206e79011947658e2cd0559b178a749366a7d8ea37209db401fa6836cb4055c37ae86684edd0b8723e028b00c24706c33e94d5c0ee4e4222113cc8cbdda274", 0xf6}, {&(0x7f0000002080)="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", 0xdee}], 0x4}, 0x40000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000013c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x5, 0x1, 0x3, 0xfd}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0xfffffffd, 0x0, 0x1bb, 0x4}}]}}}]}, 0x94}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip_vti0\x00', r9, 0x1, 0x8000, 0x1ff, 0x1, {{0x14, 0x4, 0x0, 0x7, 0x50, 0x67, 0x0, 0x3e, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x1, 0xa, "e702de295e65dbde"}, {0x6, 0x9, "26d266af2ea778"}]}, @timestamp={0x44, 0x20, 0x24, 0x0, 0x9, [0x32, 0xda3, 0x2986, 0x8, 0x4, 0x0, 0xffffff80]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0xc, 0x2000003, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085b04d67d58a3a17b800003561ec72c9b5aeb23c0d3f4afad000110000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r11, r4}, 0xc) syz_emit_ethernet(0x2b, &(0x7f0000000300)={@random="35d149c95643", @local, @val={@void, {0x8100, 0x7, 0x1}}, {@generic={0x4305, "07893de995e7199b82b0f06dcc1d0db155f71746a747d5907d"}}}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 7.022322946s ago: executing program 4 (id=11734): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0xf65888b651cb7626, 0x80000, 0x38) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) (async, rerun: 64) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) (rerun: 64) close(0x3) (async, rerun: 64) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) (async) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffeeb, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x8, 0x2, {0x3, 0x80000001, 0x9}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xf}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffb, 0x7fffffff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000001}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xfff}}]}}]}, 0xb0}}, 0x20000000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r8, 0x0, r0, 0x0, 0x40000000b, 0x5) (async) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) (async) r9 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 64) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000000c0), 0x12) 6.65242723s ago: executing program 4 (id=11737): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.568173974s ago: executing program 0 (id=11738): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {0x0}], 0x2}}], 0x1, 0x4008440) connect$unix(r1, &(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f40)=@security={'security\x00', 0xe, 0x4, 0x5f0, 0xffffffff, 0x0, 0x208, 0x208, 0xffffffff, 0xffffffff, 0x520, 0x520, 0x520, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x3ff, [0x80000001, 0x1dba], 0x3, 0x10, 0x2, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x41}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @rand_addr=' \x01\x00'], 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0xb}, [0xffffffff, 0xff, 0xffffffff, 0xffffff00], [0xff000000, 0xffffff00, 0x0, 0xffffffff], 'vlan0\x00', 'caif0\x00', {0xff}, {}, 0x25, 0x18, 0x1, 0x5423f6d34036a0bc}, 0x0, 0x210, 0x238, 0x0, {}, [@common=@rt={{0x138}, {0x9, [0x7, 0x200], 0x1, 0x4, 0x4, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @private2, @dev={0xfe, 0x80, '\x00', 0x29}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0x1}}, @common=@frag={{0x30}, {[0xfff, 0xa731], 0x3, 0x9, 0x1}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0xffffffffffffffff, 0x5, 0x4}, {0x4, 0x4}, 0x0, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) 6.403162306s ago: executing program 0 (id=11741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000ffff00000000ac14144200000000000000000000000000000000000080000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ff010000000000000000000000000001"], 0x1fc}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x20, &(0x7f00000003c0)={&(0x7f0000000180)=""/56, 0x38, 0x0, &(0x7f0000000300)=""/171, 0xab}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xe, &(0x7f0000000b00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000100)={0xffffffff, 0x0, 0xfffffffe}, 0x10, r2, r1, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff0388a8000000000000000000", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.114965977s ago: executing program 0 (id=11746): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a006da800000000000000001c1400000000000000000000070001"], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, r3, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)={0x5b8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x5a4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe2, 0x0, "1400645e44f14a179bb461241e457aa183da56b3224220ddd142951016c190ac6a02f0c3f3c055216361bdd762ccb52f55270c81c8e6d85eec1df78ec34d8fa07ba58248f7e1da37c8b502cc0cb3b0d90db7bf11d8050aad48a6919cd5d6e60294c5923f86fe95c80fae1768ddd1e41ce5009d1bc83aefbe2b1b5f2cda8fd0e3f53babb618493703837a1ffbe3e613d84d922e040880b47074b57b71bd5bdf3c7d54fcdb9d729c5e83acfd9724c647193aedf22b9d3c506750866c5a14028fe5d6c4c12b5b4c24d6c3f6f983ff9cc9589eb9ecd45f0b9256330c6b700b88"}, @NL80211_BAND_5GHZ={0x4bc, 0x1, "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"}]}]}, 0x5b8}, 0x1, 0x0, 0x0, 0x24000845}, 0x40) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x18, 0x110, 0xc, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x69cbd01e90f03e20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r0, 0x0, 0x70bd2c, 0x1, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x81}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a006da800000000000000001c1400000000000000000000070001"], 0x24}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, r3, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) (async) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)={0x5b8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x5a4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe2, 0x0, "1400645e44f14a179bb461241e457aa183da56b3224220ddd142951016c190ac6a02f0c3f3c055216361bdd762ccb52f55270c81c8e6d85eec1df78ec34d8fa07ba58248f7e1da37c8b502cc0cb3b0d90db7bf11d8050aad48a6919cd5d6e60294c5923f86fe95c80fae1768ddd1e41ce5009d1bc83aefbe2b1b5f2cda8fd0e3f53babb618493703837a1ffbe3e613d84d922e040880b47074b57b71bd5bdf3c7d54fcdb9d729c5e83acfd9724c647193aedf22b9d3c506750866c5a14028fe5d6c4c12b5b4c24d6c3f6f983ff9cc9589eb9ecd45f0b9256330c6b700b88"}, @NL80211_BAND_5GHZ={0x4bc, 0x1, "7bf814e2d054fa57e3f366b6a0d6e6559c58fca95635ebe1d38b5e337963f10ad4070a54b87b13de8f4a250f5e3ed323e35e0d96368dca084f501deaf70dd4b67a8b94466f3894bd4fa2ceee3b34005e37606c0ed396d387d16257557056a1084a5e03fa74a724125efa88544f4829f93743ddde7db5cd8b24220874b0942e902fc7404c1f1bfedddf8cd81395882d7e76114d28f6c7cf277bbfc02f1b309f83a32917fd73757b75e25dfee36fd9a26fbb6bec4ca8dff6868a0693af6c06d9e907a641579cf1b734686c77bd0eb566b1dc5ac1027fb6373318d3484719b114ada23661ff4d2750173b4fdc0ad89b541ee0ad2e0d2007dc59d34c55c35be4577a4d142cc50850c6dc8b32bc1f1ba43066a6ea13461f61727f50d1da5755b6fafc47845c08c00fa8a155c2eaf8eeba4b1a4aae6f132d159fdb2cc32bcf84a5eddd9a9fb6b0ba19cead81cbfc269e65f2efbdf4947f25f66ad8364dac99fe46b83c65399cddbb4447ea0af68fcb0d2c71d43c8a57e66b067f5c773e0e88b8ae8c1a434edf9240a1d31205c6a5e2cb63b671b00c9983e13032c06e8cf6db03587bedd49874afe6cd299cddaa14e73c9df8865c021534f50138c80483d8a365b7d08349f333a24f75ebaa3764144a6e7ededff4b5eee7e938c68d1b6b003c4f4e3b6547a56a6f19e893091835b849e435794e9c60627c5e7901dfe71e4417b68fb39e55e430a92d1beac26dac99e7f25fedd72ebd89e141790e22bcc8af101cf742a202056ec044b78538c7690cc74a8154374dafd4e2741a24ab313b98aeb91916973f2172650db1153ca48561e5bc5805f970f0d2c21c2a2457c7948e1654f95a6de8d2d664d3204d4dcc9d044d6fe49c559562e2f312a7261a766829082eff3746db47de0f617fe40fa69d4d6dc78cd1707850e5151f0baa236323b19cef9f1a31fc455209bb76ed81623d7a311003b7b34d40a64845ba54fbff3400853edda543e45ffc8adc191497c38dd828ec8eb008c726d2b0581c0010cc40d9c4df9d0e0da634010e02e716a619f37e95c57cccb27695ce6036e90f0fc8d865d47984b91d78b35ed5f2daeee43de601b4f158fe6f0a4230d98924a275c8005b06edcc48f47e6f1425d3f8ae778e3385bdc683a91ffdc308ed767beb9e0c10b126795e2ef66daeae210ac5325ffa0d45714a0d37f7456e2f926ce90be888fa48bdc913d3520d9cb6db12e307b08984b4aabb845f0157fb18f6c546a09d1ea6f4590369e1e3d9f16aa203bb497bdc606018c3791981f54a5b0c24005b11d2d26dd113b56a6c102e019f2feeb82bef60495002e18ed82591c578ff254e23ce0fd67978c8401cecea1e628d8ca45ef18eff0db2b0b1e2ce3b4568905b758cd5d21591d679a8f457a6b912522c2f06d67122a428960ebf1940b7e33e35a7843310ce82ee406aa14aeb44b52d5f85ecb9ddc0a171720a151f8de854d72ba3f368168a666bc2dc48623de4804e75cedad9dd4bca84cbab3caa6c56fe5d9a86c9e28f70d50b01e8f0c4673222d60a8503d4c459955bf2adcb57cf2a0d9a0ca51a7e3f25fb00fdac8ddc76185dae57ac789521e13b1db7eb0110967ef7552106c3793895d1a1fe276106c6bb5cad4b7f67072a6e3fdb57a02e92add3debd27667bb6750e1a31da1159a367b068bd393cff9633b7292a18aeda5de2f01eca534680"}]}]}, 0x5b8}, 0x1, 0x0, 0x0, 0x24000845}, 0x40) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x18, 0x110, 0xc, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x69cbd01e90f03e20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r0, 0x0, 0x70bd2c, 0x1, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x81}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000001) (async) 2.997753211s ago: executing program 0 (id=11748): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d8, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, 0x0, 0x8855) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x8090) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@datasec={0x204, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x5, 0x4}], 'R'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7597d5"}]}, {0x0, [0x2e, 0x5f, 0x30, 0x5f]}}, &(0x7f00000014c0)=""/184, 0x46, 0xb8, 0x1, 0xc71f2d1f}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYBLOB="00022dbd7000fcdbdf25060000000800030079ea6cb2e3509af3ebfdbb51b69c7f369c6842e35da4199cdf7e88b35114e25fd09dc3b0935870902a0251f3ee104f45a07ab68cbdae5549dee6bb486fa4df", @ANYRES32, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x20040041}, 0x4004004) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x24000040) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x8, @broadcast, 0x15, 0x3, 'lc\x00', 0x1, 0x0, 0x4}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) 2.488698623s ago: executing program 1 (id=11755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2d, 0x0, {0x2, 0x20, 0x14, 0x0, 0x3, 0x2, 0xfe, 0x7, 0x100}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_UID={0x8}]}, 0x2c}}, 0xea5bc50b619d97ea) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@ipmr_newroute={0x334, 0x18, 0x20, 0x70bd27, 0x25dfdbff, {0x80, 0x80, 0x20, 0x6, 0xfe, 0x3, 0xfd, 0x8, 0x2000}, [@RTA_FLOW={0x8, 0xb, 0x9}, @RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_SRC={0x8, 0x2, @multicast2}, @RTA_METRICS={0x8f, 0x8, 0x0, 0x1, "b6d101a46149e72364c60eb9f40a60e57144c955e21b1aafe8977cdd1f6b4ea1f1fbe45715f39cf718d930e5e431d84cd9d4869a962fdae3bad2d949ff95266382b9f74c9dc15fcb6fbfde59c0e9e3fd978bf0da6101fc2f3e2d8d97b5cfbe724e378cc8317b88c9057ff1558efed7ec0253bbc6ae75d0e36018230e55061727d07265400ebadee0aac4eb"}, @RTA_TABLE={0x8, 0xf, 0xd7b80}, @RTA_NH_ID={0x8, 0x1e, 0x84c}, @RTA_ENCAP={0x258, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x254, 0x1, {{0x1, {0x0, 0xe, 0x4, 0x7, 0xd, 0x18, 0x1, [@remote, @mcast2, @dev={0xfe, 0x80, '\x00', 0x33}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @mcast2]}}, [@private1, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, @rand_addr=' \x01\x00', @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @dev={0xfe, 0x80, '\x00', 0x24}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @private0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @RTA_OIF={0x8, 0x4, r3}]}, 0x334}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0xa, &(0x7f0000000200)=[{0x6, 0xa, 0xeb, 0x9}, {0x7, 0x9, 0x3, 0x100}, {0x7, 0x81, 0x1, 0x2f}, {0xa, 0x6, 0xff, 0x80000000}, {0x1, 0x6, 0xad, 0xe}, {0x5, 0x1, 0x6, 0x5}, {0x5, 0x0, 0x2, 0x5}, {0x6, 0xa, 0xc, 0x2}, {0x0, 0xfc, 0x9, 0x2120}, {0x4931, 0x7f, 0x0, 0x2}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000580)='highspeed', 0x9) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2d, 0x0, {0x2, 0x20, 0x14, 0x0, 0x3, 0x2, 0xfe, 0x7, 0x100}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_UID={0x8}]}, 0x2c}}, 0xea5bc50b619d97ea) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@ipmr_newroute={0x334, 0x18, 0x20, 0x70bd27, 0x25dfdbff, {0x80, 0x80, 0x20, 0x6, 0xfe, 0x3, 0xfd, 0x8, 0x2000}, [@RTA_FLOW={0x8, 0xb, 0x9}, @RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_SRC={0x8, 0x2, @multicast2}, @RTA_METRICS={0x8f, 0x8, 0x0, 0x1, "b6d101a46149e72364c60eb9f40a60e57144c955e21b1aafe8977cdd1f6b4ea1f1fbe45715f39cf718d930e5e431d84cd9d4869a962fdae3bad2d949ff95266382b9f74c9dc15fcb6fbfde59c0e9e3fd978bf0da6101fc2f3e2d8d97b5cfbe724e378cc8317b88c9057ff1558efed7ec0253bbc6ae75d0e36018230e55061727d07265400ebadee0aac4eb"}, @RTA_TABLE={0x8, 0xf, 0xd7b80}, @RTA_NH_ID={0x8, 0x1e, 0x84c}, @RTA_ENCAP={0x258, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x254, 0x1, {{0x1, {0x0, 0xe, 0x4, 0x7, 0xd, 0x18, 0x1, [@remote, @mcast2, @dev={0xfe, 0x80, '\x00', 0x33}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @mcast2]}}, [@private1, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, @rand_addr=' \x01\x00', @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @dev={0xfe, 0x80, '\x00', 0x24}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @private0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @RTA_OIF={0x8, 0x4, r3}]}, 0x334}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0xa, &(0x7f0000000200)=[{0x6, 0xa, 0xeb, 0x9}, {0x7, 0x9, 0x3, 0x100}, {0x7, 0x81, 0x1, 0x2f}, {0xa, 0x6, 0xff, 0x80000000}, {0x1, 0x6, 0xad, 0xe}, {0x5, 0x1, 0x6, 0x5}, {0x5, 0x0, 0x2, 0x5}, {0x6, 0xa, 0xc, 0x2}, {0x0, 0xfc, 0x9, 0x2120}, {0x4931, 0x7f, 0x0, 0x2}]}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000580)='highspeed', 0x9) (async) 2.34608183s ago: executing program 1 (id=11756): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000001000000100000000000008500000028000000fab2"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x1e0, 0x1398, 0x1398, 0x1e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xff, 0xff, 0xff, 0xff], [0xff, 0xff0000ff, 0xffffff00, 0xff000000], 'veth1_to_team\x00', 'vlan1\x00', {0xff}, {}, 0x33, 0x81, 0x5}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0xfff7, 0x0, 0x7, 'snmp_trap\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0xff, 0xffffffff, 0xff000000, 0xffffffff], [0xffffff00, 0x1fffffffe, 0xffffff, 0xff], 'dvmrp0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x32, 0x7, 0x2, 0x2}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4, 0x1}, {0x0, 0x4, 0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0xeabb, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e20, 0x409, @ipv4={'\x00', '\xff\xff', @local}, 0x80ab}, 0x1c) 1.841865885s ago: executing program 1 (id=11759): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea0911bce100000000009ba56a", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 1.557639525s ago: executing program 1 (id=11761): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x44, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0), 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="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", 0x219}], 0x1}}], 0x1, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r0}, 0x4) syz_emit_ethernet(0x7b, &(0x7f00000001c0)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x41, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0xfd}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, @local, [], "fafb17c163a3040b7758ba1b5be6d88a91"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x1, 0xfffffffd}, 0x10}, 0x94) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r4, &(0x7f0000000300), 0x0}, 0x20) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r3, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) close(0x3) close(0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd69}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x0, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2}, 0x50) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180062106a990390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) 1.498346794s ago: executing program 2 (id=11762): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x24, 0x3e, 0x107, 0x3, 0x0, {0x3, 0x7c}, [@nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x8, 0x0, 0x13, {{0x15, 0x4, 0x2, 0x5, 0x54, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x24, 0x61, 0x1, 0x5, [{@multicast2, 0x2}, {@broadcast, 0xffff7787}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7}, {@loopback, 0x6}]}, @rr={0x7, 0x1b, 0x9a, [@rand_addr=0x64010100, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x29}, @local, @dev={0xac, 0x14, 0x14, 0x41}, @empty]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3dc, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x96a8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x21}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x31}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa58}, @TIPC_NLA_NODE_ID={0x78, 0x3, "1c753990e2d6761f960d67566ca4a63e8652150e67aae89548f09fe2b3047019b29dbcbcba59588de9626dd891d9eb387d2a02e3cb1abbafe4f7d0ed810421bf82d477fe0924fe4373150f94ecb248e308e9c663462b9d9fcfb577eed36c2150d38c12f815fb65fdc2f94d49d95e790abf0f8e13"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf48}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8dd0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x481}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6f9e0811}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3dc}}, 0x0) 1.287225702s ago: executing program 2 (id=11764): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x4000002, 0x4) 1.166329418s ago: executing program 2 (id=11766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000200080008001d000000", 0x24) sendmsg$nl_route_sched_retired(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x910, 0x65, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0x10}, {0xa, 0x4}, {0xb, 0xfff1}}, [@f_rsvp6={{0xa}, {0x8c0, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x81, 0x3}, {0x10001, 0x9, 0x8001}, 0x84, 0xfd, 0x1}}, @TCA_RSVP_DST={0x14, 0x2, @loopback}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x40}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x800, 0x94f8, 0xffff}, {0x439234f7, 0x3, 0x4}, 0x29, 0x80, 0xa}}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x24, 0x8, 0x1, 0x2, 0xfffffffd, 0x3, 0x2, 0x1, 0x9, 0x6, 0x0, 0xf, 0x8000, 0x3, 0x903, 0xb, 0x0, 0x800, 0x101, 0x2e, 0x9, 0x200, 0x3, 0x4ac9, 0xc, 0x2, 0x1, 0xfffffff8, 0x80000001, 0x9, 0x3, 0x7, 0xfb, 0x1, 0xbb, 0x800, 0x5e0, 0x10001, 0x6, 0x8001, 0x9, 0x5, 0x7fffffff, 0x7fff, 0x88a, 0x1, 0x6, 0x1000, 0x0, 0x3, 0x9, 0x2, 0x5, 0x5013765f, 0x3000000, 0x2, 0x79, 0x8, 0x0, 0xe06, 0x3, 0x5, 0x7f, 0xc0b, 0x2, 0x3, 0x7, 0x7, 0x7, 0x4, 0x80, 0x1a, 0x0, 0x6, 0xfffffff9, 0xfffffe01, 0x9, 0x1ff, 0x8, 0x8000, 0x200, 0x10000, 0x8db, 0x3, 0xffff96f6, 0x5, 0x0, 0x6, 0xfeb, 0x0, 0x3, 0x6, 0x401, 0x5, 0x0, 0x4, 0x9, 0x1000, 0x7, 0x97b, 0x6, 0x7fff, 0x8001, 0x0, 0x8000, 0x0, 0x7fff, 0x6, 0x1, 0x2, 0x2, 0x9, 0x97, 0x4, 0x6, 0x8, 0x2, 0x7, 0x1, 0x7f, 0xc, 0x7, 0x55d1, 0x6, 0x8001, 0xa, 0x1, 0x40, 0xfffffff9, 0x28, 0xbf56, 0x3, 0xa43, 0xfffffff7, 0x9, 0x7fffffff, 0x8, 0xffffff08, 0x8, 0xfff, 0xd, 0x9, 0x4, 0x0, 0x0, 0x6, 0x3ff, 0x4, 0x1652f8b3, 0x1, 0xff, 0x5, 0xf3, 0x5, 0x3, 0x100, 0x8479, 0x0, 0x60, 0x0, 0x5, 0x49, 0x0, 0x100, 0x1, 0xaa, 0x0, 0x5, 0x3, 0x401, 0x2, 0xfffffffe, 0x2, 0x0, 0x7fff, 0xd, 0x6, 0x6, 0x6, 0xfffffffe, 0x7, 0x6, 0xb, 0x2, 0xf7, 0x97b, 0x0, 0x388ce86f, 0x3, 0x62bc, 0x6, 0x1, 0x8, 0x2, 0x3, 0x6, 0x5, 0xfffffff1, 0xffffffff, 0x8, 0xcb31, 0x7fffffff, 0x7, 0xff, 0x3, 0x4, 0x3, 0x0, 0x4, 0x3, 0x8080, 0x3033, 0x6, 0xfa, 0x5, 0x3, 0x226, 0xfffffffe, 0x3ff, 0x7, 0xe354, 0x7, 0x3, 0x8, 0xfc2f, 0x6, 0x0, 0x800, 0x5, 0x5, 0x6, 0x392, 0x7, 0x2, 0x5, 0x0, 0x0, 0x0, 0x401, 0x5, 0x7, 0xffffffff, 0x1, 0x314, 0x6d7, 0x8, 0x80000001, 0x8e51, 0x0, 0x0, 0xfffffbff, 0xe, 0x3, 0x5, 0x5]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0xf}}, @TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x3, 0x6, 0xfffff9ae, {0x8, 0x0, 0x3, 0x0, 0x2, 0x749c}, {0xaf, 0x0, 0x12, 0x7fff, 0x7, 0xd1}, 0x7, 0x100, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x7, 0x0, 0x4, 0x6, 0x1, 0x4, 0x4, 0x5, 0x3, 0x6, 0x7, 0x80000001, 0xfffffff2, 0x1, 0x0, 0x0, 0x7ff, 0x4, 0x8, 0x80000001, 0x2, 0x9, 0xc0, 0x8, 0x7fffffff, 0x8, 0x5, 0xff, 0x0, 0x1, 0xb000, 0x8, 0x8, 0x3, 0x1, 0x3, 0x10, 0xa20a, 0x3, 0x1ff, 0x5e, 0x800, 0x441f, 0x3, 0xff, 0x7ff, 0x80000001, 0x80000000, 0x40, 0xc, 0x80000000, 0x3ff, 0x3, 0x9, 0x4, 0x9, 0x3, 0x8, 0xe, 0x7, 0x8, 0x8, 0xa, 0x0, 0x62b8, 0x3ff00000, 0x4, 0xfff, 0x7ff, 0x20002000, 0x1, 0x0, 0x8, 0x2, 0x6, 0x4, 0x53, 0x6, 0x81, 0x95f0, 0x8000, 0x6, 0x8, 0x1, 0x9, 0x1, 0xee4a, 0x8000, 0xf7, 0x2, 0x2, 0x9, 0x7ff, 0x2, 0x9, 0x5, 0xfffffffc, 0x7, 0x5, 0x7, 0x180, 0xff, 0x401, 0x80000000, 0x7, 0xd5d, 0x0, 0xfff, 0x4, 0x79c2, 0x5, 0xa0, 0x9, 0x401, 0xb62f, 0x7, 0x9, 0x100, 0x9, 0x6, 0x7, 0x7, 0x7fff, 0x9, 0x8, 0x9, 0x0, 0x1, 0x1, 0x0, 0x914, 0x5, 0x0, 0xf, 0xc, 0xfffffffd, 0x4b3b, 0x3ff, 0x9, 0xfffffffa, 0x5, 0x6, 0x7, 0x800, 0x4, 0x101, 0x1, 0x81, 0x0, 0xfffffff8, 0x8, 0x8, 0x2, 0x2, 0x0, 0x0, 0xff, 0x9, 0x15, 0xe9a, 0x7, 0x9, 0x1, 0x200, 0x3, 0x800, 0x3, 0x1f, 0xb, 0x400, 0x7, 0x10, 0x0, 0xb76e58c, 0xa, 0x4, 0x101, 0x2, 0x3, 0x100, 0x80, 0x0, 0x2, 0x2, 0x44d5, 0x7fff, 0xe04, 0x5, 0x8, 0x800, 0x5, 0x1000, 0xffa2, 0x0, 0xd, 0x8001, 0x800, 0x9, 0x10, 0x8, 0x8, 0x4, 0x3, 0xfffffeff, 0xffffffff, 0xfff, 0x401, 0x5, 0x8000, 0x1, 0x2937, 0xc, 0xca68, 0x8, 0x10, 0x6, 0x8001, 0x3, 0xfffffffb, 0x1, 0x4, 0xfd7, 0x6, 0x3, 0x4, 0x7fffffff, 0x8, 0x4, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1ff, 0x10, 0x6, 0x0, 0x5, 0x8, 0x8, 0x100, 0x6, 0x8, 0x81, 0x80000000, 0x1, 0x1, 0xfffffffd, 0xfffffff9, 0x1, 0x3, 0x2, 0x7, 0x1]}]}]}}, @f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x4}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x910}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 1.061618935s ago: executing program 3 (id=11767): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000006911ba000000000007cd8bf4000000009500000c00000000bcf4e4a30e96c21600f4afb6d0954c68c0dec1952d9a030799aef4b1eafe1013bc52ccd2f43ec4e670e61e78bc8db65c0dc1492bcb"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x19) 994.430496ms ago: executing program 2 (id=11768): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 925.777316ms ago: executing program 3 (id=11769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x80000, @local, 0x7}, 0x1c, 0x0}, 0x44054) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x90) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0xa, 0x3, 0x3a) r7 = socket$kcm(0x2, 0xa, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) unshare(0x22020600) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) write$tun(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd00000a000000740000006809c2b400033aff00000000000020000000000000000000ff020000000000000000000000000001"], 0x9e) 868.840033ms ago: executing program 2 (id=11770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1e, &(0x7f0000000b40)=[@in6={0xa, 0x2, 0x8001, @private2, 0xffffffff}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x10001, @loopback}]}, &(0x7f0000003ac0)=0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="bad330fbc9b55400041900ea0756a85d86dd4e11bce43a5dbf38ff29aabe94b749222147b4d628739944c056f5616c7bfae9e4f631503eeb57da", 0x3a, 0x1840, &(0x7f00000000c0)={0x11, 0x88a8, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r5, @ANYBLOB="00082abd7000ffdbdf250500000008000400c65200130c000000070000003c0001800600010002000000050002000500000008000300ac1414bb05000200070000000800060010000000050002008100000005000200080000000800f0d600107ad4859a0edb2aadaaa42a6c0300080000003c00068008000300ffffffff0800030000000000060005004e21000005000200040000000600010002000000060001000a00000000000300ffffffff08000400bc00000044000180080003007f00000108000700", @ANYRES32=r7, @ANYBLOB="14000400fe8000000000000000000000000000aa14000400fc000000000000000000000000000001080006000a000000050005000700000008000400ff0f0000"], 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@deltfilter={0x10d4, 0x2d, 0x20, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xfff9}, {0xb, 0x5}, {0x10, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_u32={{0x8}, {0x108c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x5}}, @TCA_U32_HASH={0x8, 0x2, 0x4}, @TCA_U32_POLICE={0x1078, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0x80000001, 0x3ff, 0x2, 0x6, 0x6, 0x80f3, 0x10, 0x7, 0xfffffffd, 0x400, 0x6, 0x4, 0xc, 0xcf2, 0xf3, 0x2, 0x6, 0x6, 0x3ff, 0xfbc0, 0x0, 0x5, 0xe, 0x0, 0x7, 0x10, 0xff, 0xf, 0x2, 0x6, 0x1, 0x4, 0x0, 0x2, 0x8, 0x5, 0xb, 0xe21, 0xa2, 0x2, 0xf, 0x6, 0x1, 0x3, 0x6, 0x8, 0x3, 0xffffff74, 0x27, 0x4, 0xfffffffb, 0xea, 0x3, 0x8, 0x8, 0x101, 0x1, 0x8, 0x3ff, 0x8000, 0xfce5, 0x0, 0x2, 0x9, 0x0, 0xd6, 0x9, 0x5, 0x5, 0x3, 0x101, 0x1ce, 0x2, 0x3, 0x6, 0xc0000000, 0x7fff, 0xfffffff8, 0x7, 0xffff, 0x3, 0x2, 0xde, 0x8000, 0x0, 0xe, 0x1, 0x101, 0x4e7, 0x3, 0x80000000, 0x4, 0x3, 0x4, 0xffffffff, 0x6, 0x4, 0x8, 0x4, 0x4, 0x9, 0x2a2, 0xfffffffa, 0x4, 0x1000, 0x4, 0x100, 0x7, 0x7fffffff, 0x9, 0x3ff, 0x72, 0x39, 0x7, 0x3, 0x8, 0x7, 0x8, 0x7fff, 0x5, 0x3, 0x7, 0x4, 0x4, 0x6, 0x1, 0x2, 0x4732, 0x6, 0x9, 0x1, 0x1, 0x1, 0x7fff, 0x0, 0x9, 0xc, 0x1, 0xd, 0xdb, 0xa4fe, 0x401, 0x409, 0xc, 0xac, 0x5, 0x9, 0x5, 0x6, 0x7ff, 0x2, 0x401, 0x1, 0x4, 0x4, 0x8, 0x0, 0x815a, 0x2, 0x4, 0x10001, 0x5, 0xfffffbc6, 0x78, 0xffffffff, 0x6, 0x86, 0x3ff, 0x6, 0x4c, 0xfffffff8, 0x9, 0x1, 0x80, 0xfffffff7, 0x7, 0x7, 0x4, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0xc, 0xa, 0x10001, 0x2, 0x1, 0x0, 0x1, 0x2, 0x1, 0x65, 0xffffffff, 0x9, 0xb, 0x2, 0x7, 0x7f, 0x7b77, 0x800, 0x5, 0x8, 0x200, 0x3ea8, 0x3, 0x10, 0xfffffffd, 0x2, 0x0, 0x9, 0x7fffffff, 0xe867, 0x2, 0x3, 0x7, 0x80000000, 0xe, 0x1ad, 0x101, 0x6, 0x10001, 0x6, 0x3, 0x7ff, 0x92c7, 0x8, 0x9, 0x0, 0x9, 0xd, 0x101, 0x9, 0x5928c010, 0x74bc, 0x8, 0x3, 0x0, 0x5, 0x5, 0x6c, 0x6, 0x1, 0x0, 0x10000, 0x2, 0x3, 0x2, 0xd, 0xfffffff0, 0x2675, 0x0, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7, 0x6, 0x7, 0xf, 0x8, 0x1ca, 0x2, 0xffffffff, 0x44, 0xfffffffb, 0x2, 0x1, 0x4, 0x59, 0x4, 0x80000000, 0x1, 0x4, 0x9, 0x8000, 0x0, 0xfffffffb, 0x8, 0xab16, 0xa, 0x4, 0x7, 0xbd, 0xb5, 0x4, 0x401, 0x53, 0x2, 0x9, 0x1, 0x7, 0x6, 0xfffffffa, 0xfffffff2, 0x7, 0xffff97b0, 0x6, 0x200, 0x4620, 0x3, 0xfff80000, 0x10000, 0x8, 0x7, 0x7, 0xfffffffb, 0x81, 0xffffff68, 0x9790, 0x800, 0xd7e6, 0x2, 0x76bd, 0x4, 0x2, 0x5, 0x5, 0x9, 0x10, 0xff, 0x2, 0x7f, 0x7, 0x2, 0x0, 0x6, 0x1, 0x3ff, 0x2, 0x80000001, 0xffffffff, 0x800, 0x1, 0x0, 0xffffffff, 0xc55, 0xf, 0x3, 0x1, 0x53, 0x200, 0xf, 0xffffffff, 0x4, 0x2, 0xed, 0x5, 0x1, 0x5, 0x5, 0x5, 0x3ff, 0x8, 0x7, 0x1ff, 0x4, 0x0, 0x5, 0x1, 0x600, 0xfffffffb, 0x800, 0x81, 0xc, 0x9, 0xfffffffc, 0x7, 0x81, 0xfffffff8, 0xffff, 0x5, 0x8, 0x1, 0xd91, 0x9c2, 0x6, 0x5, 0x0, 0x8b, 0x1ff, 0x4, 0x9, 0x4e, 0x4, 0x718e, 0x6, 0x5, 0x3, 0x10, 0x1, 0x78, 0xa, 0x9, 0x80, 0x2, 0x8, 0x7fffffff, 0x7, 0x8b4, 0x800, 0x1, 0x8, 0xa0, 0x200, 0x2, 0x1, 0xb, 0xc2, 0x1, 0x7, 0xffffffff, 0xffffff05, 0x9, 0xfffffff7, 0x4, 0xd5a8ae7, 0xfffff618, 0x1ff, 0x6, 0x5, 0x3, 0x3, 0x33, 0x8, 0x1, 0x8, 0x1, 0x2e, 0x6, 0x2, 0xffffffff, 0x3, 0x9, 0x6, 0xffffbeb5, 0x4, 0x16a7, 0xba3, 0xffff, 0x8, 0x4, 0x9, 0x3ff, 0x0, 0x3, 0x100000, 0x2, 0x8000, 0x1, 0x9, 0xda, 0x1, 0xfffffd45, 0x3, 0xfffffffe, 0x1, 0x6, 0x9, 0x5de, 0xa, 0x9, 0x2b7000, 0x8, 0x6, 0x4, 0xdad, 0xffffffc0, 0x2, 0x1, 0xfffffffe, 0x1, 0x5, 0x9, 0xb9, 0xe, 0x2, 0x75, 0x6, 0xf22b, 0x1, 0x8000, 0x3, 0x2, 0x8000, 0x45d0, 0x10, 0x81, 0x2780, 0x4, 0x24cf8, 0x8001, 0x8, 0x1f, 0x8, 0x1, 0x1, 0x3, 0x7, 0x2, 0x6, 0x40, 0x7, 0x85, 0x4, 0x6, 0x200, 0x0, 0x5, 0xfffffff6, 0x7a0]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff8000, 0x1ff, 0xf, 0x8, 0x0, 0xd, 0x579, 0x0, 0xff, 0x4, 0x2bd, 0xb15, 0xf0a, 0x489, 0x100, 0x8, 0x4f6, 0xaa, 0x4, 0x94, 0xd, 0x0, 0x6fc, 0x6, 0x1, 0x4a, 0x5, 0xb1c9, 0x7, 0x101, 0x2, 0x3, 0xa42, 0x5, 0x2, 0x0, 0x4, 0xfffffff2, 0x8, 0x3, 0x5, 0x0, 0x800, 0x7f, 0x8, 0x4, 0x8, 0x100, 0xf8000000, 0x7, 0x2, 0x1, 0x5, 0x7ff, 0x7fffffff, 0x7, 0x0, 0x3, 0x9, 0x84, 0x0, 0x5, 0x80000, 0x4, 0x5, 0x0, 0x5, 0x8, 0xa, 0x8, 0x3, 0x6, 0x3, 0x5, 0x3ff, 0x9, 0x101, 0x9, 0x6, 0x1, 0x5, 0x6, 0x7, 0x80000000, 0x4, 0x6, 0xe64, 0x5, 0x8, 0x800, 0xff, 0x8, 0x3, 0x6, 0x1, 0x9, 0x4, 0x7, 0x3, 0x2, 0x5b, 0x200, 0x0, 0x1, 0xf2, 0x0, 0xfffffffa, 0x7f, 0x9, 0x40, 0x8, 0x531, 0x2, 0x9, 0x8, 0x1, 0x4, 0x5, 0x81, 0x2, 0xd67, 0x3, 0xc2, 0x1000, 0x4, 0x10001, 0x6, 0x1, 0xfffffff7, 0x1, 0x5, 0xf, 0x3, 0x2, 0x4, 0x8, 0x8, 0xa56c, 0x1ff, 0x9, 0xc3, 0x5, 0x81, 0x2, 0x7, 0x0, 0x7, 0x8, 0x1, 0x8, 0x5, 0x2, 0x1, 0x2, 0x7f, 0x4664, 0x5, 0x3, 0x1f, 0xe9, 0x2, 0x8, 0x5, 0xaeea, 0x2, 0x5, 0x2, 0xc8, 0x6, 0xa5, 0x1, 0xce, 0x7, 0x4, 0x2, 0x5, 0x9, 0x7, 0x3, 0x764, 0x9, 0x5, 0xc2, 0xfffffffa, 0xd, 0x67da, 0xfffffff5, 0xf, 0xeb43, 0xa, 0x43ae8d9c, 0x0, 0x10001, 0x4, 0x101, 0x5, 0x9, 0xbc000000, 0x3, 0xc74, 0x7, 0x4, 0x0, 0x80, 0x8000, 0x80000001, 0x5, 0xa, 0x101, 0x2c, 0x8, 0xd, 0x3, 0xfff, 0x5, 0x6, 0x0, 0x4, 0x1000, 0x5, 0x0, 0x1, 0x7a3, 0x2, 0x9, 0x3, 0x1, 0x9, 0x58d, 0xc2, 0x3, 0x6, 0x7d61, 0x1, 0xfffffffd, 0x9, 0x7, 0x8352, 0x6, 0xffff012e, 0x0, 0x7a6b, 0x4, 0x1, 0x3, 0x1, 0x2, 0x40, 0x9, 0x37f4, 0x0, 0x1, 0x7ff, 0x2, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x10001, 0x8, 0x9, 0xd, 0x3, 0xa, 0xd, 0xffffffff, 0xb02f, 0x0, 0xc, 0x0, 0x8, 0x3, 0xfffffffd, 0x9, 0x80000000, 0x7, 0x86, 0x8, 0x3, 0x7ff, 0xf, 0x81, 0x1000, 0x6, 0x4, 0x37, 0x6, 0x9, 0x4a, 0x4, 0x6, 0x3000000, 0xe, 0x7, 0xfff, 0x1, 0xe0, 0x7f, 0xdc6, 0x8, 0x3, 0xfffffffa, 0xea, 0xd, 0xc0, 0x0, 0x9, 0x85, 0x80, 0x8, 0x80000001, 0xc, 0x80, 0xc18, 0x4, 0x2, 0x0, 0x3, 0x10000, 0x0, 0x8000, 0xe3, 0x729, 0xcf42, 0xfa2, 0x3, 0x5, 0x9, 0x4e, 0x343, 0x1, 0x6, 0x7, 0x101, 0x2b00, 0x5, 0x3c4, 0xfffffff8, 0x5, 0xa2, 0xfff, 0x8, 0x7, 0xff, 0x3, 0x0, 0xfffffff8, 0x1177, 0x7, 0x8cd4, 0x3, 0x10000, 0x401, 0x8, 0xfffffffc, 0x3, 0x5, 0x6, 0x4, 0xd, 0x77, 0xfffffffa, 0x6, 0xda, 0x4, 0xffff0001, 0xff, 0x4, 0x8, 0x2, 0xc, 0x2, 0x3, 0x3, 0xe, 0x9, 0x101, 0x8, 0x9, 0x7, 0x2, 0x140, 0x8, 0x1ff, 0x200, 0xd, 0x4, 0x85, 0x3, 0xc, 0x9127, 0x1, 0x100, 0xe, 0x10000, 0x8, 0xfffff10b, 0x9, 0x1000, 0x9, 0x7, 0x5, 0x5, 0x7, 0xa, 0x0, 0x5, 0x2, 0xffffff3e, 0x8, 0x8, 0x3ff9, 0xe, 0x8000, 0x1, 0x5, 0x1, 0x4, 0x9b8e, 0xe, 0xfe000000, 0x4, 0xd, 0x8, 0x8, 0x62, 0x80, 0x9, 0x80000001, 0x6842, 0x0, 0x3, 0xc, 0x7ff, 0x5, 0x7, 0x8, 0x6, 0x1, 0x8000, 0x3, 0x8, 0x1, 0x1000, 0x77da, 0x2315, 0xa, 0x9, 0x1, 0x250, 0x0, 0x0, 0x6, 0xff, 0x9ce0, 0x6, 0x6, 0x6, 0x0, 0x10000, 0x9, 0x2, 0x80000001, 0x2, 0xef6e, 0x5, 0x7f, 0x4, 0x200, 0x7, 0xd, 0xa950, 0x7f, 0x4, 0x1, 0x4, 0x1, 0x30c, 0x6, 0x7, 0x7, 0x4, 0x2d, 0x3, 0x6, 0x70, 0x0, 0x6d, 0x6, 0x80, 0x7, 0x9, 0x1ff, 0x3e7, 0x400, 0x8001, 0x8, 0x3, 0x8, 0x8, 0x788a, 0x9646, 0x3, 0x5, 0x401, 0x5, 0x1000, 0x5, 0x4, 0x7, 0x800, 0x7fffffff, 0xd64]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x40, 0xf5a1, 0x1, {0x5, 0x0, 0x5, 0x5, 0x2a, 0x5}, {0x7f, 0x1, 0x95b1, 0x2, 0x0, 0xdacc}, 0x3, 0x293, 0x100}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x10d4}, 0x1, 0x0, 0x0, 0x2000c0a2}, 0x4008000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r14 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r14, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) ppoll(&(0x7f0000000180)=[{r14, 0x200}, {r14, 0x710}], 0x2, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 638.59654ms ago: executing program 3 (id=11771): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) 560.218394ms ago: executing program 1 (id=11772): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff9}, [@alu={0xc52fb7bbec5e5321, 0x0, 0x2, 0xa, 0x9, 0x4, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000200)=[{0x15, 0x0, 0x2, 0x80000024}, {0x6, 0x2, 0x9, 0xfffffff6}, {0x4, 0xd, 0x1, 0xfffffff7}, {0x6, 0xff, 0x6, 0x100005e}]}, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xf0}], 0x1}, 0x24004000) 341.987438ms ago: executing program 2 (id=11773): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x80, 0x700, 0x4, 0x3, {{0x9, 0x4, 0x0, 0x28, 0x24, 0x64, 0x0, 0x8, 0x29, 0x0, @local, @loopback, {[@noop, @noop, @lsrr={0x83, 0xb, 0xf1, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex=r1, 0x1f, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000680)) 274.331627ms ago: executing program 1 (id=11774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf2503000000580001"], 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000080), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffffffffffc81, 0x20000001, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="8000260b0a0002000180c200000c00000c000e80"], 0x34}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040010) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x34, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x14002600}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x44, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x1b}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x1b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x2000000) 259.777507ms ago: executing program 3 (id=11775): socket$kcm(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000fcffffff0a801400000000071a00000014000200fc0200000000000000000000000000f0080003004e204e20140001002001"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000000000300012800b000100697036746e6c000020000200000000000000000000000000b69a87c07e45027efbe72bd6e3a9d8a9c6a863d7bcfd38f0056438f49268b38bd0639d6ec742eac17b3908290f769c6b74b2c84f46c015dd56377fd2e6f6e50c50d7e6f7b38ee6dd639cb5ea0b9ac6f94680846637c02a371a0c168550bcefe31aa6a6065a81a2f112ce6900f0c13acd5c9d76e1d6dab1f85f5633e31a37b64ea48aedf8b5fd6f0adec1501b8db6ed4a3bc0e100"/198], 0x50}}, 0x0) socket(0x28, 0x80802, 0x4) socket$netlink(0x10, 0x3, 0x0) socket(0x3, 0x4, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x21, 0x803, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="340030000000000000000000000000009e00000094bd63a614ca34c8d82f03cd6b4d94488e9617751e2ffea64282218a4c9fb07d00fa6d778b7902124fe6db6e12ff2b2d3907d11d22879dc362bbbcfae32d79a8d656fff830c2543d4b7f19110af84dfece087967ddcf6dda1a5d568e4915c955d86d68dcdca3e408df863362049c121ccad59d02b5d71ddb973bd505991e5bf5dc5f2248075010ab483f5e575bda84cc17f1b319f4ccdabe90e0c9d59afd1548", @ANYRES32=r5, @ANYBLOB="08000a000300000014000100fe8000000000000000000000000000aa"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="18000000e626a9822af2588e91ae030000000000000024000000000069840200000000000000ff4d101951bd0252272fe8950c233781802897c5f256b4f3dd019c68d543649cd7ca76f715f36b4fc13e85ebda39c6c7be3cd6d84a93c4a126ebc8544c52d09fba3ad2e5b470817ebc789abdd378a7c54495303a3bdd3f5cd050b650"], 0x18}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 150.515165ms ago: executing program 3 (id=11776): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdb6, 0x3, [@default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000e00)=@filter={'filter\x00', 0x2, 0x4, 0x4a0, 0xffffffff, 0x0, 0x0, 0x300, 0xfeffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x2, 0x3}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff, 0x1}}, @common=@rt={{0x138}, {0x7, [0x7, 0x6], 0x3, 0x8, 0x1, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast1, @private0, @mcast1, @mcast2, @local, @remote, @remote], 0x9}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x27) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 0s ago: executing program 3 (id=11777): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000000)={0x14, 0x8, 0x9, 0x6, 0x6, 0x4, 0x26, "2dfc3febd532629fb67200623abf2312d2ccc394", "119d7413ce0cfb45001fa44b5247f0acbf3360bf"}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz1\x00', @default, 0xfffffdb6, 0x3, [@default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) kernel console output (not intermixed with test programs): 1451.680334][T13596] netlink: 'syz.1.10267': attribute type 6 has an invalid length. [ 1451.693996][T13603] netlink: 'syz.2.10269': attribute type 32 has an invalid length. [ 1451.713581][T13596] netlink: 'syz.1.10267': attribute type 5 has an invalid length. [ 1451.741177][T13596] netlink: 35 bytes leftover after parsing attributes in process `syz.1.10267'. [ 1451.772626][T13606] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1451.782737][T13606] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.829529][T13613] netlink: 'syz.3.10270': attribute type 10 has an invalid length. [ 1451.850295][T13602] tipc: New replicast peer: 255.255.255.255 [ 1451.864092][T13602] tipc: Enabled bearer , priority 10 [ 1451.912938][T13606] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1451.951164][T13606] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.991741][T13621] netlink: 'syz.1.10267': attribute type 4 has an invalid length. [ 1452.000662][T13617] IPVS: length: 25 != 24 [ 1452.047292][T13606] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1452.104183][T13606] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.196622][T13622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10271'. [ 1452.236134][T13606] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1452.288541][T13606] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.360537][ T7124] block nbd78: Receive control failed (result -32) [ 1452.483220][T13631] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1452.493788][T13631] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1452.503283][T13631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1452.515311][T13630] delete_channel: no stack [ 1452.613000][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10273'. [ 1452.718294][T28218] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1452.726546][T28218] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.744340][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10273'. [ 1452.832448][T10801] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1452.848787][T10801] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.867316][T10801] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1452.888958][T10801] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.905254][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10277'. [ 1452.931293][T29707] tipc: Node number set to 156232425 [ 1452.937338][T13647] netlink: 'syz.1.10277': attribute type 10 has an invalid length. [ 1452.964458][T13647] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10277'. [ 1453.021417][T10803] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1453.022073][T13649] netlink: 'syz.1.10277': attribute type 6 has an invalid length. [ 1453.047217][T10803] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.107196][T13647] bond0: entered promiscuous mode [ 1453.138726][T13647] bond_slave_0: entered promiscuous mode [ 1453.152454][T13647] bond_slave_1: entered promiscuous mode [ 1453.195238][T13647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.223182][T13647] bridge0: port 3(bond0) entered blocking state [ 1453.239213][T13647] bridge0: port 3(bond0) entered disabled state [ 1453.256146][T13647] bond0: entered allmulticast mode [ 1453.265951][T13647] bond_slave_0: entered allmulticast mode [ 1453.295132][T13647] bond_slave_1: entered allmulticast mode [ 1453.326857][T13583] xfrm0 speed is unknown, defaulting to 1000 [ 1453.569865][T13679] netlink: 'syz.1.10284': attribute type 1 has an invalid length. [ 1453.939656][T13700] syzkaller0: entered promiscuous mode [ 1453.987661][T13700] syzkaller0: entered allmulticast mode [ 1454.009030][T13705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10285'. [ 1454.018329][T13705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10285'. [ 1454.116907][ T7124] block nbd79: Receive control failed (result -32) [ 1454.469577][T13713] netlink: 'syz.2.10290': attribute type 64 has an invalid length. [ 1454.960709][ T30] audit: type=1800 audit(1770693209.236:25): pid=13734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10294" name="memory.events" dev="tmpfs" ino=1605 res=0 errno=0 [ 1454.966699][T13742] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1455.379163][T13753] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1455.425970][T13749] syzkaller1: entered promiscuous mode [ 1455.437223][T13749] syzkaller1: entered allmulticast mode [ 1455.867358][T13780] Bluetooth: MGMT ver 1.23 [ 1455.882690][T13779] IPv6: Can't replace route, no match found [ 1456.004397][T13785] netlink: 'syz.2.10304': attribute type 1 has an invalid length. [ 1456.103832][ T7124] block nbd80: Receive control failed (result -32) [ 1456.722984][T13826] ip6gre1: entered promiscuous mode [ 1456.732298][T13826] ip6gre1: entered allmulticast mode [ 1456.765426][T13832] validate_nla: 7 callbacks suppressed [ 1456.765448][T13832] netlink: 'syz.0.10315': attribute type 1 has an invalid length. [ 1456.821863][T13835] __nla_validate_parse: 15 callbacks suppressed [ 1456.821882][T13835] netlink: 63 bytes leftover after parsing attributes in process `syz.2.10316'. [ 1456.877232][T13838] x_tables: duplicate underflow at hook 1 [ 1456.949168][T13837] lo speed is unknown, defaulting to 1000 [ 1457.184171][T13854] lo speed is unknown, defaulting to 1000 [ 1457.240533][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10318'. [ 1457.283930][ T7124] block nbd81: Receive control failed (result -32) [ 1457.375299][T13863] tipc: Enabled bearer , priority 0 [ 1457.420373][T13863] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1457.460343][T13863] tipc: Resetting bearer [ 1457.573822][T13862] tipc: Disabling bearer [ 1457.617758][T32061] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1457.627385][T32061] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1457.638430][T28483] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1457.670170][T13872] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1457.758594][T28483] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1458.279221][T13894] tipc: Enabled bearer , priority 0 [ 1458.301151][T13894] syzkaller0: MTU too low for tipc bearer [ 1458.306942][T13894] tipc: Disabling bearer [ 1458.369566][T13894] lo speed is unknown, defaulting to 1000 [ 1458.500725][T13837] xfrm0 speed is unknown, defaulting to 1000 [ 1458.544711][T13897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10332'. [ 1458.598889][ T7124] block nbd82: Receive control failed (result -32) [ 1458.688901][T14204] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1458.819107][T13905] netlink: 'syz.2.10333': attribute type 11 has an invalid length. [ 1459.125571][T13854] xfrm0 speed is unknown, defaulting to 1000 [ 1459.780066][T13894] xfrm0 speed is unknown, defaulting to 1000 [ 1461.328925][T13947] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10343'. [ 1461.377235][T13947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10343'. [ 1461.409600][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10343'. [ 1461.431094][T13947] netlink: 'syz.3.10343': attribute type 1 has an invalid length. [ 1461.439700][T13947] netlink: 244 bytes leftover after parsing attributes in process `syz.3.10343'. [ 1461.614533][T13950] 8021q: VLANs not supported on caif0 [ 1461.634350][T13952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10345'. [ 1461.657662][T13952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10345'. [ 1461.715799][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10345'. [ 1461.808211][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1461.854651][T13954] tap0: tun_chr_ioctl cmd 1074025681 [ 1462.336938][T13960] syzkaller1: entered promiscuous mode [ 1462.348261][T13960] syzkaller1: entered allmulticast mode [ 1462.669965][T13969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10350'. [ 1462.679848][T13969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10350'. [ 1462.694204][T13969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10350'. [ 1462.860078][T13976] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1463.091660][T13983] xt_ecn: cannot match TCP bits for non-tcp packets [ 1463.193133][T13989] netlink: 'syz.0.10354': attribute type 1 has an invalid length. [ 1463.389117][T13984] bond5 (unregistering): Released all slaves [ 1463.527371][T13997] netlink: 'syz.2.10355': attribute type 142 has an invalid length. [ 1463.803778][T14010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10357'. [ 1463.853323][T14010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10357'. [ 1464.044987][T14004] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1464.064533][T14004] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1464.082019][T14004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1464.263735][T14004] ip6gretap0: left allmulticast mode [ 1464.312633][T14005] 8021q: VLANs not supported on caif0 [ 1464.427683][T32061] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.437276][T13996] lo speed is unknown, defaulting to 1000 [ 1464.444518][T32061] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.465753][T32061] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.483129][T32061] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.622616][T14015] netlink: 'syz.4.10359': attribute type 1 has an invalid length. [ 1465.071197][T14026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10362'. [ 1465.089748][T14030] x9: renamed from bridge_slave_0 [ 1465.669833][T14039] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1465.699345][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10364'. [ 1465.785623][T14048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10366'. [ 1465.906199][T13996] xfrm0 speed is unknown, defaulting to 1000 [ 1465.926442][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10367'. [ 1466.099015][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10370'. [ 1466.108761][T14064] openvswitch: netlink: Flow actions attr not present in new flow. [ 1466.264340][T14067] tipc: Enabled bearer , priority 0 [ 1466.273080][T14067] syzkaller0: entered promiscuous mode [ 1466.279481][T14067] syzkaller0: entered allmulticast mode [ 1466.302770][T14067] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1466.335328][T14067] tipc: Resetting bearer [ 1466.347033][T14066] tipc: Resetting bearer [ 1466.423740][T14066] tipc: Disabling bearer [ 1466.730517][T14073] bond0 (unregistering): left allmulticast mode [ 1466.748806][T14073] bond_slave_0: left allmulticast mode [ 1466.754350][T14073] bond_slave_1: left allmulticast mode [ 1466.760696][T14073] bridge0: port 3(bond0) entered disabled state [ 1466.774917][T14073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1466.786099][T14073] bond_slave_0: left promiscuous mode [ 1466.794906][T14073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1466.807057][T14073] bond_slave_1: left promiscuous mode [ 1466.815214][T14073] bond0 (unregistering): Released all slaves [ 1467.363275][T14093] netlink: 'syz.0.10378': attribute type 1 has an invalid length. [ 1467.443084][T14093] vlan1: entered promiscuous mode [ 1467.449742][T14093] veth1_to_hsr: entered promiscuous mode [ 1467.474118][T14093] vlan1: entered allmulticast mode [ 1467.480819][T14093] veth1_to_hsr: entered allmulticast mode [ 1467.945121][T14126] FAULT_INJECTION: forcing a failure. [ 1467.945121][T14126] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.021062][T14126] CPU: 1 UID: 0 PID: 14126 Comm: syz.1.10386 Not tainted syzkaller #0 PREEMPT(full) [ 1468.021093][T14126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1468.021107][T14126] Call Trace: [ 1468.021115][T14126] [ 1468.021125][T14126] dump_stack_lvl+0xe8/0x150 [ 1468.021159][T14126] should_fail_ex+0x412/0x560 [ 1468.021192][T14126] should_failslab+0xa8/0x100 [ 1468.021219][T14126] __kmalloc_noprof+0xde/0x7e0 [ 1468.021239][T14126] ? kfree+0x4d/0x650 [ 1468.021267][T14126] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1468.021303][T14126] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1468.021333][T14126] ? tomoyo_domain+0xd7/0x130 [ 1468.021367][T14126] ? tomoyo_path_number_perm+0x219/0x630 [ 1468.021391][T14126] tomoyo_path_number_perm+0x246/0x630 [ 1468.021418][T14126] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1468.021440][T14126] ? __lock_acquire+0x6b5/0x2cf0 [ 1468.021486][T14126] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1468.021535][T14126] ? __fget_files+0x2a/0x420 [ 1468.021561][T14126] ? __fget_files+0x2a/0x420 [ 1468.021586][T14126] ? __fget_files+0x3a0/0x420 [ 1468.021607][T14126] ? __fget_files+0x2a/0x420 [ 1468.021634][T14126] security_file_ioctl+0xc3/0x2a0 [ 1468.021658][T14126] __se_sys_ioctl+0x47/0x170 [ 1468.021689][T14126] do_syscall_64+0xe2/0xf80 [ 1468.021717][T14126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.021736][T14126] ? trace_irq_disable+0x37/0x100 [ 1468.021755][T14126] ? clear_bhb_loop+0x60/0xb0 [ 1468.021788][T14126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.021808][T14126] RIP: 0033:0x7ff0c899af79 [ 1468.021826][T14126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1468.021842][T14126] RSP: 002b:00007ff0c98f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1468.021865][T14126] RAX: ffffffffffffffda RBX: 00007ff0c8c15fa0 RCX: 00007ff0c899af79 [ 1468.021879][T14126] RDX: 0000200000001800 RSI: 000000000000541b RDI: 0000000000000003 [ 1468.021892][T14126] RBP: 00007ff0c98f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1468.021905][T14126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1468.021917][T14126] R13: 00007ff0c8c16038 R14: 00007ff0c8c15fa0 R15: 00007ffc2e028f88 [ 1468.021955][T14126] [ 1468.023137][T14126] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1468.520561][T14145] netlink: 'syz.1.10387': attribute type 1 has an invalid length. [ 1468.544748][T14145] __nla_validate_parse: 2 callbacks suppressed [ 1468.544768][T14145] netlink: 244 bytes leftover after parsing attributes in process `syz.1.10387'. [ 1468.747303][T14114] hsr0: left allmulticast mode [ 1468.753267][T14114] hsr_slave_0: left allmulticast mode [ 1468.759360][T14114] hsr_slave_1: left allmulticast mode [ 1468.787135][T14115] tipc: Enabling of bearer rejected, failed to enable media [ 1468.878354][T10803] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.907987][T10803] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.937720][T10803] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.978473][T10803] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.022608][T14152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10389'. [ 1469.046246][T10803] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1469.055244][T10803] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.090445][T14153] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10389'. [ 1469.099897][T14158] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10389'. [ 1469.191833][T10803] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1469.200787][T10803] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.419621][T14166] syzkaller0: entered promiscuous mode [ 1469.425200][T14166] syzkaller0: entered allmulticast mode [ 1469.722776][T14187] tipc: Enabled bearer , priority 0 [ 1469.743564][T14187] syzkaller0: entered promiscuous mode [ 1469.751601][T14187] syzkaller0: entered allmulticast mode [ 1469.770532][T14187] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1469.813702][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10398'. [ 1469.827462][T14187] tipc: Resetting bearer [ 1469.919033][T14184] ip6gretap0: left promiscuous mode [ 1469.939550][T14184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.946556][T14199] netlink: 87 bytes leftover after parsing attributes in process `syz.2.10403'. [ 1469.956063][T14184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.968227][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1469.983347][T14184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1470.001079][T14186] tipc: Resetting bearer [ 1470.030729][T14202] netlink: 'syz.0.10402': attribute type 2 has an invalid length. [ 1470.059159][T14186] tipc: Disabling bearer [ 1470.118541][T14192] lo speed is unknown, defaulting to 1000 [ 1470.237358][T14206] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10404'. [ 1470.317466][T14210] tipc: Enabling of bearer rejected, failed to enable media [ 1470.648624][T14222] netlink: 'syz.1.10410': attribute type 1 has an invalid length. [ 1470.670061][T14222] bridge0: port 3(syz_tun) entered blocking state [ 1470.685580][T14222] bridge0: port 3(syz_tun) entered disabled state [ 1470.705015][T14222] syz_tun: entered allmulticast mode [ 1470.721290][T14222] syz_tun: entered promiscuous mode [ 1470.784846][T14228] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10412'. [ 1470.841379][T14192] xfrm0 speed is unknown, defaulting to 1000 [ 1470.890610][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10414'. [ 1470.908764][T14232] netlink: 'syz.0.10414': attribute type 30 has an invalid length. [ 1470.909796][T14230] syzkaller0: entered promiscuous mode [ 1470.939890][T14230] syzkaller0: entered allmulticast mode [ 1470.971317][T14229] delete_channel: no stack [ 1470.987020][T14234] netlink: 300 bytes leftover after parsing attributes in process `syz.2.10415'. [ 1471.020404][T14232] netlink: 'syz.0.10414': attribute type 30 has an invalid length. [ 1471.405316][T14255] IPVS: Error connecting to the multicast addr [ 1471.633627][T14265] netlink: 'syz.0.10422': attribute type 6 has an invalid length. [ 1471.847370][T14271] sctp: [Deprecated]: syz.0.10425 (pid 14271) Use of int in maxseg socket option. [ 1471.847370][T14271] Use struct sctp_assoc_value instead [ 1471.896780][T14271] Bluetooth: MGMT ver 1.23 [ 1471.960585][T14267] netlink: 'syz.1.10424': attribute type 2 has an invalid length. [ 1472.039653][T14270] veth3: entered promiscuous mode [ 1472.071038][T14267] !9: entered promiscuous mode [ 1472.230598][T14276] x_tables: duplicate underflow at hook 1 [ 1472.249451][T14280] syzkaller0: entered promiscuous mode [ 1472.254983][T14280] syzkaller0: entered allmulticast mode [ 1472.286942][T14280] 0: reclassify loop, rule prio 0, protocol 700 [ 1472.297257][T14284] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1472.905965][T14311] tipc: Enabled bearer , priority 0 [ 1472.971246][T14311] syzkaller0: entered promiscuous mode [ 1472.976938][T14311] syzkaller0: entered allmulticast mode [ 1473.000826][T14313] netlink: 'syz.0.10438': attribute type 4 has an invalid length. [ 1473.060487][T14311] tipc: Resetting bearer [ 1473.099808][T14310] tipc: Resetting bearer [ 1473.150194][T14310] tipc: Disabling bearer [ 1473.237666][T14320] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1473.250812][T14320] bond2 (unregistering): Released all slaves [ 1473.289567][T14321] macsec0: entered allmulticast mode [ 1473.295540][T14328] veth1_macvtap: entered allmulticast mode [ 1473.326865][T14328] macsec0: left allmulticast mode [ 1473.351423][T14328] veth1_macvtap: left allmulticast mode [ 1473.424198][T14337] tipc: Enabling of bearer rejected, failed to enable media [ 1473.462334][T14340] netlink: 'syz.3.10444': attribute type 9 has an invalid length. [ 1473.472199][T14340] netlink: 'syz.3.10444': attribute type 11 has an invalid length. [ 1473.545758][T14346] __nla_validate_parse: 6 callbacks suppressed [ 1473.545777][T14346] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10448'. [ 1473.875149][T14369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10453'. [ 1473.920338][T14378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10452'. [ 1473.943546][T14372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1473.961034][T14378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10452'. [ 1473.989428][T14371] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1474.145737][T14389] tipc: Enabled bearer , priority 0 [ 1474.164227][T14390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10457'. [ 1474.164807][T14389] syzkaller0: entered promiscuous mode [ 1474.180556][T14389] syzkaller0: entered allmulticast mode [ 1474.255885][T14389] tipc: Resetting bearer [ 1474.266127][T14387] tipc: Resetting bearer [ 1474.350777][T14387] tipc: Disabling bearer [ 1474.452132][T14400] tipc: Enabling of bearer rejected, failed to enable media [ 1474.574306][T14409] netlink: 212 bytes leftover after parsing attributes in process `syz.0.10460'. [ 1474.615630][T14418] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10465'. [ 1474.853141][T14430] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1474.970164][T14437] x_tables: duplicate underflow at hook 4 [ 1474.979262][T14437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1475.057232][T14435] validate_nla: 1 callbacks suppressed [ 1475.057253][T14435] netlink: 'syz.3.10468': attribute type 2 has an invalid length. [ 1475.115957][T14443] syzkaller0: entered promiscuous mode [ 1475.122126][T14443] syzkaller0: entered allmulticast mode [ 1475.134641][T14444] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10473'. [ 1475.145424][T14444] netlink: 35 bytes leftover after parsing attributes in process `syz.4.10473'. [ 1475.281393][T14451] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1475.384154][T14457] syzkaller1: entered promiscuous mode [ 1475.419573][T14457] syzkaller1: entered allmulticast mode [ 1475.483501][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10479'. [ 1475.892089][T14481] netlink: 'syz.4.10483': attribute type 61 has an invalid length. [ 1477.294605][T14525] gretap0: left promiscuous mode [ 1477.514175][T14525] geneve2: left promiscuous mode [ 1477.529350][T14525] geneve3: left promiscuous mode [ 1477.544669][T14525] geneve3: left allmulticast mode [ 1477.555348][T14525] geneve4: left promiscuous mode [ 1477.570303][T14525] macsec1: left promiscuous mode [ 1477.579476][T14525] macsec1: left allmulticast mode [ 1477.864160][T14550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1478.552538][T14579] tipc: Enabled bearer , priority 0 [ 1478.560873][T14579] syzkaller0: entered promiscuous mode [ 1478.566390][T14579] syzkaller0: entered allmulticast mode [ 1478.662255][T14588] __nla_validate_parse: 6 callbacks suppressed [ 1478.662276][T14588] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10514'. [ 1478.748223][T14577] tipc: Resetting bearer [ 1478.827897][T14597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10515'. [ 1478.839841][T14577] tipc: Disabling bearer [ 1479.530276][T14627] netlink: 184 bytes leftover after parsing attributes in process `syz.3.10523'. [ 1479.599307][T17682] lec:lec_start_xmit: lec0:No lecd attached [ 1479.619726][T14645] lo speed is unknown, defaulting to 1000 [ 1479.709219][T14650] xt_hashlimit: max too large, truncated to 1048576 [ 1479.732027][T14650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1479.820848][T14654] netlink: 88 bytes leftover after parsing attributes in process `syz.3.10529'. [ 1479.858728][T14654] netlink: 170 bytes leftover after parsing attributes in process `syz.3.10529'. [ 1480.179755][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10536'. [ 1480.261661][T14677] netlink: 'syz.4.10538': attribute type 1 has an invalid length. [ 1480.319340][T14677] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1480.490195][T14683] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10539'. [ 1480.553989][T14645] xfrm0 speed is unknown, defaulting to 1000 [ 1480.858864][T14707] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10542'. [ 1480.878561][T14707] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10542'. [ 1481.189972][T14722] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.10552'. [ 1481.289701][T14726] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1481.525406][T14739] IPVS: set_ctl: invalid protocol: 115 172.20.20.22:20002 [ 1481.649686][T21746] Bluetooth: hci2: command 0x0405 tx timeout [ 1481.951470][T14751] openvswitch: netlink: Duplicate key (type 21). [ 1482.606444][T14774] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1482.984933][T14784] vxcan3: entered promiscuous mode [ 1483.199400][T14793] 8021q: VLANs not supported on caif0 [ 1483.509135][T14805] netlink: 'syz.3.10577': attribute type 1 has an invalid length. [ 1483.527285][T14805] netlink: 'syz.3.10577': attribute type 11 has an invalid length. [ 1483.600083][T14805] dvmrp0: entered allmulticast mode [ 1483.607206][T14806] netlink: 'syz.3.10577': attribute type 1 has an invalid length. [ 1483.627879][T14806] netlink: 'syz.3.10577': attribute type 11 has an invalid length. [ 1483.913076][T14817] netlink: 'syz.4.10580': attribute type 8 has an invalid length. [ 1484.072705][T14825] __nla_validate_parse: 7 callbacks suppressed [ 1484.072725][T14825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10582'. [ 1484.559658][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10589'. [ 1484.719866][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10589'. [ 1485.007953][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5410 ms [ 1485.016046][ C1] lec:lec_tx_timeout: lec0 [ 1485.129098][T14875] lo speed is unknown, defaulting to 1000 [ 1485.519411][T14890] vcan0: entered promiscuous mode [ 1485.531985][T14890] vcan0: entered allmulticast mode [ 1485.619292][T14892] syzkaller1: entered promiscuous mode [ 1485.624829][T14892] syzkaller1: entered allmulticast mode [ 1485.867300][T14905] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1486.133408][T14909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10604'. [ 1486.249393][T14911] tipc: Enabled bearer , priority 0 [ 1486.395853][T14915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10602'. [ 1486.417667][T14913] tipc: Disabling bearer [ 1486.792719][T14875] xfrm0 speed is unknown, defaulting to 1000 [ 1487.089792][T14948] netlink: 'syz.1.10609': attribute type 4 has an invalid length. [ 1487.313293][T14958] netlink: 'syz.1.10613': attribute type 1 has an invalid length. [ 1487.411144][T14958] bond2: entered promiscuous mode [ 1487.429399][T14958] bond2: entered allmulticast mode [ 1487.443164][T14958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1487.451101][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10613'. [ 1487.464833][T14963] syzkaller0: entered promiscuous mode [ 1487.471199][T14963] syzkaller0: entered allmulticast mode [ 1487.551411][T14970] erspan1: entered allmulticast mode [ 1487.565884][T14970] bond2: (slave erspan1): making interface the new active one [ 1487.618181][T14970] erspan1: entered promiscuous mode [ 1487.626069][T14970] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 1487.902892][T14982] macsec1: entered promiscuous mode [ 1487.928689][T14982] macvlan1: entered promiscuous mode [ 1487.976401][T14982] macvlan1: left promiscuous mode [ 1488.003663][T14987] openvswitch: netlink: IP tunnel dst address not specified [ 1488.157737][T14990] netlink: 'syz.2.10620': attribute type 10 has an invalid length. [ 1488.192815][T14990] team0: Device bond0 is already an upper device of the team interface [ 1488.220128][T14992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10621'. [ 1488.231619][T14993] netlink: 'syz.2.10620': attribute type 10 has an invalid length. [ 1488.256971][T14993] team0: Device bond0 is already an upper device of the team interface [ 1488.754482][T15013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10627'. [ 1489.084330][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10628'. [ 1489.096498][ T7124] block nbd83: Receive control failed (result -32) [ 1489.192396][T15034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10632'. [ 1489.201819][T15034] netlink: 'syz.4.10632': attribute type 20 has an invalid length. [ 1489.212986][T15034] netlink: 'syz.4.10632': attribute type 21 has an invalid length. [ 1489.374688][T15037] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 1489.551674][T15040] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1489.823775][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1489.998683][T15065] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10643'. [ 1490.068745][T15065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10643'. [ 1490.895544][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10659'. [ 1490.973393][T15118] netlink: 'syz.1.10658': attribute type 8 has an invalid length. [ 1490.996841][T15109] netlink: 'syz.3.10657': attribute type 11 has an invalid length. [ 1491.005326][T15109] netlink: 'syz.3.10657': attribute type 23 has an invalid length. [ 1491.017559][T15109] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10657'. [ 1491.162621][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10660'. [ 1491.219727][T15122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10660'. [ 1491.242985][T15126] syzkaller0: entered promiscuous mode [ 1491.252667][T15129] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10663'. [ 1491.274368][T15126] syzkaller0: entered allmulticast mode [ 1491.310092][T15126] tipc: Enabled bearer , priority 0 [ 1491.337765][T15126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10662'. [ 1491.405120][T15126] tipc: Resetting bearer [ 1491.439387][T15131] bond0: (slave bond_slave_1): Releasing backup interface [ 1491.447302][T15131] bond_slave_1: left promiscuous mode [ 1491.467355][T15125] tipc: Resetting bearer [ 1491.537188][T15125] tipc: Disabling bearer [ 1491.584244][T15143] netlink: 'syz.0.10666': attribute type 21 has an invalid length. [ 1491.592528][T15143] IPv6: NLM_F_CREATE should be specified when creating new route [ 1491.602043][T15143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1491.609354][T15143] IPv6: NLM_F_CREATE should be set when creating new route [ 1491.616668][T15143] IPv6: NLM_F_CREATE should be set when creating new route [ 1491.623975][T15143] IPv6: NLM_F_CREATE should be set when creating new route [ 1492.297020][T15155] bridge1: left allmulticast mode [ 1492.328378][T15155] veth3: left promiscuous mode [ 1492.356443][T15161] hsr_slave_0: left promiscuous mode [ 1492.366773][T15161] hsr_slave_1: left promiscuous mode [ 1492.408040][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.439418][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.485330][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.536602][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.546233][ T7124] block nbd84: Receive control failed (result -32) [ 1492.700576][T15172] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1492.707987][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1492.759847][T15172] mpoa:mpoad_close: () going down [ 1492.807663][T15172] lo speed is unknown, defaulting to 1000 [ 1493.323658][T15206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.371651][T15206] batadv0 (unregistering): left promiscuous mode [ 1493.390283][ T7124] block nbd85: Receive control failed (result -32) [ 1493.551107][T15172] xfrm0 speed is unknown, defaulting to 1000 [ 1493.673954][T15215] netlink: 'syz.3.10683': attribute type 1 has an invalid length. [ 1493.716768][T15215] bond3: entered promiscuous mode [ 1493.723607][T15215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1493.767111][T15215] bond3: (slave bridge4): making interface the new active one [ 1493.778965][T15215] bridge4: entered promiscuous mode [ 1493.785956][T15215] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 1494.287640][T15230] __nla_validate_parse: 11 callbacks suppressed [ 1494.287661][T15230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10687'. [ 1494.317576][ T7124] block nbd86: Receive control failed (result -32) [ 1494.744428][T15248] syzkaller0: entered promiscuous mode [ 1494.750512][T15248] syzkaller0: entered allmulticast mode [ 1494.871324][T15258] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1495.008072][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 1495.016190][ C1] lec:lec_tx_timeout: lec0 [ 1495.344804][T15272] tipc: Enabled bearer , priority 0 [ 1495.362506][T15272] syzkaller0: entered promiscuous mode [ 1495.379610][T15272] syzkaller0: entered allmulticast mode [ 1495.435395][T15272] tipc: Resetting bearer [ 1495.469580][T15271] tipc: Resetting bearer [ 1495.538901][T15271] tipc: Disabling bearer [ 1495.594667][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10703'. [ 1495.605305][T15281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10701'. [ 1495.622350][T15285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10703'. [ 1495.646602][ T7124] block nbd87: Receive control failed (result -32) [ 1495.833368][T15295] netlink: 'syz.4.10704': attribute type 2 has an invalid length. [ 1495.876400][T15295] !: entered promiscuous mode [ 1496.040127][T15305] syzkaller0: entered promiscuous mode [ 1496.045767][T15305] syzkaller0: entered allmulticast mode [ 1496.056807][T15300] tipc: Enabled bearer , priority 0 [ 1496.261217][T15313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10709'. [ 1496.444376][T15316] tipc: Resetting bearer [ 1496.679248][T15338] netlink: 'syz.0.10714': attribute type 83 has an invalid length. [ 1496.781458][T15340] netlink: 'syz.1.10719': attribute type 6 has an invalid length. [ 1496.791277][T15298] tipc: Resetting bearer [ 1496.836778][T15298] tipc: Disabling bearer [ 1497.091264][T15353] block nbd4: NBD_DISCONNECT [ 1497.096141][T15353] block nbd4: Send disconnect failed -32 [ 1497.103066][T15353] block nbd4: shutting down sockets [ 1497.435573][T15366] syzkaller0: entered promiscuous mode [ 1497.460235][T15366] syzkaller0: entered allmulticast mode [ 1497.749684][T15365] lo speed is unknown, defaulting to 1000 [ 1497.985249][T15389] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10732'. [ 1498.079436][T15392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10733'. [ 1498.133564][T15397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10733'. [ 1498.159712][T15397] netlink: 576 bytes leftover after parsing attributes in process `syz.0.10733'. [ 1498.245283][T15401] netlink: 'syz.3.10732': attribute type 1 has an invalid length. [ 1498.253576][T15401] netlink: 'syz.3.10732': attribute type 2 has an invalid length. [ 1498.274298][T15401] netlink: 'syz.3.10732': attribute type 1 has an invalid length. [ 1498.302585][T15401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10732'. [ 1498.665749][T15365] xfrm0 speed is unknown, defaulting to 1000 [ 1498.702504][T15413] tipc: Enabled bearer , priority 0 [ 1498.729050][T15413] syzkaller0: entered promiscuous mode [ 1498.734592][T15413] syzkaller0: entered allmulticast mode [ 1498.862111][T15413] tipc: Resetting bearer [ 1498.905751][T15410] tipc: Resetting bearer [ 1499.013218][T15410] tipc: Disabling bearer [ 1499.382041][T15440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.415845][T15439] lo speed is unknown, defaulting to 1000 [ 1499.665397][T15454] __nla_validate_parse: 2 callbacks suppressed [ 1499.665419][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10746'. [ 1499.760114][T15454] openvswitch: netlink: Flow actions attr not present in new flow. [ 1500.275837][T15470] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1500.295593][T15470] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1500.710494][T15475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10750'. [ 1500.862506][T15439] xfrm0 speed is unknown, defaulting to 1000 [ 1502.695994][T15510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10759'. [ 1503.080334][T15519] netlink: 'syz.1.10762': attribute type 1 has an invalid length. [ 1503.136973][T15519] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10762'. [ 1503.280093][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10762'. [ 1503.566959][T15541] sock: sock_set_timeout: `syz.0.10767' (pid 15541) tries to set negative timeout [ 1503.604548][T15536] netlink: 1311 bytes leftover after parsing attributes in process `syz.3.10765'. [ 1503.619855][T15536] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10765'. [ 1503.630996][T15536] netlink: 7 bytes leftover after parsing attributes in process `syz.3.10765'. [ 1504.065387][T15568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10774'. [ 1504.076741][T15567] netlink: 'syz.2.10776': attribute type 1 has an invalid length. [ 1504.174989][T15567] bond3: entered promiscuous mode [ 1504.180947][T15567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1504.309628][T15567] bond3: (slave bridge6): making interface the new active one [ 1504.335580][T15567] bridge6: entered promiscuous mode [ 1504.357073][T15567] bridge6: left promiscuous mode [ 1504.444519][T15574] tipc: Enabled bearer , priority 0 [ 1504.457138][T15589] syzkaller0: entered promiscuous mode [ 1504.463894][T15589] syzkaller0: entered allmulticast mode [ 1504.472955][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10782'. [ 1504.490771][T15574] tipc: Resetting bearer [ 1504.520144][T15570] tipc: Resetting bearer [ 1504.567329][T15570] tipc: Disabling bearer [ 1504.633548][T15598] lo speed is unknown, defaulting to 1000 [ 1504.670544][T15599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10784'. [ 1504.701396][T15596] z=Ek: renamed from vlan1 [ 1504.714006][T15596] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10783'. [ 1504.724746][T15601] set_target_v0_checkentry: 23 callbacks suppressed [ 1504.724768][T15601] SET target dimension over the limit! [ 1504.761505][T15599] netlink: 'syz.4.10784': attribute type 10 has an invalid length. [ 1504.829086][T15606] netlink: 'syz.3.10787': attribute type 1 has an invalid length. [ 1504.885376][T15606] netlink: 'syz.3.10787': attribute type 2 has an invalid length. [ 1504.918743][T15606] netlink: 'syz.3.10787': attribute type 1 has an invalid length. [ 1504.926593][T15606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10787'. [ 1505.267568][T15625] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1505.329936][T15598] xfrm0 speed is unknown, defaulting to 1000 [ 1505.822176][ T30] audit: type=1107 audit(1770693260.096:26): pid=15639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1505.986232][T15643] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1506.745812][T15653] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1506.760149][T15653] bond6 (unregistering): Released all slaves [ 1507.705669][T15601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1507.933659][T15667] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1507.956675][T15664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10802'. [ 1507.981246][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10804'. [ 1507.997994][T15664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10802'. [ 1508.178642][T15684] ip6tnl0: entered promiscuous mode [ 1508.187604][T15684] ip6tnl0: entered allmulticast mode [ 1508.421406][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10816'. [ 1508.793110][T15723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10819'. [ 1508.802654][T15723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10819'. [ 1509.017620][T15729] lo speed is unknown, defaulting to 1000 [ 1509.137386][T15735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10823'. [ 1509.861690][T15762] __nla_validate_parse: 2 callbacks suppressed [ 1509.861711][T15762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10832'. [ 1509.887217][T15729] xfrm0 speed is unknown, defaulting to 1000 [ 1509.900061][T15762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10832'. [ 1509.913227][T15762] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1510.260502][T15783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1510.277483][T15784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1510.303405][T15783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10837'. [ 1510.459361][T15793] openvswitch: netlink: Multiple metadata blocks provided [ 1510.607182][T15796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10840'. [ 1510.647662][T15796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10840'. [ 1510.954722][T15802] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10841'. [ 1511.272461][T15808] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10844'. [ 1511.453234][T15812] netlink: 'syz.3.10847': attribute type 1 has an invalid length. [ 1511.652428][T15812] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1511.665496][T15819] bond4: (slave syz_tun): making interface the new active one [ 1511.675932][T15819] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 1511.699451][T15823] pim6reg: entered allmulticast mode [ 1511.814247][T15818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10848'. [ 1512.012682][T15815] pim6reg: left allmulticast mode [ 1512.076323][T15843] netlink: 'syz.3.10855': attribute type 39 has an invalid length. [ 1512.141518][T15843] bond4: (slave syz_tun): Releasing active interface [ 1512.229554][T15848] openvswitch: netlink: IP tunnel dst address not specified [ 1512.245091][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10857'. [ 1512.415418][T15854] lo speed is unknown, defaulting to 1000 [ 1512.824461][T15882] geneve2: entered promiscuous mode [ 1513.276037][T15878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1513.365900][T15854] xfrm0 speed is unknown, defaulting to 1000 [ 1513.982346][T15915] lo speed is unknown, defaulting to 1000 [ 1514.021259][T15916] lo speed is unknown, defaulting to 1000 [ 1514.103860][T15926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10876'. [ 1514.423598][T15942] xfrm0: entered promiscuous mode [ 1514.428963][T15942] xfrm0: entered allmulticast mode [ 1514.921708][T15962] netlink: 380 bytes leftover after parsing attributes in process `syz.0.10891'. [ 1515.242480][T15915] xfrm0 speed is unknown, defaulting to 1000 [ 1515.674395][T15916] xfrm0 speed is unknown, defaulting to 1000 [ 1516.124399][T15982] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10898'. [ 1516.206555][T15986] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10899'. [ 1516.528613][T15998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10900'. [ 1516.553096][T15998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10900'. [ 1516.990585][T15990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1517.045871][T15990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1517.480720][T16000] lo speed is unknown, defaulting to 1000 [ 1517.500349][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10903'. [ 1517.848207][T16026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1518.072372][T16031] netlink: 'syz.1.10908': attribute type 89 has an invalid length. [ 1518.235355][T16035] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1518.340281][T16037] tipc: Enabled bearer , priority 14 [ 1518.356530][T16037] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10911'. [ 1518.376629][T16037] 0X: renamed from caif0 [ 1518.399874][T16037] tipc: Disabling bearer [ 1518.435470][T16037] 0X: entered allmulticast mode [ 1518.456165][T16037] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1518.598683][T16044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10910'. [ 1518.705788][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10912'. [ 1518.906806][T16000] xfrm0 speed is unknown, defaulting to 1000 [ 1520.204154][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10918'. [ 1520.218239][ T7124] block nbd4: Receive control failed (result -32) [ 1520.313600][T16070] netlink: 'syz.1.10920': attribute type 3 has an invalid length. [ 1520.318398][T16073] netlink: 'syz.1.10920': attribute type 3 has an invalid length. [ 1520.360145][T16073] batadv_slave_1: entered promiscuous mode [ 1520.378870][T16068] batadv_slave_1: left promiscuous mode [ 1520.747768][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10926'. [ 1520.762451][T16090] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10926'. [ 1521.775569][T16108] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 1522.071981][T16110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10934'. [ 1522.084488][ T7124] block nbd88: Receive control failed (result -32) [ 1522.458381][T16124] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.10939'. [ 1522.498583][T16124] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.10939'. [ 1522.543489][T16124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10939'. [ 1522.554382][T16124] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10939'. [ 1522.772164][T16129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10940'. [ 1522.799279][T16128] ip6tnl0: left promiscuous mode [ 1522.804298][T16128] ip6tnl0: left allmulticast mode [ 1522.809962][T16129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10940'. [ 1522.956874][T16128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.976818][T16128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1523.018613][T16128] 0X: left allmulticast mode [ 1523.023609][T16128] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1523.342289][T16137] erspan1: entered allmulticast mode [ 1524.171552][ T7124] block nbd89: Receive control failed (result -32) [ 1524.935689][T16189] netlink: Unknown conntrack attr (type=15106, max=9) [ 1525.069931][T16195] netlink: 'syz.3.10961': attribute type 8 has an invalid length. [ 1525.082811][T16194] lo speed is unknown, defaulting to 1000 [ 1525.363100][T16206] __nla_validate_parse: 6 callbacks suppressed [ 1525.363122][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10960'. [ 1525.480516][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10960'. [ 1525.928339][T16222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1526.133701][T16227] lo speed is unknown, defaulting to 1000 [ 1526.249033][T16194] xfrm0 speed is unknown, defaulting to 1000 [ 1526.344352][T16240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10974'. [ 1526.846055][T16256] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10978'. [ 1526.901304][T16256] netlink: 'syz.2.10978': attribute type 1 has an invalid length. [ 1526.960634][T16256] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1527.176368][T16227] xfrm0 speed is unknown, defaulting to 1000 [ 1527.554604][T16284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10985'. [ 1527.578270][T16284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10985'. [ 1527.658242][T16281] lo speed is unknown, defaulting to 1000 [ 1529.088232][T16306] xt_CONNSECMARK: invalid mode: 0 [ 1529.395930][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10991'. [ 1529.690166][T16322] lo speed is unknown, defaulting to 1000 [ 1529.721413][T16281] xfrm0 speed is unknown, defaulting to 1000 [ 1530.953704][T16344] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1531.235263][T16360] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11002'. [ 1531.481072][T16322] xfrm0 speed is unknown, defaulting to 1000 [ 1531.736263][T16370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11004'. [ 1531.760025][T16370] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1532.202582][T16374] lo speed is unknown, defaulting to 1000 [ 1532.883202][T16391] netlink: 'syz.0.11011': attribute type 1 has an invalid length. [ 1532.964987][T16374] xfrm0 speed is unknown, defaulting to 1000 [ 1533.103354][T16395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11013'. [ 1533.166439][T16400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11013'. [ 1533.210339][T16395] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1533.235610][T16400] macsec2: entered promiscuous mode [ 1533.259043][T16400] bond6: entered promiscuous mode [ 1533.264311][T16400] macsec2: entered allmulticast mode [ 1533.288729][T16400] bond6: entered allmulticast mode [ 1533.299449][T16400] bond6: left allmulticast mode [ 1533.310770][T16400] bond6: left promiscuous mode [ 1533.622239][T16405] netlink: 'syz.4.11014': attribute type 1 has an invalid length. [ 1533.746258][T16405] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1533.852097][T16414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11015'. [ 1533.902261][T16416] netlink: 'syz.0.11017': attribute type 2 has an invalid length. [ 1533.952986][T16417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1534.102746][T16349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1534.768006][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11017'. [ 1534.995627][T16442] lo speed is unknown, defaulting to 1000 [ 1535.112038][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11023'. [ 1535.304935][T16463] macsec2: entered promiscuous mode [ 1535.343345][T16463] macsec2: entered allmulticast mode [ 1535.525898][T16466] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1535.633324][T16468] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11025'. [ 1535.668718][T16468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11025'. [ 1536.070563][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11030'. [ 1536.338401][T16442] xfrm0 speed is unknown, defaulting to 1000 [ 1536.573443][T16509] __nla_validate_parse: 1 callbacks suppressed [ 1536.573465][T16509] netlink: 260 bytes leftover after parsing attributes in process `syz.4.11032'. [ 1536.621221][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11031'. [ 1536.889898][ T7124] block nbd90: Receive control failed (result -32) [ 1537.461229][T16540] netlink: 'syz.2.11038': attribute type 2 has an invalid length. [ 1537.488312][T16540] netlink: 'syz.2.11038': attribute type 1 has an invalid length. [ 1537.506541][T16540] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11038'. [ 1538.468652][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11037'. [ 1539.306106][T16583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11056'. [ 1539.551430][T16590] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1539.709111][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11058'. [ 1540.760750][T16645] netlink: 'syz.1.11067': attribute type 15 has an invalid length. [ 1540.788460][T16645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11067'. [ 1540.886717][T16645] netlink: 'syz.1.11067': attribute type 15 has an invalid length. [ 1540.895664][ T50] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1540.915175][ T50] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1540.929984][T16645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11067'. [ 1540.950348][ T50] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1540.972479][ T50] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1541.008894][T16657] netlink: 'syz.0.11071': attribute type 5 has an invalid length. [ 1541.037295][T16657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11071'. [ 1541.200714][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11074'. [ 1541.423867][T16679] netlink: 'syz.3.11078': attribute type 10 has an invalid length. [ 1541.764294][T16696] __nla_validate_parse: 2 callbacks suppressed [ 1541.764316][T16696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11084'. [ 1541.829893][T16696] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11084'. [ 1541.841045][T16700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11086'. [ 1541.858747][T16697] : renamed from wg2 [ 1541.966357][T16707] xt_hashlimit: size too large, truncated to 1048576 [ 1542.134006][T16724] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1542.880528][T16751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11097'. [ 1542.894383][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11094'. [ 1543.222163][T16767] lo speed is unknown, defaulting to 1000 [ 1543.307530][T16770] tipc: Failed to remove unknown binding: 66,0,0/0:1189847394/1189847395 [ 1543.323233][T16770] tipc: Failed to remove unknown binding: 66,0,0/0:1189847394/1189847395 [ 1543.360011][T16773] netlink: 384 bytes leftover after parsing attributes in process `syz.3.11100'. [ 1543.399688][T16770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11101'. [ 1544.166592][T16767] xfrm0 speed is unknown, defaulting to 1000 [ 1544.191946][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11111'. [ 1544.232882][T16804] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11110'. [ 1544.369455][T16809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1544.409569][T16809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11112'. [ 1544.512128][T17682] lec:lec_start_xmit: lec0:No lecd attached [ 1544.520218][T16812] netlink: 'syz.4.11114': attribute type 15 has an invalid length. [ 1544.647225][T16818] lo speed is unknown, defaulting to 1000 [ 1545.301003][T16818] xfrm0 speed is unknown, defaulting to 1000 [ 1546.071217][T16875] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1546.083305][T16875] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1546.156173][T16871] macvlan2: entered promiscuous mode [ 1546.174008][T16871] macvlan2: entered allmulticast mode [ 1546.181551][T16871] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 1547.194017][T16898] pim6reg: entered allmulticast mode [ 1547.221386][T16897] pim6reg: left allmulticast mode [ 1547.575087][T16921] ip6t_rpfilter: unknown options [ 1548.416811][T16955] netlink: 'syz.4.11152': attribute type 1 has an invalid length. [ 1548.521720][T16955] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1548.620655][T16975] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1548.763533][T16964] bond8: (slave veth9): Enslaving as an active interface with a down link [ 1548.797627][T16968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1548.805953][T16968] bond8: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1548.837496][T16974] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1548.853964][T16974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1548.899853][T16958] delete_channel: no stack [ 1548.905508][T16981] syzkaller0: entered promiscuous mode [ 1548.913915][T16981] syzkaller0: entered allmulticast mode [ 1548.983554][T16977] lo speed is unknown, defaulting to 1000 [ 1549.646900][T17003] syzkaller1: entered promiscuous mode [ 1549.659211][T17003] syzkaller1: entered allmulticast mode [ 1550.048076][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5530 ms [ 1550.056166][ C1] lec:lec_tx_timeout: lec0 [ 1550.115475][T17047] __nla_validate_parse: 3 callbacks suppressed [ 1550.115498][T17047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11170'. [ 1550.158593][T17047] netlink: 'syz.3.11170': attribute type 12 has an invalid length. [ 1550.233156][T17029] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1550.234866][T17047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11170'. [ 1550.285521][T17047] netlink: 'syz.3.11170': attribute type 12 has an invalid length. [ 1550.298664][T17029] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1550.311416][T17029] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1550.363963][T16977] xfrm0 speed is unknown, defaulting to 1000 [ 1550.371798][T17029] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1550.477897][T17049] syzkaller0: entered promiscuous mode [ 1550.494098][T17049] syzkaller0: entered allmulticast mode [ 1551.257406][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1551.565712][T17109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11181'. [ 1553.428843][T17112] netlink: 'syz.4.11185': attribute type 1 has an invalid length. [ 1553.436736][T17112] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11185'. [ 1553.646783][T17126] netlink: 'syz.4.11190': attribute type 9 has an invalid length. [ 1553.680448][T17126] netlink: 'syz.4.11190': attribute type 11 has an invalid length. [ 1553.709365][T17126] netlink: 'syz.4.11190': attribute type 12 has an invalid length. [ 1553.747680][T17126] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.11190'. [ 1554.033415][T17148] xt_TCPMSS: Only works on TCP SYN packets [ 1554.080590][T17145] nbd: must specify a size in bytes for the device [ 1554.384653][T17158] lo speed is unknown, defaulting to 1000 [ 1554.513203][T17166] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.11200'. [ 1554.566479][T17168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11200'. [ 1554.567248][T17173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11200'. [ 1554.633994][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11202'. [ 1555.118529][T17198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11205'. [ 1555.140521][T17196] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11207'. [ 1555.583669][T17212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11210'. [ 1555.628620][T17213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11210'. [ 1555.639805][T17212] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11210'. [ 1555.648249][T17213] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11210'. [ 1555.667100][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11211'. [ 1555.703030][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11211'. [ 1555.735043][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11211'. [ 1555.758021][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11211'. [ 1556.112602][T17235] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1556.125177][T17240] FAULT_INJECTION: forcing a failure. [ 1556.125177][T17240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1556.166810][T17240] CPU: 0 UID: 0 PID: 17240 Comm: syz.2.11218 Not tainted syzkaller #0 PREEMPT(full) [ 1556.166839][T17240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1556.166852][T17240] Call Trace: [ 1556.166861][T17240] [ 1556.166871][T17240] dump_stack_lvl+0xe8/0x150 [ 1556.166904][T17240] should_fail_ex+0x412/0x560 [ 1556.166935][T17240] _copy_to_user+0x31/0xb0 [ 1556.166975][T17240] bpf_test_finish+0x22c/0x6b0 [ 1556.167009][T17240] ? __pfx_bpf_test_finish+0x10/0x10 [ 1556.167040][T17240] ? _copy_from_user+0x94/0xb0 [ 1556.167070][T17240] ? bpf_test_init+0x113/0x150 [ 1556.167095][T17240] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1556.167137][T17240] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1556.167167][T17240] ? __fget_files+0x2a/0x420 [ 1556.167196][T17240] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1556.167222][T17240] bpf_prog_test_run+0x2c7/0x340 [ 1556.167258][T17240] __sys_bpf+0x5cb/0x920 [ 1556.167281][T17240] ? __pfx___sys_bpf+0x10/0x10 [ 1556.167320][T17240] ? ksys_write+0x242/0x270 [ 1556.167352][T17240] ? __pfx_ksys_write+0x10/0x10 [ 1556.167391][T17240] __x64_sys_bpf+0x7c/0x90 [ 1556.167422][T17240] do_syscall_64+0xe2/0xf80 [ 1556.167452][T17240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.167472][T17240] ? trace_irq_disable+0x37/0x100 [ 1556.167492][T17240] ? clear_bhb_loop+0x60/0xb0 [ 1556.167518][T17240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.167538][T17240] RIP: 0033:0x7f0ea7f9af79 [ 1556.167558][T17240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1556.167576][T17240] RSP: 002b:00007f0ea8e0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1556.167598][T17240] RAX: ffffffffffffffda RBX: 00007f0ea8215fa0 RCX: 00007f0ea7f9af79 [ 1556.167613][T17240] RDX: 000000000000001e RSI: 0000200000000600 RDI: 000000000000000a [ 1556.167626][T17240] RBP: 00007f0ea8e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.167640][T17240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1556.167652][T17240] R13: 00007f0ea8216038 R14: 00007f0ea8215fa0 R15: 00007ffefdf91ac8 [ 1556.167687][T17240] [ 1556.526947][T17158] xfrm0 speed is unknown, defaulting to 1000 [ 1556.549353][T17251] lo speed is unknown, defaulting to 1000 [ 1557.008112][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 1557.016290][ C1] lec:lec_tx_timeout: lec0 [ 1557.228566][T17269] tipc: Enabled bearer , priority 0 [ 1557.236539][T17269] syzkaller0: entered promiscuous mode [ 1557.242472][T17269] syzkaller0: entered allmulticast mode [ 1557.614279][T17251] xfrm0 speed is unknown, defaulting to 1000 [ 1557.681815][T17271] tipc: Resetting bearer [ 1557.704824][T17267] tipc: Resetting bearer [ 1557.752643][T17267] tipc: Disabling bearer [ 1558.352098][T17311] IPv6: Can't replace route, no match found [ 1558.446898][T17308] IPVS: Scheduler module ip_vs_sip not found [ 1558.464616][T17308] IPVS: length: 140 != 8 [ 1559.124687][ T7124] block nbd91: Receive control failed (result -32) [ 1559.846944][T17363] lo speed is unknown, defaulting to 1000 [ 1560.434653][T17387] lo speed is unknown, defaulting to 1000 [ 1560.600113][T17382] __nla_validate_parse: 11 callbacks suppressed [ 1560.600136][T17382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11249'. [ 1560.639835][T17394] sctp: [Deprecated]: syz.2.11252 (pid 17394) Use of int in max_burst socket option deprecated. [ 1560.639835][T17394] Use struct sctp_assoc_value instead [ 1560.933387][T17402] syzkaller0: entered promiscuous mode [ 1560.940236][T17402] syzkaller0: entered allmulticast mode [ 1561.239211][T17418] netlink: 'syz.4.11258': attribute type 1 has an invalid length. [ 1561.291573][T17420] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11258'. [ 1561.349180][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11258'. [ 1561.366601][T17425] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.11259'. [ 1561.376970][T17426] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.11259'. [ 1561.377007][T17426] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1561.528659][T17425] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1561.588340][T17431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11258'. [ 1561.659995][T17418] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1561.709720][T17435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1561.771162][T17423] bond9 (unregistering): Released all slaves [ 1561.833725][T17363] xfrm0 speed is unknown, defaulting to 1000 [ 1562.304704][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11261'. [ 1562.393175][T17452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11263'. [ 1562.586353][ T7124] block nbd92: Receive control failed (result -32) [ 1562.777630][T17465] syzkaller1: entered promiscuous mode [ 1562.797567][T17465] syzkaller1: entered allmulticast mode [ 1562.855417][T17469] netlink: 'syz.3.11266': attribute type 8 has an invalid length. [ 1562.984729][T17387] xfrm0 speed is unknown, defaulting to 1000 [ 1563.076949][T17475] macsec2: entered promiscuous mode [ 1563.122240][T17475] ip6gretap0: entered promiscuous mode [ 1563.157359][T17475] ip6gretap0: left promiscuous mode [ 1564.319788][T17503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11272'. [ 1564.343845][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11273'. [ 1564.673937][ T7124] block nbd93: Receive control failed (result -32) [ 1565.752920][T17527] bond9: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1565.821819][T17527] bond9 (unregistering): Released all slaves [ 1566.276526][T17541] __nla_validate_parse: 4 callbacks suppressed [ 1566.276550][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11286'. [ 1566.295107][T17541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11286'. [ 1566.304608][T17541] netlink: 'syz.1.11286': attribute type 13 has an invalid length. [ 1566.313287][T17541] netlink: 'syz.1.11286': attribute type 11 has an invalid length. [ 1566.456488][T17544] tipc: Enabling of bearer rejected, failed to enable media [ 1566.486435][T17548] syzkaller0: entered allmulticast mode [ 1566.493951][T17548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11289'. [ 1566.518849][T17551] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.11290'. [ 1566.549470][T17547] syzkaller0: left allmulticast mode [ 1566.560063][T17553] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11291'. [ 1566.637249][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11292'. [ 1566.795404][T17561] batman_adv: batadv0: Adding interface: macsec1 [ 1566.803062][T17561] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.832057][T17561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1566.847089][T17561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1566.879323][T17561] batman_adv: batadv0: Interface activated: macsec1 [ 1567.097728][T17583] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11297'. [ 1567.129726][T17582] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11299'. [ 1567.567037][T17598] vlan2: entered allmulticast mode [ 1567.587475][T17598] veth0_to_bond: entered allmulticast mode [ 1567.630889][T17595] netlink: 'syz.0.11302': attribute type 5 has an invalid length. [ 1568.288880][T17623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11310'. [ 1568.808878][T17649] lo speed is unknown, defaulting to 1000 [ 1569.236334][T17653] lo speed is unknown, defaulting to 1000 [ 1569.547540][T17649] xfrm0 speed is unknown, defaulting to 1000 [ 1569.998445][T17653] xfrm0 speed is unknown, defaulting to 1000 [ 1571.257369][T17628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1571.529519][T17667] netlink: 'syz.2.11317': attribute type 89 has an invalid length. [ 1571.972241][T17681] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11320'. [ 1572.044160][T17689] netlink: 'syz.0.11325': attribute type 5 has an invalid length. [ 1572.152937][T17693] nbd: must specify at least one socket [ 1572.211284][T17693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11326'. [ 1572.336694][T14254] IPVS: starting estimator thread 0... [ 1572.363114][T17695] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11327'. [ 1572.449032][T17700] IPVS: using max 33 ests per chain, 79200 per kthread [ 1572.651508][T17720] FAULT_INJECTION: forcing a failure. [ 1572.651508][T17720] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.667008][T17718] lo speed is unknown, defaulting to 1000 [ 1572.705287][T17720] CPU: 1 UID: 0 PID: 17720 Comm: syz.3.11333 Not tainted syzkaller #0 PREEMPT(full) [ 1572.705334][T17720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1572.705356][T17720] Call Trace: [ 1572.705372][T17720] [ 1572.705387][T17720] dump_stack_lvl+0xe8/0x150 [ 1572.705440][T17720] should_fail_ex+0x412/0x560 [ 1572.705497][T17720] should_failslab+0xa8/0x100 [ 1572.705525][T17720] __kmalloc_cache_noprof+0x83/0x6e0 [ 1572.705546][T17720] ? lockdep_hardirqs_on+0x7a/0x110 [ 1572.705577][T17720] ? __request_module+0x2d0/0x610 [ 1572.705603][T17720] __request_module+0x2d0/0x610 [ 1572.705627][T17720] ? rtnl_link_ops_get+0x23/0x250 [ 1572.705657][T17720] ? __pfx___request_module+0x10/0x10 [ 1572.705691][T17720] ? rtnl_link_ops_get+0x23/0x250 [ 1572.705717][T17720] ? rtnl_link_ops_get+0x23/0x250 [ 1572.705745][T17720] ? rtnl_link_ops_get+0x215/0x250 [ 1572.705778][T17720] rtnl_newlink+0x620/0x1be0 [ 1572.705807][T17720] ? is_bpf_text_address+0x292/0x2b0 [ 1572.705838][T17720] ? kernel_text_address+0xa5/0xe0 [ 1572.705867][T17720] ? __pfx_rtnl_newlink+0x10/0x10 [ 1572.705895][T17720] ? __lock_acquire+0x6b5/0x2cf0 [ 1572.705934][T17720] ? __lock_acquire+0x6b5/0x2cf0 [ 1572.705965][T17720] ? __lock_acquire+0x6b5/0x2cf0 [ 1572.705999][T17720] ? __lock_acquire+0x6b5/0x2cf0 [ 1572.706031][T17720] ? unwind_next_frame+0xa5/0x23c0 [ 1572.706063][T17720] ? unwind_next_frame+0xa5/0x23c0 [ 1572.706088][T17720] ? is_bpf_text_address+0x26/0x2b0 [ 1572.706127][T17720] ? __lock_acquire+0x6b5/0x2cf0 [ 1572.706159][T17720] ? is_bpf_text_address+0x292/0x2b0 [ 1572.706183][T17720] ? is_bpf_text_address+0x26/0x2b0 [ 1572.706210][T17720] ? kernel_text_address+0xa5/0xe0 [ 1572.706244][T17720] ? __kernel_text_address+0xd/0x30 [ 1572.706269][T17720] ? unwind_get_return_address+0x4d/0x90 [ 1572.706303][T17720] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1572.706347][T17720] ? __pfx_rtnl_newlink+0x10/0x10 [ 1572.706373][T17720] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1572.706416][T17720] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1572.706440][T17720] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1572.706465][T17720] ? __lock_acquire+0x6b5/0x2cf0 [ 1572.706510][T17720] netlink_rcv_skb+0x232/0x4b0 [ 1572.706536][T17720] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1572.706565][T17720] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1572.706602][T17720] ? netlink_deliver_tap+0x2e/0x1b0 [ 1572.706635][T17720] netlink_unicast+0x80f/0x9b0 [ 1572.706666][T17720] ? __pfx_netlink_unicast+0x10/0x10 [ 1572.706710][T17720] ? netlink_sendmsg+0x650/0xb40 [ 1572.706733][T17720] ? skb_put+0x11b/0x210 [ 1572.706766][T17720] netlink_sendmsg+0x813/0xb40 [ 1572.706802][T17720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1572.706830][T17720] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1572.706867][T17720] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1572.706891][T17720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1572.706917][T17720] sock_sendmsg+0x4a4/0x500 [ 1572.706944][T17720] ? __pfx_sock_sendmsg+0x10/0x10 [ 1572.706981][T17720] ? __asan_memset+0x22/0x50 [ 1572.707012][T17720] ? iov_iter_bvec+0xb8/0x180 [ 1572.707047][T17720] splice_to_socket+0xae2/0x11f0 [ 1572.707106][T17720] ? __pfx_splice_to_socket+0x10/0x10 [ 1572.707164][T17720] ? get_pid_task+0x20/0x1f0 [ 1572.707205][T17720] ? bpf_lsm_file_permission+0x9/0x20 [ 1572.707236][T17720] ? security_file_permission+0x75/0x260 [ 1572.707261][T17720] ? rw_verify_area+0x255/0x4d0 [ 1572.707292][T17720] ? __pfx_splice_to_socket+0x10/0x10 [ 1572.707316][T17720] do_splice+0xee3/0x1910 [ 1572.707365][T17720] ? __pfx_do_splice+0x10/0x10 [ 1572.707400][T17720] __se_sys_splice+0x353/0x490 [ 1572.707441][T17720] ? __pfx___se_sys_splice+0x10/0x10 [ 1572.707473][T17720] ? __x64_sys_splice+0x21/0xf0 [ 1572.707501][T17720] do_syscall_64+0xe2/0xf80 [ 1572.707531][T17720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.707553][T17720] ? trace_irq_disable+0x37/0x100 [ 1572.707571][T17720] ? clear_bhb_loop+0x60/0xb0 [ 1572.707597][T17720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.707617][T17720] RIP: 0033:0x7f9f9e59af79 [ 1572.707637][T17720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1572.707654][T17720] RSP: 002b:00007f9f9f536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1572.707676][T17720] RAX: ffffffffffffffda RBX: 00007f9f9e815fa0 RCX: 00007f9f9e59af79 [ 1572.707693][T17720] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 1572.707705][T17720] RBP: 00007f9f9f536090 R08: 0000000000010d00 R09: 000000000000000f [ 1572.707720][T17720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.707733][T17720] R13: 00007f9f9e816038 R14: 00007f9f9e815fa0 R15: 00007ffcc3ef0588 [ 1572.707769][T17720] [ 1573.406488][T17723] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1573.931667][T17718] xfrm0 speed is unknown, defaulting to 1000 [ 1573.972302][T17748] netlink: 67 bytes leftover after parsing attributes in process `syz.1.11343'. [ 1574.004945][T17748] syzkaller1: entered promiscuous mode [ 1574.028867][T17748] syzkaller1: entered allmulticast mode [ 1574.090248][T17753] bond9 (unregistering): Released all slaves [ 1574.145504][T17746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11342'. [ 1574.181316][ T7124] block nbd94: Receive control failed (result -32) [ 1574.432799][T17772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11347'. [ 1574.732896][T17774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11349'. [ 1574.974863][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11352'. [ 1575.017251][T17802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11355'. [ 1575.030716][T17802] vlan2: left allmulticast mode [ 1575.042627][ T7124] block nbd95: Receive control failed (result -32) [ 1575.069968][T17802] vlan2: left promiscuous mode [ 1575.075260][T17802] bridge0: port 3(vlan2) entered disabled state [ 1575.121577][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11353'. [ 1575.246531][T17802] bridge_slave_1: left allmulticast mode [ 1575.291775][T17802] bridge_slave_1: left promiscuous mode [ 1575.297968][T17802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.342657][T17802] bridge_slave_0: left allmulticast mode [ 1575.374019][T17802] bridge_slave_0: left promiscuous mode [ 1575.401124][T17802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.822191][T17821] netlink: 'syz.1.11357': attribute type 2 has an invalid length. [ 1577.001738][T17830] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:21 [ 1577.010968][T17830] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1577.019135][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1577.078413][T17832] mpoa:mpoad_close: () going down [ 1577.269644][T17832] lo speed is unknown, defaulting to 1000 [ 1577.451309][T17882] __nla_validate_parse: 8 callbacks suppressed [ 1577.451330][T17882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11368'. [ 1577.496830][ T7124] block nbd96: Receive control failed (result -32) [ 1577.547007][T17890] netlink: 428 bytes leftover after parsing attributes in process `syz.1.11370'. [ 1577.611020][T17890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11370'. [ 1577.622329][T17894] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.11370'. [ 1577.663700][T17894] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1577.704448][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11371'. [ 1577.760136][T17897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11371'. [ 1578.046404][T17908] netlink: 'syz.4.11374': attribute type 2 has an invalid length. [ 1578.287198][T17914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1578.387735][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11375'. [ 1578.486728][T17922] netlink: 'syz.3.11385': attribute type 2 has an invalid length. [ 1578.558850][T17921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11376'. [ 1578.634923][T17832] xfrm0 speed is unknown, defaulting to 1000 [ 1579.012614][T17935] veth10: entered allmulticast mode [ 1579.195148][T17938] netlink: 'syz.0.11381': attribute type 61 has an invalid length. [ 1579.255474][T17938] netlink: 'syz.0.11381': attribute type 62 has an invalid length. [ 1579.459237][T17945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11382'. [ 1579.675033][ T7124] block nbd97: Receive control failed (result -32) [ 1580.115770][T17954] FAULT_INJECTION: forcing a failure. [ 1580.115770][T17954] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.131546][T17954] CPU: 0 UID: 0 PID: 17954 Comm: syz.3.11386 Not tainted syzkaller #0 PREEMPT(full) [ 1580.131576][T17954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1580.131590][T17954] Call Trace: [ 1580.131599][T17954] [ 1580.131609][T17954] dump_stack_lvl+0xe8/0x150 [ 1580.131644][T17954] should_fail_ex+0x412/0x560 [ 1580.131678][T17954] should_failslab+0xa8/0x100 [ 1580.131705][T17954] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1580.131740][T17954] ? __alloc_skb+0x1d0/0x7d0 [ 1580.131765][T17954] ? __local_bh_enable_ip+0xd0/0x130 [ 1580.131791][T17954] __alloc_skb+0x1d0/0x7d0 [ 1580.131817][T17954] ? netlink_ack_tlv_len+0x6c/0x210 [ 1580.131845][T17954] netlink_ack+0x146/0xa50 [ 1580.131866][T17954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1580.131913][T17954] netlink_rcv_skb+0x2b6/0x4b0 [ 1580.131939][T17954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1580.131969][T17954] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1580.132008][T17954] ? netlink_deliver_tap+0x2e/0x1b0 [ 1580.132042][T17954] netlink_unicast+0x80f/0x9b0 [ 1580.132076][T17954] ? __pfx_netlink_unicast+0x10/0x10 [ 1580.132100][T17954] ? netlink_sendmsg+0x650/0xb40 [ 1580.132123][T17954] ? skb_put+0x11b/0x210 [ 1580.132155][T17954] netlink_sendmsg+0x813/0xb40 [ 1580.132191][T17954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1580.132221][T17954] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1580.132250][T17954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1580.132275][T17954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1580.132300][T17954] sock_sendmsg+0x4a4/0x500 [ 1580.132330][T17954] ? __pfx_sock_sendmsg+0x10/0x10 [ 1580.132369][T17954] ? __asan_memset+0x22/0x50 [ 1580.132400][T17954] ? iov_iter_bvec+0xb8/0x180 [ 1580.132440][T17954] splice_to_socket+0xae2/0x11f0 [ 1580.132491][T17954] ? __pfx_splice_to_socket+0x10/0x10 [ 1580.132545][T17954] ? get_pid_task+0x20/0x1f0 [ 1580.132588][T17954] ? bpf_lsm_file_permission+0x9/0x20 [ 1580.132612][T17954] ? security_file_permission+0x75/0x260 [ 1580.132636][T17954] ? rw_verify_area+0x255/0x4d0 [ 1580.132669][T17954] ? __pfx_splice_to_socket+0x10/0x10 [ 1580.132694][T17954] do_splice+0xee3/0x1910 [ 1580.132748][T17954] ? __pfx_do_splice+0x10/0x10 [ 1580.132785][T17954] __se_sys_splice+0x353/0x490 [ 1580.132817][T17954] ? __pfx___se_sys_splice+0x10/0x10 [ 1580.132851][T17954] ? __x64_sys_splice+0x21/0xf0 [ 1580.132879][T17954] do_syscall_64+0xe2/0xf80 [ 1580.132909][T17954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.132930][T17954] ? trace_irq_disable+0x37/0x100 [ 1580.132951][T17954] ? clear_bhb_loop+0x60/0xb0 [ 1580.132977][T17954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.132998][T17954] RIP: 0033:0x7f9f9e59af79 [ 1580.133018][T17954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.133037][T17954] RSP: 002b:00007f9f9f536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1580.133060][T17954] RAX: ffffffffffffffda RBX: 00007f9f9e815fa0 RCX: 00007f9f9e59af79 [ 1580.133076][T17954] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 1580.133089][T17954] RBP: 00007f9f9f536090 R08: 0000000000010d00 R09: 000000000000000f [ 1580.133103][T17954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1580.133116][T17954] R13: 00007f9f9e816038 R14: 00007f9f9e815fa0 R15: 00007ffcc3ef0588 [ 1580.133154][T17954] [ 1580.612480][T17961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11387'. [ 1580.826532][ T7124] block nbd98: Receive control failed (result -32) [ 1580.959788][T17977] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 1580.966408][T17977] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 1580.996146][T17977] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 1581.049563][T17977] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 1581.056163][T17977] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 1581.105588][T17977] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 1581.425978][T17986] netlink: 'syz.4.11393': attribute type 2 has an invalid length. [ 1582.483036][T18019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11403'. [ 1582.649115][T18026] netlink: 'syz.4.11405': attribute type 2 has an invalid length. [ 1583.371287][T18056] siw: device registration error -23 [ 1583.956233][T18055] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:21 [ 1584.051815][T18077] lo speed is unknown, defaulting to 1000 [ 1584.078744][T18052] mpoa:mpoad_close: () going down [ 1584.109427][T18085] netlink: 'syz.2.11421': attribute type 2 has an invalid length. [ 1584.845694][T18112] veth4: entered allmulticast mode [ 1585.531043][T18077] xfrm0 speed is unknown, defaulting to 1000 [ 1585.890978][T18137] netlink: 'syz.4.11436': attribute type 2 has an invalid length. [ 1586.108995][T18141] netlink: 'syz.1.11438': attribute type 1 has an invalid length. [ 1586.137514][T18141] netlink: 1020 bytes leftover after parsing attributes in process `syz.1.11438'. [ 1586.159432][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11438'. [ 1586.353942][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11441'. [ 1586.709825][T18159] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11443'. [ 1588.097339][T18187] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11452'. [ 1588.471843][T18199] openvswitch: netlink: EtherType d3 is less than min 600 [ 1588.657605][T18207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11459'. [ 1589.356748][T18239] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:21 [ 1589.892139][T18237] lo speed is unknown, defaulting to 1000 [ 1590.267849][T18264] veth4: entered allmulticast mode [ 1590.383756][T18271] netlink: 'syz.1.11476': attribute type 8 has an invalid length. [ 1590.418784][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11476'. [ 1590.480805][T18271] bond0: entered promiscuous mode [ 1590.491070][T18271] gretap0: entered promiscuous mode [ 1590.559641][T18271] hsr_slave_1: entered promiscuous mode [ 1590.569089][T18271] debugfs: 'hsr0' already exists in 'hsr' [ 1590.575513][T18271] Cannot create hsr debugfs directory [ 1590.626193][T18271] hsr0: entered promiscuous mode [ 1590.797455][T18279] lo speed is unknown, defaulting to 1000 [ 1591.075719][T18287] netlink: 164 bytes leftover after parsing attributes in process `syz.2.11481'. [ 1591.108174][T18237] xfrm0 speed is unknown, defaulting to 1000 [ 1591.201266][T18289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11482'. [ 1591.587769][T18299] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1592.296604][T18279] xfrm0 speed is unknown, defaulting to 1000 [ 1592.792136][T18317] 8021q: VLANs not supported on caif0 [ 1592.801385][T18319] netlink: 348 bytes leftover after parsing attributes in process `syz.0.11491'. [ 1592.811694][T18319] netlink: 172 bytes leftover after parsing attributes in process `syz.0.11491'. [ 1593.480949][T18329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11494'. [ 1593.723689][T18336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11496'. [ 1594.146427][T18347] netlink: 'syz.1.11501': attribute type 29 has an invalid length. [ 1594.277549][T18352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1594.442284][T18357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11504'. [ 1594.475368][T18357] tipc: Enabling of bearer rejected, failed to enable media [ 1594.669379][T18372] netlink: 240 bytes leftover after parsing attributes in process `syz.3.11505'. [ 1594.687355][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11506'. [ 1594.718973][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11506'. [ 1594.729547][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11506'. [ 1594.779053][T18361] xt_CT: No such helper "snmp_trap" [ 1594.808683][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11506'. [ 1594.835619][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11506'. [ 1594.851429][T18361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11506'. [ 1594.919656][T18369] lo speed is unknown, defaulting to 1000 [ 1595.363381][T18394] FAULT_INJECTION: forcing a failure. [ 1595.363381][T18394] name failslab, interval 1, probability 0, space 0, times 0 [ 1595.415507][T18394] CPU: 1 UID: 0 PID: 18394 Comm: syz.4.11513 Not tainted syzkaller #0 PREEMPT(full) [ 1595.415538][T18394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1595.415552][T18394] Call Trace: [ 1595.415562][T18394] [ 1595.415572][T18394] dump_stack_lvl+0xe8/0x150 [ 1595.415607][T18394] should_fail_ex+0x412/0x560 [ 1595.415640][T18394] should_failslab+0xa8/0x100 [ 1595.415667][T18394] __kmalloc_noprof+0xde/0x7e0 [ 1595.415688][T18394] ? kfree+0x4d/0x650 [ 1595.415714][T18394] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1595.415751][T18394] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1595.415782][T18394] ? tomoyo_domain+0xd7/0x130 [ 1595.415818][T18394] ? tomoyo_path_number_perm+0x219/0x630 [ 1595.415841][T18394] tomoyo_path_number_perm+0x246/0x630 [ 1595.415870][T18394] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1595.415892][T18394] ? __lock_acquire+0x6b5/0x2cf0 [ 1595.415941][T18394] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1595.415995][T18394] ? __fget_files+0x2a/0x420 [ 1595.416023][T18394] ? __fget_files+0x2a/0x420 [ 1595.416046][T18394] ? __fget_files+0x3a0/0x420 [ 1595.416068][T18394] ? __fget_files+0x2a/0x420 [ 1595.416097][T18394] security_file_ioctl+0xc3/0x2a0 [ 1595.416123][T18394] __se_sys_ioctl+0x47/0x170 [ 1595.416157][T18394] do_syscall_64+0xe2/0xf80 [ 1595.416187][T18394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.416207][T18394] ? trace_irq_disable+0x37/0x100 [ 1595.416232][T18394] ? clear_bhb_loop+0x60/0xb0 [ 1595.416258][T18394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.416280][T18394] RIP: 0033:0x7f65a9d9af79 [ 1595.416299][T18394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1595.416318][T18394] RSP: 002b:00007f65a7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1595.416341][T18394] RAX: ffffffffffffffda RBX: 00007f65aa015fa0 RCX: 00007f65a9d9af79 [ 1595.416362][T18394] RDX: 00002000000000c0 RSI: 000000000000890b RDI: 0000000000000004 [ 1595.416376][T18394] RBP: 00007f65a7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1595.416390][T18394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1595.416412][T18394] R13: 00007f65aa016038 R14: 00007f65aa015fa0 R15: 00007ffe520ee608 [ 1595.416450][T18394] [ 1595.416652][T18394] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1595.650619][ T30] audit: type=1107 audit(1770693349.886:27): pid=18395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='GwXzEIsxǨ"~lbHȷD">(/qVIn+MЄoTNC@9YN@Ő!†x+"AOp+h/xT#8!bdBb3v,\*VEC=E#|kF2F4:[\' [ 1595.916910][T18402] bond7: option all_slaves_active: invalid value (13) [ 1595.953353][T18402] bond7 (unregistering): Released all slaves [ 1596.177626][T18369] xfrm0 speed is unknown, defaulting to 1000 [ 1596.327845][T18398] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:21 [ 1596.513718][T18398] mpoa:mpoad_close: () going down [ 1596.546269][T18418] lo speed is unknown, defaulting to 1000 [ 1596.738868][T18428] lo speed is unknown, defaulting to 1000 [ 1597.183465][T18436] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1597.311913][T18442] FAULT_INJECTION: forcing a failure. [ 1597.311913][T18442] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.401370][T18442] CPU: 0 UID: 0 PID: 18442 Comm: syz.3.11527 Not tainted syzkaller #0 PREEMPT(full) [ 1597.401400][T18442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1597.401414][T18442] Call Trace: [ 1597.401423][T18442] [ 1597.401432][T18442] dump_stack_lvl+0xe8/0x150 [ 1597.401465][T18442] should_fail_ex+0x412/0x560 [ 1597.401497][T18442] should_failslab+0xa8/0x100 [ 1597.401524][T18442] __kmalloc_noprof+0xde/0x7e0 [ 1597.401546][T18442] ? tomoyo_encode+0x28b/0x550 [ 1597.401580][T18442] tomoyo_encode+0x28b/0x550 [ 1597.401613][T18442] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1597.401644][T18442] ? tomoyo_domain+0xd7/0x130 [ 1597.401678][T18442] ? tomoyo_path_number_perm+0x219/0x630 [ 1597.401702][T18442] tomoyo_path_number_perm+0x246/0x630 [ 1597.401728][T18442] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1597.401750][T18442] ? __lock_acquire+0x6b5/0x2cf0 [ 1597.401819][T18442] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1597.401873][T18442] ? __fget_files+0x2a/0x420 [ 1597.401900][T18442] ? __fget_files+0x2a/0x420 [ 1597.401922][T18442] ? __fget_files+0x3a0/0x420 [ 1597.401945][T18442] ? __fget_files+0x2a/0x420 [ 1597.401972][T18442] security_file_ioctl+0xc3/0x2a0 [ 1597.402007][T18442] __se_sys_ioctl+0x47/0x170 [ 1597.402040][T18442] do_syscall_64+0xe2/0xf80 [ 1597.402069][T18442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.402090][T18442] ? trace_irq_disable+0x37/0x100 [ 1597.402110][T18442] ? clear_bhb_loop+0x60/0xb0 [ 1597.402136][T18442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.402156][T18442] RIP: 0033:0x7f9f9e59af79 [ 1597.402175][T18442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.402191][T18442] RSP: 002b:00007f9f9f536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1597.402213][T18442] RAX: ffffffffffffffda RBX: 00007f9f9e815fa0 RCX: 00007f9f9e59af79 [ 1597.402228][T18442] RDX: 00002000000000c0 RSI: 000000000000890b RDI: 0000000000000004 [ 1597.402242][T18442] RBP: 00007f9f9f536090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.402255][T18442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1597.402268][T18442] R13: 00007f9f9e816038 R14: 00007f9f9e815fa0 R15: 00007ffcc3ef0588 [ 1597.402311][T18442] [ 1597.633352][T18442] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1597.730914][T18447] syzkaller0: entered promiscuous mode [ 1597.736473][T18447] syzkaller0: entered allmulticast mode [ 1597.929400][T18455] gretap0: entered promiscuous mode [ 1597.950003][T18450] netlink: 'syz.0.11528': attribute type 2 has an invalid length. [ 1598.025264][T18457] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1598.050700][T18418] xfrm0 speed is unknown, defaulting to 1000 [ 1598.618045][T18468] __nla_validate_parse: 134 callbacks suppressed [ 1598.618069][T18468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11536'. [ 1598.918823][T18428] xfrm0 speed is unknown, defaulting to 1000 [ 1598.925159][T18483] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11538'. [ 1599.029052][T18490] FAULT_INJECTION: forcing a failure. [ 1599.029052][T18490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1599.044413][T18490] CPU: 0 UID: 0 PID: 18490 Comm: syz.0.11540 Not tainted syzkaller #0 PREEMPT(full) [ 1599.044443][T18490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1599.044457][T18490] Call Trace: [ 1599.044466][T18490] [ 1599.044475][T18490] dump_stack_lvl+0xe8/0x150 [ 1599.044517][T18490] should_fail_ex+0x412/0x560 [ 1599.044550][T18490] _copy_from_user+0x2d/0xb0 [ 1599.044584][T18490] nr_rt_ioctl+0x966/0xf90 [ 1599.044630][T18490] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1599.044675][T18490] ? apparmor_capable+0x137/0x1a0 [ 1599.044717][T18490] ? capable+0x88/0xe0 [ 1599.044738][T18490] ? nr_ioctl+0x1b1/0x3b0 [ 1599.044768][T18490] sock_do_ioctl+0x101/0x320 [ 1599.044795][T18490] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1599.044815][T18490] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1599.044865][T18490] sock_ioctl+0x5c6/0x7f0 [ 1599.044889][T18490] ? __pfx_sock_ioctl+0x10/0x10 [ 1599.044911][T18490] ? __fget_files+0x2a/0x420 [ 1599.044935][T18490] ? __fget_files+0x3a0/0x420 [ 1599.044958][T18490] ? __fget_files+0x2a/0x420 [ 1599.044986][T18490] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1599.045013][T18490] ? __pfx_sock_ioctl+0x10/0x10 [ 1599.045033][T18490] __se_sys_ioctl+0xfc/0x170 [ 1599.045068][T18490] do_syscall_64+0xe2/0xf80 [ 1599.045098][T18490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.045119][T18490] ? trace_irq_disable+0x37/0x100 [ 1599.045140][T18490] ? clear_bhb_loop+0x60/0xb0 [ 1599.045166][T18490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.045187][T18490] RIP: 0033:0x7f291219af79 [ 1599.045208][T18490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1599.045227][T18490] RSP: 002b:00007f2912fe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1599.045251][T18490] RAX: ffffffffffffffda RBX: 00007f2912415fa0 RCX: 00007f291219af79 [ 1599.045267][T18490] RDX: 00002000000000c0 RSI: 000000000000890b RDI: 0000000000000004 [ 1599.045281][T18490] RBP: 00007f2912fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 1599.045295][T18490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1599.045308][T18490] R13: 00007f2912416038 R14: 00007f2912415fa0 R15: 00007ffef1211ef8 [ 1599.045349][T18490] [ 1599.673085][T18500] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1600.068898][T18494] lo speed is unknown, defaulting to 1000 [ 1600.682443][T21746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1600.704698][T21746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1600.718782][T21746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1600.735791][T21746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1600.746742][T21746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1600.780464][T18521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11550'. [ 1601.294850][T18517] lo speed is unknown, defaulting to 1000 [ 1601.742599][T18494] xfrm0 speed is unknown, defaulting to 1000 [ 1601.840899][T18526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11551'. [ 1601.864273][ T7124] block nbd99: Receive control failed (result -32) [ 1602.096767][T18534] FAULT_INJECTION: forcing a failure. [ 1602.096767][T18534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1602.120503][T18534] CPU: 1 UID: 0 PID: 18534 Comm: syz.3.11552 Not tainted syzkaller #0 PREEMPT(full) [ 1602.120532][T18534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1602.120545][T18534] Call Trace: [ 1602.120554][T18534] [ 1602.120564][T18534] dump_stack_lvl+0xe8/0x150 [ 1602.120597][T18534] should_fail_ex+0x412/0x560 [ 1602.120628][T18534] _copy_to_user+0x31/0xb0 [ 1602.120663][T18534] simple_read_from_buffer+0xe1/0x170 [ 1602.120692][T18534] proc_fail_nth_read+0x1bb/0x230 [ 1602.120728][T18534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1602.120764][T18534] ? rw_verify_area+0x2a6/0x4d0 [ 1602.120794][T18534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1602.120826][T18534] vfs_read+0x20c/0xa70 [ 1602.120855][T18534] ? fdget_pos+0x246/0x320 [ 1602.120884][T18534] ? __pfx___mutex_lock+0x10/0x10 [ 1602.120916][T18534] ? __pfx_vfs_read+0x10/0x10 [ 1602.120948][T18534] ? __fget_files+0x2a/0x420 [ 1602.120976][T18534] ? __fget_files+0x3a0/0x420 [ 1602.121007][T18534] ? __fget_files+0x2a/0x420 [ 1602.121041][T18534] ksys_read+0x150/0x270 [ 1602.121074][T18534] ? __pfx_ksys_read+0x10/0x10 [ 1602.121103][T18534] ? __pfx_sock_ioctl+0x10/0x10 [ 1602.121136][T18534] do_syscall_64+0xe2/0xf80 [ 1602.121165][T18534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.121185][T18534] ? trace_irq_disable+0x37/0x100 [ 1602.121206][T18534] ? clear_bhb_loop+0x60/0xb0 [ 1602.121232][T18534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.121253][T18534] RIP: 0033:0x7f9f9e55b84e [ 1602.121274][T18534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1602.121292][T18534] RSP: 002b:00007f9f9f535fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1602.121314][T18534] RAX: ffffffffffffffda RBX: 00007f9f9f5366c0 RCX: 00007f9f9e55b84e [ 1602.121329][T18534] RDX: 000000000000000f RSI: 00007f9f9f5360a0 RDI: 0000000000000003 [ 1602.121342][T18534] RBP: 00007f9f9f536090 R08: 0000000000000000 R09: 0000000000000000 [ 1602.121354][T18534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1602.121366][T18534] R13: 00007f9f9e816038 R14: 00007f9f9e815fa0 R15: 00007ffcc3ef0588 [ 1602.121402][T18534] [ 1602.249534][T18528] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:21 [ 1602.401167][T18524] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1602.409554][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1602.466416][T18524] mpoa:mpoad_close: () going down [ 1602.543456][T18524] lo speed is unknown, defaulting to 1000 [ 1602.835359][T18517] xfrm0 speed is unknown, defaulting to 1000 [ 1602.849952][ T7124] Bluetooth: hci1: command tx timeout [ 1603.398418][T18548] 8021q: VLANs not supported on caif0 [ 1603.457385][T18551] FAULT_INJECTION: forcing a failure. [ 1603.457385][T18551] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.471645][T18551] CPU: 0 UID: 0 PID: 18551 Comm: syz.4.11558 Not tainted syzkaller #0 PREEMPT(full) [ 1603.471674][T18551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1603.471687][T18551] Call Trace: [ 1603.471697][T18551] [ 1603.471706][T18551] dump_stack_lvl+0xe8/0x150 [ 1603.471739][T18551] should_fail_ex+0x412/0x560 [ 1603.471770][T18551] should_failslab+0xa8/0x100 [ 1603.471797][T18551] __kmalloc_noprof+0xde/0x7e0 [ 1603.471816][T18551] ? kfree+0x4d/0x650 [ 1603.471850][T18551] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1603.471884][T18551] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1603.471914][T18551] ? tomoyo_domain+0xd7/0x130 [ 1603.471949][T18551] ? tomoyo_path_number_perm+0x219/0x630 [ 1603.471973][T18551] tomoyo_path_number_perm+0x246/0x630 [ 1603.472000][T18551] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1603.472022][T18551] ? __lock_acquire+0x6b5/0x2cf0 [ 1603.472088][T18551] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1603.472150][T18551] ? __fget_files+0x2a/0x420 [ 1603.472179][T18551] ? __fget_files+0x2a/0x420 [ 1603.472201][T18551] ? __fget_files+0x3a0/0x420 [ 1603.472223][T18551] ? __fget_files+0x2a/0x420 [ 1603.472252][T18551] security_file_ioctl+0xc3/0x2a0 [ 1603.472278][T18551] __se_sys_ioctl+0x47/0x170 [ 1603.472312][T18551] do_syscall_64+0xe2/0xf80 [ 1603.472340][T18551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.472361][T18551] ? trace_irq_disable+0x37/0x100 [ 1603.472382][T18551] ? clear_bhb_loop+0x60/0xb0 [ 1603.472408][T18551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.472429][T18551] RIP: 0033:0x7f65a9d9af79 [ 1603.472449][T18551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1603.472467][T18551] RSP: 002b:00007f65a7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1603.472490][T18551] RAX: ffffffffffffffda RBX: 00007f65aa015fa0 RCX: 00007f65a9d9af79 [ 1603.472506][T18551] RDX: 00002000000000c0 RSI: 000000000000890b RDI: 0000000000000004 [ 1603.472520][T18551] RBP: 00007f65a7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.472534][T18551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1603.472547][T18551] R13: 00007f65aa016038 R14: 00007f65aa015fa0 R15: 00007ffe520ee608 [ 1603.472584][T18551] [ 1603.472594][T18551] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1604.071421][T18524] xfrm0 speed is unknown, defaulting to 1000 [ 1604.214665][T18517] chnl_net:caif_netlink_parms(): no params data found [ 1604.703046][T18517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.736375][T18517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.761419][T18517] bridge_slave_0: entered allmulticast mode [ 1604.789978][T18517] bridge_slave_0: entered promiscuous mode [ 1604.833877][T18517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.851813][T18517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.877435][T18517] bridge_slave_1: entered allmulticast mode [ 1604.904545][T18517] bridge_slave_1: entered promiscuous mode [ 1604.928882][ T7124] Bluetooth: hci1: command tx timeout [ 1605.185819][T18517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1605.246199][T18517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1605.332939][T18596] veth1_to_bond: entered allmulticast mode [ 1605.349195][T18597] 8021q: VLANs not supported on caif0 [ 1605.456585][T18517] team0: Port device team_slave_0 added [ 1605.507294][T18595] veth1_to_bond: left allmulticast mode [ 1605.524801][T18517] team0: Port device team_slave_1 added [ 1605.659803][T18517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1605.666831][T18517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1605.700777][T18517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1605.719399][T18517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1605.726445][T18517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1605.770391][T18517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.830832][T18611] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11575'. [ 1605.903798][T17033] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9c [ 1606.062879][T18517] hsr_slave_0: entered promiscuous mode [ 1606.087130][T18517] hsr_slave_1: entered promiscuous mode [ 1606.106567][T18517] debugfs: 'hsr0' already exists in 'hsr' [ 1606.125194][T18517] Cannot create hsr debugfs directory [ 1606.786768][T18636] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11583'. [ 1606.934378][T18517] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1607.009006][ T7124] Bluetooth: hci1: command tx timeout [ 1607.015729][T18517] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1607.031691][T18640] netlink: 'syz.3.11583': attribute type 4 has an invalid length. [ 1607.047419][T18517] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1607.111358][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11582'. [ 1607.190624][T18517] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1607.689587][T18517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1607.749934][T18662] 8021q: VLANs not supported on caif0 [ 1607.782831][T18517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1607.824148][T17028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.831433][T17028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1607.926132][T17028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.933383][T17028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1608.555339][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11591'. [ 1608.607623][T18687] netlink: 200 bytes leftover after parsing attributes in process `syz.4.11592'. [ 1608.641051][T17682] lec:lec_start_xmit: lec0:No lecd attached [ 1608.672120][T18517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1608.733506][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11591'. [ 1608.831372][T18517] veth0_vlan: entered promiscuous mode [ 1608.861180][T18693] lo speed is unknown, defaulting to 1000 [ 1608.877885][T18517] veth1_vlan: entered promiscuous mode [ 1608.987470][T18517] veth0_macvtap: entered promiscuous mode [ 1609.023838][T18517] veth1_macvtap: entered promiscuous mode [ 1609.082912][T18517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1609.090872][T21746] Bluetooth: hci1: command tx timeout [ 1609.121817][T18517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1609.162246][ T5960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.184366][T18704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11596'. [ 1609.185662][ T5960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.245100][ T5960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.274454][ T5960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.579102][T17034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.617706][T17034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.652124][T18715] netlink: 'syz.1.11599': attribute type 30 has an invalid length. [ 1609.769470][T18715] bond5: option arp_missed_max: invalid value (0) [ 1609.787270][T18715] bond5: option arp_missed_max: allowed values 1 - 255 [ 1609.826468][T18715] bond5 (unregistering): Released all slaves [ 1609.966319][T18720] 8021q: VLANs not supported on caif0 [ 1609.989066][T18711] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:21 [ 1610.001983][T18693] xfrm0 speed is unknown, defaulting to 1000 [ 1610.003977][ T5960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.032357][ T5960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.065048][T18707] mpoa:mpoad_close: () going down [ 1610.137663][T18707] lo speed is unknown, defaulting to 1000 [ 1610.313511][T18730] netlink: 'syz.0.11547': attribute type 2 has an invalid length. [ 1610.386734][T18730] !9: entered promiscuous mode [ 1611.097101][T18743] syzkaller0: entered promiscuous mode [ 1611.118819][T18743] syzkaller0: entered allmulticast mode [ 1611.169308][T21746] Bluetooth: hci1: command 0x0405 tx timeout [ 1611.359601][T18707] xfrm0 speed is unknown, defaulting to 1000 [ 1611.784382][T18750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11606'. [ 1612.736312][T18756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11609'. [ 1613.506182][T18764] lo speed is unknown, defaulting to 1000 [ 1613.519822][T18773] netlink: 'syz.2.11613': attribute type 2 has an invalid length. [ 1613.829378][T18776] 8021q: VLANs not supported on caif0 [ 1614.026481][T18784] sctp: [Deprecated]: syz.2.11616 (pid 18784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1614.026481][T18784] Use struct sctp_sack_info instead [ 1614.047963][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5410 ms [ 1614.056126][ C1] lec:lec_tx_timeout: lec0 [ 1614.062382][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1614.446961][T18790] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1615.167320][T18818] netlink: 'syz.2.11626': attribute type 10 has an invalid length. [ 1615.243170][T18820] netlink: 'syz.2.11626': attribute type 10 has an invalid length. [ 1615.283745][T18813] syzkaller0: entered promiscuous mode [ 1615.307999][T18813] syzkaller0: entered allmulticast mode [ 1615.329824][T18823] netlink: 'syz.1.11625': attribute type 2 has an invalid length. [ 1615.373514][T18818] team0: Port device dummy0 added [ 1615.477660][T18820] team0: Port device dummy0 removed [ 1615.530479][T18804] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:21 [ 1615.563387][T18820] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1615.590024][T18799] mpoa:mpoad_close: () going down [ 1618.306039][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11626'. [ 1618.420583][T18764] xfrm0 speed is unknown, defaulting to 1000 [ 1618.421780][T18799] lo speed is unknown, defaulting to 1000 [ 1618.487329][T18849] syzkaller0: entered promiscuous mode [ 1618.525551][T18849] syzkaller0: entered allmulticast mode [ 1618.673628][T18850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11629'. [ 1618.922873][T18859] vlan1: entered promiscuous mode [ 1618.947789][T18859] batadv0: entered promiscuous mode [ 1619.078448][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1619.086653][ C1] lec:lec_tx_timeout: lec0 [ 1619.371059][ T7124] block nbd100: Receive control failed (result -32) [ 1619.703444][T18799] xfrm0 speed is unknown, defaulting to 1000 [ 1620.031771][T18880] netlink: 'syz.1.11637': attribute type 2 has an invalid length. [ 1620.190744][T18885] syzkaller1: entered promiscuous mode [ 1620.196546][T18885] syzkaller1: entered allmulticast mode [ 1620.480262][T18887] sctp: [Deprecated]: syz.0.11642 (pid 18887) Use of int in max_burst socket option deprecated. [ 1620.480262][T18887] Use struct sctp_assoc_value instead [ 1620.522026][T18887] sctp: [Deprecated]: syz.0.11642 (pid 18887) Use of int in max_burst socket option deprecated. [ 1620.522026][T18887] Use struct sctp_assoc_value instead [ 1620.540800][T18887] sctp: [Deprecated]: syz.0.11642 (pid 18887) Use of int in max_burst socket option deprecated. [ 1620.540800][T18887] Use struct sctp_assoc_value instead [ 1620.567734][T18887] sctp: [Deprecated]: syz.0.11642 (pid 18887) Use of int in max_burst socket option deprecated. [ 1620.567734][T18887] Use struct sctp_assoc_value instead [ 1620.589852][T18887] sctp: [Deprecated]: syz.0.11642 (pid 18887) Use of int in max_burst socket option deprecated. [ 1620.589852][T18887] Use struct sctp_assoc_value instead [ 1620.606976][T18887] sctp: [Deprecated]: syz.0.11642 (pid 18887) Use of int in max_burst socket option deprecated. [ 1620.606976][T18887] Use struct sctp_assoc_value instead [ 1620.625111][T18887] sctp: [Deprecated]: syz.0.11642 (pid 18887) Use of int in max_burst socket option deprecated. [ 1620.625111][T18887] Use struct sctp_assoc_value instead [ 1620.644312][T18887] sctp: [Deprecated]: syz.0.11642 (pid 18887) Use of int in max_burst socket option deprecated. [ 1620.644312][T18887] Use struct sctp_assoc_value instead [ 1620.698922][T18887] sctp: [Deprecated]: syz.0.11642 (pid 18887) Use of int in max_burst socket option deprecated. [ 1620.698922][T18887] Use struct sctp_assoc_value instead [ 1620.717030][T18887] sctp: [Deprecated]: syz.0.11642 (pid 18887) Use of int in max_burst socket option deprecated. [ 1620.717030][T18887] Use struct sctp_assoc_value instead [ 1621.049015][T18898] nbd: must specify at least one socket [ 1621.124226][T18896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11645'. [ 1621.327533][T18909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11649'. [ 1621.399823][T18910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11648'. [ 1622.281570][T18926] tipc: Invalid UDP bearer configuration [ 1622.281634][T18926] tipc: Enabling of bearer rejected, failed to enable media [ 1622.541751][T18933] lo speed is unknown, defaulting to 1000 [ 1622.671238][T18942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11657'. [ 1622.902520][T18942] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1623.139937][T18955] batadv0: entered promiscuous mode [ 1623.155068][T18955] vlan2: entered promiscuous mode [ 1623.484683][T18976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11669'. [ 1623.516271][T18976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11669'. [ 1623.630327][T18980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11671'. [ 1623.644129][T18933] xfrm0 speed is unknown, defaulting to 1000 [ 1623.751883][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11672'. [ 1623.789530][T18982] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11672'. [ 1623.825157][T18982] netlink: 'syz.1.11672': attribute type 15 has an invalid length. [ 1623.862107][T14204] IPVS: starting estimator thread 0... [ 1623.880366][T18985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11674'. [ 1623.988109][T18987] IPVS: using max 29 ests per chain, 69600 per kthread [ 1624.069240][T18992] lo speed is unknown, defaulting to 1000 [ 1624.442476][T18986] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:21 [ 1624.451243][T18986] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1624.459227][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1624.520169][T18990] mpoa:mpoad_close: () going down [ 1624.574164][T18990] lo speed is unknown, defaulting to 1000 [ 1624.974985][T19016] netlink: 288 bytes leftover after parsing attributes in process `syz.3.11679'. [ 1625.227228][T18992] xfrm0 speed is unknown, defaulting to 1000 [ 1625.381668][T19019] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11680'. [ 1625.816975][T18990] xfrm0 speed is unknown, defaulting to 1000 [ 1626.457641][T19044] lo speed is unknown, defaulting to 1000 [ 1627.353416][T19063] netlink: 'syz.1.11692': attribute type 2 has an invalid length. [ 1627.633942][T19067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11695'. [ 1627.923171][T19077] netlink: 'syz.2.11697': attribute type 1 has an invalid length. [ 1627.931942][T19077] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11697'. [ 1628.041123][T19044] xfrm0 speed is unknown, defaulting to 1000 [ 1628.401409][T19086] syzkaller0: entered promiscuous mode [ 1628.417314][T19086] syzkaller0: entered allmulticast mode [ 1628.655368][T19089] tipc: Enabled bearer , priority 0 [ 1628.846512][T19087] tipc: Disabling bearer [ 1629.760935][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11707'. [ 1630.108960][T19127] netlink: 'syz.1.11709': attribute type 2 has an invalid length. [ 1630.250981][T19126] lo speed is unknown, defaulting to 1000 [ 1630.873742][T19142] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11714'. [ 1630.973085][T19147] vlan1: entered promiscuous mode [ 1630.984350][T19147] batadv0: entered promiscuous mode [ 1630.992715][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11717'. [ 1631.161547][T19158] netlink: 'syz.4.11719': attribute type 1 has an invalid length. [ 1631.212940][T19159] netlink: 'syz.4.11719': attribute type 2 has an invalid length. [ 1631.228665][T19158] netlink: 'syz.4.11719': attribute type 2 has an invalid length. [ 1631.271260][T19160] netlink: 'syz.4.11719': attribute type 1 has an invalid length. [ 1631.286904][T19160] netlink: 'syz.4.11719': attribute type 2 has an invalid length. [ 1631.374806][T19126] xfrm0 speed is unknown, defaulting to 1000 [ 1631.682272][T19156] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:21 [ 1631.746831][T19154] mpoa:mpoad_close: () going down [ 1631.829820][T19171] netlink: 'syz.4.11721': attribute type 2 has an invalid length. [ 1631.865145][T19154] lo speed is unknown, defaulting to 1000 [ 1632.315696][T19179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11724'. [ 1632.325901][T19179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11724'. [ 1632.367534][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11724'. [ 1632.381575][T19180] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1632.659573][T19154] xfrm0 speed is unknown, defaulting to 1000 [ 1633.481152][T19197] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11728'. [ 1633.564421][T19199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11730'. [ 1633.960694][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11733'. [ 1634.273585][T19217] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11734'. [ 1634.787087][T19232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11739'. [ 1635.434308][T21746] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1635.454847][T21746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1635.468818][T21746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1635.481534][T21746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1635.501410][T21746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1635.732954][T19248] netlink: 'syz.2.11744': attribute type 32 has an invalid length. [ 1635.778777][T19249] netlink: 'syz.2.11744': attribute type 32 has an invalid length. [ 1635.799244][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11744'. [ 1635.840649][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11744'. [ 1635.889584][T19254] netlink: 'syz.3.11745': attribute type 21 has an invalid length. [ 1635.901320][T19254] IPv6: NLM_F_CREATE should be specified when creating new route [ 1635.909639][T19254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1635.916896][T19254] IPv6: NLM_F_CREATE should be set when creating new route [ 1635.924209][T19254] IPv6: NLM_F_CREATE should be set when creating new route [ 1635.931496][T19254] IPv6: NLM_F_CREATE should be set when creating new route [ 1635.967100][T19259] netlink: 'syz.0.11746': attribute type 1 has an invalid length. [ 1637.568887][T21746] Bluetooth: hci4: command tx timeout [ 1638.014858][T19248] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1638.016107][T19249] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1638.105336][T19244] lo speed is unknown, defaulting to 1000 [ 1638.585965][T19286] netlink: 'syz.2.11753': attribute type 1 has an invalid length. [ 1638.674591][T19286] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1638.833843][T19302] bond7: (slave bridge6): making interface the new active one [ 1638.855562][T19302] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 1638.932412][T19271] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:21 [ 1638.940205][T19271] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1638.947319][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1639.005923][T19275] mpoa:mpoad_close: () going down [ 1639.060327][T19305] xt_CT: No such helper "snmp_trap" [ 1639.091833][T19275] lo speed is unknown, defaulting to 1000 [ 1639.231357][T19313] syzkaller0: left promiscuous mode [ 1639.287287][T19244] xfrm0 speed is unknown, defaulting to 1000 [ 1639.648903][T21746] Bluetooth: hci4: command tx timeout [ 1639.770354][T19333] netlink: 'syz.1.11761': attribute type 2 has an invalid length. [ 1640.198630][T19348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11769'. [ 1640.322072][T19350] tipc: Enabled bearer , priority 0 [ 1640.329924][T19275] xfrm0 speed is unknown, defaulting to 1000 [ 1640.384092][T19350] syzkaller0: entered promiscuous mode [ 1640.391892][T19350] syzkaller0: entered allmulticast mode [ 1640.530681][T19352] tipc: Resetting bearer [ 1640.556051][T19244] chnl_net:caif_netlink_parms(): no params data found [ 1640.571433][T19360] netlink: 'syz.1.11772': attribute type 5 has an invalid length. [ 1640.585845][T19349] tipc: Resetting bearer [ 1640.616520][T19349] tipc: Disabling bearer [ 1640.836733][T19365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11775'. [ 1640.885146][T19368] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11774'. [ 1640.909119][T19244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.916371][T19244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.925017][T19244] bridge_slave_0: entered allmulticast mode [ 1640.939566][T19244] bridge_slave_0: entered promiscuous mode [ 1640.973885][T19244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.982606][T19244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.991991][T19244] bridge_slave_1: entered allmulticast mode [ 1641.001159][T19244] bridge_slave_1: entered promiscuous mode [ 1641.147629][T19244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1641.161747][T19378] [ 1641.164133][T19378] ====================================================== [ 1641.171182][T19378] WARNING: possible circular locking dependency detected [ 1641.178245][T19378] syzkaller #0 Not tainted [ 1641.182675][T19378] ------------------------------------------------------ [ 1641.189696][T19378] syz.3.11777/19378 is trying to acquire lock: [ 1641.195874][T19378] ffffffff8fb281d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 1641.205251][T19378] [ 1641.205251][T19378] but task is already holding lock: [ 1641.212645][T19378] ffff8880a361cd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1641.222105][T19378] [ 1641.222105][T19378] which lock already depends on the new lock. [ 1641.222105][T19378] [ 1641.232513][T19378] [ 1641.232513][T19378] the existing dependency chain (in reverse order) is: [ 1641.241553][T19378] [ 1641.241553][T19378] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1641.249599][T19378] _raw_spin_lock_bh+0x36/0x50 [ 1641.255014][T19378] nr_rt_device_down+0x153/0x860 [ 1641.260520][T19378] nr_device_event+0x137/0x150 [ 1641.265853][T19378] notifier_call_chain+0x19d/0x3a0 [ 1641.271531][T19378] __dev_notify_flags+0x16d/0x310 [ 1641.277109][T19378] netif_change_flags+0xe8/0x1a0 [ 1641.282593][T19378] dev_change_flags+0x130/0x260 [ 1641.287988][T19378] dev_ioctl+0x7b4/0x1150 [ 1641.292862][T19378] sock_do_ioctl+0x23e/0x320 [ 1641.298008][T19378] sock_ioctl+0x5c6/0x7f0 [ 1641.302878][T19378] __se_sys_ioctl+0xfc/0x170 [ 1641.308016][T19378] do_syscall_64+0xe2/0xf80 [ 1641.313072][T19378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.319516][T19378] [ 1641.319516][T19378] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1641.327389][T19378] _raw_spin_lock_bh+0x36/0x50 [ 1641.332716][T19378] nr_rt_device_down+0xbe/0x860 [ 1641.338115][T19378] nr_device_event+0x137/0x150 [ 1641.343441][T19378] notifier_call_chain+0x19d/0x3a0 [ 1641.349103][T19378] __dev_notify_flags+0x16d/0x310 [ 1641.354681][T19378] netif_change_flags+0xe8/0x1a0 [ 1641.360165][T19378] dev_change_flags+0x130/0x260 [ 1641.365555][T19378] dev_ioctl+0x7b4/0x1150 [ 1641.370432][T19378] sock_do_ioctl+0x23e/0x320 [ 1641.375567][T19378] sock_ioctl+0x5c6/0x7f0 [ 1641.380445][T19378] __se_sys_ioctl+0xfc/0x170 [ 1641.385577][T19378] do_syscall_64+0xe2/0xf80 [ 1641.390620][T19378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.397049][T19378] [ 1641.397049][T19378] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1641.404978][T19378] __lock_acquire+0x15a5/0x2cf0 [ 1641.410378][T19378] lock_acquire+0x106/0x330 [ 1641.415456][T19378] _raw_spin_lock_bh+0x36/0x50 [ 1641.420777][T19378] nr_remove_neigh+0x25/0xe0 [ 1641.425911][T19378] nr_add_node+0x1e41/0x2630 [ 1641.431137][T19378] nr_rt_ioctl+0xe59/0xf90 [ 1641.436142][T19378] sock_do_ioctl+0x101/0x320 [ 1641.441294][T19378] sock_ioctl+0x5c6/0x7f0 [ 1641.446184][T19378] __se_sys_ioctl+0xfc/0x170 [ 1641.451318][T19378] do_syscall_64+0xe2/0xf80 [ 1641.456359][T19378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.462788][T19378] [ 1641.462788][T19378] other info that might help us debug this: [ 1641.462788][T19378] [ 1641.473033][T19378] Chain exists of: [ 1641.473033][T19378] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1641.473033][T19378] [ 1641.486884][T19378] Possible unsafe locking scenario: [ 1641.486884][T19378] [ 1641.494351][T19378] CPU0 CPU1 [ 1641.499733][T19378] ---- ---- [ 1641.505119][T19378] lock(&nr_node->node_lock); [ 1641.509906][T19378] lock(nr_node_list_lock); [ 1641.517034][T19378] lock(&nr_node->node_lock); [ 1641.524335][T19378] lock(nr_neigh_list_lock); [ 1641.529125][T19378] [ 1641.529125][T19378] *** DEADLOCK *** [ 1641.529125][T19378] [ 1641.537293][T19378] 1 lock held by syz.3.11777/19378: [ 1641.542503][T19378] #0: ffff8880a361cd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1641.552379][T19378] [ 1641.552379][T19378] stack backtrace: [ 1641.558301][T19378] CPU: 0 UID: 0 PID: 19378 Comm: syz.3.11777 Not tainted syzkaller #0 PREEMPT(full) [ 1641.558327][T19378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1641.558342][T19378] Call Trace: [ 1641.558353][T19378] [ 1641.558365][T19378] dump_stack_lvl+0xe8/0x150 [ 1641.558402][T19378] print_circular_bug+0x2e1/0x300 [ 1641.558428][T19378] check_noncircular+0x12e/0x150 [ 1641.558454][T19378] __lock_acquire+0x15a5/0x2cf0 [ 1641.558497][T19378] ? nr_remove_neigh+0x25/0xe0 [ 1641.558516][T19378] lock_acquire+0x106/0x330 [ 1641.558542][T19378] ? nr_remove_neigh+0x25/0xe0 [ 1641.558559][T19378] ? do_raw_spin_lock+0x12b/0x2f0 [ 1641.558580][T19378] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1641.558600][T19378] ? nr_remove_neigh+0x25/0xe0 [ 1641.558615][T19378] _raw_spin_lock_bh+0x36/0x50 [ 1641.558637][T19378] ? nr_remove_neigh+0x25/0xe0 [ 1641.558654][T19378] nr_remove_neigh+0x25/0xe0 [ 1641.558671][T19378] nr_add_node+0x1e41/0x2630 [ 1641.558701][T19378] ? nr_call_to_digi+0x126/0x1b0 [ 1641.558728][T19378] nr_rt_ioctl+0xe59/0xf90 [ 1641.558759][T19378] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1641.558789][T19378] ? apparmor_capable+0x137/0x1a0 [ 1641.558819][T19378] ? capable+0x88/0xe0 [ 1641.558834][T19378] ? nr_ioctl+0x1b1/0x3b0 [ 1641.558856][T19378] sock_do_ioctl+0x101/0x320 [ 1641.558876][T19378] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1641.558892][T19378] ? do_futex+0x333/0x420 [ 1641.558922][T19378] sock_ioctl+0x5c6/0x7f0 [ 1641.558940][T19378] ? __pfx_sock_ioctl+0x10/0x10 [ 1641.558955][T19378] ? __fget_files+0x2a/0x420 [ 1641.558975][T19378] ? __fget_files+0x3a0/0x420 [ 1641.558992][T19378] ? __fget_files+0x2a/0x420 [ 1641.559012][T19378] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1641.559032][T19378] ? __pfx_sock_ioctl+0x10/0x10 [ 1641.559048][T19378] __se_sys_ioctl+0xfc/0x170 [ 1641.559073][T19378] do_syscall_64+0xe2/0xf80 [ 1641.559097][T19378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.559113][T19378] ? trace_irq_disable+0x37/0x100 [ 1641.559130][T19378] ? clear_bhb_loop+0x60/0xb0 [ 1641.559149][T19378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.559178][T19378] RIP: 0033:0x7f9f9e59af79 [ 1641.559194][T19378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1641.559210][T19378] RSP: 002b:00007f9f9f536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1641.559227][T19378] RAX: ffffffffffffffda RBX: 00007f9f9e815fa0 RCX: 00007f9f9e59af79 [ 1641.559258][T19378] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000004 [ 1641.559270][T19378] RBP: 00007f9f9e6316e0 R08: 0000000000000000 R09: 0000000000000000 [ 1641.559281][T19378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1641.559292][T19378] R13: 00007f9f9e816038 R14: 00007f9f9e815fa0 R15: 00007ffcc3ef0588 [ 1641.559314][T19378] [ 1641.837203][T19380] netlink: 'syz.2.11778': attribute type 5 has an invalid length. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1641.847837][T19244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1641.927370][T21746] Bluetooth: hci4: command tx timeout [ 1642.233131][T11605] syz_tun (unregistering): left allmulticast mode [ 1642.288940][T11605] syz_tun (unregistering): left promiscuous mode [ 1642.295424][T11605] bridge0: port 3(syz_tun) entered disabled state [ 1642.586201][ T8047] syz_tun (unregistering): left allmulticast mode [ 1642.598597][ T8047] syz_tun (unregistering): left promiscuous mode [ 1642.606092][ T8047] bridge0: port 1(syz_tun) entered disabled state [ 1642.675273][T17029] bridge_slave_1: left allmulticast mode [ 1642.683604][T17029] bridge_slave_1: left promiscuous mode [ 1642.701185][T17029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.720149][T17029] bridge_slave_0: left allmulticast mode [ 1642.725839][T17029] bridge_slave_0: left promiscuous mode [ 1642.732958][T17029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.839870][T17029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1642.851429][T17029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1642.862295][T17029] bond0 (unregistering): Released all slaves