last executing test programs: 1.905077869s ago: executing program 3 (id=2412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000837834d2bf0000000000a9"], 0x0}, 0x90) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8936, &(0x7f0000000000)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x206ea, @dev={0xfe, 0x80, '\x00', 0x33}}}}, &(0x7f0000000200)=0x98) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff, 0x0, 0x4000000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a4fdd7a6ccb2535880a0d"], 0x26}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4009}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000837834d2bf0000000000a9"], 0x0}, 0x90) (async) socket(0xa, 0x1, 0x0) (async) ioctl(r2, 0x8936, &(0x7f0000000000)) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x206ea, @dev={0xfe, 0x80, '\x00', 0x33}}}}, &(0x7f0000000200)=0x98) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff, 0x0, 0x4000000}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a4fdd7a6ccb2535880a0d"], 0x26}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4009}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) (async) 1.778745908s ago: executing program 3 (id=2415): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x80000001}, {0x6, 0x40}]}, 0x10) sendto(r0, 0x0, 0x0, 0x2, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) 1.706147254s ago: executing program 4 (id=2418): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 1.594926321s ago: executing program 0 (id=2420): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000000)) 1.594166618s ago: executing program 1 (id=2421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.518577331s ago: executing program 2 (id=2422): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x32, r1}) 1.512591667s ago: executing program 4 (id=2423): socket$kcm(0x10, 0x400000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4}, 0x20) 1.432424328s ago: executing program 3 (id=2424): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) setsockopt$llc_int(r0, 0x6a, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4) 1.411213465s ago: executing program 4 (id=2425): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @private2}}, 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x18, 0x42, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x146}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048808}, 0xc000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) r2 = socket(0x2d, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)={0x14, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) write(r7, &(0x7f00000001c0)="b4", 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x29c, 0x3c, 0x107, 0x0, 0x0, {0x9, 0x7c}, [@nested={0x280, 0xfc, 0x0, 0x1, [@nested={0x27a, 0xb6, 0x0, 0x1, [@generic="5f9d01b4647606248e90f5c0faeba92cef619c3d2f35baf9c563a1a93fac8b905348f7755dc9ef057231", @generic="68683a1dcca151e1797c48a6022a9f87a391a29d18f2e42e0a5c2fda26188de76817342fec0c03a0e58cf026f356805c113fb928ef32e6fce11a25b71b5288187a1bed28059edef8b4d37cb37ae6fdaa06a7eb100d83883307316f884ad686314b5fde18", @generic="0dac812523773d264dea42d876dfa4e94790d28be45865ea431465d986037c1f5e569e31c16be53033718883baacb718e10633d5faf5c69eab9b27d313b3f725d3c0e6c93343bbdd2f70248156dd9dcdb79ae174bf5a8bd02546f41060fcc437f471110b100e1ec4b5864f36a2e50aca0193b030389463ba7fc79a2b35eb771dfa8de464e0741b608877c3d1a914f4890b5aa4a73b7d83f8c8c205ac47d7cbffa02f98a32f9bfd338038a2ff6b81b3851670f9dd07296aa9ad4bbe666acf32300f884f00d308f42a78d90e687cf417d6dd98e180cbdb99883a40bafbf4b8bfb9", @nested={0x108, 0xca, 0x0, 0x1, [@nested={0x4, 0x38}, @typed={0x7b, 0x69, 0x0, 0x0, @binary="6d7d3754427d7070c962b403c417a813c1ecb9815cfdd63a3eeb65626ce31e2c818d601d834e96c545f0f2ba6a40e699d1ebb8b5749fce19cecfff6a783e1604d0ef3c4157a204294e27b877a6e7f01d4e18a727fb8e576fbf83b9bda93796a4e44ac0a19cfc667d2147084a793f8830345cee1dff4d00"}, @typed={0x8, 0x9f, 0x0, 0x0, @fd=r7}, @generic="a4b81d2f95e5ab4233fc4402299c99573e917bd7720828b4e7eec868dd2cef0cc273640ec88f80fabe1a469c597ac82f1b0634c40c957de0d4a14f662c11f507951bf4fe609188f540e8e308ae661e3667f47b4113db3ec6ab6a6202536c13", @generic="f4c435131601f1fd3411abb04122eb4ec6814cc7080d10ab8982ca7888"]}]}]}, @typed={0x8, 0x88, 0x0, 0x0, @u32=0x5}]}, 0x29c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) splice(r4, 0x0, r7, 0x0, 0x25a5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x961, {0x18, 0x0, 0x4, 0x4, 0xffff}}) 1.404925213s ago: executing program 0 (id=2426): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=@newtfilter={0x3c, 0x26, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_basic={{0x4}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) (fail_nth: 4) 1.368446578s ago: executing program 1 (id=2427): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0)={'erspan0', 0x32, 0x36}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x4, 0x0, &(0x7f0000000040)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) sendmmsg(r4, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)='r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000010c0)="f3", 0x1}], 0x1}}], 0x2, 0x20004841) mmap(&(0x7f0000f00000/0x1000)=nil, 0x1000, 0x0, 0x3032, r0, 0x0) 1.275561489s ago: executing program 2 (id=2428): sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (fail_nth: 3) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 1.133635544s ago: executing program 0 (id=2429): accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @bcast}, [@bcast, @default, @remote, @rose, @remote, @remote, @bcast, @rose]}, &(0x7f00000000c0)=0x80, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.085173512s ago: executing program 4 (id=2430): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 1.034928864s ago: executing program 3 (id=2431): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) recvfrom(r0, &(0x7f0000000280)=""/37, 0x25, 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) 938.57244ms ago: executing program 2 (id=2432): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x8000) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa0, 0xa, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x34f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x24040840) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r2, 0x0, 0x0) 761.329836ms ago: executing program 1 (id=2433): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000480)="96bc14585c62", 0x6}], 0x2, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x34}}], 0x18, 0x1000000}, 0x0) (fail_nth: 4) 663.082342ms ago: executing program 0 (id=2434): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 662.601263ms ago: executing program 3 (id=2435): socket$kcm(0x10, 0x400000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4}, 0x20) 395.99098ms ago: executing program 2 (id=2436): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x4, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)) 325.773313ms ago: executing program 1 (id=2437): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x11, 0xc, 0x0, &(0x7f0000000740)) 255.348118ms ago: executing program 1 (id=2438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x2, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80004, {0x0, 0x0, 0x0, r6, {}, {0x9, 0xb}, {0xe, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x10000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 254.43706ms ago: executing program 4 (id=2439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x4000004) 204.553768ms ago: executing program 0 (id=2440): getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)=@newtaction={0x18, 0x76, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0x4}]}, 0x18}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x303}}, 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r4, 0x25, 0x2, @void}, 0x10) r5 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000140)=0x10, 0x80800) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000080)={0x3, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000010000000000000700000000000000000008000201000000002e2a"], 0x0, 0x34}, 0x28) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r9, 0x107, 0x18, &(0x7f0000000800)={r8, 0x1, 0x6, @local}, 0x10) r10 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000000100)={0x200, 0xffffffff, 0xa, 0x2, 0x7}) 198.582642ms ago: executing program 2 (id=2441): sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x14, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 141.989163ms ago: executing program 3 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 58.677349ms ago: executing program 2 (id=2443): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_ts_info}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 50.581415ms ago: executing program 1 (id=2444): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$xdp(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6b9c329a50d95eb82723641a7cdcb20a10068b5fde7f93c3ac3b2653dd2db5d3855a43ec44a301f0079ffe4437a5fe135d5fa92fa", 0xb1}, {&(0x7f00000007c0)="dba348f3686f64658eef3472e762256ef8a9583e6b06ed88c2ef46e6f984e69058e797f054e94bf370b74113ad8d0db3393d6d488248ca023e8aa857d2d69f24712bc88cbd2a39190c437931fd386fe3d82738f55e2268975f389b01d0603267672f7f2c80", 0x65}], 0x3, 0x0, 0x0, 0x20000080}, 0x440000d0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12040) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/'], 0x20) 47.156796ms ago: executing program 0 (id=2445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x1c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x20050800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @empty}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r8}]}, 0x34}}, 0x40040d0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0xf, 0x10001}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@initdev, @empty, 0x0}, &(0x7f0000000380)=0xc) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x4, [@typedef={0xd, 0x0, 0x0, 0x8, 0x5}, @restrict={0xc, 0x0, 0x0, 0xb, 0x2}, @datasec={0x10, 0x4, 0x0, 0xf, 0x1, [{0x5, 0x7, 0x200}, {0x5, 0x9a3, 0x8}, {0x2, 0x5, 0x6}, {0x3, 0x4, 0xbe6}], "cd"}, @float={0xb, 0x0, 0x0, 0x10, 0x10}, @struct={0x8, 0x7, 0x0, 0x4, 0x1, 0x7, [{0xc, 0x4, 0x8001}, {0x2, 0x2, 0x1}, {0x3, 0x1, 0xaa}, {0x10, 0x1, 0x6}, {0xf, 0x4, 0x9}, {0x9, 0x3}, {0xb, 0x5, 0x7c}]}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x2}, @var={0x7, 0x0, 0x0, 0xe, 0x5, 0x3}]}, {0x0, [0x1e, 0x2e]}}, &(0x7f00000004c0)=""/122, 0xfc, 0x7a, 0x0, 0x3, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f0000000600)=""/250, 0xfa, 0x0, &(0x7f0000000700)=""/242, 0xf2}}, 0x10) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880), 0x4) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r17 = openat$cgroup_ro(r16, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x0, 0x0) preadv(r17, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x38}, 0x18) r19 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0xc, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x0, 0x3, 0xb, 0x0, 0x20, 0x10}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000200)='GPL\x00', 0x769, 0x19, &(0x7f0000000240)=""/25, 0x41000, 0x40, '\x00', r11, @fallback=0x34, r12, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xd, 0x4, 0x6b}, 0x10, r13, r14, 0x3, &(0x7f00000009c0)=[0xffffffffffffffff, r15, r17, r18, r19], &(0x7f0000000a00)=[{0x2, 0x1, 0x10, 0x2}, {0x0, 0x4, 0xe, 0xd}, {0x2, 0x3, 0x10, 0x3}], 0x10, 0xd}, 0x94) 0s ago: executing program 4 (id=2446): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) kernel console output (not intermixed with test programs): bond2: (slave gretap1): making interface the new active one [ 160.692933][ T8103] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 160.734504][ T8114] macvlan2: entered promiscuous mode [ 160.741543][ T8114] macvlan2: entered allmulticast mode [ 160.758979][ T8114] bond2: entered promiscuous mode [ 160.768937][ T8114] gretap1: entered promiscuous mode [ 160.775698][ T8114] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 160.787220][ T8114] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 160.799973][ T8114] bond2: left promiscuous mode [ 160.804917][ T8114] gretap1: left promiscuous mode [ 160.824637][ T8109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.640'. [ 160.877252][ T8114] syz.4.639 (8114) used greatest stack depth: 17424 bytes left [ 160.970245][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.978055][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.072404][ T8120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.270739][ T1166] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.298517][ T1166] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.312404][ T1166] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.346382][ T1166] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.402108][ T8142] tipc: Enabling of bearer rejected, failed to enable media [ 161.726284][ T8156] syzkaller0: entered promiscuous mode [ 161.731962][ T8156] syzkaller0: entered allmulticast mode [ 161.816890][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.655'. [ 161.901316][ T8161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.130616][ T8175] lo: entered allmulticast mode [ 162.148303][ T8171] lo: left allmulticast mode [ 162.296891][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 162.483786][ T8192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.666'. [ 162.808345][ T8210] syzkaller0: entered promiscuous mode [ 162.826143][ T8210] syzkaller0: entered allmulticast mode [ 162.871422][ T8170] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 162.894438][ T8170] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 163.022864][ T8218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.023046][ T8170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.070618][ T8170] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 163.082094][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'. [ 163.180447][ T8170] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 163.196189][ T8223] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 163.215714][ T8170] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 163.236067][ T8224] tipc: Enabled bearer , priority 0 [ 163.242866][ T8223] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 163.265055][ T8223] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 163.298362][ T8221] tipc: Disabling bearer [ 163.298699][ T8170] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.326451][ T8170] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 163.363164][ T8170] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 163.371627][ T8170] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 163.442640][ T8233] Bluetooth: MGMT ver 1.23 [ 163.707714][ T8241] syzkaller0: entered promiscuous mode [ 163.736693][ T8241] syzkaller0: entered allmulticast mode [ 164.070549][ T8261] syzkaller0: entered promiscuous mode [ 164.080193][ T8261] syzkaller0: entered allmulticast mode [ 164.218660][ T8263] tipc: Enabled bearer , priority 0 [ 164.226901][ T8263] syzkaller0: entered promiscuous mode [ 164.232501][ T8263] syzkaller0: entered allmulticast mode [ 164.291294][ T8272] tipc: Enabled bearer , priority 0 [ 164.312130][ T8263] tipc: Resetting bearer [ 164.313057][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 164.326050][ C0] lec:lec_tx_timeout: lec0 [ 164.330725][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 164.355772][ T8271] tipc: Disabling bearer [ 164.376687][ T8262] tipc: Resetting bearer [ 164.411495][ T8262] tipc: Disabling bearer [ 164.558571][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 164.613286][ T8283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.694'. [ 164.673757][ T8283] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 164.700707][ T8292] syzkaller0: entered promiscuous mode [ 164.706603][ T8292] syzkaller0: entered allmulticast mode [ 165.161233][ T8319] netlink: 14 bytes leftover after parsing attributes in process `syz.3.706'. [ 165.337918][ T8319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.357527][ T8319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.387552][ T8319] bond0 (unregistering): (slave bond1): Releasing backup interface [ 165.404379][ T8319] bond0 (unregistering): Released all slaves [ 165.693893][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 166.272660][ T8370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.417659][ T8376] tipc: Enabled bearer , priority 0 [ 166.438314][ T8376] syzkaller0: entered promiscuous mode [ 166.451236][ T8376] syzkaller0: entered allmulticast mode [ 166.483577][ T8376] tipc: Resetting bearer [ 166.499601][ T8375] tipc: Resetting bearer [ 166.564717][ T8375] tipc: Disabling bearer [ 166.596642][ T8383] syzkaller0: entered promiscuous mode [ 166.630211][ T8383] syzkaller0: entered allmulticast mode [ 166.732181][ T8392] tipc: Enabled bearer , priority 0 [ 166.756022][ T8392] syzkaller0: entered promiscuous mode [ 166.772689][ T8392] syzkaller0: entered allmulticast mode [ 166.847246][ T8391] tipc: Resetting bearer [ 166.940208][ T8391] tipc: Disabling bearer [ 167.275597][ T8419] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 167.315580][ T8419] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.504504][ T8431] syzkaller0: entered promiscuous mode [ 167.525813][ T8431] syzkaller0: entered allmulticast mode [ 167.551515][ T8431] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 167.817062][ T8444] tipc: Enabled bearer , priority 0 [ 167.824517][ T8444] syzkaller0: entered promiscuous mode [ 167.830029][ T8444] syzkaller0: entered allmulticast mode [ 167.920062][ T8442] tipc: Resetting bearer [ 168.007782][ T8442] tipc: Disabling bearer [ 168.015369][ T8458] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 168.375750][ T8476] syzkaller0: entered promiscuous mode [ 168.381360][ T8476] syzkaller0: entered allmulticast mode [ 168.934958][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 168.953063][ T8500] netlink: 'syz.2.771': attribute type 2 has an invalid length. [ 168.985467][ T8498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'. [ 169.226972][ T8508] syzkaller0: entered promiscuous mode [ 169.232490][ T8508] syzkaller0: entered allmulticast mode [ 169.734574][ T8532] netlink: 'syz.1.785': attribute type 1 has an invalid length. [ 169.768411][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 169.839089][ T8532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.905314][ T8536] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 169.951966][ T8536] bond2: (slave macvlan2): making interface the new active one [ 169.987887][ T8536] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 170.112995][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 170.121211][ C0] lec:lec_tx_timeout: lec0 [ 170.126002][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 170.148948][ T8545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.789'. [ 170.170956][ T8545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.789'. [ 170.559019][ T8558] syzkaller0: entered promiscuous mode [ 170.564661][ T8558] syzkaller0: entered allmulticast mode [ 170.926648][ T8579] tipc: Enabled bearer , priority 0 [ 170.935230][ T8579] syzkaller0: entered promiscuous mode [ 170.940740][ T8579] syzkaller0: entered allmulticast mode [ 170.992851][ T8579] tipc: Resetting bearer [ 171.026005][ T8577] tipc: Resetting bearer [ 171.071284][ T8577] tipc: Disabling bearer [ 171.170508][ T8592] tipc: Enabled bearer , priority 0 [ 171.214233][ T8592] syzkaller0: entered promiscuous mode [ 171.219954][ T8592] syzkaller0: entered allmulticast mode [ 171.238365][ T8592] tipc: Resetting bearer [ 171.284202][ T8589] tipc: Resetting bearer [ 171.346785][ T8589] tipc: Disabling bearer [ 171.516078][ T8605] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.524028][ T8605] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.898375][ T1166] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.923093][ T1166] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.942361][ T1166] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.994820][ T1166] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.134910][ T8632] syzkaller0: entered promiscuous mode [ 172.140579][ T8632] syzkaller0: entered allmulticast mode [ 172.311874][ T8644] netlink: 60 bytes leftover after parsing attributes in process `syz.3.830'. [ 172.322392][ T8647] netlink: 'syz.2.832': attribute type 5 has an invalid length. [ 172.347477][ T8646] netlink: 60 bytes leftover after parsing attributes in process `syz.3.830'. [ 172.408297][ T8629] infiniband syz2: set down [ 172.418119][ T8629] infiniband syz2: added ipvlan0 [ 172.607069][ T8629] RDS/IB: syz2: added [ 172.611151][ T8629] smc: adding ib device syz2 with port count 1 [ 172.629520][ T8629] smc: ib device syz2 port 1 has no pnetid [ 173.126651][ T8683] syzkaller0: entered promiscuous mode [ 173.160796][ T8683] syzkaller0: entered allmulticast mode [ 173.297124][ T8692] netlink: 'syz.1.851': attribute type 1 has an invalid length. [ 173.390174][ T8692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.435636][ T8698] netlink: 40 bytes leftover after parsing attributes in process `syz.2.853'. [ 173.506020][ T8692] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 173.545777][ T8692] bond3: (slave macvlan3): making interface the new active one [ 173.574985][ T8692] bond3: (slave macvlan3): Enslaving as an active interface with an up link [ 173.743272][ T8708] netlink: 'syz.2.860': attribute type 1 has an invalid length. [ 174.012027][ T8720] tipc: Enabled bearer , priority 0 [ 174.030387][ T8720] syzkaller0: entered promiscuous mode [ 174.051038][ T8720] syzkaller0: entered allmulticast mode [ 174.112575][ T8720] tipc: Resetting bearer [ 174.165831][ T8719] tipc: Resetting bearer [ 174.195113][ T8719] tipc: Disabling bearer [ 174.291981][ T8732] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 174.892597][ T8134] IPVS: starting estimator thread 0... [ 174.902154][ T8759] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 175.003108][ T8760] IPVS: using max 32 ests per chain, 76800 per kthread [ 175.071885][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.884'. [ 175.094587][ T8765] syzkaller0: entered promiscuous mode [ 175.103054][ T8765] syzkaller0: entered allmulticast mode [ 175.153097][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 175.161202][ C0] lec:lec_tx_timeout: lec0 [ 175.166322][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 175.384560][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 175.929971][ T8803] tipc: Enabled bearer , priority 0 [ 175.960391][ T8803] syzkaller0: entered promiscuous mode [ 175.968251][ T8803] syzkaller0: entered allmulticast mode [ 176.004312][ T8803] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 176.012021][ T8807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.905'. [ 176.059951][ T8803] tipc: Resetting bearer [ 176.072454][ T8802] tipc: Resetting bearer [ 176.113767][ T8802] tipc: Disabling bearer [ 177.052501][ T8860] tipc: Enabled bearer , priority 0 [ 177.068433][ T8857] tipc: Resetting bearer [ 177.120756][ T8857] tipc: Disabling bearer [ 177.256099][ T8871] syzkaller0: entered promiscuous mode [ 177.279957][ T8871] syzkaller0: entered allmulticast mode [ 178.286596][ T8930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.531257][ T8943] syzkaller0: entered promiscuous mode [ 178.546991][ T8943] syzkaller0: entered allmulticast mode [ 178.585176][ T8947] tipc: Enabled bearer , priority 0 [ 178.611441][ T8947] syzkaller0: entered promiscuous mode [ 178.617033][ T8947] syzkaller0: entered allmulticast mode [ 178.677196][ T8947] tipc: Resetting bearer [ 178.689796][ T8945] tipc: Resetting bearer [ 178.709853][ T8945] tipc: Disabling bearer [ 178.748540][ T8956] tipc: Enabled bearer , priority 0 [ 178.804980][ T8956] syzkaller0: entered promiscuous mode [ 178.813598][ T8956] syzkaller0: entered allmulticast mode [ 178.822885][ T8958] tipc: Enabled bearer , priority 0 [ 178.845364][ T8956] tipc: Resetting bearer [ 179.037096][ T8955] tipc: Resetting bearer [ 179.057935][ T8955] tipc: Disabling bearer [ 179.094352][ T8958] syzkaller0: entered promiscuous mode [ 179.099981][ T8958] syzkaller0: entered allmulticast mode [ 179.111051][ T8972] tipc: Resetting bearer [ 179.145893][ T8972] tipc: Disabling bearer [ 179.330465][ T8984] syzkaller0: entered promiscuous mode [ 179.337490][ T8984] syzkaller0: entered allmulticast mode [ 179.346665][ T8981] syzkaller0: entered promiscuous mode [ 179.352159][ T8981] syzkaller0: entered allmulticast mode [ 179.710826][ T9005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.989'. [ 179.837823][ T9009] netlink: 'syz.4.991': attribute type 6 has an invalid length. [ 179.870749][ T9013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.992'. [ 179.906672][ T9016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.993'. [ 180.173010][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 180.181069][ C0] lec:lec_tx_timeout: lec0 [ 180.185750][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 180.464086][ T9044] tipc: Enabled bearer , priority 0 [ 180.474355][ T9040] syzkaller1: entered promiscuous mode [ 180.479945][ T9040] syzkaller1: entered allmulticast mode [ 180.494437][ T9044] syzkaller0: entered promiscuous mode [ 180.512211][ T9044] syzkaller0: entered allmulticast mode [ 180.540696][ T9044] tipc: Resetting bearer [ 180.565254][ T9043] tipc: Resetting bearer [ 180.612054][ T9043] tipc: Disabling bearer [ 181.067632][ T9073] tipc: Enabled bearer , priority 0 [ 181.091552][ T9073] syzkaller0: entered promiscuous mode [ 181.107874][ T9073] syzkaller0: entered allmulticast mode [ 181.156801][ T9072] tipc: Resetting bearer [ 181.249217][ T9072] tipc: Disabling bearer [ 181.262754][ T9087] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1028'. [ 181.534854][ T9097] tipc: Enabled bearer , priority 0 [ 181.557530][ T9097] syzkaller0: entered promiscuous mode [ 181.570518][ T9097] syzkaller0: entered allmulticast mode [ 181.599760][ T9097] tipc: Resetting bearer [ 181.606341][ T9100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1034'. [ 181.618730][ T9096] tipc: Resetting bearer [ 181.636387][ T9096] tipc: Disabling bearer [ 181.695160][ T9104] tipc: Enabled bearer , priority 0 [ 181.713948][ T9104] syzkaller0: entered promiscuous mode [ 181.719826][ T9104] syzkaller0: entered allmulticast mode [ 181.730068][ T9104] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 181.789641][ T9103] tipc: Resetting bearer [ 181.840323][ T9103] tipc: Disabling bearer [ 181.913309][ T5962] IPVS: starting estimator thread 0... [ 182.017244][ T9122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1042'. [ 182.033710][ T9113] IPVS: using max 31 ests per chain, 74400 per kthread [ 182.304890][ T9132] syzkaller1: entered promiscuous mode [ 182.310679][ T9132] syzkaller1: entered allmulticast mode [ 182.394175][ T9135] tipc: Enabled bearer , priority 0 [ 182.410064][ T9135] syzkaller0: entered promiscuous mode [ 182.438251][ T9135] syzkaller0: entered allmulticast mode [ 182.493744][ T9135] tipc: Resetting bearer [ 182.519696][ T9134] tipc: Resetting bearer [ 182.555888][ T9134] tipc: Disabling bearer [ 182.664429][ T9151] syzkaller1: entered promiscuous mode [ 182.669948][ T9151] syzkaller1: entered allmulticast mode [ 182.752705][ T9157] tipc: Enabled bearer , priority 0 [ 182.760757][ T9157] syzkaller0: entered promiscuous mode [ 182.767097][ T9157] syzkaller0: entered allmulticast mode [ 182.804614][ T9157] tipc: Resetting bearer [ 182.835114][ T9157] tipc: Disabling bearer [ 182.858447][ T9160] syzkaller0: entered promiscuous mode [ 182.871948][ T9160] syzkaller0: entered allmulticast mode [ 183.439116][ T9196] syzkaller0: entered promiscuous mode [ 183.444964][ T9196] syzkaller0: entered allmulticast mode [ 183.983758][ T9226] syzkaller0: entered promiscuous mode [ 183.989278][ T9226] syzkaller0: entered allmulticast mode [ 184.111275][ T9230] syzkaller0: entered promiscuous mode [ 184.125879][ T9230] syzkaller0: entered allmulticast mode [ 184.400173][ T9250] syzkaller0: entered promiscuous mode [ 184.423234][ T9250] syzkaller0: entered allmulticast mode [ 184.640334][ T9268] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1105'. [ 184.649978][ T9268] netlink: 'syz.0.1105': attribute type 2 has an invalid length. [ 184.857615][ T9282] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1113'. [ 184.939414][ T9286] syzkaller0: entered promiscuous mode [ 184.949192][ T9286] syzkaller0: entered allmulticast mode [ 185.043469][ T9293] syzkaller1: entered promiscuous mode [ 185.049239][ T9293] syzkaller1: entered allmulticast mode [ 185.193423][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 185.201508][ C0] lec:lec_tx_timeout: lec0 [ 185.206223][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 185.354336][ T9308] syzkaller0: entered promiscuous mode [ 185.360032][ T9308] syzkaller0: entered allmulticast mode [ 185.393678][ T9308] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 185.421492][ T9316] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 185.436438][ T9313] tipc: Enabled bearer , priority 0 [ 185.463905][ T9313] syzkaller0: entered promiscuous mode [ 185.469417][ T9313] syzkaller0: entered allmulticast mode [ 185.485694][ T9313] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 185.578424][ T9313] tipc: Resetting bearer [ 185.611887][ T9311] tipc: Resetting bearer [ 185.664166][ T9311] tipc: Disabling bearer [ 185.891066][ T9337] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 185.963901][ T9337] 8021q: adding VLAN 0 to HW filter on device bond7 [ 186.037397][ T9343] vlan3: entered promiscuous mode [ 186.050664][ T9343] bond7: entered promiscuous mode [ 186.061461][ T9343] vlan3: entered allmulticast mode [ 186.067018][ T9343] bond7: entered allmulticast mode [ 186.169328][ T9351] tipc: Enabled bearer , priority 0 [ 186.179110][ T9350] tipc: Resetting bearer [ 186.198127][ T9350] tipc: Disabling bearer [ 186.334930][ T9362] tipc: Enabled bearer , priority 0 [ 186.349156][ T9364] tipc: Enabled bearer , priority 0 [ 186.364808][ T9364] syzkaller0: entered promiscuous mode [ 186.371047][ T9364] syzkaller0: entered allmulticast mode [ 186.382185][ T9362] tipc: Resetting bearer [ 186.426125][ T9361] tipc: Disabling bearer [ 186.460186][ T9363] tipc: Resetting bearer [ 186.504544][ T9363] tipc: Disabling bearer [ 186.693980][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'. [ 186.706108][ T9386] netlink: 'syz.2.1157': attribute type 1 has an invalid length. [ 186.728693][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 186.775868][ T1166] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.796698][ T1166] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.812258][ T1166] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.832605][ T1166] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.976293][ T9401] syzkaller0: entered promiscuous mode [ 186.981930][ T9401] syzkaller0: entered allmulticast mode [ 186.995297][ T9401] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 187.516634][ T9430] tipc: Enabled bearer , priority 0 [ 187.524967][ T9430] syzkaller0: entered promiscuous mode [ 187.530623][ T9430] syzkaller0: entered allmulticast mode [ 187.584865][ T9430] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 187.629047][ T9430] tipc: Resetting bearer [ 187.659317][ T9428] tipc: Resetting bearer [ 187.678812][ T9428] tipc: Disabling bearer [ 187.858596][ T9451] tipc: Enabled bearer , priority 0 [ 187.869328][ T9451] syzkaller0: entered promiscuous mode [ 187.876504][ T9451] syzkaller0: entered allmulticast mode [ 187.898172][ T9449] tipc: Resetting bearer [ 187.928438][ T9449] tipc: Disabling bearer [ 187.947178][ T9452] tipc: Enabled bearer , priority 0 [ 187.956241][ T9450] tipc: Resetting bearer [ 187.979047][ T9450] tipc: Disabling bearer [ 188.147769][ T9466] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 188.158200][ T9466] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 213 [ 188.267873][ T9473] syzkaller1: entered promiscuous mode [ 188.273657][ T9473] syzkaller1: entered allmulticast mode [ 188.331524][ T9476] tipc: Enabled bearer , priority 0 [ 188.339210][ T9476] syzkaller0: entered promiscuous mode [ 188.345163][ T9476] syzkaller0: entered allmulticast mode [ 188.357114][ T9476] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 188.377531][ T9476] tipc: Resetting bearer [ 188.387744][ T9475] tipc: Resetting bearer [ 188.408639][ T9475] tipc: Disabling bearer [ 188.549846][ T9486] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 189.285153][ T9531] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 189.424727][ T9538] tls_set_device_offload_rx: netdev not found [ 189.481766][ T9540] tipc: Enabled bearer , priority 0 [ 189.500214][ T9540] syzkaller0: entered promiscuous mode [ 189.516081][ T9540] syzkaller0: entered allmulticast mode [ 189.543051][ T9540] tipc: Resetting bearer [ 189.564157][ T9539] tipc: Resetting bearer [ 189.630899][ T9539] tipc: Disabling bearer [ 189.839614][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 189.849370][ T9569] tipc: Enabled bearer , priority 0 [ 189.883931][ T9569] syzkaller0: entered promiscuous mode [ 189.898570][ T9569] syzkaller0: entered allmulticast mode [ 189.928016][ T9569] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 189.955963][ T9569] tipc: Resetting bearer [ 189.992078][ T9569] tipc: Disabling bearer [ 190.071857][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'. [ 190.195793][ T9589] syzkaller1: entered promiscuous mode [ 190.201313][ T9589] syzkaller1: entered allmulticast mode [ 190.212995][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 190.221050][ C0] lec:lec_tx_timeout: lec0 [ 190.226162][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 190.375303][ T9600] netlink: 'syz.1.1243': attribute type 25 has an invalid length. [ 190.393654][ T9600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1243'. [ 190.424430][ T9602] tipc: Enabled bearer , priority 0 [ 190.432019][ T9602] syzkaller0: entered promiscuous mode [ 190.443480][ T9602] syzkaller0: entered allmulticast mode [ 190.457474][ T9605] netlink: 'syz.4.1244': attribute type 29 has an invalid length. [ 190.467682][ T9602] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 190.490625][ T9605] netlink: 'syz.4.1244': attribute type 29 has an invalid length. [ 190.502926][ T9601] tipc: Resetting bearer [ 190.509732][ T9605] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1244'. [ 190.530903][ T9601] tipc: Disabling bearer [ 190.645085][ T9613] netlink: 'syz.0.1249': attribute type 1 has an invalid length. [ 190.718809][ T9612] tipc: Enabled bearer , priority 0 [ 190.760724][ T9613] bond8: (slave ip6gretap2): making interface the new active one [ 190.779754][ T9613] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 190.797362][ T9613] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 190.817544][ T9613] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 190.852844][ T9612] tipc: Resetting bearer [ 190.917759][ T9610] tipc: Disabling bearer [ 190.998621][ T1099] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.026081][ T1099] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.050271][ T1099] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.084513][ T1099] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.125746][ T9647] tipc: New replicast peer: 255.255.255.255 [ 191.162803][ T9647] tipc: Enabled bearer , priority 10 [ 191.445357][ T9668] syzkaller0: entered promiscuous mode [ 191.451085][ T9668] syzkaller0: entered allmulticast mode [ 192.399085][ T9683] tipc: Enabled bearer , priority 0 [ 192.423130][ T9688] syzkaller0: entered promiscuous mode [ 192.441182][ T9688] syzkaller0: entered allmulticast mode [ 192.457968][ T9697] syzkaller0: entered promiscuous mode [ 192.471713][ T9697] syzkaller0: entered allmulticast mode [ 192.566357][ T9708] tipc: Resetting bearer [ 192.570923][ T9725] sock: sock_set_timeout: `syz.1.1271' (pid 9725) tries to set negative timeout [ 192.651840][ T9708] tipc: Disabling bearer [ 192.699895][ T9729] netlink: 'syz.1.1273': attribute type 1 has an invalid length. [ 192.806603][ T9729] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.853242][ T9733] vlan3: entered promiscuous mode [ 192.858882][ T9733] bond4: entered promiscuous mode [ 192.875636][ T9744] netlink: 'syz.2.1276': attribute type 4 has an invalid length. [ 192.893310][ T9733] vlan3: entered allmulticast mode [ 192.898662][ T9733] bond4: entered allmulticast mode [ 192.937121][ T9739] netlink: 'syz.2.1276': attribute type 4 has an invalid length. [ 194.167501][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 194.291836][ T9831] xt_hashlimit: size too large, truncated to 1048576 [ 194.526911][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.533682][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.862382][ T9851] syzkaller1: entered promiscuous mode [ 194.873655][ T9851] syzkaller1: entered allmulticast mode [ 195.233159][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 195.241349][ C0] lec:lec_tx_timeout: lec0 [ 195.246138][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 195.527765][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 195.997670][ T9912] tipc: Enabled bearer , priority 0 [ 196.015193][ T9912] syzkaller0: entered promiscuous mode [ 196.031667][ T9912] syzkaller0: entered allmulticast mode [ 196.066515][ T9911] tipc: Resetting bearer [ 196.115320][ T9911] tipc: Disabling bearer [ 196.149392][ T9915] syzkaller1: entered promiscuous mode [ 196.155253][ T9915] syzkaller1: entered allmulticast mode [ 196.196561][ T9916] lec:lec_atm_send: lec0: Unknown message type -985564149 [ 196.210784][ T9907] lec:lec_atm_close: lec0: Shut down! [ 196.551663][ T9933] tipc: Failed to remove unknown binding: 66,1,1/2339154503:240788985/240788987 [ 196.757365][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'. [ 196.927513][ T9960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1362'. [ 197.238834][ T9970] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 197.280236][ T9970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.321383][ T9970] vlan2: entered promiscuous mode [ 197.326943][ T9970] bond4: entered promiscuous mode [ 197.332188][ T9970] vlan2: entered allmulticast mode [ 197.337942][ T9970] bond4: entered allmulticast mode [ 197.571020][ T9983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1374'. [ 197.858353][T10000] netlink: 'syz.4.1381': attribute type 5 has an invalid length. [ 197.932655][T10006] netlink: 'syz.0.1382': attribute type 1 has an invalid length. [ 197.988365][T10006] 8021q: adding VLAN 0 to HW filter on device bond9 [ 198.018827][T10015] vlan4: entered promiscuous mode [ 198.025261][T10015] bond9: entered promiscuous mode [ 198.030479][T10015] vlan4: entered allmulticast mode [ 198.037141][T10015] bond9: entered allmulticast mode [ 198.405868][T10024] netdevsim netdevsim4: Direct firmware load for lookup_extent_enter failed with error -2 [ 198.436920][T10024] netdevsim netdevsim4: Falling back to sysfs fallback for: lookup_extent_enter [ 198.646385][T10032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1395'. [ 199.322855][T10075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1411'. [ 199.420371][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1413'. [ 199.442780][T10080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.456789][T10080] bond0: (slave rose0): Enslaving as an active interface with an up link [ 199.720093][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 200.152701][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'. [ 200.211554][T10115] syzkaller0: entered promiscuous mode [ 200.233445][T10115] syzkaller0: entered allmulticast mode [ 200.255446][T10115] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 200.377307][T10124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1422'. [ 200.623354][T10135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1426'. [ 200.974411][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1431'. [ 201.213065][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 201.221141][ C0] lec:lec_tx_timeout: lec0 [ 201.225827][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 201.735569][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1435'. [ 201.938701][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1437'. [ 201.939379][T10196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1438'. [ 202.077633][ T42] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.111714][ T42] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.136721][ T42] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.163608][ T42] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.009033][T10246] batadv_slave_0: entered promiscuous mode [ 203.033224][T10246] batadv_slave_0: entered allmulticast mode [ 203.356493][T10265] tipc: Enabling of bearer rejected, failed to enable media [ 203.451673][T10272] netlink: 'syz.2.1463': attribute type 4 has an invalid length. [ 204.431075][T10309] tipc: Enabling of bearer rejected, failed to enable media [ 204.770376][T10331] batman_adv: batadv0: Adding interface: dummy0 [ 204.777664][T10331] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.804192][T10331] batman_adv: batadv0: Interface activated: dummy0 [ 204.861902][T10333] batadv0: mtu less than device minimum [ 204.893038][T10333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.905300][T10333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.917240][T10333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.929392][T10333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.941303][T10333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.953230][T10333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.965182][T10333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.977137][T10333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.988995][T10333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 205.688720][T10366] __nla_validate_parse: 6 callbacks suppressed [ 205.688737][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1489'. [ 205.729439][T10368] tipc: Enabling of bearer rejected, failed to enable media [ 205.904406][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1494'. [ 206.057448][T10379] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 206.233060][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 206.241159][ C0] lec:lec_tx_timeout: lec0 [ 206.246084][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 206.332926][T10387] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1499'. [ 206.352066][T10388] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1499'. [ 206.870541][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'. [ 207.007225][T10425] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1507'. [ 207.405021][T10441] tipc: Enabled bearer , priority 0 [ 207.437672][T10441] tipc: Resetting bearer [ 207.502657][T10440] tipc: Disabling bearer [ 207.718429][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1516'. [ 207.993186][T10473] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1525'. [ 208.051521][T10479] tipc: Enabled bearer , priority 0 [ 208.076713][T10478] tipc: Disabling bearer [ 208.686683][T10511] syzkaller0: entered promiscuous mode [ 208.694262][T10511] syzkaller0: entered allmulticast mode [ 208.713808][T10513] team0: No ports can be present during mode change [ 208.928278][T10522] tipc: Enabled bearer , priority 0 [ 208.942224][T10522] syzkaller0: entered promiscuous mode [ 208.952140][T10522] syzkaller0: entered allmulticast mode [ 208.973031][T10522] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 209.040175][T10533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.115494][T10537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.125711][T10521] tipc: Resetting bearer [ 209.190876][T10521] tipc: Disabling bearer [ 209.472285][T10549] syzkaller0: entered promiscuous mode [ 209.478259][T10549] syzkaller0: entered allmulticast mode [ 209.677126][T10557] syzkaller0: entered promiscuous mode [ 209.692183][T10557] syzkaller0: entered allmulticast mode [ 209.937045][T10564] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 209.945521][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 210.169622][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1555'. [ 210.381961][T10582] tipc: Enabled bearer , priority 0 [ 210.406794][T10582] syzkaller0: entered promiscuous mode [ 210.415582][T10582] syzkaller0: entered allmulticast mode [ 210.435361][T10582] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 210.551760][T10581] tipc: Resetting bearer [ 210.592174][T10581] tipc: Disabling bearer [ 210.769577][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 210.888141][T10607] tipc: Enabled bearer , priority 0 [ 210.905945][T10607] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 210.920929][T10607] tipc: Resetting bearer [ 210.946028][T10606] tipc: Disabling bearer [ 211.127893][T10613] tipc: Enabled bearer , priority 0 [ 211.137271][T10612] tipc: Resetting bearer [ 211.253036][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 211.261140][ C0] lec:lec_tx_timeout: lec0 [ 211.265861][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 212.143180][ T5962] tipc: Node number set to 2342883433 [ 212.586910][T10612] tipc: Disabling bearer [ 212.618416][T10620] syzkaller0: entered promiscuous mode [ 212.626749][T10620] syzkaller0: entered allmulticast mode [ 212.755077][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1574'. [ 214.109647][T10666] tipc: Enabled bearer , priority 0 [ 214.129878][T10669] tipc: Enabled bearer , priority 0 [ 214.148757][T10666] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 214.159522][T10666] tipc: Resetting bearer [ 214.160223][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'. [ 214.184615][T10665] tipc: Disabling bearer [ 214.201717][T10672] tipc: Enabled bearer , priority 10 [ 214.208078][T10674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.298224][T10674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.399536][T10684] tipc: Resetting bearer [ 214.536980][T10668] tipc: Disabling bearer [ 214.623884][T10695] netlink: 'syz.4.1585': attribute type 3 has an invalid length. [ 214.632838][T10695] netlink: 'syz.4.1585': attribute type 3 has an invalid length. [ 214.824060][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1586'. [ 214.899043][T10709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1588'. [ 214.924308][T10706] tipc: Enabled bearer , priority 0 [ 214.932247][T10706] syzkaller0: entered promiscuous mode [ 214.937938][T10706] syzkaller0: entered allmulticast mode [ 215.002882][T10706] tipc: Resetting bearer [ 215.042199][T10705] tipc: Resetting bearer [ 215.078830][T10705] tipc: Disabling bearer [ 215.105219][T10714] syzkaller0: entered promiscuous mode [ 215.110741][T10714] syzkaller0: entered allmulticast mode [ 215.120251][T10718] tipc: Enabled bearer , priority 0 [ 215.134855][T10718] syzkaller0: entered promiscuous mode [ 215.140460][T10718] syzkaller0: entered allmulticast mode [ 215.154963][T10714] tipc: Enabled bearer , priority 0 [ 215.183796][T10718] tipc: Resetting bearer [ 215.196058][T10713] tipc: Resetting bearer [ 215.219510][T10722] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1593'. [ 215.230738][T10722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1593'. [ 215.241205][T10713] tipc: Disabling bearer [ 215.251463][T10716] tipc: Resetting bearer [ 215.267677][T10716] tipc: Disabling bearer [ 215.304967][T10724] tipc: Enabled bearer , priority 0 [ 215.320627][T10724] syzkaller0: entered promiscuous mode [ 215.329208][T10724] syzkaller0: entered allmulticast mode [ 215.349055][T10726] tipc: Enabled bearer , priority 0 [ 215.358949][T10724] tipc: Resetting bearer [ 215.372940][T10723] tipc: Resetting bearer [ 215.391434][T10723] tipc: Disabling bearer [ 215.402166][T10726] syzkaller0: entered promiscuous mode [ 215.409081][T10726] syzkaller0: entered allmulticast mode [ 215.438648][T10726] tipc: Resetting bearer [ 215.453535][T10725] tipc: Resetting bearer [ 215.488559][T10725] tipc: Disabling bearer [ 215.542129][T10735] syzkaller0: entered promiscuous mode [ 215.548624][T10735] syzkaller0: entered allmulticast mode [ 215.704293][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1600'. [ 215.799222][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055d56800: rx timeout, send abort [ 215.809332][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888055d56800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 215.947849][T10753] tipc: Enabled bearer , priority 0 [ 215.960101][T10753] syzkaller0: entered promiscuous mode [ 215.965719][T10753] syzkaller0: entered allmulticast mode [ 216.012280][T10753] tipc: Resetting bearer [ 216.032549][T10752] tipc: Resetting bearer [ 216.056873][T10752] tipc: Disabling bearer [ 216.071362][T10755] tipc: Enabled bearer , priority 0 [ 216.080762][T10755] syzkaller0: entered promiscuous mode [ 216.087953][T10755] syzkaller0: entered allmulticast mode [ 216.149285][T10755] tipc: Resetting bearer [ 216.161883][T10754] tipc: Resetting bearer [ 216.201198][T10754] tipc: Disabling bearer [ 216.229278][T10771] netlink: 'syz.4.1611': attribute type 1 has an invalid length. [ 216.283880][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 216.292125][ C0] lec:lec_tx_timeout: lec0 [ 216.297210][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 216.359206][T10778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1611'. [ 216.412369][T10774] bond3: (slave gretap2): making interface the new active one [ 216.422209][T10774] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 216.434402][T10778] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.729932][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1616'. [ 216.733919][T10797] tipc: Enabled bearer , priority 0 [ 216.780356][T10797] syzkaller0: entered promiscuous mode [ 216.788277][T10797] syzkaller0: entered allmulticast mode [ 216.835582][T10797] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 216.898269][T10797] tipc: Resetting bearer [ 216.913484][T10804] tipc: Enabled bearer , priority 0 [ 216.936817][T10794] tipc: Resetting bearer [ 216.995297][T10794] tipc: Disabling bearer [ 217.011624][T10804] syzkaller0: entered promiscuous mode [ 217.020700][T10804] syzkaller0: entered allmulticast mode [ 217.047163][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'. [ 217.059736][T10804] tipc: Resetting bearer [ 217.078893][T10802] tipc: Resetting bearer [ 217.144421][T10802] tipc: Disabling bearer [ 217.268154][T10823] tipc: Enabled bearer , priority 0 [ 217.306507][T10823] syzkaller0: entered promiscuous mode [ 217.332635][T10823] syzkaller0: entered allmulticast mode [ 217.361391][T10823] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 217.384261][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1628'. [ 217.436409][T10823] tipc: Resetting bearer [ 217.473613][T10820] tipc: Resetting bearer [ 217.524327][T10820] tipc: Disabling bearer [ 217.602941][T10843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1630'. [ 217.918709][T10855] tipc: Enabled bearer , priority 0 [ 217.932416][T10855] syzkaller0: entered promiscuous mode [ 217.946076][T10855] syzkaller0: entered allmulticast mode [ 217.979431][T10855] tipc: Resetting bearer [ 218.007822][T10854] tipc: Resetting bearer [ 218.059539][T10854] tipc: Disabling bearer [ 218.325944][T10878] syz_tun: entered allmulticast mode [ 218.347086][T10876] syz_tun: left allmulticast mode [ 218.383271][T10882] netlink: 'syz.3.1649': attribute type 30 has an invalid length. [ 218.414946][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1649'. [ 218.471804][T10887] netlink: 'syz.4.1651': attribute type 1 has an invalid length. [ 218.540025][T10887] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.586080][T10887] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.594097][T10887] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 218.614134][T10887] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 218.688109][T10900] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1651'. [ 218.701953][T10897] veth7: entered promiscuous mode [ 218.717443][T10897] bond4: (slave veth7): Enslaving as an active interface with a down link [ 218.729522][T10900] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.820547][T10907] net_ratelimit: 10 callbacks suppressed [ 218.820567][T10907] netlink: zone id is out of range [ 218.842443][T10907] netlink: get zone limit has 4 unknown bytes [ 218.975495][T10915] tipc: Enabled bearer , priority 0 [ 219.004576][T10915] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 219.037599][T10917] tipc: Enabled bearer , priority 0 [ 219.058492][T10915] tipc: Resetting bearer [ 219.075628][T10922] smc: removing ib device syz2 [ 219.079787][T10924] netlink: 'syz.4.1666': attribute type 10 has an invalid length. [ 219.090284][T10917] syzkaller0: entered promiscuous mode [ 219.109116][T10917] syzkaller0: entered allmulticast mode [ 219.138467][T10924] batman_adv: batadv0: Adding interface: team0 [ 219.145739][T10924] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.190429][T10924] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 219.232778][T10911] tipc: Disabling bearer [ 219.245959][T10917] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 219.273145][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 219.290606][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 219.319007][T10927] tipc: Resetting bearer [ 219.403304][T10916] tipc: Resetting bearer [ 219.462852][T10916] tipc: Disabling bearer [ 219.513477][T10936] tipc: Enabling of bearer rejected, failed to enable media [ 219.756218][T10947] tipc: Enabled bearer , priority 0 [ 219.794663][T10947] syzkaller0: entered promiscuous mode [ 219.835333][T10947] syzkaller0: entered allmulticast mode [ 219.875628][T10947] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 219.938557][T10947] tipc: Resetting bearer [ 220.044050][T10942] tipc: Resetting bearer [ 220.095483][T10967] netlink: 'syz.4.1676': attribute type 13 has an invalid length. [ 220.137414][T10942] tipc: Disabling bearer [ 220.307377][T10967] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.309845][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 220.325586][T10967] batman_adv: batadv0: Interface activated: team0 [ 220.374034][T10967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.473516][T10976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.513934][T10973] netlink: 'syz.2.1679': attribute type 2 has an invalid length. [ 220.850614][T10995] IPVS: Error joining to the multicast group [ 220.996471][T10999] tipc: Enabling of bearer rejected, failed to enable media [ 221.090379][T11003] tipc: Enabled bearer , priority 0 [ 221.115115][T11003] syzkaller0: entered promiscuous mode [ 221.131076][T11003] syzkaller0: entered allmulticast mode [ 221.150199][T11003] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 221.210664][T11014] tipc: Resetting bearer [ 221.268165][T11002] tipc: Resetting bearer [ 221.313063][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 221.321152][ C0] lec:lec_tx_timeout: lec0 [ 221.326799][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 221.386355][T11002] tipc: Disabling bearer [ 221.720329][T11039] __nla_validate_parse: 1 callbacks suppressed [ 221.720346][T11039] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1698'. [ 221.852891][T11051] netlink: 'syz.2.1702': attribute type 1 has an invalid length. [ 221.869967][T11051] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1702'. [ 222.111418][T11066] netlink: 'syz.4.1707': attribute type 2 has an invalid length. [ 223.103733][T11131] tipc: Enabling of bearer rejected, failed to enable media [ 223.121149][T11133] tipc: Enabled bearer , priority 0 [ 223.129335][T11133] syzkaller0: entered promiscuous mode [ 223.135496][T11133] syzkaller0: entered allmulticast mode [ 223.143729][T11132] syzkaller0: entered promiscuous mode [ 223.149234][T11132] syzkaller0: entered allmulticast mode [ 223.160650][T11133] tipc: Resetting bearer [ 223.168734][T11128] tipc: Resetting bearer [ 223.186052][T11128] tipc: Disabling bearer [ 223.547385][T11157] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1741'. [ 223.876083][T11178] syzkaller0: entered promiscuous mode [ 223.913606][T11178] syzkaller0: entered allmulticast mode [ 223.969168][T11185] tipc: Enabling of bearer rejected, failed to enable media [ 224.437730][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1761'. [ 224.583947][T11224] syzkaller0: entered promiscuous mode [ 224.611845][T11224] syzkaller0: entered allmulticast mode [ 224.762912][T11238] tipc: Enabled bearer , priority 0 [ 224.802398][T11238] tipc: Resetting bearer [ 224.882681][T11237] tipc: Disabling bearer [ 224.945927][T11254] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1778'. [ 225.192292][T11264] syzkaller0: entered promiscuous mode [ 225.202488][T11264] syzkaller0: entered allmulticast mode [ 225.224372][T11264] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 225.526848][T11288] netlink: 'syz.3.1792': attribute type 1 has an invalid length. [ 225.597998][T11288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.617408][T11292] syzkaller0: entered promiscuous mode [ 225.623065][T11292] syzkaller0: entered allmulticast mode [ 225.640598][T11288] vlan3: entered promiscuous mode [ 225.645899][T11288] bond0: entered promiscuous mode [ 225.651525][T11288] vlan3: entered allmulticast mode [ 225.657572][T11288] bond0: entered allmulticast mode [ 226.209430][T11335] syzkaller0: entered promiscuous mode [ 226.219965][T11335] syzkaller0: entered allmulticast mode [ 226.299241][T11341] tipc: Enabled bearer , priority 0 [ 226.348732][T11341] tipc: Resetting bearer [ 226.533631][T11339] tipc: Disabling bearer [ 226.765340][T11370] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 226.858023][T11375] tipc: Enabling of bearer rejected, failed to enable media [ 226.867905][T11377] syzkaller0: entered promiscuous mode [ 226.874749][T11377] syzkaller0: entered allmulticast mode [ 227.153113][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 227.161183][ C0] lec:lec_tx_timeout: lec0 [ 227.166626][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 227.256956][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1832'. [ 227.361375][T11407] syzkaller0: entered promiscuous mode [ 227.371000][T11407] syzkaller0: entered allmulticast mode [ 227.629129][T11426] syzkaller0: entered promiscuous mode [ 227.644852][T11426] syzkaller0: entered allmulticast mode [ 227.859426][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1849'. [ 227.916451][T11438] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1848'. [ 227.966977][T11447] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1848'. [ 227.985164][T11438] gretap0: entered promiscuous mode [ 228.013642][T11447] 0ªî{X¹¦: renamed from gretap0 [ 228.067592][T11447] 0ªî{X¹¦: left promiscuous mode [ 228.085877][T11447] 0ªî{X¹¦: entered allmulticast mode [ 228.097577][T11447] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 228.107461][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1851'. [ 228.228203][T11461] syzkaller0: entered promiscuous mode [ 228.241925][T11461] syzkaller0: entered allmulticast mode [ 228.289799][T11466] syzkaller0: entered promiscuous mode [ 228.295692][T11466] syzkaller0: entered allmulticast mode [ 228.698052][T11494] netlink: 'syz.2.1869': attribute type 1 has an invalid length. [ 228.735079][T11494] 8021q: adding VLAN 0 to HW filter on device bond5 [ 228.767815][T11494] vlan3: entered promiscuous mode [ 228.777428][T11494] bond5: entered promiscuous mode [ 228.784643][T11494] vlan3: entered allmulticast mode [ 228.789800][T11494] bond5: entered allmulticast mode [ 228.990068][T11512] tipc: Enabled bearer , priority 0 [ 228.999278][T11512] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 229.010278][T11512] tipc: Resetting bearer [ 229.026278][T11511] tipc: Disabling bearer [ 229.106702][T11515] syzkaller0: entered promiscuous mode [ 229.113095][T11515] syzkaller0: entered allmulticast mode [ 229.766413][T11542] tipc: Enabled bearer , priority 0 [ 229.774055][T11542] syzkaller0: entered promiscuous mode [ 229.779654][T11542] syzkaller0: entered allmulticast mode [ 229.792071][T11542] tipc: Resetting bearer [ 229.805407][T11541] tipc: Resetting bearer [ 229.822092][T11541] tipc: Disabling bearer [ 230.028687][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1894'. [ 230.032225][T11558] tipc: Enabling of bearer rejected, failed to enable media [ 230.450371][T11582] syzkaller0: entered promiscuous mode [ 230.463229][T11582] syzkaller0: entered allmulticast mode [ 231.161040][T11632] syzkaller0: entered promiscuous mode [ 231.172698][T11632] syzkaller0: entered allmulticast mode [ 231.511309][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1929'. [ 232.173028][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 232.181148][ C0] lec:lec_tx_timeout: lec0 [ 232.185934][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 232.842736][T11704] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1946'. [ 232.854312][T11704] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1946'. [ 232.863937][T11704] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1946'. [ 232.896100][T11706] tipc: Enabled bearer , priority 0 [ 232.907417][T11706] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 232.927458][T11706] tipc: Resetting bearer [ 232.950818][T11705] tipc: Disabling bearer [ 233.154222][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1950'. [ 233.282509][T11727] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1954'. [ 233.382782][T11732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1958'. [ 233.392386][T11735] syzkaller0: entered promiscuous mode [ 233.405464][T11735] syzkaller0: entered allmulticast mode [ 233.413651][T11736] syz_tun: entered allmulticast mode [ 233.422008][T11733] syz_tun: left allmulticast mode [ 233.913422][T11753] syzkaller0: entered promiscuous mode [ 233.928342][T11753] syzkaller0: entered allmulticast mode [ 233.950764][T11756] netlink: 'syz.2.1968': attribute type 1 has an invalid length. [ 234.034961][T11756] macvlan3: entered promiscuous mode [ 234.040557][T11756] macvlan3: entered allmulticast mode [ 234.052409][T11756] bond6: entered promiscuous mode [ 234.070701][T11756] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 234.108372][T11756] bond6: left promiscuous mode [ 234.156581][T11762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1970'. [ 234.437522][T11774] netlink: 'syz.2.1973': attribute type 10 has an invalid length. [ 234.759584][T11789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1980'. [ 234.934463][T11801] syzkaller0: entered promiscuous mode [ 234.955449][T11801] syzkaller0: entered allmulticast mode [ 234.975973][T11805] netlink: 'syz.4.1987': attribute type 10 has an invalid length. [ 235.047568][T11805] bond0: (slave bond_slave_0): Releasing backup interface [ 235.132120][ T8136] syz0: Port: 1 Link DOWN [ 235.200846][T11818] block nbd0: not configured, cannot reconfigure [ 235.343119][T11829] netlink: 'syz.0.1996': attribute type 1 has an invalid length. [ 235.388000][T11823] syzkaller0: entered promiscuous mode [ 235.393965][T11823] syzkaller0: entered allmulticast mode [ 235.425080][T11829] 8021q: adding VLAN 0 to HW filter on device bond10 [ 236.741095][T11834] bond10: (slave veth7): Enslaving as an active interface with a down link [ 236.754557][T11829] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 236.765528][T11836] tipc: Enabled bearer , priority 0 [ 236.788748][T11839] bond10: (slave veth9): Enslaving as an active interface with a down link [ 236.804211][T11821] tipc: Resetting bearer [ 236.831600][T11821] tipc: Disabling bearer [ 237.054690][T11866] team0: No ports can be present during mode change [ 237.193045][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 237.201121][ C0] lec:lec_tx_timeout: lec0 [ 237.205867][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 237.615331][T11888] bond7: entered promiscuous mode [ 237.650624][T11888] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 237.661759][T11888] bond7: (slave macvlan3): making interface the new active one [ 237.669761][T11888] macvlan3: entered promiscuous mode [ 237.671541][T11874] netlink: 'syz.0.2006': attribute type 4 has an invalid length. [ 237.675689][T11888] bond0: entered promiscuous mode [ 237.688152][T11888] bond_slave_0: entered promiscuous mode [ 237.695083][T11888] bond_slave_1: entered promiscuous mode [ 237.701744][T11888] bond7: (slave macvlan3): Enslaving as an active interface with an up link [ 237.725373][T11894] bridge0: port 3(syz_tun) entered blocking state [ 237.732018][T11894] bridge0: port 3(syz_tun) entered disabled state [ 237.740419][T11894] syz_tun: entered allmulticast mode [ 237.746149][T11888] netlink: 'syz.2.2012': attribute type 10 has an invalid length. [ 237.749406][T11894] syz_tun: entered promiscuous mode [ 237.762004][T11897] syzkaller0: entered promiscuous mode [ 237.767808][T11897] syzkaller0: entered allmulticast mode [ 237.787133][T11888] bridge0: entered promiscuous mode [ 237.793072][T11888] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 237.816387][T11888] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 237.831002][T11888] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:8c69:a9ff:fe20:ec50 error=-28 [ 237.968432][T11903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.006388][T11903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.274194][T11904] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 238.302333][T11904] syzkaller0: entered promiscuous mode [ 238.313382][T11904] syzkaller0: entered allmulticast mode [ 238.474786][T11919] bond1: option mode: unable to set because the bond device has slaves [ 238.517854][T11888] infiniband syz1: set down [ 238.524336][T11888] infiniband syz1: added syz_tun [ 238.532074][T11919] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 238.548401][T11888] syz1: rxe_create_cq: returned err = -12 [ 238.557671][T11888] infiniband syz1: Couldn't create ib_mad CQ [ 238.564014][T11919] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 238.573472][T11888] infiniband syz1: Couldn't open port 1 [ 238.633364][T11888] RDS/IB: syz1: added [ 238.649394][T11888] smc: adding ib device syz1 with port count 1 [ 238.685775][T11888] smc: ib device syz1 port 1 has no pnetid [ 238.743193][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2022'. [ 238.875633][T11933] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 239.199608][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2031'. [ 239.210331][T11952] bridge_slave_1: left allmulticast mode [ 239.225169][T11952] bridge_slave_1: left promiscuous mode [ 239.244545][T11952] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.267173][T11952] bridge_slave_0: left allmulticast mode [ 239.281208][T11952] bridge_slave_0: left promiscuous mode [ 239.287435][T11956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2033'. [ 239.303411][T11952] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.434482][T11961] syzkaller0: entered promiscuous mode [ 239.440003][T11961] syzkaller0: entered allmulticast mode [ 239.451062][T11961] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 239.581872][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2037'. [ 239.847737][T11975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2042'. [ 240.122610][T11987] syzkaller0: entered promiscuous mode [ 240.128335][T11987] syzkaller0: entered allmulticast mode [ 240.733986][T12017] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2062'. [ 241.004763][T12034] syzkaller0: entered promiscuous mode [ 241.010270][T12034] syzkaller0: entered allmulticast mode [ 241.281634][T12049] syzkaller0: entered promiscuous mode [ 241.290732][T12049] syzkaller0: entered allmulticast mode [ 241.324271][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'. [ 241.336233][T12055] bridge_slave_1: left allmulticast mode [ 241.341930][T12055] bridge_slave_1: left promiscuous mode [ 241.361995][T12055] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.388787][T12055] bridge_slave_0: left allmulticast mode [ 241.405835][T12055] bridge_slave_0: left promiscuous mode [ 241.426764][T12055] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.831244][T12083] syzkaller0: entered promiscuous mode [ 241.847869][T12083] syzkaller0: entered allmulticast mode [ 241.980385][T12090] syzkaller0: entered promiscuous mode [ 242.000162][T12090] syzkaller0: entered allmulticast mode [ 242.040254][T12095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2097'. [ 242.129361][T12101] syzkaller0: entered promiscuous mode [ 242.136739][T12101] syzkaller0: entered allmulticast mode [ 242.213057][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 242.221094][ C0] lec:lec_tx_timeout: lec0 [ 242.226967][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 242.421864][T12118] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.440439][T12118] vlan4: entered promiscuous mode [ 242.440882][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2108'. [ 242.445841][T12118] bond3: entered promiscuous mode [ 242.460555][T12118] vlan4: entered allmulticast mode [ 242.466100][T12118] bond3: entered allmulticast mode [ 242.491743][T12118] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.502636][T12118] macvlan2: entered promiscuous mode [ 242.509875][T12118] macvlan2: entered allmulticast mode [ 242.520842][T12118] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 242.534415][T12123] team0: No ports can be present during mode change [ 242.711489][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2114'. [ 242.734348][T12132] syzkaller0: entered promiscuous mode [ 242.739871][T12132] syzkaller0: entered allmulticast mode [ 243.002485][T12150] syzkaller0: entered promiscuous mode [ 243.014811][T12150] syzkaller0: entered allmulticast mode [ 243.026195][T12148] tipc: Enabled bearer , priority 0 [ 243.046324][T12145] tipc: Resetting bearer [ 243.085248][T12145] tipc: Disabling bearer [ 243.122009][T12152] syzkaller0: entered promiscuous mode [ 243.128874][T12152] syzkaller0: entered allmulticast mode [ 243.218864][T12152] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 243.539478][T12172] syzkaller0: entered promiscuous mode [ 243.560513][T12172] syzkaller0: entered allmulticast mode [ 243.882609][T12190] __nla_validate_parse: 1 callbacks suppressed [ 243.882629][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2133'. [ 243.925773][T12192] netlink: 'syz.4.2135': attribute type 13 has an invalid length. [ 243.979120][T12192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.308006][T12209] tipc: Enabling of bearer rejected, failed to enable media [ 244.695943][T12230] syzkaller0: entered promiscuous mode [ 244.719436][T12230] syzkaller0: entered allmulticast mode [ 244.908729][T12242] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2149'. [ 245.119870][T12252] syzkaller0: entered promiscuous mode [ 245.125861][T12252] syzkaller0: entered allmulticast mode [ 246.622565][T12267] tipc: Enabling of bearer rejected, failed to enable media [ 246.651678][T12287] batman_adv: batadv0: Interface deactivated: dummy0 [ 246.659732][T12287] batman_adv: batadv0: Removing interface: dummy0 [ 246.703943][T12287] bridge_slave_0: left allmulticast mode [ 246.720328][T12287] bridge_slave_0: left promiscuous mode [ 246.734677][T12287] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.762239][T12287] bridge_slave_1: left allmulticast mode [ 246.768877][T12287] bridge_slave_1: left promiscuous mode [ 246.781431][T12287] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.811960][T12287] team0: Port device team_slave_0 removed [ 246.835858][T12287] team0: Port device team_slave_1 removed [ 246.852439][T12287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.860605][T12287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.874016][T12287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.883923][T12287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.919416][T12287] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 247.087746][T12311] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2169'. [ 247.226931][T12316] syz_tun: entered allmulticast mode [ 247.239920][T12315] syz_tun: left allmulticast mode [ 247.243094][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 247.253070][ C0] lec:lec_tx_timeout: lec0 [ 247.257737][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 247.266106][T12321] syzkaller0: entered promiscuous mode [ 247.271756][T12321] syzkaller0: entered allmulticast mode [ 247.298926][T12321] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 247.666395][T12346] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2182'. [ 247.716859][T12351] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 247.726366][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'. [ 247.827417][T12359] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2188'. [ 247.910694][T12363] syzkaller0: entered promiscuous mode [ 247.919295][T12363] syzkaller0: entered allmulticast mode [ 247.938591][T12363] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 248.068385][T12370] syzkaller0: entered promiscuous mode [ 248.089149][T12370] syzkaller0: entered allmulticast mode [ 248.281037][T12385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2200'. [ 248.300941][T12388] netlink: 'syz.2.2202': attribute type 1 has an invalid length. [ 248.431850][T12392] macvlan4: entered promiscuous mode [ 248.440108][T12392] macvlan4: entered allmulticast mode [ 248.447541][T12392] bond8: entered promiscuous mode [ 248.454048][T12392] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 248.465619][T12392] bond8: left promiscuous mode [ 248.534646][T12398] syzkaller0: entered promiscuous mode [ 248.545190][T12398] syzkaller0: entered allmulticast mode [ 248.639054][T12402] syzkaller0: entered promiscuous mode [ 248.651400][T12402] syzkaller0: entered allmulticast mode [ 248.660841][T12402] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 249.215136][T12426] tipc: Enabling of bearer rejected, failed to enable media [ 249.232287][T12426] syzkaller0: entered promiscuous mode [ 249.239642][T12426] syzkaller0: entered allmulticast mode [ 249.259900][T12430] syzkaller0: entered promiscuous mode [ 249.265771][T12430] syzkaller0: entered allmulticast mode [ 249.532885][T12444] syzkaller0: entered promiscuous mode [ 249.538792][T12444] syzkaller0: entered allmulticast mode [ 249.549439][T12444] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 249.649681][T12450] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2224'. [ 249.925107][T12468] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2229'. [ 249.976347][T12470] syzkaller0: entered promiscuous mode [ 249.982003][T12470] syzkaller0: entered allmulticast mode [ 250.238955][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2234'. [ 250.296306][T12489] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2235'. [ 250.367634][T12494] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2235'. [ 250.726420][T12511] syzkaller0: entered promiscuous mode [ 250.732065][T12511] syzkaller0: entered allmulticast mode [ 250.740299][T12515] syzkaller0: entered promiscuous mode [ 250.753909][T12515] syzkaller0: entered allmulticast mode [ 250.807184][T12519] netlink: 'syz.3.2247': attribute type 1 has an invalid length. [ 250.870345][T12519] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.029232][T12533] rdma_rxe: rxe_newlink: failed to add team0 [ 251.050644][T12527] syzkaller1: entered promiscuous mode [ 251.061126][T12527] syzkaller1: entered allmulticast mode [ 251.077179][T12536] syzkaller0: entered promiscuous mode [ 251.083268][T12536] syzkaller0: entered allmulticast mode [ 251.438892][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2256'. [ 251.604785][T12563] netlink: 'syz.0.2260': attribute type 1 has an invalid length. [ 251.629329][T12563] 8021q: adding VLAN 0 to HW filter on device bond11 [ 251.676560][T12566] syzkaller0: entered promiscuous mode [ 251.682186][T12566] syzkaller0: entered allmulticast mode [ 251.872665][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2263'. [ 252.018070][T12573] syzkaller0: entered promiscuous mode [ 252.026158][T12573] syzkaller0: entered allmulticast mode [ 252.075722][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2265'. [ 252.204249][T12579] tipc: Enabled bearer , priority 0 [ 252.234832][T12579] syzkaller0: entered promiscuous mode [ 252.247870][T12579] syzkaller0: entered allmulticast mode [ 252.273069][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 252.281164][ C0] lec:lec_tx_timeout: lec0 [ 252.286228][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 252.300799][T12587] netlink: 'syz.0.2269': attribute type 1 has an invalid length. [ 252.309732][T12579] tipc: Resetting bearer [ 252.317652][T12577] tipc: Resetting bearer [ 252.340802][T12577] tipc: Disabling bearer [ 252.405951][T12587] 8021q: adding VLAN 0 to HW filter on device bond12 [ 252.445056][T12590] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 252.457354][T12590] bond12: (slave macvlan3): making interface the new active one [ 252.467083][T12590] bond12: (slave macvlan3): Enslaving as an active interface with an up link [ 252.492010][T12593] syzkaller0: entered promiscuous mode [ 252.508492][T12593] syzkaller0: entered allmulticast mode [ 252.536412][T12593] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 252.562029][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 252.786724][T12607] syzkaller0: entered promiscuous mode [ 252.792111][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2276'. [ 252.792313][T12607] syzkaller0: entered allmulticast mode [ 252.828098][T12607] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 252.930661][T12618] tipc: Enabling of bearer rejected, failed to enable media [ 252.945482][T12618] syzkaller0: entered promiscuous mode [ 252.961514][T12618] syzkaller0: entered allmulticast mode [ 253.042688][T12628] netlink: 'syz.1.2283': attribute type 1 has an invalid length. [ 253.189318][T12628] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.296890][T12637] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 253.324201][T12637] bond5: (slave macvlan5): making interface the new active one [ 253.332473][T12637] bond5: (slave macvlan5): Enslaving as an active interface with an up link [ 253.353393][T12650] tipc: Enabling of bearer rejected, failed to enable media [ 253.646723][T12670] netlink: 'syz.4.2294': attribute type 1 has an invalid length. [ 253.761597][T12670] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.790040][T12676] tipc: Enabling of bearer rejected, failed to enable media [ 253.801027][T12676] syzkaller0: entered promiscuous mode [ 253.808210][T12676] syzkaller0: entered allmulticast mode [ 254.358902][T12716] netlink: 'syz.1.2309': attribute type 1 has an invalid length. [ 254.367993][T12711] tipc: Enabled bearer , priority 0 [ 254.414088][T12716] 8021q: adding VLAN 0 to HW filter on device bond6 [ 254.421871][T12711] syzkaller0: entered promiscuous mode [ 254.427790][T12711] syzkaller0: entered allmulticast mode [ 254.466265][T12711] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 254.499069][T12716] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 254.510767][T12716] bond6: (slave macvlan6): making interface the new active one [ 254.520314][T12716] bond6: (slave macvlan6): Enslaving as an active interface with an up link [ 254.531676][T12711] tipc: Resetting bearer [ 254.553669][T12710] tipc: Resetting bearer [ 254.584580][T12710] tipc: Disabling bearer [ 254.811472][T12735] tipc: Enabling of bearer rejected, failed to enable media [ 254.823539][T12735] syzkaller0: entered promiscuous mode [ 254.829332][T12735] syzkaller0: entered allmulticast mode [ 254.841542][T12740] FAULT_INJECTION: forcing a failure. [ 254.841542][T12740] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 254.860031][T12740] CPU: 1 UID: 0 PID: 12740 Comm: syz.2.2318 Not tainted syzkaller #0 PREEMPT(full) [ 254.860055][T12740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.860071][T12740] Call Trace: [ 254.860078][T12740] [ 254.860087][T12740] dump_stack_lvl+0x189/0x250 [ 254.860125][T12740] ? __pfx____ratelimit+0x10/0x10 [ 254.860146][T12740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.860168][T12740] ? __pfx__printk+0x10/0x10 [ 254.860186][T12740] ? __might_fault+0xb0/0x130 [ 254.860221][T12740] should_fail_ex+0x414/0x560 [ 254.860250][T12740] _copy_from_user+0x2d/0xb0 [ 254.860281][T12740] __sys_bpf+0x1e3/0x860 [ 254.860301][T12740] ? __pfx___sys_bpf+0x10/0x10 [ 254.860333][T12740] ? ksys_write+0x22a/0x250 [ 254.860357][T12740] ? __pfx_ksys_write+0x10/0x10 [ 254.860384][T12740] __x64_sys_bpf+0x7c/0x90 [ 254.860409][T12740] do_syscall_64+0xfa/0xfa0 [ 254.860429][T12740] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.860449][T12740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.860467][T12740] ? clear_bhb_loop+0x60/0xb0 [ 254.860488][T12740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.860505][T12740] RIP: 0033:0x7f3132d8efc9 [ 254.860526][T12740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.860539][T12740] RSP: 002b:00007f3133b80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.860561][T12740] RAX: ffffffffffffffda RBX: 00007f3132fe5fa0 RCX: 00007f3132d8efc9 [ 254.860573][T12740] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 254.860584][T12740] RBP: 00007f3133b80090 R08: 0000000000000000 R09: 0000000000000000 [ 254.860595][T12740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.860605][T12740] R13: 00007f3132fe6038 R14: 00007f3132fe5fa0 R15: 00007ffde565f0a8 [ 254.860635][T12740] [ 255.337502][T12761] netlink: 'syz.1.2325': attribute type 1 has an invalid length. [ 255.400738][T12761] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.415827][T12768] FAULT_INJECTION: forcing a failure. [ 255.415827][T12768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.429035][T12768] CPU: 1 UID: 0 PID: 12768 Comm: syz.0.2326 Not tainted syzkaller #0 PREEMPT(full) [ 255.429058][T12768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.429069][T12768] Call Trace: [ 255.429077][T12768] [ 255.429086][T12768] dump_stack_lvl+0x189/0x250 [ 255.429114][T12768] ? __pfx____ratelimit+0x10/0x10 [ 255.429136][T12768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.429158][T12768] ? __pfx__printk+0x10/0x10 [ 255.429177][T12768] ? __might_fault+0xb0/0x130 [ 255.429220][T12768] should_fail_ex+0x414/0x560 [ 255.429250][T12768] _copy_from_user+0x2d/0xb0 [ 255.429273][T12768] ___sys_sendmsg+0x158/0x2a0 [ 255.429295][T12768] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.429350][T12768] ? __fget_files+0x2a/0x420 [ 255.429366][T12768] ? __fget_files+0x3a0/0x420 [ 255.429393][T12768] __x64_sys_sendmsg+0x19b/0x260 [ 255.429414][T12768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.429442][T12768] ? __pfx_ksys_write+0x10/0x10 [ 255.429469][T12768] ? do_syscall_64+0xbe/0xfa0 [ 255.429494][T12768] do_syscall_64+0xfa/0xfa0 [ 255.429513][T12768] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.429535][T12768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.429552][T12768] ? clear_bhb_loop+0x60/0xb0 [ 255.429574][T12768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.429591][T12768] RIP: 0033:0x7f52cc18efc9 [ 255.429608][T12768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.429623][T12768] RSP: 002b:00007f52ccfee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.429642][T12768] RAX: ffffffffffffffda RBX: 00007f52cc3e5fa0 RCX: 00007f52cc18efc9 [ 255.429655][T12768] RDX: 0000000000000000 RSI: 0000200000005c40 RDI: 0000000000000003 [ 255.429667][T12768] RBP: 00007f52ccfee090 R08: 0000000000000000 R09: 0000000000000000 [ 255.429684][T12768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.429695][T12768] R13: 00007f52cc3e6038 R14: 00007f52cc3e5fa0 R15: 00007fff4eb83ae8 [ 255.429726][T12768] [ 255.663361][T12771] syzkaller0: entered promiscuous mode [ 255.668998][T12771] syzkaller0: entered allmulticast mode [ 255.676831][ T60] syzkaller0: tun_net_xmit 70 [ 255.715885][T12771] syzkaller0: tun_net_xmit 16 [ 255.720675][T12771] syzkaller0: tun_net_xmit 16 [ 255.811806][T12779] FAULT_INJECTION: forcing a failure. [ 255.811806][T12779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.825220][T12779] CPU: 1 UID: 0 PID: 12779 Comm: syz.1.2333 Not tainted syzkaller #0 PREEMPT(full) [ 255.825242][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.825263][T12779] Call Trace: [ 255.825270][T12779] [ 255.825278][T12779] dump_stack_lvl+0x189/0x250 [ 255.825305][T12779] ? __pfx____ratelimit+0x10/0x10 [ 255.825325][T12779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.825345][T12779] ? __pfx__printk+0x10/0x10 [ 255.825361][T12779] ? __might_fault+0xb0/0x130 [ 255.825390][T12779] should_fail_ex+0x414/0x560 [ 255.825415][T12779] _copy_from_user+0x2d/0xb0 [ 255.825433][T12779] do_sock_getsockopt+0x17d/0x450 [ 255.825455][T12779] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 255.825474][T12779] ? do_syscall_64+0xa0/0xfa0 [ 255.825492][T12779] ? __fget_files+0x2a/0x420 [ 255.825506][T12779] ? __fget_files+0x3a0/0x420 [ 255.825520][T12779] ? __fget_files+0x2a/0x420 [ 255.825539][T12779] __x64_sys_getsockopt+0x1a5/0x250 [ 255.825554][T12779] ? do_syscall_64+0xa0/0xfa0 [ 255.825576][T12779] ? do_syscall_64+0xa0/0xfa0 [ 255.825598][T12779] do_syscall_64+0xfa/0xfa0 [ 255.825616][T12779] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.825635][T12779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.825653][T12779] ? clear_bhb_loop+0x60/0xb0 [ 255.825674][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.825691][T12779] RIP: 0033:0x7f2ccf38efc9 [ 255.825708][T12779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.825723][T12779] RSP: 002b:00007f2cd0304038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 255.825742][T12779] RAX: ffffffffffffffda RBX: 00007f2ccf5e5fa0 RCX: 00007f2ccf38efc9 [ 255.825755][T12779] RDX: 000000000000000c RSI: 0000000000000112 RDI: 0000000000000004 [ 255.825766][T12779] RBP: 00007f2cd0304090 R08: 0000200000000740 R09: 0000000000000000 [ 255.825778][T12779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.825789][T12779] R13: 00007f2ccf5e6038 R14: 00007f2ccf5e5fa0 R15: 00007ffcd0bce8c8 [ 255.825820][T12779] [ 255.860722][T12776] syzkaller0: entered promiscuous mode [ 256.015292][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.017157][T12776] syzkaller0: entered allmulticast mode [ 256.139735][T12792] tipc: Enabling of bearer rejected, failed to enable media [ 256.154475][T12792] syzkaller0: entered promiscuous mode [ 256.160031][T12792] syzkaller0: entered allmulticast mode [ 256.188826][T12776] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 256.231462][T12800] FAULT_INJECTION: forcing a failure. [ 256.231462][T12800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.247604][T12800] CPU: 0 UID: 0 PID: 12800 Comm: syz.0.2340 Not tainted syzkaller #0 PREEMPT(full) [ 256.247628][T12800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.247638][T12800] Call Trace: [ 256.247645][T12800] [ 256.247653][T12800] dump_stack_lvl+0x189/0x250 [ 256.247681][T12800] ? __pfx____ratelimit+0x10/0x10 [ 256.247701][T12800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.247723][T12800] ? __pfx__printk+0x10/0x10 [ 256.247743][T12800] ? __might_fault+0xb0/0x130 [ 256.247778][T12800] should_fail_ex+0x414/0x560 [ 256.247808][T12800] _copy_from_user+0x2d/0xb0 [ 256.247831][T12800] __sys_bpf+0x1e3/0x860 [ 256.247852][T12800] ? __pfx___sys_bpf+0x10/0x10 [ 256.247886][T12800] ? ksys_write+0x22a/0x250 [ 256.247913][T12800] ? __pfx_ksys_write+0x10/0x10 [ 256.247943][T12800] __x64_sys_bpf+0x7c/0x90 [ 256.247969][T12800] do_syscall_64+0xfa/0xfa0 [ 256.247990][T12800] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.248012][T12800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.248029][T12800] ? clear_bhb_loop+0x60/0xb0 [ 256.248051][T12800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.248069][T12800] RIP: 0033:0x7f52cc18efc9 [ 256.248086][T12800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.248102][T12800] RSP: 002b:00007f52ccfee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.248122][T12800] RAX: ffffffffffffffda RBX: 00007f52cc3e5fa0 RCX: 00007f52cc18efc9 [ 256.248147][T12800] RDX: 0000000000000094 RSI: 0000200000000dc0 RDI: 0000000000000005 [ 256.248159][T12800] RBP: 00007f52ccfee090 R08: 0000000000000000 R09: 0000000000000000 [ 256.248171][T12800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.248181][T12800] R13: 00007f52cc3e6038 R14: 00007f52cc3e5fa0 R15: 00007fff4eb83ae8 [ 256.248213][T12800] [ 256.248564][T12789] syzkaller0: entered promiscuous mode [ 256.448121][T12789] syzkaller0: entered allmulticast mode [ 256.460016][T12811] FAULT_INJECTION: forcing a failure. [ 256.460016][T12811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.473480][T12811] CPU: 0 UID: 0 PID: 12811 Comm: syz.1.2342 Not tainted syzkaller #0 PREEMPT(full) [ 256.473504][T12811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.473515][T12811] Call Trace: [ 256.473522][T12811] [ 256.473529][T12811] dump_stack_lvl+0x189/0x250 [ 256.473556][T12811] ? __pfx____ratelimit+0x10/0x10 [ 256.473576][T12811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.473597][T12811] ? __pfx__printk+0x10/0x10 [ 256.473612][T12811] ? __might_fault+0xb0/0x130 [ 256.473640][T12811] should_fail_ex+0x414/0x560 [ 256.473662][T12811] _copy_from_user+0x2d/0xb0 [ 256.473679][T12811] ___sys_sendmsg+0x158/0x2a0 [ 256.473695][T12811] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.473736][T12811] ? __fget_files+0x2a/0x420 [ 256.473748][T12811] ? __fget_files+0x3a0/0x420 [ 256.473768][T12811] __x64_sys_sendmsg+0x19b/0x260 [ 256.473784][T12811] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.473804][T12811] ? __pfx_ksys_write+0x10/0x10 [ 256.473826][T12811] ? do_syscall_64+0xbe/0xfa0 [ 256.473845][T12811] do_syscall_64+0xfa/0xfa0 [ 256.473860][T12811] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.473877][T12811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.473890][T12811] ? clear_bhb_loop+0x60/0xb0 [ 256.473906][T12811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.473919][T12811] RIP: 0033:0x7f2ccf38efc9 [ 256.473932][T12811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.473944][T12811] RSP: 002b:00007f2cd0304038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.473960][T12811] RAX: ffffffffffffffda RBX: 00007f2ccf5e5fa0 RCX: 00007f2ccf38efc9 [ 256.473970][T12811] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 256.473980][T12811] RBP: 00007f2cd0304090 R08: 0000000000000000 R09: 0000000000000000 [ 256.473990][T12811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.474000][T12811] R13: 00007f2ccf5e6038 R14: 00007f2ccf5e5fa0 R15: 00007ffcd0bce8c8 [ 256.474023][T12811] [ 256.737652][T12817] netlink: 'syz.1.2343': attribute type 8 has an invalid length. [ 256.963591][T12826] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2346'. [ 257.125628][T12841] syzkaller0: entered promiscuous mode [ 257.131315][T12841] syzkaller0: entered allmulticast mode [ 257.142011][T12841] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 257.216457][T12847] FAULT_INJECTION: forcing a failure. [ 257.216457][T12847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.230264][T12847] CPU: 1 UID: 0 PID: 12847 Comm: syz.3.2353 Not tainted syzkaller #0 PREEMPT(full) [ 257.230288][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.230298][T12847] Call Trace: [ 257.230305][T12847] [ 257.230313][T12847] dump_stack_lvl+0x189/0x250 [ 257.230341][T12847] ? __pfx____ratelimit+0x10/0x10 [ 257.230362][T12847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.230392][T12847] ? __pfx__printk+0x10/0x10 [ 257.230411][T12847] ? __might_fault+0xb0/0x130 [ 257.230446][T12847] should_fail_ex+0x414/0x560 [ 257.230476][T12847] _copy_from_user+0x2d/0xb0 [ 257.230497][T12847] ___sys_recvmsg+0x12e/0x510 [ 257.230522][T12847] ? __pfx____sys_recvmsg+0x10/0x10 [ 257.230562][T12847] ? __fget_files+0x3a0/0x420 [ 257.230588][T12847] do_recvmmsg+0x307/0x770 [ 257.230615][T12847] ? __pfx_do_recvmmsg+0x10/0x10 [ 257.230645][T12847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 257.230685][T12847] __x64_sys_recvmmsg+0x190/0x240 [ 257.230706][T12847] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 257.230727][T12847] ? do_syscall_64+0xbe/0xfa0 [ 257.230748][T12847] do_syscall_64+0xfa/0xfa0 [ 257.230765][T12847] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.230786][T12847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.230802][T12847] ? clear_bhb_loop+0x60/0xb0 [ 257.230820][T12847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.230835][T12847] RIP: 0033:0x7fc1e158efc9 [ 257.230850][T12847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.230863][T12847] RSP: 002b:00007fc1e244f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 257.230882][T12847] RAX: ffffffffffffffda RBX: 00007fc1e17e5fa0 RCX: 00007fc1e158efc9 [ 257.230895][T12847] RDX: 0000000000000002 RSI: 0000200000000980 RDI: 0000000000000003 [ 257.230907][T12847] RBP: 00007fc1e244f090 R08: 0000000000000000 R09: 0000000000000000 [ 257.230918][T12847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.230928][T12847] R13: 00007fc1e17e6038 R14: 00007fc1e17e5fa0 R15: 00007ffedd8bc758 [ 257.230959][T12847] [ 257.237599][T12850] FAULT_INJECTION: forcing a failure. [ 257.237599][T12850] name failslab, interval 1, probability 0, space 0, times 1 [ 257.293995][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 257.294024][ C0] lec:lec_tx_timeout: lec0 [ 257.303422][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 257.478563][T12850] CPU: 1 UID: 0 PID: 12850 Comm: syz.2.2355 Not tainted syzkaller #0 PREEMPT(full) [ 257.478586][T12850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.478596][T12850] Call Trace: [ 257.478604][T12850] [ 257.478612][T12850] dump_stack_lvl+0x189/0x250 [ 257.478639][T12850] ? __pfx____ratelimit+0x10/0x10 [ 257.478659][T12850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.478680][T12850] ? __pfx__printk+0x10/0x10 [ 257.478702][T12850] ? __pfx___might_resched+0x10/0x10 [ 257.478722][T12850] should_fail_ex+0x414/0x560 [ 257.478749][T12850] should_failslab+0xa8/0x100 [ 257.478768][T12850] __kmalloc_noprof+0xcb/0x7f0 [ 257.478789][T12850] ? kfree+0x4d/0x6d0 [ 257.478805][T12850] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 257.478835][T12850] tomoyo_realpath_from_path+0xe3/0x5d0 [ 257.478861][T12850] ? tomoyo_domain+0xd9/0x130 [ 257.478889][T12850] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 257.478910][T12850] tomoyo_path_number_perm+0x1e8/0x5a0 [ 257.478932][T12850] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 257.478993][T12850] ? __fget_files+0x2a/0x420 [ 257.479015][T12850] ? __fget_files+0x3a0/0x420 [ 257.479030][T12850] ? __fget_files+0x2a/0x420 [ 257.479051][T12850] security_file_ioctl+0xcb/0x2d0 [ 257.479073][T12850] __se_sys_ioctl+0x47/0x170 [ 257.479096][T12850] do_syscall_64+0xfa/0xfa0 [ 257.479113][T12850] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.479132][T12850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.479148][T12850] ? clear_bhb_loop+0x60/0xb0 [ 257.479167][T12850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.479181][T12850] RIP: 0033:0x7f3132d8efc9 [ 257.479196][T12850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.479209][T12850] RSP: 002b:00007f3133b80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.479225][T12850] RAX: ffffffffffffffda RBX: 00007f3132fe5fa0 RCX: 00007f3132d8efc9 [ 257.479236][T12850] RDX: 0000200000000000 RSI: 0000000000008b29 RDI: 0000000000000003 [ 257.479245][T12850] RBP: 00007f3133b80090 R08: 0000000000000000 R09: 0000000000000000 [ 257.479253][T12850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.479260][T12850] R13: 00007f3132fe6038 R14: 00007f3132fe5fa0 R15: 00007ffde565f0a8 [ 257.479286][T12850] [ 257.479643][T12850] ERROR: Out of memory at tomoyo_realpath_from_path. [ 258.001991][T12871] FAULT_INJECTION: forcing a failure. [ 258.001991][T12871] name failslab, interval 1, probability 0, space 0, times 0 [ 258.050603][T12871] CPU: 1 UID: 0 PID: 12871 Comm: syz.2.2362 Not tainted syzkaller #0 PREEMPT(full) [ 258.050629][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.050640][T12871] Call Trace: [ 258.050648][T12871] [ 258.050656][T12871] dump_stack_lvl+0x189/0x250 [ 258.050687][T12871] ? __pfx____ratelimit+0x10/0x10 [ 258.050707][T12871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.050730][T12871] ? __pfx__printk+0x10/0x10 [ 258.050755][T12871] ? __pfx___might_resched+0x10/0x10 [ 258.050780][T12871] should_fail_ex+0x414/0x560 [ 258.050810][T12871] should_failslab+0xa8/0x100 [ 258.050830][T12871] __kmalloc_noprof+0xcb/0x7f0 [ 258.050853][T12871] ? kfree+0x4d/0x6d0 [ 258.050871][T12871] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 258.050904][T12871] tomoyo_realpath_from_path+0xe3/0x5d0 [ 258.050932][T12871] ? tomoyo_domain+0xd9/0x130 [ 258.050962][T12871] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 258.050984][T12871] tomoyo_path_number_perm+0x1e8/0x5a0 [ 258.051009][T12871] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 258.051072][T12871] ? __fget_files+0x2a/0x420 [ 258.051095][T12871] ? __fget_files+0x3a0/0x420 [ 258.051110][T12871] ? __fget_files+0x2a/0x420 [ 258.051131][T12871] security_file_ioctl+0xcb/0x2d0 [ 258.051155][T12871] __se_sys_ioctl+0x47/0x170 [ 258.051180][T12871] do_syscall_64+0xfa/0xfa0 [ 258.051200][T12871] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.051222][T12871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.051239][T12871] ? clear_bhb_loop+0x60/0xb0 [ 258.051261][T12871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.051279][T12871] RIP: 0033:0x7f3132d8efc9 [ 258.051296][T12871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.051311][T12871] RSP: 002b:00007f3133b80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.051338][T12871] RAX: ffffffffffffffda RBX: 00007f3132fe5fa0 RCX: 00007f3132d8efc9 [ 258.051351][T12871] RDX: 00002000000001c0 RSI: 000000000000890b RDI: 0000000000000007 [ 258.051363][T12871] RBP: 00007f3133b80090 R08: 0000000000000000 R09: 0000000000000000 [ 258.051374][T12871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.051384][T12871] R13: 00007f3132fe6038 R14: 00007f3132fe5fa0 R15: 00007ffde565f0a8 [ 258.051417][T12871] [ 258.051425][T12871] ERROR: Out of memory at tomoyo_realpath_from_path. [ 258.094049][T12875] netlink: 'syz.1.2364': attribute type 1 has an invalid length. [ 258.213644][T12881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2360'. [ 258.226035][T12875] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2364'. [ 258.267380][T12881] netlink: 'syz.4.2360': attribute type 7 has an invalid length. [ 258.340814][T12884] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2365'. [ 258.355420][T12881] netlink: 'syz.4.2360': attribute type 8 has an invalid length. [ 258.373229][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2360'. [ 258.407534][T12889] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2360'. [ 258.464829][T12891] syzkaller0: entered promiscuous mode [ 258.466603][T12881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.481482][T12891] syzkaller0: entered allmulticast mode [ 258.540499][T12867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.664470][T12900] FAULT_INJECTION: forcing a failure. [ 258.664470][T12900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.680964][T12900] CPU: 0 UID: 0 PID: 12900 Comm: syz.3.2370 Not tainted syzkaller #0 PREEMPT(full) [ 258.680988][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.680999][T12900] Call Trace: [ 258.681006][T12900] [ 258.681014][T12900] dump_stack_lvl+0x189/0x250 [ 258.681042][T12900] ? __pfx____ratelimit+0x10/0x10 [ 258.681063][T12900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.681085][T12900] ? __pfx__printk+0x10/0x10 [ 258.681118][T12900] should_fail_ex+0x414/0x560 [ 258.681152][T12900] _copy_from_user+0x2d/0xb0 [ 258.681173][T12900] __copy_msghdr+0x3c5/0x5b0 [ 258.681204][T12900] ___sys_sendmsg+0x1a5/0x2a0 [ 258.681224][T12900] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.681275][T12900] ? __fget_files+0x2a/0x420 [ 258.681292][T12900] ? __fget_files+0x3a0/0x420 [ 258.681319][T12900] __x64_sys_sendmsg+0x19b/0x260 [ 258.681348][T12900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.681376][T12900] ? __pfx_ksys_write+0x10/0x10 [ 258.681404][T12900] ? do_syscall_64+0xbe/0xfa0 [ 258.681428][T12900] do_syscall_64+0xfa/0xfa0 [ 258.681448][T12900] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.681469][T12900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.681487][T12900] ? clear_bhb_loop+0x60/0xb0 [ 258.681505][T12900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.681521][T12900] RIP: 0033:0x7fc1e158efc9 [ 258.681537][T12900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.681551][T12900] RSP: 002b:00007fc1e244f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.681569][T12900] RAX: ffffffffffffffda RBX: 00007fc1e17e5fa0 RCX: 00007fc1e158efc9 [ 258.681582][T12900] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 258.681593][T12900] RBP: 00007fc1e244f090 R08: 0000000000000000 R09: 0000000000000000 [ 258.681605][T12900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.681615][T12900] R13: 00007fc1e17e6038 R14: 00007fc1e17e5fa0 R15: 00007ffedd8bc758 [ 258.681646][T12900] [ 258.997526][T12913] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2376'. [ 259.018690][T12909] tipc: Enabled bearer , priority 0 [ 259.026983][T12909] syzkaller0: entered promiscuous mode [ 259.032772][T12909] syzkaller0: entered allmulticast mode [ 259.077212][T12917] FAULT_INJECTION: forcing a failure. [ 259.077212][T12917] name failslab, interval 1, probability 0, space 0, times 0 [ 259.085897][T12908] tipc: Resetting bearer [ 259.090180][T12917] CPU: 0 UID: 0 PID: 12917 Comm: syz.0.2379 Not tainted syzkaller #0 PREEMPT(full) [ 259.090203][T12917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 259.090213][T12917] Call Trace: [ 259.090220][T12917] [ 259.090227][T12917] dump_stack_lvl+0x189/0x250 [ 259.090254][T12917] ? __pfx____ratelimit+0x10/0x10 [ 259.090274][T12917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.090296][T12917] ? __pfx__printk+0x10/0x10 [ 259.090320][T12917] ? __pfx___might_resched+0x10/0x10 [ 259.090338][T12917] ? fs_reclaim_acquire+0x7d/0x100 [ 259.090368][T12917] should_fail_ex+0x414/0x560 [ 259.090397][T12917] should_failslab+0xa8/0x100 [ 259.090416][T12917] kmem_cache_alloc_node_noprof+0x77/0x710 [ 259.090439][T12917] ? __alloc_skb+0x112/0x2d0 [ 259.090461][T12917] ? netlink_autobind+0xdb/0x300 [ 259.090483][T12917] __alloc_skb+0x112/0x2d0 [ 259.090512][T12917] netlink_sendmsg+0x5c6/0xb30 [ 259.090547][T12917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.090575][T12917] ? aa_sock_msg_perm+0xf1/0x1d0 [ 259.090600][T12917] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.090618][T12917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.090644][T12917] __sock_sendmsg+0x21c/0x270 [ 259.090669][T12917] ____sys_sendmsg+0x505/0x830 [ 259.090692][T12917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.090721][T12917] ? import_iovec+0x74/0xa0 [ 259.090744][T12917] ___sys_sendmsg+0x21f/0x2a0 [ 259.090765][T12917] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.090818][T12917] ? __fget_files+0x2a/0x420 [ 259.090834][T12917] ? __fget_files+0x3a0/0x420 [ 259.090862][T12917] __x64_sys_sendmsg+0x19b/0x260 [ 259.090882][T12917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.090910][T12917] ? __pfx_ksys_write+0x10/0x10 [ 259.090938][T12917] ? do_syscall_64+0xbe/0xfa0 [ 259.090963][T12917] do_syscall_64+0xfa/0xfa0 [ 259.090982][T12917] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.091003][T12917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.091021][T12917] ? clear_bhb_loop+0x60/0xb0 [ 259.091111][T12917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.091129][T12917] RIP: 0033:0x7f52cc18efc9 [ 259.091146][T12917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.091163][T12917] RSP: 002b:00007f52ccfee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.091182][T12917] RAX: ffffffffffffffda RBX: 00007f52cc3e5fa0 RCX: 00007f52cc18efc9 [ 259.091195][T12917] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 259.091207][T12917] RBP: 00007f52ccfee090 R08: 0000000000000000 R09: 0000000000000000 [ 259.091218][T12917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.091230][T12917] R13: 00007f52cc3e6038 R14: 00007f52cc3e5fa0 R15: 00007fff4eb83ae8 [ 259.091262][T12917] [ 259.381906][T12908] tipc: Disabling bearer [ 259.558581][T12930] syzkaller0: entered promiscuous mode [ 259.564310][T12930] syzkaller0: entered allmulticast mode [ 259.618500][T12938] 8021q: VLANs not supported on ipvlan1 [ 259.750691][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2390'. [ 259.898446][T12951] tipc: Enabled bearer , priority 0 [ 259.938719][T12956] FAULT_INJECTION: forcing a failure. [ 259.938719][T12956] name failslab, interval 1, probability 0, space 0, times 0 [ 259.955434][T12951] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 259.968817][T12951] tipc: Resetting bearer [ 259.982458][T12956] CPU: 1 UID: 0 PID: 12956 Comm: syz.4.2394 Not tainted syzkaller #0 PREEMPT(full) [ 259.982482][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 259.982491][T12956] Call Trace: [ 259.982499][T12956] [ 259.982506][T12956] dump_stack_lvl+0x189/0x250 [ 259.982533][T12956] ? __pfx____ratelimit+0x10/0x10 [ 259.982552][T12956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.982574][T12956] ? __pfx__printk+0x10/0x10 [ 259.982595][T12956] ? __pfx___might_resched+0x10/0x10 [ 259.982611][T12956] ? fs_reclaim_acquire+0x7d/0x100 [ 259.982640][T12956] should_fail_ex+0x414/0x560 [ 259.982669][T12956] should_failslab+0xa8/0x100 [ 259.982689][T12956] __kmalloc_noprof+0xcb/0x7f0 [ 259.982711][T12956] ? tomoyo_encode+0x28b/0x550 [ 259.982743][T12956] tomoyo_encode+0x28b/0x550 [ 259.982772][T12956] tomoyo_realpath_from_path+0x58d/0x5d0 [ 259.982798][T12956] ? tomoyo_domain+0xd9/0x130 [ 259.982827][T12956] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 259.982847][T12956] tomoyo_path_number_perm+0x1e8/0x5a0 [ 259.982867][T12956] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 259.982923][T12956] ? __fget_files+0x2a/0x420 [ 259.982945][T12956] ? __fget_files+0x3a0/0x420 [ 259.982959][T12956] ? __fget_files+0x2a/0x420 [ 259.982976][T12956] security_file_ioctl+0xcb/0x2d0 [ 259.982997][T12956] __se_sys_ioctl+0x47/0x170 [ 259.983020][T12956] do_syscall_64+0xfa/0xfa0 [ 259.983038][T12956] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.983058][T12956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.983075][T12956] ? clear_bhb_loop+0x60/0xb0 [ 259.983097][T12956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.983114][T12956] RIP: 0033:0x7f012998efc9 [ 259.983131][T12956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.983146][T12956] RSP: 002b:00007f012a753038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.983163][T12956] RAX: ffffffffffffffda RBX: 00007f0129be5fa0 RCX: 00007f012998efc9 [ 259.983176][T12956] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000007 [ 259.983195][T12956] RBP: 00007f012a753090 R08: 0000000000000000 R09: 0000000000000000 [ 259.983207][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.983217][T12956] R13: 00007f0129be6038 R14: 00007f0129be5fa0 R15: 00007ffc66180078 [ 259.983246][T12956] [ 260.222730][T12956] ERROR: Out of memory at tomoyo_realpath_from_path. [ 260.230401][T12948] tipc: Disabling bearer [ 260.249987][T12965] FAULT_INJECTION: forcing a failure. [ 260.249987][T12965] name failslab, interval 1, probability 0, space 0, times 0 [ 260.267712][T12965] CPU: 1 UID: 0 PID: 12965 Comm: syz.1.2395 Not tainted syzkaller #0 PREEMPT(full) [ 260.267735][T12965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 260.267745][T12965] Call Trace: [ 260.267752][T12965] [ 260.267761][T12965] dump_stack_lvl+0x189/0x250 [ 260.267788][T12965] ? __pfx____ratelimit+0x10/0x10 [ 260.267808][T12965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.267830][T12965] ? __pfx__printk+0x10/0x10 [ 260.267855][T12965] ? __pfx___might_resched+0x10/0x10 [ 260.267873][T12965] ? fs_reclaim_acquire+0x7d/0x100 [ 260.267915][T12965] should_fail_ex+0x414/0x560 [ 260.267945][T12965] should_failslab+0xa8/0x100 [ 260.267963][T12965] __kmalloc_noprof+0xcb/0x7f0 [ 260.267985][T12965] ? tomoyo_encode+0x28b/0x550 [ 260.268015][T12965] tomoyo_encode+0x28b/0x550 [ 260.268044][T12965] tomoyo_realpath_from_path+0x58d/0x5d0 [ 260.268070][T12965] ? tomoyo_domain+0xd9/0x130 [ 260.268097][T12965] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 260.268117][T12965] tomoyo_path_number_perm+0x1e8/0x5a0 [ 260.268141][T12965] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 260.268196][T12965] ? __fget_files+0x2a/0x420 [ 260.268217][T12965] ? __fget_files+0x3a0/0x420 [ 260.268231][T12965] ? __fget_files+0x2a/0x420 [ 260.268249][T12965] security_file_ioctl+0xcb/0x2d0 [ 260.268269][T12965] __se_sys_ioctl+0x47/0x170 [ 260.268291][T12965] do_syscall_64+0xfa/0xfa0 [ 260.268309][T12965] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.268330][T12965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.268347][T12965] ? clear_bhb_loop+0x60/0xb0 [ 260.268367][T12965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.268384][T12965] RIP: 0033:0x7f2ccf38efc9 [ 260.268400][T12965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.268416][T12965] RSP: 002b:00007f2cd02e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.268435][T12965] RAX: ffffffffffffffda RBX: 00007f2ccf5e6090 RCX: 00007f2ccf38efc9 [ 260.268448][T12965] RDX: 00002000000001c0 RSI: 000000000000890b RDI: 0000000000000007 [ 260.268459][T12965] RBP: 00007f2cd02e3090 R08: 0000000000000000 R09: 0000000000000000 [ 260.268469][T12965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.268480][T12965] R13: 00007f2ccf5e6128 R14: 00007f2ccf5e6090 R15: 00007ffcd0bce8c8 [ 260.268511][T12965] [ 260.268531][T12965] ERROR: Out of memory at tomoyo_realpath_from_path. [ 260.727030][T12980] bridge9: entered promiscuous mode [ 260.733884][T12980] bridge9: entered allmulticast mode [ 260.747499][T12986] FAULT_INJECTION: forcing a failure. [ 260.747499][T12986] name failslab, interval 1, probability 0, space 0, times 0 [ 260.768571][T12986] CPU: 1 UID: 0 PID: 12986 Comm: syz.2.2404 Not tainted syzkaller #0 PREEMPT(full) [ 260.768596][T12986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 260.768606][T12986] Call Trace: [ 260.768613][T12986] [ 260.768620][T12986] dump_stack_lvl+0x189/0x250 [ 260.768647][T12986] ? __pfx____ratelimit+0x10/0x10 [ 260.768669][T12986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.768689][T12986] ? __pfx__printk+0x10/0x10 [ 260.768710][T12986] ? __pfx___might_resched+0x10/0x10 [ 260.768727][T12986] ? fs_reclaim_acquire+0x7d/0x100 [ 260.768757][T12986] should_fail_ex+0x414/0x560 [ 260.768787][T12986] should_failslab+0xa8/0x100 [ 260.768806][T12986] kmem_cache_alloc_node_noprof+0x77/0x710 [ 260.768828][T12986] ? __alloc_skb+0x112/0x2d0 [ 260.768858][T12986] __alloc_skb+0x112/0x2d0 [ 260.768886][T12986] netlink_sendmsg+0x5c6/0xb30 [ 260.768916][T12986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.768941][T12986] ? aa_sock_msg_perm+0xf1/0x1d0 [ 260.768965][T12986] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.768981][T12986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.769004][T12986] __sock_sendmsg+0x21c/0x270 [ 260.769027][T12986] ____sys_sendmsg+0x505/0x830 [ 260.769049][T12986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.769074][T12986] ? import_iovec+0x74/0xa0 [ 260.769106][T12986] ___sys_sendmsg+0x21f/0x2a0 [ 260.769126][T12986] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.769175][T12986] ? __fget_files+0x2a/0x420 [ 260.769190][T12986] ? __fget_files+0x3a0/0x420 [ 260.769217][T12986] __x64_sys_sendmsg+0x19b/0x260 [ 260.769238][T12986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.769267][T12986] ? __pfx_ksys_write+0x10/0x10 [ 260.769293][T12986] ? do_syscall_64+0xbe/0xfa0 [ 260.769316][T12986] do_syscall_64+0xfa/0xfa0 [ 260.769334][T12986] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.769355][T12986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.769374][T12986] ? clear_bhb_loop+0x60/0xb0 [ 260.769395][T12986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.769411][T12986] RIP: 0033:0x7f3132d8efc9 [ 260.769429][T12986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.769443][T12986] RSP: 002b:00007f3133b80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.769463][T12986] RAX: ffffffffffffffda RBX: 00007f3132fe5fa0 RCX: 00007f3132d8efc9 [ 260.769475][T12986] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 260.769485][T12986] RBP: 00007f3133b80090 R08: 0000000000000000 R09: 0000000000000000 [ 260.769496][T12986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.769507][T12986] R13: 00007f3132fe6038 R14: 00007f3132fe5fa0 R15: 00007ffde565f0a8 [ 260.769538][T12986] [ 260.799162][T12990] FAULT_INJECTION: forcing a failure. [ 260.799162][T12990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.808504][T12986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.843235][T12990] CPU: 0 UID: 0 PID: 12990 Comm: syz.3.2406 Not tainted syzkaller #0 PREEMPT(full) [ 260.843262][T12990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 260.843272][T12990] Call Trace: [ 260.843279][T12990] [ 260.843287][T12990] dump_stack_lvl+0x189/0x250 [ 260.843316][T12990] ? __pfx____ratelimit+0x10/0x10 [ 260.843337][T12990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.843359][T12990] ? __pfx__printk+0x10/0x10 [ 260.843377][T12990] ? __might_fault+0xb0/0x130 [ 260.843411][T12990] should_fail_ex+0x414/0x560 [ 260.843441][T12990] _copy_from_user+0x2d/0xb0 [ 260.843462][T12990] ____sys_sendmsg+0x2fe/0x830 [ 260.843486][T12990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.843513][T12990] ? import_iovec+0x74/0xa0 [ 260.843536][T12990] ___sys_sendmsg+0x21f/0x2a0 [ 260.843556][T12990] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.843608][T12990] ? __fget_files+0x2a/0x420 [ 260.843624][T12990] ? __fget_files+0x3a0/0x420 [ 260.843650][T12990] __x64_sys_sendmsg+0x19b/0x260 [ 260.843670][T12990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.843697][T12990] ? __pfx_ksys_write+0x10/0x10 [ 260.843724][T12990] ? do_syscall_64+0xbe/0xfa0 [ 260.843747][T12990] do_syscall_64+0xfa/0xfa0 [ 260.843766][T12990] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.843794][T12990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.843812][T12990] ? clear_bhb_loop+0x60/0xb0 [ 260.843832][T12990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.843849][T12990] RIP: 0033:0x7fc1e158efc9 [ 260.843866][T12990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.843880][T12990] RSP: 002b:00007fc1e244f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.843899][T12990] RAX: ffffffffffffffda RBX: 00007fc1e17e5fa0 RCX: 00007fc1e158efc9 [ 260.843912][T12990] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 260.843923][T12990] RBP: 00007fc1e244f090 R08: 0000000000000000 R09: 0000000000000000 [ 260.843934][T12990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.843944][T12990] R13: 00007fc1e17e6038 R14: 00007fc1e17e5fa0 R15: 00007ffedd8bc758 [ 260.843974][T12990] [ 261.111864][T12999] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.133704][T13000] tipc: Enabling of bearer rejected, failed to enable media [ 261.314683][T13003] syzkaller0: entered promiscuous mode [ 261.320374][T13003] syzkaller0: entered allmulticast mode [ 261.550765][T13024] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.551434][T13016] bond5: option min_links: invalid value (18446744073709551614) [ 261.597651][T13016] bond5: option min_links: allowed values 0 - 2147483647 [ 261.630874][T13016] bond5 (unregistering): Released all slaves [ 261.688071][T13030] syzkaller0: entered promiscuous mode [ 261.693815][T13030] syzkaller0: entered allmulticast mode [ 261.703112][T13030] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 261.810509][T13038] xt_TCPMSS: Only works on TCP SYN packets [ 261.926360][T13049] FAULT_INJECTION: forcing a failure. [ 261.926360][T13049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.934236][T13047] netlink: 'syz.1.2427': attribute type 28 has an invalid length. [ 261.950941][T13049] CPU: 0 UID: 0 PID: 13049 Comm: syz.0.2426 Not tainted syzkaller #0 PREEMPT(full) [ 261.950981][T13049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.950992][T13049] Call Trace: [ 261.950999][T13049] [ 261.951008][T13049] dump_stack_lvl+0x189/0x250 [ 261.951044][T13049] ? __pfx____ratelimit+0x10/0x10 [ 261.951067][T13049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.951090][T13049] ? __pfx__printk+0x10/0x10 [ 261.951109][T13049] ? __might_fault+0xb0/0x130 [ 261.951144][T13049] should_fail_ex+0x414/0x560 [ 261.951175][T13049] _copy_from_iter+0x1de/0x1790 [ 261.951207][T13049] ? rcu_is_watching+0x15/0xb0 [ 261.951231][T13049] ? kmalloc_reserve+0xbd/0x290 [ 261.951255][T13049] ? __pfx__copy_from_iter+0x10/0x10 [ 261.951277][T13049] ? __build_skb_around+0x262/0x3f0 [ 261.951312][T13049] ? netlink_sendmsg+0x642/0xb30 [ 261.951336][T13049] ? skb_put+0x11b/0x210 [ 261.951370][T13049] netlink_sendmsg+0x6b2/0xb30 [ 261.951409][T13049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.951438][T13049] ? aa_sock_msg_perm+0xf1/0x1d0 [ 261.951465][T13049] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.951484][T13049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.951509][T13049] __sock_sendmsg+0x21c/0x270 [ 261.951535][T13049] ____sys_sendmsg+0x505/0x830 [ 261.951559][T13049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.951587][T13049] ? import_iovec+0x74/0xa0 [ 261.951611][T13049] ___sys_sendmsg+0x21f/0x2a0 [ 261.951632][T13049] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.951686][T13049] ? __fget_files+0x2a/0x420 [ 261.951701][T13049] ? __fget_files+0x3a0/0x420 [ 261.951729][T13049] __x64_sys_sendmsg+0x19b/0x260 [ 261.951750][T13049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.951777][T13049] ? __pfx_ksys_write+0x10/0x10 [ 261.951805][T13049] ? do_syscall_64+0xbe/0xfa0 [ 261.951828][T13049] do_syscall_64+0xfa/0xfa0 [ 261.951847][T13049] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.951868][T13049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.951886][T13049] ? clear_bhb_loop+0x60/0xb0 [ 261.951913][T13049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.951930][T13049] RIP: 0033:0x7f52cc18efc9 [ 261.951947][T13049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.951997][T13049] RSP: 002b:00007f52ccfee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.952017][T13049] RAX: ffffffffffffffda RBX: 00007f52cc3e5fa0 RCX: 00007f52cc18efc9 [ 261.952030][T13049] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 261.952042][T13049] RBP: 00007f52ccfee090 R08: 0000000000000000 R09: 0000000000000000 [ 261.952053][T13049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.952064][T13049] R13: 00007f52cc3e6038 R14: 00007f52cc3e5fa0 R15: 00007fff4eb83ae8 [ 261.952096][T13049] [ 261.963230][T13047] netlink: 'syz.1.2427': attribute type 3 has an invalid length. [ 262.034447][T13052] FAULT_INJECTION: forcing a failure. [ 262.034447][T13052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.112614][T13047] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2427'. [ 262.209961][T13052] CPU: 0 UID: 0 PID: 13052 Comm: syz.2.2428 Not tainted syzkaller #0 PREEMPT(full) [ 262.209991][T13052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.210003][T13052] Call Trace: [ 262.210011][T13052] [ 262.210019][T13052] dump_stack_lvl+0x189/0x250 [ 262.210052][T13052] ? __pfx____ratelimit+0x10/0x10 [ 262.210075][T13052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.210098][T13052] ? __pfx__printk+0x10/0x10 [ 262.210129][T13052] should_fail_ex+0x414/0x560 [ 262.210160][T13052] strncpy_from_user+0x36/0x290 [ 262.210189][T13052] getname_flags+0xf3/0x540 [ 262.210212][T13052] do_sys_openat2+0xbc/0x1c0 [ 262.210237][T13052] ? __pfx_do_sys_openat2+0x10/0x10 [ 262.210261][T13052] ? ksys_write+0x22a/0x250 [ 262.210285][T13052] ? __pfx_ksys_write+0x10/0x10 [ 262.210310][T13052] __x64_sys_openat+0x138/0x170 [ 262.210335][T13052] do_syscall_64+0xfa/0xfa0 [ 262.210356][T13052] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.210377][T13052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.210395][T13052] ? clear_bhb_loop+0x60/0xb0 [ 262.210415][T13052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.210432][T13052] RIP: 0033:0x7f3132d8d810 [ 262.210449][T13052] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 262.210465][T13052] RSP: 002b:00007f3133b7ff60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 262.210485][T13052] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3132d8d810 [ 262.210497][T13052] RDX: 0000000000000000 RSI: 00007f3132e1207e RDI: 00000000ffffff9c [ 262.210508][T13052] RBP: 00007f3132e1207e R08: 0000000000000000 R09: 0000000000000000 [ 262.210519][T13052] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 262.210529][T13052] R13: 00007f3132fe6038 R14: 00007f3132fe5fa0 R15: 00007ffde565f0a8 [ 262.210560][T13052] [ 262.313098][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 262.474580][ C0] lec:lec_tx_timeout: lec0 [ 262.481121][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 262.572804][T13065] FAULT_INJECTION: forcing a failure. [ 262.572804][T13065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.597131][T13065] CPU: 0 UID: 0 PID: 13065 Comm: syz.1.2433 Not tainted syzkaller #0 PREEMPT(full) [ 262.597157][T13065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.597168][T13065] Call Trace: [ 262.597176][T13065] [ 262.597184][T13065] dump_stack_lvl+0x189/0x250 [ 262.597215][T13065] ? __pfx____ratelimit+0x10/0x10 [ 262.597237][T13065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.597260][T13065] ? __pfx__printk+0x10/0x10 [ 262.597279][T13065] ? __might_fault+0xb0/0x130 [ 262.597314][T13065] should_fail_ex+0x414/0x560 [ 262.597346][T13065] _copy_from_iter+0x404/0x1790 [ 262.597366][T13065] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 262.597401][T13065] ? snprintf+0xda/0x120 [ 262.597417][T13065] ? __pfx__copy_from_iter+0x10/0x10 [ 262.597443][T13065] ? aa_label_sk_perm+0x4cd/0x630 [ 262.597473][T13065] ping_v4_sendmsg+0x222/0x1750 [ 262.597497][T13065] ? __lock_acquire+0xab9/0xd20 [ 262.597529][T13065] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 262.597576][T13065] ? __local_bh_enable_ip+0x12d/0x1c0 [ 262.597596][T13065] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.597620][T13065] ? __local_bh_enable_ip+0x12d/0x1c0 [ 262.597646][T13065] ? inet_sendmsg+0x14f/0x370 [ 262.597746][T13065] ? inet_sendmsg+0x2f4/0x370 [ 262.597784][T13065] __sock_sendmsg+0x19c/0x270 [ 262.597811][T13065] ____sys_sendmsg+0x505/0x830 [ 262.597835][T13065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.597862][T13065] ? import_iovec+0x74/0xa0 [ 262.597886][T13065] ___sys_sendmsg+0x21f/0x2a0 [ 262.597906][T13065] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.597960][T13065] ? __fget_files+0x2a/0x420 [ 262.597974][T13065] ? __fget_files+0x3a0/0x420 [ 262.597997][T13065] __x64_sys_sendmsg+0x19b/0x260 [ 262.598018][T13065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.598047][T13065] ? __pfx_ksys_write+0x10/0x10 [ 262.598077][T13065] ? do_syscall_64+0xbe/0xfa0 [ 262.598103][T13065] do_syscall_64+0xfa/0xfa0 [ 262.598123][T13065] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.598140][T13065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.598154][T13065] ? clear_bhb_loop+0x60/0xb0 [ 262.598177][T13065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.598196][T13065] RIP: 0033:0x7f2ccf38efc9 [ 262.598213][T13065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.598229][T13065] RSP: 002b:00007f2cd0304038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.598250][T13065] RAX: ffffffffffffffda RBX: 00007f2ccf5e5fa0 RCX: 00007f2ccf38efc9 [ 262.598263][T13065] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 262.598275][T13065] RBP: 00007f2cd0304090 R08: 0000000000000000 R09: 0000000000000000 [ 262.598286][T13065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.598297][T13065] R13: 00007f2ccf5e6038 R14: 00007f2ccf5e5fa0 R15: 00007ffcd0bce8c8 [ 262.598330][T13065] [ 263.033275][T13074] syzkaller0: entered promiscuous mode [ 263.038787][T13074] syzkaller0: entered allmulticast mode [ 263.099614][T13080] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.232797][T13088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.257242][T13091] [ 263.257293][T13088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.259597][T13091] ====================================================== [ 263.259607][T13091] WARNING: possible circular locking dependency detected [ 263.283336][T13091] syzkaller #0 Not tainted [ 263.287741][T13091] ------------------------------------------------------ [ 263.294746][T13091] syz.2.2443/13091 is trying to acquire lock: [ 263.300798][T13091] ffffffff8f4271d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 263.310106][T13091] [ 263.310106][T13091] but task is already holding lock: [ 263.317541][T13091] ffff8880288e5870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 263.326866][T13091] [ 263.326866][T13091] which lock already depends on the new lock. [ 263.326866][T13091] [ 263.337257][T13091] [ 263.337257][T13091] the existing dependency chain (in reverse order) is: [ 263.346258][T13091] [ 263.346258][T13091] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 263.354244][T13091] lock_acquire+0x120/0x360 [ 263.359260][T13091] _raw_spin_lock_bh+0x36/0x50 [ 263.364570][T13091] nr_rt_device_down+0x12a/0x720 [ 263.370023][T13091] nr_device_event+0x137/0x150 [ 263.375300][T13091] notifier_call_chain+0x1b6/0x3e0 [ 263.380923][T13091] __dev_notify_flags+0x18d/0x2e0 [ 263.386472][T13091] netif_change_flags+0xe8/0x1a0 [ 263.391933][T13091] dev_change_flags+0x130/0x260 [ 263.397299][T13091] dev_ioctl+0x7b4/0x1150 [ 263.402142][T13091] sock_do_ioctl+0x22c/0x300 [ 263.407237][T13091] sock_ioctl+0x576/0x790 [ 263.412074][T13091] __se_sys_ioctl+0xfc/0x170 [ 263.417271][T13091] do_syscall_64+0xfa/0xfa0 [ 263.422285][T13091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.428691][T13091] [ 263.428691][T13091] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 263.436505][T13091] lock_acquire+0x120/0x360 [ 263.441518][T13091] _raw_spin_lock_bh+0x36/0x50 [ 263.446793][T13091] nr_rt_device_down+0xa9/0x720 [ 263.452163][T13091] nr_device_event+0x137/0x150 [ 263.457437][T13091] notifier_call_chain+0x1b6/0x3e0 [ 263.463062][T13091] __dev_notify_flags+0x18d/0x2e0 [ 263.468603][T13091] netif_change_flags+0xe8/0x1a0 [ 263.474063][T13091] dev_change_flags+0x130/0x260 [ 263.479431][T13091] dev_ioctl+0x7b4/0x1150 [ 263.484284][T13091] sock_do_ioctl+0x22c/0x300 [ 263.489382][T13091] sock_ioctl+0x576/0x790 [ 263.494224][T13091] __se_sys_ioctl+0xfc/0x170 [ 263.499340][T13091] do_syscall_64+0xfa/0xfa0 [ 263.504399][T13091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.510806][T13091] [ 263.510806][T13091] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 263.518720][T13091] validate_chain+0xb9b/0x2140 [ 263.524017][T13091] __lock_acquire+0xab9/0xd20 [ 263.529208][T13091] lock_acquire+0x120/0x360 [ 263.534302][T13091] _raw_spin_lock_bh+0x36/0x50 [ 263.539578][T13091] nr_remove_neigh+0x25/0xe0 [ 263.544674][T13091] nr_add_node+0x1d9f/0x2570 [ 263.549813][T13091] nr_rt_ioctl+0xc12/0xd50 [ 263.554737][T13091] sock_do_ioctl+0xdc/0x300 [ 263.559750][T13091] sock_ioctl+0x576/0x790 [ 263.564596][T13091] __se_sys_ioctl+0xfc/0x170 [ 263.569697][T13091] do_syscall_64+0xfa/0xfa0 [ 263.574710][T13091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.581109][T13091] [ 263.581109][T13091] other info that might help us debug this: [ 263.581109][T13091] [ 263.591409][T13091] Chain exists of: [ 263.591409][T13091] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 263.591409][T13091] [ 263.605219][T13091] Possible unsafe locking scenario: [ 263.605219][T13091] [ 263.612659][T13091] CPU0 CPU1 [ 263.618008][T13091] ---- ---- [ 263.623358][T13091] lock(&nr_node->node_lock); [ 263.628316][T13091] lock(nr_node_list_lock); [ 263.636663][T13091] lock(&nr_node->node_lock); [ 263.644035][T13091] lock(nr_neigh_list_lock); [ 263.648926][T13091] [ 263.648926][T13091] *** DEADLOCK *** [ 263.648926][T13091] [ 263.657155][T13091] 1 lock held by syz.2.2443/13091: [ 263.662267][T13091] #0: ffff8880288e5870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 263.672460][T13091] [ 263.672460][T13091] stack backtrace: [ 263.678353][T13091] CPU: 1 UID: 0 PID: 13091 Comm: syz.2.2443 Not tainted syzkaller #0 PREEMPT(full) [ 263.678374][T13091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.678383][T13091] Call Trace: [ 263.678393][T13091] [ 263.678401][T13091] dump_stack_lvl+0x189/0x250 [ 263.678427][T13091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.678445][T13091] ? __pfx__printk+0x10/0x10 [ 263.678468][T13091] ? stack_trace_save+0x9c/0xe0 [ 263.678491][T13091] print_circular_bug+0x2ee/0x310 [ 263.678510][T13091] check_noncircular+0x134/0x160 [ 263.678529][T13091] validate_chain+0xb9b/0x2140 [ 263.678554][T13091] __lock_acquire+0xab9/0xd20 [ 263.678570][T13091] ? nr_remove_neigh+0x25/0xe0 [ 263.678585][T13091] lock_acquire+0x120/0x360 [ 263.678598][T13091] ? nr_remove_neigh+0x25/0xe0 [ 263.678616][T13091] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 263.678636][T13091] ? nr_remove_neigh+0x25/0xe0 [ 263.678651][T13091] _raw_spin_lock_bh+0x36/0x50 [ 263.678667][T13091] ? nr_remove_neigh+0x25/0xe0 [ 263.678687][T13091] nr_remove_neigh+0x25/0xe0 [ 263.678703][T13091] nr_add_node+0x1d9f/0x2570 [ 263.678719][T13091] ? __asan_memcpy+0x40/0x70 [ 263.678738][T13091] ? nr_call_to_digi+0x126/0x1b0 [ 263.678753][T13091] nr_rt_ioctl+0xc12/0xd50 [ 263.678772][T13091] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 263.678785][T13091] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.678805][T13091] ? apparmor_capable+0x137/0x1b0 [ 263.678823][T13091] ? capable+0x89/0xe0 [ 263.678838][T13091] ? nr_ioctl+0x1b1/0x3b0 [ 263.678859][T13091] sock_do_ioctl+0xdc/0x300 [ 263.678877][T13091] ? __pfx_sock_do_ioctl+0x10/0x10 [ 263.678900][T13091] sock_ioctl+0x576/0x790 [ 263.678916][T13091] ? __pfx_sock_ioctl+0x10/0x10 [ 263.678933][T13091] ? __fget_files+0x3a0/0x420 [ 263.678946][T13091] ? __fget_files+0x2a/0x420 [ 263.678959][T13091] ? bpf_lsm_file_ioctl+0x9/0x20 [ 263.678974][T13091] ? __pfx_sock_ioctl+0x10/0x10 [ 263.678989][T13091] __se_sys_ioctl+0xfc/0x170 [ 263.679007][T13091] do_syscall_64+0xfa/0xfa0 [ 263.679023][T13091] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.679039][T13091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.679053][T13091] ? clear_bhb_loop+0x60/0xb0 [ 263.679068][T13091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.679082][T13091] RIP: 0033:0x7f3132d8efc9 [ 263.679097][T13091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.679110][T13091] RSP: 002b:00007f3133b5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.679126][T13091] RAX: ffffffffffffffda RBX: 00007f3132fe6090 RCX: 00007f3132d8efc9 [ 263.679137][T13091] RDX: 00002000000001c0 RSI: 000000000000890b RDI: 0000000000000008 [ 263.679146][T13091] RBP: 00007f3132e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 263.679155][T13091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.679164][T13091] R13: 00007f3132fe6128 R14: 00007f3132fe6090 R15: 00007ffde565f0a8 [ 263.679181][T13091] [ 264.036934][T13095] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 268.113373][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5630 ms [ 268.121430][ C0] lec:lec_tx_timeout: lec0 [ 268.126133][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 273.153058][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 273.161207][ C0] lec:lec_tx_timeout: lec0 [ 273.165840][ C0] lec:lec_start_xmit: lec0:No lecd attached